Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
http://www.vanguard.com/retirementplans

Overview

General Information

Sample URL:	http://www.vanguard.com/retirementplans
Analysis ID:	1546923
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

×

Process Tree

System is w10x64_ra

chrome.exe (PID: 6920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8164 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6096 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8176 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3164 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.vanguard.com/retirementplans" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T17:52:05.744937+0100	2022930	1	A Network Trojan was detected	20.109.210.53	443	192.168.2.16	49730	TCP
2024-11-01T17:52:43.522039+0100	2022930	1	A Network Trojan was detected	20.109.210.53	443	192.168.2.16	49893	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://logon.vanguard.com/logon?site=iig

HTTP Parser: Number of links: 0

Source: https://logon.vanguard.com/logon?site=iig

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://logon.vanguard.com/logon?site=iig

HTTP Parser: Base64 decoded: floodlight_config_id: 12332392advertiser_domain: "https://vanguard.com"xfa_attribution_interaction_type: CONVERSIONdebug_key: 10681457677749765531ctc_conversion_bucket: 0archetype_id: 12archetype_id: 13archetype_id: 14archetype_id: 15archetype_id...

Source: https://logon.vanguard.com/logon?site=iig

HTTP Parser: Title: Log on to vanguard.com does not match URL

Source: https://logon.vanguard.com/pkg/1.0.0/web/main.b32cc194aed71fa2.js

HTTP Parser: (self["webpackchunkcommon_logon_logoff_angular"] = self["webpackchunkcommon_logon_logoff_angular"] || []).push([[792],{/***/ 94114:/*!***************************************!*\ !*** ./src/app/app-routing.module.ts ***! \***************************************//***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {"use strict";__webpack_require__.r(__webpack_exports__);/* harmony export */ __webpack_require__.d(__webpack_exports__, {/* harmony export */ approutingmodule: () => (/* binding */ approutingmodule),/* harmony export */ routes: () => (/* binding */ routes)/* harmony export */ });/* harmony import */ var _angular_router__webpack_imported_module_6__ = __webpack_require__(/*! @angular/router */ 7901);/* harmony import */ var _components_home_home_component__webpack_imported_module_0__ = __webpack_require__(/*! ./components/home/home.component */ 2865);/* harmony import */ var _logoff_logoff_logoff_component__webpack_imported_module_1__ = __webpack_require__(...

Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://12332392.fls.doubleclick.net/activityi;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://12332392.fls.doubleclick.net/activityi;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=hx4gagt&ref=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&upid=i9burxe&osi=4d95cb5b050b70ab781bd6c9615a0189&osv=1.1&upv=1.1.3
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://12332392.fls.doubleclick.net/activityi;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://12332392.fls.doubleclick.net/activityi;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=hx4gagt&ref=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&upid=i9burxe&osi=4d95cb5b050b70ab781bd6c9615a0189&osv=1.1&upv=1.1.3
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://12332392.fls.doubleclick.net/activityi;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://12332392.fls.doubleclick.net/activityi;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=hx4gagt&ref=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&upid=i9burxe&osi=4d95cb5b050b70ab781bd6c9615a0189&osv=1.1&upv=1.1.3
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://12332392.fls.doubleclick.net/activityi;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://12332392.fls.doubleclick.net/activityi;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=hx4gagt&ref=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&upid=i9burxe&osi=4d95cb5b050b70ab781bd6c9615a0189&osv=1.1&upv=1.1.3
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://12332392.fls.doubleclick.net/activityi;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=9752031467127;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=hx4gagt&ref=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&upid=i9burxe&osi=4d95cb5b050b70ab781bd6c9615a0189&osv=1.1&upv=1.1.3

Source: https://logon.vanguard.com/logon?site=iig

HTTP Parser: <input type="password" .../> found

Source: http://www.vanguard.com/retirementplans	HTTP Parser: No favicon
Source: https://ownyourfuture.vanguard.com/en/home/publogin	HTTP Parser: No favicon
Source: https://ownyourfuture.vanguard.com/en/home/publogin	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No favicon

Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No <meta name="author".. found
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No <meta name="author".. found
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No <meta name="author".. found
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No <meta name="author".. found
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No <meta name="author".. found

Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No <meta name="copyright".. found
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No <meta name="copyright".. found
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No <meta name="copyright".. found
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No <meta name="copyright".. found
Source: https://logon.vanguard.com/logon?site=iig	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49893 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.109.210.53:443 -> 192.168.2.16:49730
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.109.210.53:443 -> 192.168.2.16:49893

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 01 Nov 2024 16:51:57 GMTServer: ApacheSet-Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; Path=/; Domain=.vanguard.comSet-Cookie: TLTUID=9B89012098711098B0DDD47FCE30B589; Path=/; Domain=.vanguard.com; Expires=Fri, 01-Nov-2034 16:51:57 GMTCache-Control: no-cacheStrict-Transport-Security: max-age=63072000;includeSubDomainsX-Frame-Options: SAMEORIGINLast-Modified: Tue, 06 Jul 2021 18:11:02 GMTETag: "15f-5c67858381980-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 275Keep-Alive: timeout=65Connection: Keep-AliveSet-Cookie: HNWPRD=C22; Path=/; Domain=.vanguard.comData Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 90 41 6f 82 40 10 85 ef fe 8a e9 5e 3c c1 68 bc 94 0a 24 0a 34 98 68 a5 66 69 eb 91 c8 2a 24 b0 4b 97 41 f0 df d7 55 9b f4 d0 d3 cc 4b e6 7b ef 65 46 23 f7 29 dc 06 7c 9f 44 50 50 5d 41 92 2e d7 ab 00 98 85 f8 39 0b 10 43 1e c2 57 cc 37 6b 98 da 13 e0 3a 93 6d 49 a5 92 59 85 18 bd 31 60 05 51 f3 82 d8 f7 bd dd cf 6c a5 4f c8 77 38 18 af a9 81 1f ab 45 7f 48 3b a7 9c f9 ee 2d 6f a8 2b d9 7a ff b8 4c 1d c7 b9 c3 e6 54 64 b9 01 a8 b1 c4 77 57 9e 3d 16 28 49 42 92 c5 2f 8d 60 70 b8 2b 8f 91 18 08 0d 34 87 43 91 e9 56 90 97 f2 57 eb 99 a1 ef 6e 22 be 80 98 f3 c4 8a de d3 d5 87 c7 76 e2 a8 45 5b 30 08 7e f1 c9 1c d2 dd da 1b 9b a4 f6 da 47 f5 f2 a2 3a 7d ec a8 d3 c2 3e 67 f2 d4 65 3a b7 0f aa c6 4a 9d 4a 39 be 76 c3 38 5a 84 be bb dc 86 fb ab 78 0c f3 31 1f 46 3f b9 f9 86 25 5f 01 00 00 Data Ascii: mAo@^<h$4hfi*$KAUK{eF#)\|DPP]A.9CW7k:mIY1`QlOw8EH;-o+zLTdwW=(IB/`p+4CVWn"vE[0~G:}>ge:JJ9v8Zx1F?%_
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 01 Nov 2024 16:51:58 GMTServer: ApacheStrict-Transport-Security: max-age=63072000;includeSubDomainsX-Frame-Options: SAMEORIGINLast-Modified: Tue, 29 Oct 2019 19:49:06 GMTETag: "e36-59611e8afd080-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2142Keep-Alive: timeout=65Connection: Keep-AliveContent-Type: image/x-iconData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 56 69 54 54 47 16 fe 0a 68 71 8b 22 fb 22 88 1a 97 68 dc b7 18 f7 05 88 31 76 34 44 34 e2 12 64 d0 c4 68 62 3a 13 93 d6 2c 66 42 9c 55 c0 49 1c 67 82 1a 47 c6 65 f2 90 60 c8 6a 88 1b cd 2b 68 a0 11 04 54 44 51 8c 51 bb 85 80 34 bd bd d7 fd e6 3e d4 93 33 e0 af 9c 99 7f b9 e7 d4 a9 ba ef de ba cb 57 f5 ee 2d 80 c1 0b 7e 7e 68 a7 17 34 c0 60 9a a3 a3 ef f2 87 bb 02 69 f4 6d 28 ad 55 15 f5 33 43 d7 76 d9 4c 86 07 92 a2 28 48 9c 5f 8b ec 83 16 e2 0a 70 ee ac 15 13 07 96 e1 f5 75 f5 30 9b 1d 30 e4 37 23 a2 9b 11 99 1f de c2 dc b1 35 18 16 68 c2 8b 2b 6b 31 6f 76 15 ac 6d 12 be f9 e2 36 1a 2e db d1 13 1c e5 46 2b e2 63 ab b1 3a be 16 a3 22 8c 38 f8 89 19 9f 1f b1 a0 7f ef 12 6c 4c aa c3 f4 91 67 11 00 23 9c 2e 09 2d 3f c9 f8 f1 9a 0d 3e 28 82 76 46 35 ba e1 34 ae df b2 61 44 78 39 4e 7e db 04 c5 e3 42 a8 a6 18 4b e3 2e 60 95 f6 02 86 f8 99 30 71 68 19 24 8f 1b 89 0b 6b 49 df 88 dc 43 b7 21 ec 37 93 8d d3 68 68 70 a0 d1 62 c3 ad 9b 6d e8 82 42 d8 6d 32 aa 2a 5b b1 30 a6 0a 87 f6 df c2 c9 63 2d f0 b8 dd 94 a3 88 eb 57 1d 18 e8 57 86 e4 45 e7 09 1d 0e b7 22 43 96 65 1c de 77 93 f0 70 13 ef 81 5b f6 40 43 78 28 8a 04 5f 18 e0 f1 28 50 dc a4 a7 ca 3d 12 64 8f 0c 37 f1 20 5f 8c f4 34 a4 a3 a1 75 57 ca 47 a1 fd 1e c2 55 a1 3d 1e 5a 2b 14 b3 c7 43 df 68 96 55 db b4 d7 e3 56 f7 ab 7e e4 07 1f cc af f4 2b fd 9f 29 91 fd 37 81 c6 d2 e5 f3 13 62 12 9e 4a bc cf 3f bf 6a 08 eb f7 58 4c d2 ec 7b fc 88 55 6c f4 a3 0f 8d 5b 96 70 8f d7 b2 c0 a1 63 47 8d 61 f7 f9 18 16 f1 6c e4 b4 99 ec b9 7b 3c eb 1a 32 b1 cb 80 19 d3 ef cb d9 e3 01 8b 7d a7 3c 33 97 2d 49 68 e7 13 86 c5 07 f4 99 14 fe 08 8b 55 f9 44 e6 3f bc ff a0 f1 cc ab 7b 74 c2 8a 76 79 8f 81 b3 7a b1 04 6f 9f 50 b6 40 e5 fd fa 2e 7a 22 2c 21 41 f3 64 cf a8 18 55 bf 5b 50 ef e0 87 97 2d 1d 3c 79 e4 04 95 5f 38 35 86 b1 79 73 9e 5e c9 58 dc 0a b6 b0 63 7e 0f a0 ad bf 60 a8 44 bf 77 7b 9d 8d a6 31 13 3f d7 d9 ad 3e 0f c6 5a ad b3 4b e7 5f 43 f6 3e 07 ba 53 cd a9 ae 68 c2 db 6f 5e a4 5a 6b c2 ce 1d 97 30 9c 6a 48 fe 77 12 5e 59 71 19 f3 c7 9d 42 43 bd 82 48 54 e3 b6 62 c5 8e f7 1b 51 ce 15 aa bd 1c a3 83 6a 11 a1 c9 47 dc 00 11 9b 5e ba 81 ac f4 9b 98 31 ac 16 9b d6 54 22 7e 5a 1d 3e d8 76 19 5f 7d d9 08 b1 b4 05 2d 56 b5 5e b5 20 b2 67 39 fc bc 2a 11 e6 55 84 f3 d7 9c f0 b4 2a 28 af 74 a0 95 62 1a d9 a3 0c e9 69 4d 78 6f c3 4d 1c ce 6a c2 20 9f 12 c4 4d 32 62 44 b4 11 73 86 98 20 7c ea c2 1b ab af c2 e1 74 e0 e3 1d 37 d0 07 a7 a0 1d 55 84 cd af d6 23 c0 b7 10 65 46 3b ea ea Data Ascii: ViTTGhq""h1v4D4dhb:,fBUIgGe`j+hTDQQ4
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 01 Nov 2024 16:51:59 GMTServer: ApacheStrict-Transport-Security: max-age=63072000;includeSubDomainsX-Frame-Options: SAMEORIGINLast-Modified: Tue, 29 Oct 2019 19:49:06 GMTETag: "e36-59611e8afd080-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2142Keep-Alive: timeout=65Connection: Keep-AliveContent-Type: image/x-iconData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 56 69 54 54 47 16 fe 0a 68 71 8b 22 fb 22 88 1a 97 68 dc b7 18 f7 05 88 31 76 34 44 34 e2 12 64 d0 c4 68 62 3a 13 93 d6 2c 66 42 9c 55 c0 49 1c 67 82 1a 47 c6 65 f2 90 60 c8 6a 88 1b cd 2b 68 a0 11 04 54 44 51 8c 51 bb 85 80 34 bd bd d7 fd e6 3e d4 93 33 e0 af 9c 99 7f b9 e7 d4 a9 ba ef de ba cb 57 f5 ee 2d 80 c1 0b 7e 7e 68 a7 17 34 c0 60 9a a3 a3 ef f2 87 bb 02 69 f4 6d 28 ad 55 15 f5 33 43 d7 76 d9 4c 86 07 92 a2 28 48 9c 5f 8b ec 83 16 e2 0a 70 ee ac 15 13 07 96 e1 f5 75 f5 30 9b 1d 30 e4 37 23 a2 9b 11 99 1f de c2 dc b1 35 18 16 68 c2 8b 2b 6b 31 6f 76 15 ac 6d 12 be f9 e2 36 1a 2e db d1 13 1c e5 46 2b e2 63 ab b1 3a be 16 a3 22 8c 38 f8 89 19 9f 1f b1 a0 7f ef 12 6c 4c aa c3 f4 91 67 11 00 23 9c 2e 09 2d 3f c9 f8 f1 9a 0d 3e 28 82 76 46 35 ba e1 34 ae df b2 61 44 78 39 4e 7e db 04 c5 e3 42 a8 a6 18 4b e3 2e 60 95 f6 02 86 f8 99 30 71 68 19 24 8f 1b 89 0b 6b 49 df 88 dc 43 b7 21 ec 37 93 8d d3 68 68 70 a0 d1 62 c3 ad 9b 6d e8 82 42 d8 6d 32 aa 2a 5b b1 30 a6 0a 87 f6 df c2 c9 63 2d f0 b8 dd 94 a3 88 eb 57 1d 18 e8 57 86 e4 45 e7 09 1d 0e b7 22 43 96 65 1c de 77 93 f0 70 13 ef 81 5b f6 40 43 78 28 8a 04 5f 18 e0 f1 28 50 dc a4 a7 ca 3d 12 64 8f 0c 37 f1 20 5f 8c f4 34 a4 a3 a1 75 57 ca 47 a1 fd 1e c2 55 a1 3d 1e 5a 2b 14 b3 c7 43 df 68 96 55 db b4 d7 e3 56 f7 ab 7e e4 07 1f cc af f4 2b fd 9f 29 91 fd 37 81 c6 d2 e5 f3 13 62 12 9e 4a bc cf 3f bf 6a 08 eb f7 58 4c d2 ec 7b fc 88 55 6c f4 a3 0f 8d 5b 96 70 8f d7 b2 c0 a1 63 47 8d 61 f7 f9 18 16 f1 6c e4 b4 99 ec b9 7b 3c eb 1a 32 b1 cb 80 19 d3 ef cb d9 e3 01 8b 7d a7 3c 33 97 2d 49 68 e7 13 86 c5 07 f4 99 14 fe 08 8b 55 f9 44 e6 3f bc ff a0 f1 cc ab 7b 74 c2 8a 76 79 8f 81 b3 7a b1 04 6f 9f 50 b6 40 e5 fd fa 2e 7a 22 2c 21 41 f3 64 cf a8 18 55 bf 5b 50 ef e0 87 97 2d 1d 3c 79 e4 04 95 5f 38 35 86 b1 79 73 9e 5e c9 58 dc 0a b6 b0 63 7e 0f a0 ad bf 60 a8 44 bf 77 7b 9d 8d a6 31 13 3f d7 d9 ad 3e 0f c6 5a ad b3 4b e7 5f 43 f6 3e 07 ba 53 cd a9 ae 68 c2 db 6f 5e a4 5a 6b c2 ce 1d 97 30 9c 6a 48 fe 77 12 5e 59 71 19 f3 c7 9d 42 43 bd 82 48 54 e3 b6 62 c5 8e f7 1b 51 ce 15 aa bd 1c a3 83 6a 11 a1 c9 47 dc 00 11 9b 5e ba 81 ac f4 9b 98 31 ac 16 9b d6 54 22 7e 5a 1d 3e d8 76 19 5f 7d d9 08 b1 b4 05 2d 56 b5 5e b5 20 b2 67 39 fc bc 2a 11 e6 55 84 f3 d7 9c f0 b4 2a 28 af 74 a0 95 62 1a d9 a3 0c e9 69 4d 78 6f c3 4d 1c ce 6a c2 20 9f 12 c4 4d 32 62 44 b4 11 73 86 98 20 7c ea c2 1b ab af c2 e1 74 e0 e3 1d 37 d0 07 a7 a0 1d 55 84 cd af d6 23 c0 b7 10 65 46 3b ea ea Data Ascii: ViTTGhq""h1v4D4dhb:,fBUIgGe`j+hTDQQ4

Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://www.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
Source: global traffic	HTTP traffic detected: GET /home/publogin HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://www.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /en/home/publogin HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://www.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-core-components/clientlibs/clientlib-base.min.ACSHASH1235395ee3249cf0f9725a3f8309380e.css HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-base.min.ACSHASH6df78a87ceef59434ba7a52da51db948.css HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/components/dwcharts/clientlibs/site.min.ACSHASH53f049f22e99afd3786d80801a989555.css HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-dependencies.min.ACSHASHc212796be6047e2b0404bf46c943585c.css HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.css HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/launch-fa9ce42154c5.min.js HTTP/1.1Host: corp-etm-arl.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
Source: global traffic	HTTP traffic detected: GET /antiflicker_v1/antiflicker.min.js HTTP/1.1Host: corp-at2.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-dependencies.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /antiflicker_v1/antiflicker.min.js HTTP/1.1Host: corp-at2.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-site.min.ACSHASHab1e694af2e688e019466c9b3d4048e3.css HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-base.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /structure/page/clientlib/less/helper-customizations.less HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/components/dwcharts/clientlibs/site.min.ACSHASH53f049f22e99afd3786d80801a989555.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-dependencies.min.ACSHASHd45b9e1af27f3e2e822f5adaf58a1ef1.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BrpooOR7Z7hUysF&MD=6ABtmDwg HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/Vanguard%20logo.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /v0/fonts/constellation-fonts.css HTTP/1.1Host: constellation-static.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
Source: global traffic	HTTP traffic detected: GET /v1/fonts/constellation-fonts.css HTTP/1.1Host: constellation-static.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
Source: global traffic	HTTP traffic detected: GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/launch-fa9ce42154c5.min.js HTTP/1.1Host: corp-etm-arl.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=92CA3704532954400A490D44%40AdobeOrg&d_nsid=0&ts=1730479924247 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://ownyourfuture.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v0/fonts/ff-mark.css HTTP/1.1Host: constellation-static.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constellation-static.web.vanguard.com/v0/fonts/constellation-fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /v0/fonts/thorndale.css HTTP/1.1Host: constellation-static.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constellation-static.web.vanguard.com/v0/fonts/constellation-fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=92CA3704532954400A490D44%40AdobeOrg&mid=86591681061654023263392632422581144886&ts=1730479925355 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://ownyourfuture.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=92CA3704532954400A490D44%40AdobeOrg&d_nsid=0&ts=1730479924247 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=84871277735491192852519433086877446357
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: vanguard.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=84871277735491192852519433086877446357
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/Vanguard%20logo.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /v1/fonts/ff-mark.css HTTP/1.1Host: constellation-static.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constellation-static.web.vanguard.com/v1/fonts/constellation-fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487125s%7CNONE%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /v1/fonts/thorndale.css HTTP/1.1Host: constellation-static.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constellation-static.web.vanguard.com/v1/fonts/constellation-fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487125s%7CNONE%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-dependencies.min.ACSHASHd45b9e1af27f3e2e822f5adaf58a1ef1.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487125s%7CNONE%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=84871277735491192852519433086877446357 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vanguard.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=92CA3704532954400A490D44%40AdobeOrg&mid=86591681061654023263392632422581144886&ts=1730479925355 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/v1/identity/acquire?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=ec87e85d-3543-4778-94e2-4109803d2c16 HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=84871277735491192852519433086877446357
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/banners/ib2_hero_banner.png HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/public-home/PH_1920.png HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/vector-down.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/EXcdd48fe7cd4640a1bbab483674626e32-libraryCode_source.min.js HTTP/1.1Host: corp-etm-arl.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /en/home/publogin HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/home-icon.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/icons/globe.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomODQ4NzEyNzc3MzU0OTExOTI4NTI1MTk0MzMwODY4Nzc0NDYzNTcQABoNCLiOlLkGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vanguard.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=f8QiZyII1FffZtL5MFxjC4pxgX4MklUEDbVyDivP1Fk=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/banners/ib2_hero_banner.png HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/components/dwcharts/clientlibs/site.min.ACSHASH0c4b1c61e4ed0e14f079763904b4349b.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/vector-down.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/home-icon.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASH19c0971c237b914197972e901db2f496.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.ACSHASH0a6aff292f5cc42142779cde92054524.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/icons/globe.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-core-components/clientlibs/clientlib-base.min.ACSHASH8c2ff07b7a77f8d850a1ff64ef8817c6.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/public-home/PH_1920.png HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-base.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=238ec78f6251143997b79a6ad381607f29226e68dea55bbe2cf5d3418c8078f3b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vanguard.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=84871277735491192852519433086877446357; dextp=60-1-1730479926517
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-dependencies.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/EXcdd48fe7cd4640a1bbab483674626e32-libraryCode_source.min.js HTTP/1.1Host: corp-etm-arl.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-site.min.ACSHASH0b524cdef39893463854517c5d39ca98.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.ACSHASH0a6aff292f5cc42142779cde92054524.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-base.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/components/dwcharts/clientlibs/site.min.ACSHASH0c4b1c61e4ed0e14f079763904b4349b.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /v1/fonts/31b07b3f-1c2f-4320-90e5-bc52e0ed0b65.woff2 HTTP/1.1Host: constellation-static.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ownyourfuture.vanguard.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://constellation-static.web.vanguard.com/v1/fonts/ff-mark.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=238ec78f6251143997b79a6ad381607f29226e68dea55bbe2cf5d3418c8078f3b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=84871277735491192852519433086877446357; dextp=60-1-1730479926517; dpm=84871277735491192852519433086877446357
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-base.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASH19c0971c237b914197972e901db2f496.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-dependencies.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-fpid.min.ACSHASHc29c4e6fef4a1eebacb63c6e38026ad6.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-analytics.min.ACSHASHc715d927abe49d752760fce7dc779b20.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /v1/fonts/30274a56-042d-447a-aff9-6da0dae01586.woff2 HTTP/1.1Host: constellation-static.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ownyourfuture.vanguard.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://constellation-static.web.vanguard.com/v1/fonts/ff-mark.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-base.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/zenapse/dist/zen_init.min.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-fpid.min.ACSHASHc29c4e6fef4a1eebacb63c6e38026ad6.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/digital-advisor/icons/facebook.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/digital-advisor/icons/twitter.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-analytics.min.ACSHASHc715d927abe49d752760fce7dc779b20.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/Linkedin.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/zenapse/dist/zen_init.min.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/digital-advisor/icons/instagram.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-core-components/clientlibs/clientlib-base.min.ACSHASH8c2ff07b7a77f8d850a1ff64ef8817c6.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /v1/fonts/dc1646ea-4041-4648-9540-0bd7cbd10dc1.woff2 HTTP/1.1Host: constellation-static.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ownyourfuture.vanguard.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://constellation-static.web.vanguard.com/v1/fonts/ff-mark.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/Youtube.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/digital-advisor/icons/facebook.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/digital-advisor/icons/twitter.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/Vanguard.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/Linkedin.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/digital-advisor/logo-vanguard_advice.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/digital-advisor/icons/instagram.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/fonts/MARKPROBOLD.otf HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ownyourfuture.vanguard.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/fonts/MARKPRO.otf HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ownyourfuture.vanguard.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/Youtube.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/fonts/MARKPROHEAVY.otf HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ownyourfuture.vanguard.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/learn/Vanguard.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /content/dam/inst/retirement-plans/digital-advisor/logo-vanguard_advice.svg HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-site.min.ACSHASH0b524cdef39893463854517c5d39ca98.js HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/client.json?ver=470689357 HTTP/1.1Host: content.zenimpact.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ownyourfuture.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wtl-request-information-webservice/rs/requestInfo/getUserDetail HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /api/institutional/fpid HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /Cache-Control: no-storeX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/medallia-digital-embed.js HTTP/1.1Host: mdl-medallia-digital.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/init.json?ver=4354856871 HTTP/1.1Host: content.zenimpact.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ownyourfuture.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/client.json?ver=470689357 HTTP/1.1Host: content.zenimpact.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wtl-request-information-webservice/rs/requestInfo/getUserDetail HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; ADRUM_BT=R:51\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735334\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
Source: global traffic	HTTP traffic detected: GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.min.js HTTP/1.1Host: corp-etm-arl.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/init.json?ver=4354856871 HTTP/1.1Host: content.zenimpact.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/institutional/fpid HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; ADRUM_BT=R:51\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735334\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc
Source: global traffic	HTTP traffic detected: GET /values HTTP/1.1Host: hub2.zenimpact.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/medallia-digital-embed.js HTTP/1.1Host: mdl-medallia-digital.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /ajax/libs/js-cookie/2.2.1/js.cookie.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hub2.zenimpact.io/valuesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.min.js HTTP/1.1Host: corp-etm-arl.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
Source: global traffic	HTTP traffic detected: GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.min.js HTTP/1.1Host: corp-etm-arl.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481800; at_check=true
Source: global traffic	HTTP traffic detected: GET /ajax/libs/js-cookie/2.2.1/js.cookie.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/configv21.json?version=9308211776 HTTP/1.1Host: content.zenimpact.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ownyourfuture.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/configv21.json?version=9308211776 HTTP/1.1Host: content.zenimpact.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=thevanguardgroup&sessionId=d0323fb320e24e1081d8caf666dc7197&version=2.11.4 HTTP/1.1Host: thevanguardgroup.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/zenapse/dist/scaffold/zen_insight_V4.min.js?ver=7091632830 HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc; ADRUM_BT=R:0\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735340\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741
Source: global traffic	HTTP traffic detected: GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.min.js HTTP/1.1Host: corp-etm-arl.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741
Source: global traffic	HTTP traffic detected: GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.min.js HTTP/1.1Host: corp-etm-arl.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741
Source: global traffic	HTTP traffic detected: GET /zenid?zenId=2d998ac0-80f1-8946-9b27-6d49017b3789 HTTP/1.1Host: insight-api-kgw.zenimpact.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.min.js HTTP/1.1Host: corp-etm-arl.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/favicon.ico HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc; ADRUM_BT=R:0\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735340\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_tslv=1730479942827; s_inv=0
Source: global traffic	HTTP traffic detected: GET /pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/generic1715176030848.js HTTP/1.1Host: mdl-medallia-digital.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_tslv=1730479942827; s_inv=0
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=23a41a4e-0ff2-4378-912e-2a0f075ca3d1 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/vanguardpeprodlaunch/1/JS-2.23.0-LEWM/s93352462118844?AQB=1&ndh=1&pf=1&t=1%2F10%2F2024%2012%3A52%3A24%205%20240&sdid=247944E3FF11DE52-4A0A27777F0FE879&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&g=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&r=http%3A%2F%2Fwww.vanguard.com%2F&c.&getVisitNum=4.2.1&endOfDatePeriod=1.2&getPreviousValue=3.0.1&getTimeSinceLastVisit=2.0&.c&cc=USD&ch=pe%3Aweb&server=ownyourfuture.vanguard.com&events=event284&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&h1=home%3Ahome&v4=mcmid%7C86591681061654023263392632422581144886&c5=unknown&v5=unknown&c8=logged%20out&v8=logged%20out&v13=fri%2C%201%20nov%202024%2012%3A52%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=D%3Dv18&v18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&c21=www.vanguard.com&c26=D%3Dv26&c30=home&c31=D%3Dg&v36=1&c38=home&c39=home&v39=home&c42=1.0.0&v42=1.0.0&c44=pageLoaded%2CuserDetected%2CarticleAttributes%2CpageLoadCompleted&v59=web&c65=www.vanguard.com%2F&v66=new&v88=9B89012098711098B0DDD47FCE30B589&v99=9B89012098711098B0DDD47FCE30B589&v102=www.vanguard.com%2F&v139=new%20visitor&v140=www.vanguard.com&v159=en%3Ahome&v188=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v243=public&v249=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=92CA3704532954400A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/favicon.ico HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc; ADRUM_BT=R:0\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735340\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_tslv=1730479942827; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_fasts=1730479944066; s_cc=true
Source: global traffic	HTTP traffic detected: GET /set?zenId=2d998ac0-80f1-8946-9b27-6d49017b3789&token=AIzaSyAMe8kFxrppCns3DOYAztjm6YGqSyPfHIQ HTTP/1.1Host: hub2.zenimpact.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/generic1715176030848.js HTTP/1.1Host: mdl-medallia-digital.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_tslv=1730479942827; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_fasts=1730479944066; s_cc=true
Source: global traffic	HTTP traffic detected: GET /wdcusprem/13700/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ownyourfuture.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/vanguardpeprodlaunch/1/JS-2.23.0-LEWM/s93352462118844?AQB=1&ndh=1&pf=1&t=1%2F10%2F2024%2012%3A52%3A24%205%20240&sdid=247944E3FF11DE52-4A0A27777F0FE879&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&g=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&r=http%3A%2F%2Fwww.vanguard.com%2F&c.&getVisitNum=4.2.1&endOfDatePeriod=1.2&getPreviousValue=3.0.1&getTimeSinceLastVisit=2.0&.c&cc=USD&ch=pe%3Aweb&server=ownyourfuture.vanguard.com&events=event284&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&h1=home%3Ahome&v4=mcmid%7C86591681061654023263392632422581144886&c5=unknown&v5=unknown&c8=logged%20out&v8=logged%20out&v13=fri%2C%201%20nov%202024%2012%3A52%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=D%3Dv18&v18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&c21=www.vanguard.com&c26=D%3Dv26&c30=home&c31=D%3Dg&v36=1&c38=home&c39=home&v39=home&c42=1.0.0&v42=1.0.0&c44=pageLoaded%2CuserDetected%2CarticleAttributes%2CpageLoadCompleted&v59=web&c65=www.vanguard.com%2F&v66=new&v88=9B89012098711098B0DDD47FCE30B589&v99=9B89012098711098B0DDD47FCE30B589&v102=www.vanguard.com%2F&v139=new%20visitor&v140=www.vanguard.com&v159=en%3Ahome&v188=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v243=public&v249=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=92CA3704532954400A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wdcusprem/13700/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /home/ulogin HTTP/1.1Host: ownyourfuture.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc; ADRUM_BT=R:0\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735340\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645
Source: global traffic	HTTP traffic detected: GET /b/ss/vanguardpeprodlaunch/1/JS-2.23.0-LEWM/s98491030390773?AQB=1&ndh=1&pf=1&t=1%2F10%2F2024%2012%3A52%3A34%205%20240&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&g=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&cc=USD&ch=pe%3Aweb&events=event111&h1=home%3Ahome&v4=mcmid%7C86591681061654023263392632422581144886&v8=logged%20out&v13=fri%2C%201%20nov%202024%2012%3A52%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&v18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&c30=home&c31=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&v36=1&c38=home&c39=home&v39=home&v59=web&v66=new&v88=9B89012098711098B0DDD47FCE30B589&v99=9B89012098711098B0DDD47FCE30B589&v102=www.vanguard.com%2F&v103=home%20-%20logon&v104=home%20-%20logon%3Alog%20in&v111=button%20primary&v130=Web%20SDK&v188=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v243=public&v249=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&pe=lnk_o&pev2=keylink%3Ahome%20-%20logon%3Alog%20in&c.&a.&activitymap.&page=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&link=LOG%20IN&region=container-3d89e0e538&pageIDType=1&.activitymap&.a&.c&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=92CA3704532954400A490D44%40AdobeOrg&lrt=1088&AQE=1 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ownyourfuture.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/vanguardpeprodlaunch/1/JS-2.23.0-LEWM/s98491030390773?AQB=1&ndh=1&pf=1&t=1%2F10%2F2024%2012%3A52%3A34%205%20240&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&g=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&cc=USD&ch=pe%3Aweb&events=event111&h1=home%3Ahome&v4=mcmid%7C86591681061654023263392632422581144886&v8=logged%20out&v13=fri%2C%201%20nov%202024%2012%3A52%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&v18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&c30=home&c31=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&v36=1&c38=home&c39=home&v39=home&v59=web&v66=new&v88=9B89012098711098B0DDD47FCE30B589&v99=9B89012098711098B0DDD47FCE30B589&v102=www.vanguard.com%2F&v103=home%20-%20logon&v104=home%20-%20logon%3Alog%20in&v111=button%20primary&v130=Web%20SDK&v188=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v243=public&v249=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&pe=lnk_o&pev2=keylink%3Ahome%20-%20logon%3Alog%20in&c.&a.&activitymap.&page=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&link=LOG%20IN&region=container-3d89e0e538&pageIDType=1&.activitymap&.a&.c&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=92CA3704532954400A490D44%40AdobeOrg&lrt=1088&AQE=1 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=ff673c82-2567-43cd-8b3f-29d44c0e802e HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nav-preload.css HTTP/1.1Host: n4v.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQYLMUAt+ATNWSAQAAyqmk6Axnpj/D+cDANZCCyCVL4yYxjcCvrAKVJwBJzR7kl1Q4nHqEsDIKti96FO8zw+i5Cw9HjbCCG5dtYbnXo5zzmEeECa8JQxVi1sPk9U6nBdiAP7Jod8B+xvsURur4AlAxKiIejTmEUZLU4yyGeYaEZFKXuB9k4TVRgMScN6mzr115qmFPetLwENq5bnRKwpwa7ahKNv17m4b8elF3Rmw3iZTzd+F6EUsyzgKYGma2miCQiQQzIRsv3xqkO/BQ5CkMgLYPDw6tM5xMMrqIEdr9S2590rkYVhpmm3FqoNnf0HwZd1UbMn6GMeARBoKceKMZrNetu5yHfZu05KOrGkRz/jFVaPE4P5CogLRo6grYOxabl2YLmB88yDbzMpn2FbS0S0N9V/Xi1ZQDLKUTew==~-1~-1~-1; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110
Source: global traffic	HTTP traffic detected: GET /secure-site-components.js HTTP/1.1Host: n4v.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQYLMUAt+ATNWSAQAAyqmk6Axnpj/D+cDANZCCyCVL4yYxjcCvrAKVJwBJzR7kl1Q4nHqEsDIKti96FO8zw+i5Cw9HjbCCG5dtYbnXo5zzmEeECa8JQxVi1sPk9U6nBdiAP7Jod8B+xvsURur4AlAxKiIejTmEUZLU4yyGeYaEZFKXuB9k4TVRgMScN6mzr115qmFPetLwENq5bnRKwpwa7ahKNv17m4b8elF3Rmw3iZTzd+F6EUsyzgKYGma2miCQiQQzIRsv3xqkO/BQ5CkMgLYPDw6tM5xMMrqIEdr9S2590rkYVhpmm3FqoNnf0HwZd1UbMn6GMeARBoKceKMZrNetu5yHfZu05KOrGkRz/jFVaPE4P5CogLRo6grYOxabl2YLmB88yDbzMpn2FbS0S0N9V/Xi1ZQDLKUTew==~-1~-1~-1; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110
Source: global traffic	HTTP traffic detected: GET /adobe-data-layer/adobe-data-layer.min.js HTTP/1.1Host: mc3-static-assets.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQYLMUAt+ATNWSAQAAyqmk6Axnpj/D+cDANZCCyCVL4yYxjcCvrAKVJwBJzR7kl1Q4nHqEsDIKti96FO8zw+i5Cw9HjbCCG5dtYbnXo5zzmEeECa8JQxVi1sPk9U6nBdiAP7Jod8B+xvsURur4AlAxKiIejTmEUZLU4yyGeYaEZFKXuB9k4TVRgMScN6mzr115qmFPetLwENq5bnRKwpwa7ahKNv17m4b8elF3Rmw3iZTzd+F6EUsyzgKYGma2miCQiQQzIRsv3xqkO/BQ5CkMgLYPDw6tM5xMMrqIEdr9S2590rkYVhpmm3FqoNnf0HwZd1UbMn6GMeARBoKceKMZrNetu5yHfZu05KOrGkRz/jFVaPE4P5CogLRo6grYOxabl2YLmB88yDbzMpn2FbS0S0N9V/Xi1ZQDLKUTew==~-1~-1~-1; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110
Source: global traffic	HTTP traffic detected: GET /files/js/core/antiflicker-v2.min.js HTTP/1.1Host: corp.at2.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /challenge-check.esm.js HTTP/1.1Host: oob-check.cdn.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://logon.vanguard.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vg-vgn/latest/css/vgn.min.css?appPrefix=LGN HTTP/1.1Host: ccc.vgcontent.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/js/core/antiflicker-v2.min.js HTTP/1.1Host: corp.at2.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /challenge-check.esm.js HTTP/1.1Host: oob-check.cdn.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQYLMUAt+ATNWSAQAAyqmk6Axnpj/D+cDANZCCyCVL4yYxjcCvrAKVJwBJzR7kl1Q4nHqEsDIKti96FO8zw+i5Cw9HjbCCG5dtYbnXo5zzmEeECa8JQxVi1sPk9U6nBdiAP7Jod8B+xvsURur4AlAxKiIejTmEUZLU4yyGeYaEZFKXuB9k4TVRgMScN6mzr115qmFPetLwENq5bnRKwpwa7ahKNv17m4b8elF3Rmw3iZTzd+F6EUsyzgKYGma2miCQiQQzIRsv3xqkO/BQ5CkMgLYPDw6tM5xMMrqIEdr9S2590rkYVhpmm3FqoNnf0HwZd1UbMn6GMeARBoKceKMZrNetu5yHfZu05KOrGkRz/jFVaPE4P5CogLRo6grYOxabl2YLmB88yDbzMpn2FbS0S0N9V/Xi1ZQDLKUTew==~-1~-1~-1; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110
Source: global traffic	HTTP traffic detected: GET /adobe-data-layer/adobe-data-layer.min.js HTTP/1.1Host: mc3-static-assets.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQYLMUAt+ATNWSAQAAyqmk6Axnpj/D+cDANZCCyCVL4yYxjcCvrAKVJwBJzR7kl1Q4nHqEsDIKti96FO8zw+i5Cw9HjbCCG5dtYbnXo5zzmEeECa8JQxVi1sPk9U6nBdiAP7Jod8B+xvsURur4AlAxKiIejTmEUZLU4yyGeYaEZFKXuB9k4TVRgMScN6mzr115qmFPetLwENq5bnRKwpwa7ahKNv17m4b8elF3Rmw3iZTzd+F6EUsyzgKYGma2miCQiQQzIRsv3xqkO/BQ5CkMgLYPDw6tM5xMMrqIEdr9S2590rkYVhpmm3FqoNnf0HwZd1UbMn6GMeARBoKceKMZrNetu5yHfZu05KOrGkRz/jFVaPE4P5CogLRo6grYOxabl2YLmB88yDbzMpn2FbS0S0N9V/Xi1ZQDLKUTew==~-1~-1~-1; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110
Source: global traffic	HTTP traffic detected: GET /secure-site-components.js HTTP/1.1Host: n4v.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQYLMUAt+ATNWSAQAAyqmk6Axnpj/D+cDANZCCyCVL4yYxjcCvrAKVJwBJzR7kl1Q4nHqEsDIKti96FO8zw+i5Cw9HjbCCG5dtYbnXo5zzmEeECa8JQxVi1sPk9U6nBdiAP7Jod8B+xvsURur4AlAxKiIejTmEUZLU4yyGeYaEZFKXuB9k4TVRgMScN6mzr115qmFPetLwENq5bnRKwpwa7ahKNv17m4b8elF3Rmw3iZTzd+F6EUsyzgKYGma2miCQiQQzIRsv3xqkO/BQ5CkMgLYPDw6tM5xMMrqIEdr9S2590rkYVhpmm3FqoNnf0HwZd1UbMn6GMeARBoKceKMZrNetu5yHfZu05KOrGkRz/jFVaPE4P5CogLRo6grYOxabl2YLmB88yDbzMpn2FbS0S0N9V/Xi1ZQDLKUTew==~-1~-1~-1; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110
Source: global traffic	HTTP traffic detected: GET /svg/c11n-spritesheet.js HTTP/1.1Host: n4v.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://logon.vanguard.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BrpooOR7Z7hUysF&MD=6ABtmDwg HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /svg/c11n-spritesheet.js HTTP/1.1Host: n4v.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQYLMUAsmDTNWSAQAAqrWk6Ay/iBynQt348YOCEuLMJYE7INtTZcmPUNQ8lapKMGIgt0oczn0quZ116Nz2GNtEX/xl64mZX5OcyM3m+MwNsqGonqjjSDQzRjD/3v6DUd/O1pWIV5FxLiKyJdNZQdQijkWd90/JchUk5x/DkQ0lqDlOUL7EtzmfSWPC2qS55tfKGipG3uXl8pc3KPuh9GkxD9s/ViQTnTa8/7ktiJCiylr9SbgQVcilKlyU6zq9k4JoGOpo7kCj5bPVITf89qPdk9HvHIXaFhDjuM9pPjEFLdGOVSXryoua3K2nrRqy9CRvukBbXadPFJ7Zs2jjZKYzryHV/TBlLPfCuwKjXtwe5uLI1o4yhNb+EYOjRgyrA97GR/y/7YwppFm6Z4q9W8a0Malj5nq5aMgkbxfesHRg/CyD+w6Cw5kPK/7KAHnTHlUPwqzWjZTVNSD5s44UlZXUE48=~-1~-1~-1
Source: global traffic	HTTP traffic detected: GET /vg-message-svc/vms.min.js HTTP/1.1Host: mc3-static-assets.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQYLMUAsmDTNWSAQAAqrWk6Ay/iBynQt348YOCEuLMJYE7INtTZcmPUNQ8lapKMGIgt0oczn0quZ116Nz2GNtEX/xl64mZX5OcyM3m+MwNsqGonqjjSDQzRjD/3v6DUd/O1pWIV5FxLiKyJdNZQdQijkWd90/JchUk5x/DkQ0lqDlOUL7EtzmfSWPC2qS55tfKGipG3uXl8pc3KPuh9GkxD9s/ViQTnTa8/7ktiJCiylr9SbgQVcilKlyU6zq9k4JoGOpo7kCj5bPVITf89qPdk9HvHIXaFhDjuM9pPjEFLdGOVSXryoua3K2nrRqy9CRvukBbXadPFJ7Zs2jjZKYzryHV/TBlLPfCuwKjXtwe5uLI1o4yhNb+EYOjRgyrA97GR/y/7YwppFm6Z4q9W8a0Malj5nq5aMgkbxfesHRg/CyD+w6Cw5kPK/7KAHnTHlUPwqzWjZTVNSD5s44UlZXUE48=~-1~-1~-1
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/launch-ecb7d9153f04.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vg-message-svc/vms.min.js HTTP/1.1Host: mc3-static-assets.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAkxOfsmSAQAA0L2k6AxB493/6eLPMFFPlU8cFw3es5gmh9Hy5Uki3JG5+5dPeoRcmPh25lML/vd6B1gGCeAjx100pZrOa+/TgE/GtHt3E/U2DBM2N7dxZ08nwoKJROtRl5GcmheXoBMLuA/7ZiZ0pGxb8nvc7hgQ2g9quFDABACnXxhTIMxzQFVvWgMXGDBMv+Esd0KtkHHLK1RJLENNjKBWsSWhEJDONppjyRLMQ99RyYhgGD/Ul0We5HVdlR4/XMOkVNMZVh4qhHB1a3/B+1Td5f+Udlk7ONACfY7d2GLPFX+MPs/zEfTpH9SjTFvqu3lipheHyA1og6m4qVzuGUn1Fgbrn1dkbDLHIPAIS/xjjCWO9aMbj9p6fW1Sf+9RYGJQnltLjnoAEAdfyQjyK/P31Enm7rMEInO9TqWs5e/2EGVa+xFiT5trRyVSpo4wYjoTOxhdVwGkO4kYIhc=~-1~-1~-1
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/launch-ecb7d9153f04.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/EXe3fe2040233f481bae80b3b8574290df-libraryCode_source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/scripttemplates/otSDKStub.js HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/hostedLibFiles/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_AudienceManagement.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pkg/1.0.0/web/external_libs/wdcusprem/2940/onsite/medallia-digital-embed.js HTTP/1.1Host: mdl-medallia-digital.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1
Source: global traffic	HTTP traffic detected: GET /vgn-n4v/client-data?chx=true&exp=true HTTP/1.1Host: personal1.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1
Source: global traffic	HTTP traffic detected: GET /pkg/1.0.0/web/external_libs/wdcusprem/2940/onsite/medallia-digital-embed.js HTTP/1.1Host: mdl-medallia-digital.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/scripttemplates/otSDKStub.js HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/hostedLibFiles/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_AudienceManagement.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/EXe3fe2040233f481bae80b3b8574290df-libraryCode_source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/767da967-88bb-4648-bd02-c7a263423698.json HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vgn-n4v/client-data?chx=true&exp=true HTTP/1.1Host: personal1.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://logon.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/VG/script/otOptanonWrapper.js HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/767da967-88bb-4648-bd02-c7a263423698.json HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCbd279c41a77e4e23a024c79d6922f33f-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/otBannerSdk.js HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/VG/script/otOptanonWrapper.js HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c
Source: global traffic	HTTP traffic detected: GET /bqpwheoc7h6pv2vj.js?iru3dwvi78up4hn8=d23ew8hi&newmsqijd0svf3s6=66F7DF5A1190428897AD062D5DBCC83F&eq2f4v7jm8eclyuw=3 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC9e850eb0c29147bdb5c53bed16ddb818-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCbd279c41a77e4e23a024c79d6922f33f-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/otBannerSdk.js HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAtpOfsmSAQAAecKk6AyH8fP4Wijty8B2TgxsQ7rlc0hOB/RDbdqd9x8fM91l0mHyOSduj/Xa/87gvCpmW64YHvsWA90UVtU/wjEIB0aIYY0kHjo+ljxptHApJtKH3DQxksmEYkwbYMn8HxTuJFgFUtx6M4ywQGy7QYntT1X5p/SG7M3l3T6YWN38p4pOYzezeObjZf6BGkxTy+H3oPlCA1V09mOZEHrBjjyt1zV7NuSk1SgbXbfNGLHZcsM59ZQ+n4F4l6g0vGkN/FhgP/2sWJoAbUR7YHJGsQ46neleoDfm+xgtMc9GqwGzdOwEZ3YmW8EFOW6AWis79TTIe8quD2j7efdNco/3Wbm9IChumRmPA4zQyfwtmlJcwtTAH6psKBph6HtT8I7N0bMr/j5odDTLUWSTTwiEvIuq+9PZeOqfcYzHRCPrJqPWswLLK+ghp1DorbjFM79vMhpODyyb2h3A2i/Mc7WBm1mC~-1~\|\|0\|\|~-1; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; s_retts=1730479968818
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/en-us.json HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Rs3dD0N-iJ850wNP?36f5a8f20da513b5=5TtM_wlOOPiYyH5JL_LNwsvBOAGkUfsHV4yqdVhX1fC3IEODkqM1Hms8hwCwvYcEfdpW0zxzj-0PqVgux79l22sUAqC2qEzLcbxDsTZ3fj4Xo-pD61rdfzzeoeP-4zW3btv6vz-GGEM91SeX4vdWP9m7b5rHwiTNy0IeUOZTTK_JxaUxCzRikMKfNl7kI5cgSuhYt-G7OramF-wNFdMtt4Q&jb=373b24246a716f753d57616e646d7f7b2e68736f3d556b6e646f7571273a32333224687162773d436872676d6524627b6a3f4368726d6f6525323233333f HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAyhX8XSGkdDU3L9i0-SYUeNT1rxwNdJXX-fCy3YoDQG7hf0nW3vh7ny_p73M4GtnbWX-0mJbJJIvJonz5SNZiiVjmadpg
Source: global traffic	HTTP traffic detected: GET /3WTgJwUYjbUPdza3?e16e24aef1b00274=hClurLGuurYKHFtwHpRPHgDZRmIY1LNvla48OjzCvdjEeUKJFE8eOLdbcOIwAnTQRuNVFuFKtgzHUk_RRCS0G4YwuonLte02PQ25MpHIFuV41LGXP5Af92csneW-JV2e6Iczxg1c0STMVBTLtf9KtVvS7zugVczBWEjmWl443InlUA HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAyhX8XSGkdDU3L9i0-SYUeNT1rxwNdJXX-fCy3YoDQG7hf0nW3vh7ny_p73M4GtnbWX-0mJbJJIvJonz5SNZiiVjmadpg
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC9e850eb0c29147bdb5c53bed16ddb818-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bqpwheoc7h6pv2vj.js?iru3dwvi78up4hn8=d23ew8hi&newmsqijd0svf3s6=66F7DF5A1190428897AD062D5DBCC83F&eq2f4v7jm8eclyuw=3 HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAyhX8XSGkdDU3L9i0-SYUeNT1rxwNdJXX-fCy3YoDQG7hf0nW3vh7ny_p73M4GtnbWX-0mJbJJIvJonz5SNZiiVjmadpg
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCa08d54b45c824bd99f742f7a72b0292e-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC2500743be69f4be0aa042674acca9b86-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z78oGqvF4NO61a0u?3cdeedb9f79127c5=tP2JQ-oL6Y7FZ3jAVPz5yMBAWZnlZWyZM9fBtuogOMInGLaSIeCki4FMOnjAldjaKvrzg-myHVi3ypQ0pTx6fliXR7n6WEnh_ZmC9vfEyog_XrVnIiIyCetibbFd5AWBlJKhIIrFxoc-L7z88MX6j2bguXxSInTOojuQuaTsiU0Pzw HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAyhX8XSGkdDU3L9i0-SYUeNT1rxwNdJXX-fCy3YoDQG7hf0nW3vh7ny_p73M4GtnbWX-0mJbJJIvJonz5SNZiiVjmadpg
Source: global traffic	HTTP traffic detected: GET /activityi;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D? HTTP/1.1Host: 12332392.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D? HTTP/1.1Host: 12332392.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3WTgJwUYjbUPdza3?e16e24aef1b00274=hClurLGuurYKHFtwHpRPHgDZRmIY1LNvla48OjzCvdjEeUKJFE8eOLdbcOIwAnTQRuNVFuFKtgzHUk_RRCS0G4YwuonLte02PQ25MpHIFuV41LGXP5Af92csneW-JV2e6Iczxg1c0STMVBTLtf9KtVvS7zugVczBWEjmWl443InlUA HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ
Source: global traffic	HTTP traffic detected: GET /z78oGqvF4NO61a0u?3cdeedb9f79127c5=tP2JQ-oL6Y7FZ3jAVPz5yMBAWZnlZWyZM9fBtuogOMInGLaSIeCki4FMOnjAldjaKvrzg-myHVi3ypQ0pTx6fliXR7n6WEnh_ZmC9vfEyog_XrVnIiIyCetibbFd5AWBlJKhIIrFxoc-L7z88MX6j2bguXxSInTOojuQuaTsiU0Pzw HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=COfQ46DMu4kDFcjKOwIdRz8pcg;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D? HTTP/1.1Host: 12332392.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CMfB46DMu4kDFUDLOwIdfBsViw;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D? HTTP/1.1Host: 12332392.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC2500743be69f4be0aa042674acca9b86-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp/clear.png HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /, d23ew8hi/0e8398a274b75d1d66f7df5a1190428897ad062d5dbcc83fsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://logon.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCdcaf05ded5df440c85dbf48ae644ec25-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCa08d54b45c824bd99f742f7a72b0292e-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Rs3dD0N-iJ850wNP?36f5a8f20da513b5=5TtM_wlOOPiYyH5JL_LNwsvBOAGkUfsHV4yqdVhX1fC3IEODkqM1Hms8hwCwvYcEfdpW0zxzj-0PqVgux79l22sUAqC2qEzLcbxDsTZ3fj4Xo-pD61rdfzzeoeP-4zW3btv6vz-GGEM91SeX4vdWP9m7b5rHwiTNy0IeUOZTTK_JxaUxCzRikMKfNl7kI5cgSuhYt-G7OramF-wNFdMtt4Q&jb=373b24246a716f753d57616e646d7f7b2e68736f3d556b6e646f7571273a32333224687162773d436872676d6524627b6a3f4368726d6f6525323233333f HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ
Source: global traffic	HTTP traffic detected: GET /2RvVdWZv4bzXKoWP?29f1896faa41b810=xP2WR0E8OVlHEYqR2qiFTGLezArr3664mjiSRlflw6oJxoz4oyt6PNdBccsoY4cm1z0TR4-zoR4GYGItQgwHGWTzwBwaW-qrPNbvrs-Nb7HZ92fQlG-sAnI-FuMDc3i1rF6a6RPEUZMxupYK_qSxWi2Os2NW-yzpTCeVKnJ33IpZyJ4sysoNY-METvkRReTJSgRMFB8uiyK7pwRsWy0nT2FGVQ HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ
Source: global traffic	HTTP traffic detected: GET /yJnYWpvsRlxA-nWG?3b3a6ef0d963d356=s7KrZNBZIxFN8yUKu2Jy7KEfAW3fyvFp1SOK7vHI6OgK4qXEW0aHBUae7t5aZjh-lxtfQpmpynHSwn9QgKv_4UsCMcBdSbqzMatFdLCR2CCYB4kGYSU03Zq523bdhNMruWwAD2kDHCYY3yCzoR4_tfQou9iBG9Y0jGuXHUKahV5Kzy4W2zmMGbuWjo2IrjnmyZ8wgM9c9SdUaP8HrPzeQoXstT0 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ
Source: global traffic	HTTP traffic detected: GET /6IeFR4C-1jLfOB0c?f191a30cbd13787a=ssHxOVyWHVb_uKLqqM1oLo6G7pRc3c7Ntyj2E4oBiLIvThVOLqD1Z1Y2bIz_aTW0vb0vN2sv7cUPiRn0Ob0Ps_kyumTxQB1eg-nxU5GXufRMwiP6EVHr8SAJjshPw9B-nBvTHIKgwYVi0tT1MuyFaNwGhBomtKaS6Bf2e0ohGagMx1BPJoC98Q HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ
Source: global traffic	HTTP traffic detected: GET /3VevSTmvfD5dAtMc?71821f0452f603f1=M6CfWsr9X7qLYdEpjILVJvvlumWIm_SoXG5n63rcaRy7J9slqG_HFDynybzDE_57ggQGvg0zmG0DTuCgaNK5ItzvPzUw9UjZtFUSgq78eSsxBP0NoWegfMtkRVYYlnaUippZMjI9HDG3-Rqe8-W1_El_wJ5amoBGQnUEVe2DABuIbaqYmvSkiGp4m5DD5QxONdxKmuexsrJkOFHJlVU3vChL9aE HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ
Source: global traffic	HTTP traffic detected: GET /MyuOdk_Z4B7RnMi2?237f2c26f9bb4a63=QnFdBxnxBTw0s6vMmMVsLY6HniymBl6NHc_LQQAlbsk9nzCwqhul-TnSZ8sgipOh2P6LMnzxJBrF9mGNo8lK1ea2pkgOf2Y1dg9p-GAIijQs6AZ8LLJTjVRkktE0Jn0CfyttBldC-M2pK6HuFZ7F4MDmv4Dw74Ww_mxSi94 HTTP/1.1Host: h64.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZKEHTZq1K2y52xQZ?28b2a74925f62e94=CBuAiXdTBEixlgVyUm81gHGcCcJwAsg8bYfMEMGO4MNiiRRN72zOd56fRcJIP7KW49YMDpAlmFERFjiW57KPXsmLM_nBhmAKSCbO_OpL8-mSguT_JlauiyyuNiHzK1S5mZ_EFJhj7UYWFdH6c8nLEnm9TeQF06rlUQ&jb=3134246e73633d3336326b3761676b3c393438343734646262316037313f34673b336467663637 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/en-us.json HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; s_retts=1730479968818; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAttQfsmSAQAAUNuk6AxmMpkVZSPscaAxguF1EF7ov4QmcTCKgAsnabESOgBbkUDv98NQY9FG4UU9YpE/WmZmjEtj3PCAFG5HIJjDSEDTQf4mm8provW0Ebpu0QgwS0SbqSXpYGVP2mieNBSGCeuCeFmqN26DjRWzhSEZDwur15K8CYAB/nIKf1ysE/56H1rh9KBIc2xai8WuFB8DQFa9f4afTJMn8O09yPcSDaF8jpJiTwssn0vaHfdxxin/4YqZH670SzLNde6tVWYX5xXC3uDtRywcwNInfVXXjxBIkmvQKAo310Hk5MFynHccZooHCylngSeHB1fgkMbMriwUUeDPT1IilQCazw4ENJppX/wq1YU2ZqNPDydDN6Hzbdr3L7qSeOrO1V9NBMFrPaPFm3wezZeKM74PP9BG2YFnxuBdlVPjA7AfMGW/4C2F3I411VcSYQdWJWWcNG/GCTm6pmO4vpQUVuL9TX13~-1~\|\|0\|\|~-1
Source: global traffic	HTTP traffic detected: GET /ih7tCa_j4Lz2UuUm?3868637768989c9b=bGmN7yKppxzLs8scZHcr1Mx2J9y_su6GWK6N-38M8xYVzhO9V0qY1q0PPDrAFHvc4jOwEz3NFT-9PXdl2Adme2FZzKQHFwcVcmXxPSNaQTZDU1vS5uBANj3dRJD_bzJPn80qw2_8N-3voUiKaRT3C47XmkMc HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=COfQ46DMu4kDFcjKOwIdRz8pcg;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://12332392.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CMfB46DMu4kDFUDLOwIdfBsViw;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://12332392.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDEyMzMyMzkyCmFkdmVydGlzZXJfZG9tYWluOiAiaHR0cHM6Ly92YW5ndWFyZC5jb20iCnhmYV9hdHRyaWJ1dGlvbl9pbnRlcmFjdGlvbl90eXBlOiBDT05WRVJTSU9OCmRlYnVnX2tleTogMTQ5MjI4NTAzMDUzMDE3NDQyNzkKY3RjX2NvbnZlcnNpb25fYnVja2V0OiAwCmFyY2hldHlwZV9pZDogMTIKYXJjaGV0eXBlX2lkOiAxMwphcmNoZXR5cGVfaWQ6IDE0CmFyY2hldHlwZV9pZDogMTUKYXJjaGV0eXBlX2lkOiAxNgphcmNoZXR5cGVfaWQ6IDE3CmFyY2hldHlwZV9pZDogMTgKYXJjaGV0eXBlX2lkOiAxOQphcmNoZXR5cGVfaWQ6IDIwCmFyY2hldHlwZV9pZDogMjEKYXJjaGV0eXBlX2lkOiAyNjI5OTQyOAphcmNoZXR5cGVfaWQ6IDI2Mjk5NDI5CmFyY2hldHlwZV9pZDogMjYyOTk0MzAKYXJjaGV0eXBlX2lkOiAyNjI5OTQzMQphcmNoZXR5cGVfaWQ6IDIwNDU2OTQwCmFyY2hldHlwZV9pZDogMjA0NTY5NDEKYXJjaGV0eXBlX2lkOiAyMDQ1Njk0MgphcmNoZXR5cGVfaWQ6IDIwNDU2OTQzCmFyY2hldHlwZV9pZDogNjI4NjgzMzIwCmFyY2hldHlwZV9pZDogNjI4NjgzMzIxCmFyY2hldHlwZV9pZDogNjI4NjgzMzIyCmFyY2hldHlwZV9pZDogNjI4NjgzMzIzCmFyY2hldHlwZV9pZDogNjQyMDI2OTM2CmFyY2hldHlwZV9pZDogNjQyMDI2OTM3CmFyY2hldHlwZV9pZDogNjQyMDI2OTM4CmFyY2hldHlwZV9pZDogNjQyMDI2OTM5CmFyY2hldHlwZV9pZDogNjQwOTgxOTI0CmFyY2hldHlwZV9pZDogNjQwOTgxOTI1CmFyY2hldHlwZV9pZDogNjQwOTgxOTI2CmFyY2hldHlwZV9pZDogNjQwOTgxOTI3CmFyY2hldHlwZV9pZDogNjQyOTA0NjY4CmFyY2hldHlwZV9pZDogNjQyOTA0NjY5CmFyY2hldHlwZV9pZDogNjQyOTA0NjcwCmFyY2hldHlwZV9pZDogNjQyOTA0NjcxCmFyY2hldHlwZV9pZDogMjI5OTg5MzYKYXJjaGV0eXBlX2lkOiAyMjk5ODkzNwphcmNoZXR5cGVfaWQ6IDIyOTk4OTM4CmFyY2hldHlwZV9pZDogMjI5OTg5MzkKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMjgKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMjkKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMzAKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMzEKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTIKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTMKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTQKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTUKY29udmVyc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogQ09OVkVSU0lPTl9ESU1FTlNJT05fRkxPT0RMSUdIVF9BQ1RJVklUWV9JRAogIG1lYXN1cmVtZW50X2RpbWVuc2lvbl92YWx1ZSB7CiAgICBpbnQ2NF92YWx1ZTogMTM2MTE5MTIKICB9Cn0KY29udmVyc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogQ09OVkVSU0lPTl9ESU1FTlNJT05fQ09OVkVSU0lPTl9EQVRFCiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIHN0cmluZ192YWx1ZTogIjIwMjQtMTEtMDEiCiAgfQp9CmJyb3dzZXJfYXR0cmlidXRpb25fYXBpX3JlcXVlc3RfcHJvY2Vzc2luZ19iaXRzOiA3Nzg3OTgzNjY3Mgp0cmlnZ2VyX2RlZHVwbGljYXRpb25fa2V5OiA0MDY2MjY4ODQ1NjE1OTE4ODQxCmdhaWFfbW9kZTogZmFsc2UKZWNob19zZXJ2ZXJfYWN0aW9uOiBFQ0hPX1NFUlZFUl9BQ1RJT05fVVNFX0JFU1RfQVZBSUxBQkxFX0FSQQphZ2dyZWdhdGlvbl9jb29yZGluYXRvcjogQUdHUkVHQVRJT05fQ09PUkRJTkFUT1JfQVdTCmZsb29kbGlnaHRfYXJhX2NvbmZpZ3MgewogIGFyY2hldHlwZXNfY29uZmlnIHsKICAgIGFnZ3JlZ2F0ZV9rZXlfYXJjaGV0eXBlcyB7CiAgICAgIGFyY2hldHlwZV9pZDogMjYyOTk0MjgKICAgICAgaW1wcmVzc2lvbl9hcmNoZXR5cGVfaWQ6IDEyCiAgICAgIGNvbnZlcnNpb25fYXJjaGV0eXBlX2lkOiAyCiAgICAgIGNvbnZfbWV0cmljX3R5cGU6IE1FVFJJQ19UWVBFX0NPVU5UCiAgICAgIGFnZ3JlZ2F0ZV9rZXlfbGV2ZWw6IDEKICAgICAgY29udHJpYnV0aW9uX3BlcmNlbnRhZ2U6IDAuMDEKICAgIH0KICAgIGFnZ3JlZ2F0ZV9rZXlfYXJjaGV0eXBlcyB7CiAgICAgIGFyY2hldHlwZV9pZDogMjYyOTk0MjkKICAgICAgaW1wcmVzc2lvbl9hcmNoZXR5cGVfaWQ6IDE2CiAgICAgIGNvbnZlcnNpb25fYXJjaGV0eXBlX2lkOiAyCiAgICAgIGNvbnZfbWV0cmljX
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDEyMzMyMzkyCmFkdmVydGlzZXJfZG9tYWluOiAiaHR0cHM6Ly92YW5ndWFyZC5jb20iCnhmYV9hdHRyaWJ1dGlvbl9pbnRlcmFjdGlvbl90eXBlOiBDT05WRVJTSU9OCmRlYnVnX2tleTogMTA2ODE0NTc2Nzc3NDk3NjU1MzEKY3RjX2NvbnZlcnNpb25fYnVja2V0OiAwCmFyY2hldHlwZV9pZDogMTIKYXJjaGV0eXBlX2lkOiAxMwphcmNoZXR5cGVfaWQ6IDE0CmFyY2hldHlwZV9pZDogMTUKYXJjaGV0eXBlX2lkOiAxNgphcmNoZXR5cGVfaWQ6IDE3CmFyY2hldHlwZV9pZDogMTgKYXJjaGV0eXBlX2lkOiAxOQphcmNoZXR5cGVfaWQ6IDIwCmFyY2hldHlwZV9pZDogMjEKYXJjaGV0eXBlX2lkOiAyNjI5OTQyOAphcmNoZXR5cGVfaWQ6IDI2Mjk5NDI5CmFyY2hldHlwZV9pZDogMjYyOTk0MzAKYXJjaGV0eXBlX2lkOiAyNjI5OTQzMQphcmNoZXR5cGVfaWQ6IDIwNDU2OTQwCmFyY2hldHlwZV9pZDogMjA0NTY5NDEKYXJjaGV0eXBlX2lkOiAyMDQ1Njk0MgphcmNoZXR5cGVfaWQ6IDIwNDU2OTQzCmFyY2hldHlwZV9pZDogNjI4NjgzMzIwCmFyY2hldHlwZV9pZDogNjI4NjgzMzIxCmFyY2hldHlwZV9pZDogNjI4NjgzMzIyCmFyY2hldHlwZV9pZDogNjI4NjgzMzIzCmFyY2hldHlwZV9pZDogNjQyMDI2OTM2CmFyY2hldHlwZV9pZDogNjQyMDI2OTM3CmFyY2hldHlwZV9pZDogNjQyMDI2OTM4CmFyY2hldHlwZV9pZDogNjQyMDI2OTM5CmFyY2hldHlwZV9pZDogNjQwOTgxOTI0CmFyY2hldHlwZV9pZDogNjQwOTgxOTI1CmFyY2hldHlwZV9pZDogNjQwOTgxOTI2CmFyY2hldHlwZV9pZDogNjQwOTgxOTI3CmFyY2hldHlwZV9pZDogNjQyOTA0NjY4CmFyY2hldHlwZV9pZDogNjQyOTA0NjY5CmFyY2hldHlwZV9pZDogNjQyOTA0NjcwCmFyY2hldHlwZV9pZDogNjQyOTA0NjcxCmFyY2hldHlwZV9pZDogMjI5OTg5MzYKYXJjaGV0eXBlX2lkOiAyMjk5ODkzNwphcmNoZXR5cGVfaWQ6IDIyOTk4OTM4CmFyY2hldHlwZV9pZDogMjI5OTg5MzkKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMjgKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMjkKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMzAKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMzEKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTIKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTMKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTQKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTUKY29udmVyc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogQ09OVkVSU0lPTl9ESU1FTlNJT05fRkxPT0RMSUdIVF9BQ1RJVklUWV9JRAogIG1lYXN1cmVtZW50X2RpbWVuc2lvbl92YWx1ZSB7CiAgICBpbnQ2NF92YWx1ZTogMTMwMzk5NjAKICB9Cn0KY29udmVyc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogQ09OVkVSU0lPTl9ESU1FTlNJT05fQ09OVkVSU0lPTl9EQVRFCiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIHN0cmluZ192YWx1ZTogIjIwMjQtMTEtMDEiCiAgfQp9CmJyb3dzZXJfYXR0cmlidXRpb25fYXBpX3JlcXVlc3RfcHJvY2Vzc2luZ19iaXRzOiA3Nzg3OTgzNjY3Mgp0cmlnZ2VyX2RlZHVwbGljYXRpb25fa2V5OiAxMjAyOTIwMTE2NTIxMTE0NDA3NQpnYWlhX21vZGU6IGZhbHNlCmVjaG9fc2VydmVyX2FjdGlvbjogRUNIT19TRVJWRVJfQUNUSU9OX1VTRV9CRVNUX0FWQUlMQUJMRV9BUkEKYWdncmVnYXRpb25fY29vcmRpbmF0b3I6IEFHR1JFR0FUSU9OX0NPT1JESU5BVE9SX0FXUwpmbG9vZGxpZ2h0X2FyYV9jb25maWdzIHsKICBhcmNoZXR5cGVzX2NvbmZpZyB7CiAgICBhZ2dyZWdhdGVfa2V5X2FyY2hldHlwZXMgewogICAgICBhcmNoZXR5cGVfaWQ6IDI2Mjk5NDI4CiAgICAgIGltcHJlc3Npb25fYXJjaGV0eXBlX2lkOiAxMgogICAgICBjb252ZXJzaW9uX2FyY2hldHlwZV9pZDogMgogICAgICBjb252X21ldHJpY190eXBlOiBNRVRSSUNfVFlQRV9DT1VOVAogICAgICBhZ2dyZWdhdGVfa2V5X2xldmVsOiAxCiAgICAgIGNvbnRyaWJ1dGlvbl9wZXJjZW50YWdlOiAwLjAxCiAgICB9CiAgICBhZ2dyZWdhdGVfa2V5X2FyY2hldHlwZXMgewogICAgICBhcmNoZXR5cGVfaWQ6IDI2Mjk5NDI5CiAgICAgIGltcHJlc3Npb25fYXJjaGV0eXBlX2lkOiAxNgogICAgICBjb252ZXJzaW9uX2FyY2hldHlwZV9pZDogMgogICAgICBjb252X21ldHJpY
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/assets/otFlat.json HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/assets/v2/otPcTab.json HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/assets/otCommonStyles.css HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp/clear.png HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ
Source: global traffic	HTTP traffic detected: GET /MyuOdk_Z4B7RnMi2?237f2c26f9bb4a63=QnFdBxnxBTw0s6vMmMVsLY6HniymBl6NHc_LQQAlbsk9nzCwqhul-TnSZ8sgipOh2P6LMnzxJBrF9mGNo8lK1ea2pkgOf2Y1dg9p-GAIijQs6AZ8LLJTjVRkktE0Jn0CfyttBldC-M2pK6HuFZ7F4MDmv4Dw74Ww_mxSi94 HTTP/1.1Host: h64.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZKEHTZq1K2y52xQZ?28b2a74925f62e94=CBuAiXdTBEixlgVyUm81gHGcCcJwAsg8bYfMEMGO4MNiiRRN72zOd56fRcJIP7KW49YMDpAlmFERFjiW57KPXsmLM_nBhmAKSCbO_OpL8-mSguT_JlauiyyuNiHzK1S5mZ_EFJhj7UYWFdH6c8nLEnm9TeQF06rlUQ&jb=3134246e73633d3336326b3761676b3c393438343734646262316037313f34673b336467663637 HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /ih7tCa_j4Lz2UuUm?3868637768989c9b=bGmN7yKppxzLs8scZHcr1Mx2J9y_su6GWK6N-38M8xYVzhO9V0qY1q0PPDrAFHvc4jOwEz3NFT-9PXdl2Adme2FZzKQHFwcVcmXxPSNaQTZDU1vS5uBANj3dRJD_bzJPn80qw2_8N-3voUiKaRT3C47XmkMc HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /XKKMTYFi5Pif37HJ?fee71bb8c2f1eda1=CGU2uu4SmoCNTWANB7AoXOPtj2v51tucI09y3Z2VHYQdaDSkyBrNmdT7HuUEUKbwUiZQ5hSbxE0lX9gdFApsML9QT2wxrkOwtTa269j8n94JzGkxz3CLopgWrZw0nIq1nREEuSo356JKGfBn5TLxXFQnS9k1uMWCSQ&jf=3134246e73603d3961306e653663303c3a313534326734386265333161383a3030603163623463 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://h.online-metrix.net/2RvVdWZv4bzXKoWP?29f1896faa41b810=xP2WR0E8OVlHEYqR2qiFTGLezArr3664mjiSRlflw6oJxoz4oyt6PNdBccsoY4cm1z0TR4-zoR4GYGItQgwHGWTzwBwaW-qrPNbvrs-Nb7HZ92fQlG-sAnI-FuMDc3i1rF6a6RPEUZMxupYK_qSxWi2Os2NW-yzpTCeVKnJ33IpZyJ4sysoNY-METvkRReTJSgRMFB8uiyK7pwRsWy0nT2FGVQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /dehVRf5Ds71ceRWX?1a8262cb1a9088f1=ASnaPYXRurgSuGgS8iAE_9fhyrx9Z7ssCK45mpwRTmMrbOQyhrLCgf30ve066ylYC3k3exnENIA_8MXXwYRkG5Giwb1SzvApkPx2dSzJUvKP1q9g_RtxsNnq7fcAPVvUI2t06X68djXCZ-MhfFp2q17TkqcL&fr HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://h.online-metrix.net/2RvVdWZv4bzXKoWP?29f1896faa41b810=xP2WR0E8OVlHEYqR2qiFTGLezArr3664mjiSRlflw6oJxoz4oyt6PNdBccsoY4cm1z0TR4-zoR4GYGItQgwHGWTzwBwaW-qrPNbvrs-Nb7HZ92fQlG-sAnI-FuMDc3i1rF6a6RPEUZMxupYK_qSxWi2Os2NW-yzpTCeVKnJ33IpZyJ4sysoNY-METvkRReTJSgRMFB8uiyK7pwRsWy0nT2FGVQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /QniexnsISTR6mNGO?0c7adcc4dd55412c=VEkAJ9whUyYUJC3N2WZiD0qWWXud9qXV6PFX-1-qRvMliAaADr7J_Gh7QK6E6XbLCexxsNJ5SxzvroxWQGSz2uToCnhduWijoS1B3d5AxbQIQXvIM1XSng3uA8mNj58d9d2TPItwAwaujVGpCULG2dSeYOp6hcqVXHv2ihk3Q35z3z2I9dPqUTgOV3hAG-1ScPUhvTDrnooCZH2hByV9miFIbw&jf=36333624736b645f726e6c3d74667a573140796e4f564c6657535250743e4a3724716b665f666174653d393733323c3f313b373426716b645f747b7267357567603867616471612673696c5f6b6771353b323539333233333036323530693a34363a61673366303230313836303a3a69303434386367316430333233323f3231363032323036643037643162343a6a3f6d343436616163303531303235396063673a353a3733343931383e6134603a6d3c61323037356138386261603b6e3433373766356335366463303a623231316d3d35326133326132353733673b3c363663373b673836363538646e64323a3c3b6c67653438313335356236633430323b3464323a34342673696457736965353b383634303230323531326432646a6163363530646164366161396d3164313f3c393231646532646464373760366b35603a6131313133663038366b6630343f396b3563366363673032323236633e3a643161303a646134383432386238673c3b383b36363836673330323067353c32673661603a393033366337693931376d6c396166343034373837383324716164703f33 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://h.online-metrix.net/yJnYWpvsRlxA-nWG?3b3a6ef0d963d356=s7KrZNBZIxFN8yUKu2Jy7KEfAW3fyvFp1SOK7vHI6OgK4qXEW0aHBUae7t5aZjh-lxtfQpmpynHSwn9QgKv_4UsCMcBdSbqzMatFdLCR2CCYB4kGYSU03Zq523bdhNMruWwAD2kDHCYY3yCzoR4_tfQou9iBG9Y0jGuXHUKahV5Kzy4W2zmMGbuWjo2IrjnmyZ8wgM9c9SdUaP8HrPzeQoXstT0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCdcaf05ded5df440c85dbf48ae644ec25-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6IeFR4C-1jLfOB0c?528dde873f5e4a14=ssHxOVyWHVb_uKLqqM1oLo6G7pRc3c7Ntyj2E4oBiLIvThVOLqD1Z1Y2bIz_aTW0vb0vN2sv7cUPiRn0Ob0Ps_kyumTxQB1eg-nxU5GXufRMwiP6EVHr8SAJjshPw9B-Fko53fETYGkijvR1Yw8T8Q&k=2 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=COfQ46DMu4kDFcjKOwIdRz8pcg;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CMfB46DMu4kDFUDLOwIdfBsViw;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDEyMzMyMzkyCmFkdmVydGlzZXJfZG9tYWluOiAiaHR0cHM6Ly92YW5ndWFyZC5jb20iCnhmYV9hdHRyaWJ1dGlvbl9pbnRlcmFjdGlvbl90eXBlOiBDT05WRVJTSU9OCmRlYnVnX2tleTogMTA2ODE0NTc2Nzc3NDk3NjU1MzEKY3RjX2NvbnZlcnNpb25fYnVja2V0OiAwCmFyY2hldHlwZV9pZDogMTIKYXJjaGV0eXBlX2lkOiAxMwphcmNoZXR5cGVfaWQ6IDE0CmFyY2hldHlwZV9pZDogMTUKYXJjaGV0eXBlX2lkOiAxNgphcmNoZXR5cGVfaWQ6IDE3CmFyY2hldHlwZV9pZDogMTgKYXJjaGV0eXBlX2lkOiAxOQphcmNoZXR5cGVfaWQ6IDIwCmFyY2hldHlwZV9pZDogMjEKYXJjaGV0eXBlX2lkOiAyNjI5OTQyOAphcmNoZXR5cGVfaWQ6IDI2Mjk5NDI5CmFyY2hldHlwZV9pZDogMjYyOTk0MzAKYXJjaGV0eXBlX2lkOiAyNjI5OTQzMQphcmNoZXR5cGVfaWQ6IDIwNDU2OTQwCmFyY2hldHlwZV9pZDogMjA0NTY5NDEKYXJjaGV0eXBlX2lkOiAyMDQ1Njk0MgphcmNoZXR5cGVfaWQ6IDIwNDU2OTQzCmFyY2hldHlwZV9pZDogNjI4NjgzMzIwCmFyY2hldHlwZV9pZDogNjI4NjgzMzIxCmFyY2hldHlwZV9pZDogNjI4NjgzMzIyCmFyY2hldHlwZV9pZDogNjI4NjgzMzIzCmFyY2hldHlwZV9pZDogNjQyMDI2OTM2CmFyY2hldHlwZV9pZDogNjQyMDI2OTM3CmFyY2hldHlwZV9pZDogNjQyMDI2OTM4CmFyY2hldHlwZV9pZDogNjQyMDI2OTM5CmFyY2hldHlwZV9pZDogNjQwOTgxOTI0CmFyY2hldHlwZV9pZDogNjQwOTgxOTI1CmFyY2hldHlwZV9pZDogNjQwOTgxOTI2CmFyY2hldHlwZV9pZDogNjQwOTgxOTI3CmFyY2hldHlwZV9pZDogNjQyOTA0NjY4CmFyY2hldHlwZV9pZDogNjQyOTA0NjY5CmFyY2hldHlwZV9pZDogNjQyOTA0NjcwCmFyY2hldHlwZV9pZDogNjQyOTA0NjcxCmFyY2hldHlwZV9pZDogMjI5OTg5MzYKYXJjaGV0eXBlX2lkOiAyMjk5ODkzNwphcmNoZXR5cGVfaWQ6IDIyOTk4OTM4CmFyY2hldHlwZV9pZDogMjI5OTg5MzkKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMjgKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMjkKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMzAKYXJjaGV0eXBlX2lkOiA2Mjg4NjQzMzEKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTIKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTMKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTQKYXJjaGV0eXBlX2lkOiA2Mjg2ODgyOTUKY29udmVyc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogQ09OVkVSU0lPTl9ESU1FTlNJT05fRkxPT0RMSUdIVF9BQ1RJVklUWV9JRAogIG1lYXN1cmVtZW50X2RpbWVuc2lvbl92YWx1ZSB7CiAgICBpbnQ2NF92YWx1ZTogMTMwMzk5NjAKICB9Cn0KY29udmVyc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogQ09OVkVSU0lPTl9ESU1FTlNJT05fQ09OVkVSU0lPTl9EQVRFCiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIHN0cmluZ192YWx1ZTogIjIwMjQtMTEtMDEiCiAgfQp9CmJyb3dzZXJfYXR0cmlidXRpb25fYXBpX3JlcXVlc3RfcHJvY2Vzc2luZ19iaXRzOiA3Nzg3OTgzNjY3Mgp0cmlnZ2VyX2RlZHVwbGljYXRpb25fa2V5OiAxMjAyOTIwMTE2NTIxMTE0NDA3NQpnYWlhX21vZGU6IGZhbHNlCmVjaG9fc2VydmVyX2FjdGlvbjogRUNIT19TRVJWRVJfQUNUSU9OX1VTRV9CRVNUX0FWQUlMQUJMRV9BUkEKYWdncmVnYXRpb25fY29vcmRpbmF0b3I6IEFHR1JFR0FUSU9OX0NPT1JESU5BVE9SX0FXUwpmbG9vZGxpZ2h0X2FyYV9jb25maWdzIHsKICBhcmNoZXR5cGVzX2NvbmZpZyB7CiAgICBhZ2dyZWdhdGVfa2V5X2FyY2hldHlwZXMgewogICAgICBhcmNoZXR5cGVfaWQ6IDI2Mjk5NDI4CiAgICAgIGltcHJlc3Npb25fYXJjaGV0eXBlX2lkOiAxMgogICAgICBjb252ZXJzaW9uX2FyY2hldHlwZV9pZDogMgogICAgICBjb252X21ldHJpY190eXBlOiBNRVRSSUNfVFlQRV9DT1VOVAogICAgICBhZ2dyZWdhdGVfa2V5X2xldmVsOiAxCiAgICAgIGNvbnRyaWJ1dGlvbl9wZXJjZW50YWdlOiAwLjAxCiAgICB9CiAgICBhZ2dyZWdhdGVfa2V5X2FyY2hldHlwZXMgewogICAgICBhcmNoZXR5cGVfaWQ6IDI2Mjk5NDI5CiAgICAgIGltcHJlc3Npb25fYXJjaGV0eXBlX2lkOiAxNgogICAgICBjb252ZXJzaW9uX2FyY2hldHlwZV9pZDogMgogICAgICBjb252X21ldHJpY
Source: global traffic	HTTP traffic detected: GET /XKKMTYFi5Pif37HJ?fee71bb8c2f1eda1=CGU2uu4SmoCNTWANB7AoXOPtj2v51tucI09y3Z2VHYQdaDSkyBrNmdT7HuUEUKbwUiZQ5hSbxE0lX9gdFApsML9QT2wxrkOwtTa269j8n94JzGkxz3CLopgWrZw0nIq1nREEuSo356JKGfBn5TLxXFQnS9k1uMWCSQ&jf=3134246e73603d3961306e653663303c3a313534326734386265333161383a3030603163623463 HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /dehVRf5Ds71ceRWX?1a8262cb1a9088f1=ASnaPYXRurgSuGgS8iAE_9fhyrx9Z7ssCK45mpwRTmMrbOQyhrLCgf30ve066ylYC3k3exnENIA_8MXXwYRkG5Giwb1SzvApkPx2dSzJUvKP1q9g_RtxsNnq7fcAPVvUI2t06X68djXCZ-MhfFp2q17TkqcL&fr HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /ZKEHTZq1K2y52xQZ?28b2a74925f62e94=CBuAiXdTBEixlgVyUm81gHGcCcJwAsg8bYfMEMGO4MNiiRRN72zOd56fRcJIP7KW49YMDpAlmFERFjiW57KPXsmLM_nBhmAKSCbO_OpL8-mSguT_JlauiyyuNiHzK1S5mZ_EFJhj7UYWFdH6c8nLEnm9TeQF06rlUQ&ja=333b35372624633d2d3338302678353e3824663d31303a3078313230362e63643f33303a307a393834267b78793f387038246470723f332c31323a322e393230362e333038322c3938342431323a38243132372c31303a302c393a362e382e32246f763f3235663531643b31343b6d3e6a643230396034366264313a356a326364316136266f6e3d32267b63643f3a3c2e6e683d6876767073253143273a442730446e6d676d6e2e7661666775637a6c26616f6d2530446c6f676d6c273b44716b766727334669696726786c3d372e78603f653830306666613537373331316436676067383b393365623c61393b3a3138662668683f646561626036366c3037363a353b6160346133663b313963313e3d6738373360246a736f3f556b66666d75712730303330266a736a3d436a7a676567253230333337266a716d7735556b6c666d7573246a7362753543687067656d246e68633f36266e646f3f3a2e6c6f76723f3226767a643d416565726b6b692d30464e65755d596f7269246f69766a703f36323031643163326a6563323a6d3e6163353632323832616633373d363233646636353a383134316c366563693a3c6663393463646264373031333b333b34632466723f687474707b2533432d3a4e2732466f756c796f757064777c7770672c74636e657561726426636f6f2d3a4e24703d706e7767696e5d646e69716a27374764616e736521706475676b66577f6b6e646f75715f6d65666b6357726e637b677025374566616c7b652172647d6f6b6e5f61666d62655f6361706760637627374766636c736521786c7565616657737569636976696d652737476e636e716723726c7767696e5f7b686f61637f69746525354764616c736723726477656b6c5d7065636c706c61716572273d4d6e636c736523726c75676b6c5d7e6e615d726e637967722535456e616c716d29786e7567696c5d646576636e747a27374764636e736721706c756f696e5d7b7e6f5d766965756772253547646364716723726e77676b6e5f6a617e6125374d6e696e736526656e5f633d7567606f6e556760454e253030312e302d32302a47786d6c474c2530324553253032302632273032416a726d6d69756d215765604f442d3030474c514e2532304751273a32332c322730302a4f70656e4f4c2530384d5b273230474e514c25323247512d3032332c322732324368726f6569756f215f6d604b69745567624b6976273038556760454e434e454c455f6966737463666b6d665f617270637973253140273a32475a565d606c676e645f6d616e6d63702d3b40253230475a545f636d6e6d7a5d6077646467725d68616c6657666c6d697c2d31422532324758545f646e6d69765d606e676c64273342253238455856576e7a63675f6467727468253140273a32475a565d7168636465725f7c6578767d7a6d5d6c6f64273142253232475a5c5d76677a767772675f636f6d787265717b61676c5f627076612533422730324d5a565d76677a747772655f63676d70706d7b7b6b6f6e5f70657463253140273a32475a565d76657a747572655766696e7c6d7a5d616e69716d74726f726b612d31402730324758565f7352474a2533402d3a384d45535f676e656d656c765d616c66677a5d77696c742533422d32304d4d5b5764626f5f70676e6465705d6f61726f63722731422732304f455b5f737669666c6372645f666772697663766b7e67712731402732324f45535f7c6578767d7a6d5d666c6f63762533422730324747515d76677a747772655f66646f61765764616c6561722731422532324d475b5d76677a767772675f68616c6e5f666e67697c2733422530324f45535d766770767770675d6a616e665f666c6761745d6461666761722531402532304d47515774677076677a5f6372726179576f62686d6b7c273342253
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/assets/otFlat.json HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; s_retts=1730479968818; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAttQfsmSAQAAUNuk6AxmMpkVZSPscaAxguF1EF7ov4QmcTCKgAsnabESOgBbkUDv98NQY9FG4UU9YpE/WmZmjEtj3PCAFG5HIJjDSEDTQf4mm8provW0Ebpu0QgwS0SbqSXpYGVP2mieNBSGCeuCeFmqN26DjRWzhSEZDwur15K8CYAB/nIKf1ysE/56H1rh9KBIc2xai8WuFB8DQFa9f4afTJMn8O09yPcSDaF8jpJiTwssn0vaHfdxxin/4YqZH670SzLNde6tVWYX5xXC3uDtRywcwNInfVXXjxBIkmvQKAo310Hk5MFynHccZooHCylngSeHB1fgkMbMriwUUeDPT1IilQCazw4ENJppX/wq1YU2ZqNPDydDN6Hzbdr3L7qSeOrO1V9NBMFrPaPFm3wezZeKM74PP9BG2YFnxuBdlVPjA7AfMGW/4C2F3I411VcSYQdWJWWcNG/GCTm6pmO4vpQUVuL9TX13~-1~\|\|0\|\|~-1; OptanonConsent=isGpcEnabled=0&datestamp=2024-11-01T16%3A52%3A53.696Z&version=202402.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=be80c41b-183a-4b62-bb57-ea391f30d152&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/assets/otCommonStyles.css HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; s_retts=1730479968818; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAttQfsmSAQAAUNuk6AxmMpkVZSPscaAxguF1EF7ov4QmcTCKgAsnabESOgBbkUDv98NQY9FG4UU9YpE/WmZmjEtj3PCAFG5HIJjDSEDTQf4mm8provW0Ebpu0QgwS0SbqSXpYGVP2mieNBSGCeuCeFmqN26DjRWzhSEZDwur15K8CYAB/nIKf1ysE/56H1rh9KBIc2xai8WuFB8DQFa9f4afTJMn8O09yPcSDaF8jpJiTwssn0vaHfdxxin/4YqZH670SzLNde6tVWYX5xXC3uDtRywcwNInfVXXjxBIkmvQKAo310Hk5MFynHccZooHCylngSeHB1fgkMbMriwUUeDPT1IilQCazw4ENJppX/wq1YU2ZqNPDydDN6Hzbdr3L7qSeOrO1V9NBMFrPaPFm3wezZeKM74PP9BG2YFnxuBdlVPjA7AfMGW/4C2F3I411VcSYQdWJWWcNG/GCTm6pmO4vpQUVuL9TX13~-1~\|\|0\|\|~-1; OptanonConsent=isGpcEnabled=0&datestamp=2024-11-01T16%3A52%3A53.696Z&version=202402.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=be80c41b-183a-4b62-bb57-ea391f30d152&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&jac=1&je=3a3624246d6764683d2839253241382d3a4131253241363433643767613e61663163346137366539666230393464306a3a3b62393630323931333a313a393164306461643567643132326a386535316b3a616261393b2b HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=343424246a63633d31266a68736063352d37422535402732325a2730302d304132273041313533303437313937303e3f3f273544253746266268716069576b6c66677a3f30 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /BLr60ipj6Hm1mEcl?eb6cd94691293e56=DIDUdzvDCvDxiFjYxNDTZnDZigPxOVHMKm0qCCHUHMOSqXvum1rWwbgATiPud5mwcjGwpSMkhuBEAy8hu1QvFQTIZJ1ktW6_nDhZh39avE7gvzA66EnH1U1fKQIQPv1SVmEx_DlmHrYp8V4NL01yt3X5wPrc4Sng3una27B74TI HTTP/1.1Host: d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=30373624266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341302537462d3a4b2732322530446c6f676d6c273a30273746246068716b737465352537402d3a3a696e253230273341322730412d30306930303b253032253341382537462e6a60716664637a763d25354027374a27303076677a7427323355534d5225303a2d3a41313225374625354424606a7b6971763f27374227354225323a6625303a2d3a4125323276677874253031575b4750273030273241253542302d324337392d3a4136363927374425324127374a3327304137332530433637322d3544273d4c2d374426626a716b73745d6b6c6c677a3f32 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /6IeFR4C-1jLfOB0c?528dde873f5e4a14=ssHxOVyWHVb_uKLqqM1oLo6G7pRc3c7Ntyj2E4oBiLIvThVOLqD1Z1Y2bIz_aTW0vb0vN2sv7cUPiRn0Ob0Ps_kyumTxQB1eg-nxU5GXufRMwiP6EVHr8SAJjshPw9B-Fko53fETYGkijvR1Yw8T8Q&k=2 HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=33333024266861633d312e706767577d78666174653f273742253030322d3030273143273740253232766d7225303a2d3b4333253746273243253030332d3030273143273740253232555b4552273a3a2d3141253540767275652730412d303076677a76253032253243392535462d3f4c273744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/logos/static/ot_guard_logo.svg HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZKEHTZq1K2y52xQZ?28b2a74925f62e94=CBuAiXdTBEixlgVyUm81gHGcCcJwAsg8bYfMEMGO4MNiiRRN72zOd56fRcJIP7KW49YMDpAlmFERFjiW57KPXsmLM_nBhmAKSCbO_OpL8-mSguT_JlauiyyuNiHzK1S5mZ_EFJhj7UYWFdH6c8nLEnm9TeQF06rlUQ&jac=1&je=333031362624626174737c3d25354a2d3a306c6576676e253232273143392c32322730412530327374617c7573273a3a2d314125323061686172656b6c6f27303027354626637564683d6b656660696d3c353836373564303266606066313531343335343930646264396b363437386a6e3736343134343965626764333d3b37636035363563323131372e657831353a6a6064636631353664613436303d37323a313560323a363264393f3934363c696a603565653631266578363f613f3a353630303a6163663932373c3061316a6e3d67303962676436376661322462716d3f556b6c646d77732532383130247d69603f2537422730326172616a6b7c6761767770672530322533412d32327a303e2d3032253241273232626b766c6d7171273030273343253232363c2532302d3a4b2732326270636e64732730302d3143273740273740253232627a616e662d3a3a273341253030476f6f656e672d3032416a706d6d67253232253a4325303a7e6d7073696f6c273232253143273a3033333527303227374425324b2537402d3a3a6072616e66273232253143273a304c6d7627314243253344427a616e662d3a3a273243253030766572716b6d662730302731432530323825323a2537462d3a4b2737422530306272616c66273a302731432730324168726f6d61756d273a3a2d3043253230746572736b6d6c2d3030273143273230313137253a3225354c2d3d4625324327303266756e6e546d70716b6d6c4e6971742532322d3341273d4a2d35422532306072616e6627303a273143273030476d6f676c652d323041607a676f65253230273243253030746d70716b6d6c273230253341253a3231333f26382c3539333a2c3133322730302d3546273041273740253232627a616e662d3a3a2733412530304e6f74273140492731464070636e66253232253a4325303a7e6d7073696f6c273232253143273a303a2c322c322e32253232253f4425304b2d3f402532326070616e642730302d31432730304168706f6d6975652532302d3a4b27323276677073696f6c27303a2731432730303133372e302e3d39333a26393b3025323227354425354627304b2730306f6d60696e652532322d33416469647b672532432730326d6f66676e2d3030273143273230253232253a4325303a78646374666f706f2532322731432d3030556b6c666f75732532322d3243273a3a786e6174666d706d566570716b676c273030273141273232313026302e322d3a3a273243253030776f773436273a3027314364636c71652537442e75616e352d3f402532326070616e647127303a2731432737402535422532326a72616c6c2d3a30253341273032476f6d656e6d273032416a706f6f652532322d3243273a3a7e677273696d6c2532322731432d3030333335273230253744253a4325354a2d3a306272616c662532322731432d30304c6d76273340412533444a72616c6c2d3a30253243273032766570716b676c27303027314127323238253a3225354c2d3a412537422730326272636c662d30302731432732304368726f6569756f2d3a3a273243253030766572716b6d662730302731432530323131372d3232273f4c2d37442532412732326d6d606b646727303027314164616c73652d3243273a3a786e6174666d706d253230273149273030556b6c646d777325323a2537462e7b60663d6f70676c HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Wind
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/assets/v2/otPcTab.json HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; s_retts=1730479968818; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAttQfsmSAQAAUNuk6AxmMpkVZSPscaAxguF1EF7ov4QmcTCKgAsnabESOgBbkUDv98NQY9FG4UU9YpE/WmZmjEtj3PCAFG5HIJjDSEDTQf4mm8provW0Ebpu0QgwS0SbqSXpYGVP2mieNBSGCeuCeFmqN26DjRWzhSEZDwur15K8CYAB/nIKf1ysE/56H1rh9KBIc2xai8WuFB8DQFa9f4afTJMn8O09yPcSDaF8jpJiTwssn0vaHfdxxin/4YqZH670SzLNde6tVWYX5xXC3uDtRywcwNInfVXXjxBIkmvQKAo310Hk5MFynHccZooHCylngSeHB1fgkMbMriwUUeDPT1IilQCazw4ENJppX/wq1YU2ZqNPDydDN6Hzbdr3L7qSeOrO1V9NBMFrPaPFm3wezZeKM74PP9BG2YFnxuBdlVPjA7AfMGW/4C2F3I411VcSYQdWJWWcNG/GCTm6pmO4vpQUVuL9TX13~-1~\|\|0\|\|~-1; OptanonConsent=isGpcEnabled=0&datestamp=2024-11-01T16%3A52%3A53.696Z&version=202402.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=be80c41b-183a-4b62-bb57-ea391f30d152&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCc976cd0ba5ef495295a72d563106d95e-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&jac=1&je=30352424626a7374706e352537402d3a3a3433392530302533413327354c HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=373524246a63633d31266a68736063352d3742253540273232472730302d3041333430352530433125354c2535462e6a6071626b5f6b6c6465783f33 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /BLr60ipj6Hm1mEcl?eb6cd94691293e56=DIDUdzvDCvDxiFjYxNDTZnDZigPxOVHMKm0qCCHUHMOSqXvum1rWwbgATiPud5mwcjGwpSMkhuBEAy8hu1QvFQTIZJ1ktW6_nDhZh39avE7gvzA66EnH1U1fKQIQPv1SVmEx_DlmHrYp8V4NL01yt3X5wPrc4Sng3una27B74TI HTTP/1.1Host: d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /ZKEHTZq1K2y52xQZ?28b2a74925f62e94=CBuAiXdTBEixlgVyUm81gHGcCcJwAsg8bYfMEMGO4MNiiRRN72zOd56fRcJIP7KW49YMDpAlmFERFjiW57KPXsmLM_nBhmAKSCbO_OpL8-mSguT_JlauiyyuNiHzK1S5mZ_EFJhj7UYWFdH6c8nLEnm9TeQF06rlUQ&jac=1&je=333031362624626174737c3d25354a2d3a306c6576676e253232273143392c32322730412530327374617c7573273a3a2d314125323061686172656b6c6f27303027354626637564683d6b656660696d3c353836373564303266606066313531343335343930646264396b363437386a6e3736343134343965626764333d3b37636035363563323131372e657831353a6a6064636631353664613436303d37323a313560323a363264393f3934363c696a603565653631266578363f613f3a353630303a6163663932373c3061316a6e3d67303962676436376661322462716d3f556b6c646d77732532383130247d69603f2537422730326172616a6b7c6761767770672530322533412d32327a303e2d3032253241273232626b766c6d7171273030273343253232363c2532302d3a4b2732326270636e64732730302d3143273740273740253232627a616e662d3a3a273341253030476f6f656e672d3032416a706d6d67253232253a4325303a7e6d7073696f6c273232253143273a3033333527303227374425324b2537402d3a3a6072616e66273232253143273a304c6d7627314243253344427a616e662d3a3a273243253030766572716b6d662730302731432530323825323a2537462d3a4b2737422530306272616c66273a302731432730324168726f6d61756d273a3a2d3043253230746572736b6d6c2d3030273143273230313137253a3225354c2d3d4625324327303266756e6e546d70716b6d6c4e6971742532322d3341273d4a2d35422532306072616e6627303a273143273030476d6f676c652d323041607a676f65253230273243253030746d70716b6d6c273230253341253a3231333f26382c3539333a2c3133322730302d3546273041273740253232627a616e662d3a3a2733412530304e6f74273140492731464070636e66253232253a4325303a7e6d7073696f6c273232253143273a303a2c322c322e32253232253f4425304b2d3f402532326070616e642730302d31432730304168706f6d6975652532302d3a4b27323276677073696f6c27303a2731432730303133372e302e3d39333a26393b3025323227354425354627304b2730306f6d60696e652532322d33416469647b672532432730326d6f66676e2d3030273143273230253232253a4325303a78646374666f706f2532322731432d3030556b6c666f75732532322d3243273a3a786e6174666d706d566570716b676c273030273141273232313026302e322d3a3a273243253030776f773436273a3027314364636c71652537442e75616e352d3f402532326070616e647127303a2731432737402535422532326a72616c6c2d3a30253341273032476f6d656e6d273032416a706f6f652532322d3243273a3a7e677273696d6c2532322731432d3030333335273230253744253a4325354a2d3a306272616c662532322731432d30304c6d76273340412533444a72616c6c2d3a30253243273032766570716b676c27303027314127323238253a3225354c2d3a412537422730326272636c662d30302731432732304368726f6569756f2d3a3a273243253030766572716b6d662730302731432530323131372d3232273f4c2d37442532412732326d6d606b646727303027314164616c73652d3243273a3a786e6174666d706d253230273149273030556b6c646d777325323a2537462e7b60663d6f70676c HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-L
Source: global traffic	HTTP traffic detected: GET /ZKEHTZq1K2y52xQZ?28b2a74925f62e94=CBuAiXdTBEixlgVyUm81gHGcCcJwAsg8bYfMEMGO4MNiiRRN72zOd56fRcJIP7KW49YMDpAlmFERFjiW57KPXsmLM_nBhmAKSCbO_OpL8-mSguT_JlauiyyuNiHzK1S5mZ_EFJhj7UYWFdH6c8nLEnm9TeQF06rlUQ&jac=1&je=343524246a646e3d31333a266a6460353f313935306460383761373b3431323030336334383b65303065306563306a392e6866746e3f323a313635303839313024726f3f6e6d HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/logos/static/ot_guard_logo.svg HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAttQfsmSAQAAUNuk6AxmMpkVZSPscaAxguF1EF7ov4QmcTCKgAsnabESOgBbkUDv98NQY9FG4UU9YpE/WmZmjEtj3PCAFG5HIJjDSEDTQf4mm8provW0Ebpu0QgwS0SbqSXpYGVP2mieNBSGCeuCeFmqN26DjRWzhSEZDwur15K8CYAB/nIKf1ysE/56H1rh9KBIc2xai8WuFB8DQFa9f4afTJMn8O09yPcSDaF8jpJiTwssn0vaHfdxxin/4YqZH670SzLNde6tVWYX5xXC3uDtRywcwNInfVXXjxBIkmvQKAo310Hk5MFynHccZooHCylngSeHB1fgkMbMriwUUeDPT1IilQCazw4ENJppX/wq1YU2ZqNPDydDN6Hzbdr3L7qSeOrO1V9NBMFrPaPFm3wezZeKM74PP9BG2YFnxuBdlVPjA7AfMGW/4C2F3I411VcSYQdWJWWcNG/GCTm6pmO4vpQUVuL9TX13~-1~\|\|0\|\|~-1; OptanonConsent=isGpcEnabled=0&datestamp=2024-11-01T16%3A52%3A55.602Z&version=202402.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=be80c41b-183a-4b62-bb57-ea391f30d152&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; s_retts=1730479976532
Source: global traffic	HTTP traffic detected: GET /R3x7oQp_zhGfKoOW?bd58cdf678ed48f9=oiSkEQpUF3MqsePbnuvSijQu98P2dAOgKZQ_xU9EpbhSy8WEJ0eLTUFLFMVHXrKtZ42DWJ1sfvBAcpz-MqXzRzl4kts7N2lZgafVDr4HayE3HOzxJdtLscWTmzIxr1eV2WjJMMjSPPMR86n_5e47kdcROyJ2C3sdWin53SVLL_kyEaC-gEkYqnwho-Grin_X8pUhzl6VbxlOJBPR1k12-UA_Xw&jf=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=30333124266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341393125354c2d3a412532322730466c6f656d6c2d303027374624626a736b73746d3d25354a2d3a306b6e2530302533413a27304b273030693030392732322533493025354c2e6a6a736b73763f2535422737402d3030642730302530432532327c6578762d3a3b5753455227303225324127374a32273041353b2530433139323e2535462d3a4b273542312730433739273041393b3a3a2737462537442535442e626871637b7c5d696e64677a3d32 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCc976cd0ba5ef495295a72d563106d95e-source.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/logos/e23663a9-a49c-4250-9892-0022f609291d/c3d93706-3ccf-4e23-aec5-3af38fdcc954/d2097a83-ab1d-4d11-84ea-83fc12092ed1/Vanguard.png HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAttQfsmSAQAAUNuk6AxmMpkVZSPscaAxguF1EF7ov4QmcTCKgAsnabESOgBbkUDv98NQY9FG4UU9YpE/WmZmjEtj3PCAFG5HIJjDSEDTQf4mm8provW0Ebpu0QgwS0SbqSXpYGVP2mieNBSGCeuCeFmqN26DjRWzhSEZDwur15K8CYAB/nIKf1ysE/56H1rh9KBIc2xai8WuFB8DQFa9f4afTJMn8O09yPcSDaF8jpJiTwssn0vaHfdxxin/4YqZH670SzLNde6tVWYX5xXC3uDtRywcwNInfVXXjxBIkmvQKAo310Hk5MFynHccZooHCylngSeHB1fgkMbMriwUUeDPT1IilQCazw4ENJppX/wq1YU2ZqNPDydDN6Hzbdr3L7qSeOrO1V9NBMFrPaPFm3wezZeKM74PP9BG2YFnxuBdlVPjA7AfMGW/4C2F3I411VcSYQdWJWWcNG/GCTm6pmO4vpQUVuL9TX13~-1~\|\|0\|\|~-1; OptanonConsent=isGpcEnabled=0&datestamp=2024-11-01T16%3A52%3A55.602Z&version=202402.1.0&browserGpcFlag=0&i
Source: global traffic	HTTP traffic detected: GET /files/vendor_libs_prd/linkedin/insight.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3224246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d31413125354625324327303078767b726727303227334125323a7063273a3a2d3544 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/logos/static/powered_by_logo.svg HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAttQfsmSAQAAUNuk6AxmMpkVZSPscaAxguF1EF7ov4QmcTCKgAsnabESOgBbkUDv98NQY9FG4UU9YpE/WmZmjEtj3PCAFG5HIJjDSEDTQf4mm8provW0Ebpu0QgwS0SbqSXpYGVP2mieNBSGCeuCeFmqN26DjRWzhSEZDwur15K8CYAB/nIKf1ysE/56H1rh9KBIc2xai8WuFB8DQFa9f4afTJMn8O09yPcSDaF8jpJiTwssn0vaHfdxxin/4YqZH670SzLNde6tVWYX5xXC3uDtRywcwNInfVXXjxBIkmvQKAo310Hk5MFynHccZooHCylngSeHB1fgkMbMriwUUeDPT1IilQCazw4ENJppX/wq1YU2ZqNPDydDN6Hzbdr3L7qSeOrO1V9NBMFrPaPFm3wezZeKM74PP9BG2YFnxuBdlVPjA7AfMGW/4C2F3I411VcSYQdWJWWcNG/GCTm6pmO4vpQUVuL9TX13~-1~\|\|0\|\|~-1; OptanonConsent=isGpcEnabled=0&datestamp=2024-11-01T16%3A52%3A55.602Z&version=202402.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=be80c41b-183a-4b62-bb57-ea391f30d152&interactionCount=0&isAnonU
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=30333624266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341393225354c2d3a412532322730466c6f656d6c2d303027374624626a736b73746d3d25354a2d3a306b6e2530302533413332273a412730306930323b253232253b4130273f4c2e6068736b71763d25354027374a2730306427303227324325323a74657a7c2d3a3155534550273232253041273d4032273041353727324332313c3925374c2d3a4125354233273243373527304b3030333227374427354425354c26626a7b637b765f696e6667783d33 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /ZKEHTZq1K2y52xQZ?28b2a74925f62e94=CBuAiXdTBEixlgVyUm81gHGcCcJwAsg8bYfMEMGO4MNiiRRN72zOd56fRcJIP7KW49YMDpAlmFERFjiW57KPXsmLM_nBhmAKSCbO_OpL8-mSguT_JlauiyyuNiHzK1S5mZ_EFJhj7UYWFdH6c8nLEnm9TeQF06rlUQ&jac=1&je=343524246a646e3d31333a266a6460353f313935306460383761373b3431323030336334383b65303065306563306a392e6866746e3f323a313635303839313024726f3f6e6d HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /ZKEHTZq1K2y52xQZ?28b2a74925f62e94=CBuAiXdTBEixlgVyUm81gHGcCcJwAsg8bYfMEMGO4MNiiRRN72zOd56fRcJIP7KW49YMDpAlmFERFjiW57KPXsmLM_nBhmAKSCbO_OpL8-mSguT_JlauiyyuNiHzK1S5mZ_EFJhj7UYWFdH6c8nLEnm9TeQF06rlUQ&jac=1&je=333b24247767693d31373b2e32373c263a37302e3830 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3324246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141313927354425324127303a72767b7267273230253341253a3270612d3a3a273744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/logos/e23663a9-a49c-4250-9892-0022f609291d/c3d93706-3ccf-4e23-aec5-3af38fdcc954/d2097a83-ab1d-4d11-84ea-83fc12092ed1/Vanguard.png HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAttQfsmSAQAAUNuk6AxmMpkVZSPscaAxguF1EF7ov4QmcTCKgAsnabESOgBbkUDv98NQY9FG4UU9YpE/WmZmjEtj3PCAFG5HIJjDSEDTQf4mm8provW0Ebpu0QgwS0SbqSXpYGVP2mieNBSGCeuCeFmqN26DjRWzhSEZDwur15K8CYAB/nIKf1ysE/56H1rh9KBIc2xai8WuFB8DQFa9f4afTJMn8O09yPcSDaF8jpJiTwssn0vaHfdxxin/4YqZH670SzLNde6tVWYX5xXC3uDtRywcwNInfVXXjxBIkmvQKAo310Hk5MFynHccZooHCylngSeHB1fgkMbMriwUUeDPT1IilQCazw4ENJppX/wq1YU2ZqNPDydDN6Hzbdr3L7qSeOrO1V9NBMFrPaPFm3wezZeKM74PP9BG2YFnxuBdlVPjA7AfMGW/4C2F3I411VcSYQdWJWWcNG/GCTm6pmO4vpQUVuL9TX13~-1~\|\|0\|\|~-1; OptanonConsent=isGpcEnabled=0&datestamp=2024-11-01T16%3A52%3A55.602Z&version=202402.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=be80c41b-183a-4b62-bb57-ea391f30d152&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; s_retts=1730479976532
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /b/ss/vanguardretaillaunchprod/10/JS-2.26.0-LEWM/s95452938018955?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=1%2F10%2F2024%2012%3A52%3A56%205%20240&d.&nsid=2&jsonv=1&.d&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon&g=https%3A%2F%2Flogon.vanguard.com%2Flogon&r=https%3A%2F%2Fownyourfuture.vanguard.com%2F&c.&getPreviousValue=3.0.2&getVisitNum=4.2&.c&cc=USD&ch=retail%3Aweb&server=logon.vanguard.com&events=event284&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&h1=logon%3Anone&c4=mcmid%7C86591681061654023263392632422581144886&v4=mcmid%7C86591681061654023263392632422581144886&c8=logged%20out&v8=logged%20out&c13=fri%2C%201%20nov%202024%2012%3A52%20edt&v13=fri%2C%201%20nov%202024%2012%3A52%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=D%3Dv18&v18=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon&c21=ownyourfuture.vanguard.com&v23=https%3A%2F%2Flogon.vanguard.com%2Flogon&c30=log%20on%20to%20vanguard.com&v30=log%20on%20to%20vanguard.com&c31=D%3Dg&v31=D%3Dg&c36=1&v36=1&c38=logon&c39=none&v42=1.0.0&c44=pageLoaded%2CuserDetected%2CpageLoadCompleted%2Cundefined%2Cundefined%2COneTrustLoaded%2COptanonLoaded%2COneTrustGroupsUpdated&c65=ownyourfuture.vanguard.com%2F&v66=new&v84=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon&v130=true&v157=usernameandpasswordpresented&v187=false&v188=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v209=public&v249=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=92CA3704532954400A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=333b3124266861633d312e6268716b6d352737422530307074797267712d30302731432737402532326d677573672d3a3a2733413235273744253041273a3072767b72672530322533412d3232726b2d3a302537442460687362693f273d40273740273032636e2532322d324336393e312732432530307465787627303b5751475027303227354425324b2535402d3a3a716e253230273243343032322d304127303076657a742532335d5345502d3a3a273544253746266268716069576b6c66677a3f32 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /files/vendor_libs_prd/linkedin/insight.min.js HTTP/1.1Host: corp.etm.assets.vgdynamic.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/logos/static/powered_by_logo.svg HTTP/1.1Host: corp-pmj.web.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAttQfsmSAQAAUNuk6AxmMpkVZSPscaAxguF1EF7ov4QmcTCKgAsnabESOgBbkUDv98NQY9FG4UU9YpE/WmZmjEtj3PCAFG5HIJjDSEDTQf4mm8provW0Ebpu0QgwS0SbqSXpYGVP2mieNBSGCeuCeFmqN26DjRWzhSEZDwur15K8CYAB/nIKf1ysE/56H1rh9KBIc2xai8WuFB8DQFa9f4afTJMn8O09yPcSDaF8jpJiTwssn0vaHfdxxin/4YqZH670SzLNde6tVWYX5xXC3uDtRywcwNInfVXXjxBIkmvQKAo310Hk5MFynHccZooHCylngSeHB1fgkMbMriwUUeDPT1IilQCazw4ENJppX/wq1YU2ZqNPDydDN6Hzbdr3L7qSeOrO1V9NBMFrPaPFm3wezZeKM74PP9BG2YFnxuBdlVPjA7AfMGW/4C2F3I411VcSYQdWJWWcNG/GCTm6pmO4vpQUVuL9TX13~-1~\|\|0\|\|~-1; OptanonConsent=isGpcEnabled=0&datestamp=2024-11-01T16%3A52%3A55.602Z&version=202402.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=be80c41b-183a-4b62-bb57-ea391f30d152&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; s_retts=1730479976532
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /ZKEHTZq1K2y52xQZ?28b2a74925f62e94=CBuAiXdTBEixlgVyUm81gHGcCcJwAsg8bYfMEMGO4MNiiRRN72zOd56fRcJIP7KW49YMDpAlmFERFjiW57KPXsmLM_nBhmAKSCbO_OpL8-mSguT_JlauiyyuNiHzK1S5mZ_EFJhj7UYWFdH6c8nLEnm9TeQF06rlUQ&jac=1&je=333b24247767693d31373b2e32373c263a37302e3830 HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3324246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141333627354425324127303a72767b7267273230253341253a3270612d3a3a273744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /b/ss/vanguardretaillaunchprod/10/JS-2.26.0-LEWM/s95452938018955?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=1%2F10%2F2024%2012%3A52%3A56%205%20240&d.&nsid=2&jsonv=1&.d&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon&g=https%3A%2F%2Flogon.vanguard.com%2Flogon&r=https%3A%2F%2Fownyourfuture.vanguard.com%2F&c.&getPreviousValue=3.0.2&getVisitNum=4.2&.c&cc=USD&ch=retail%3Aweb&server=logon.vanguard.com&events=event284&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&h1=logon%3Anone&c4=mcmid%7C86591681061654023263392632422581144886&v4=mcmid%7C86591681061654023263392632422581144886&c8=logged%20out&v8=logged%20out&c13=fri%2C%201%20nov%202024%2012%3A52%20edt&v13=fri%2C%201%20nov%202024%2012%3A52%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=D%3Dv18&v18=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon&c21=ownyourfuture.vanguard.com&v23=https%3A%2F%2Flogon.vanguard.com%2Flogon&c30=log%20on%20to%20vanguard.com&v30=log%20on%20to%20vanguard.com&c31=D%3Dg&v31=D%3Dg&c36=1&v36=1&c38=logon&c39=none&v42=1.0.0&c44=pageLoaded%2CuserDetected%2CpageLoadCompleted%2Cundefined%2Cundefined%2COneTrustLoaded%2COptanonLoaded%2COneTrustGroupsUpdated&c65=ownyourfuture.vanguard.com%2F&v66=new&v84=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon&v130=true&v157=usernameandpasswordpresented&v187=false&v188=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v209=public&v249=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=92CA3704532954400A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BLr60ipj6Hm1mEcl?eb6cd94691293e56=DIDUdzvDCvDxiFjYxNDTZnDZigPxOVHMKm0qCCHUHMOSqXvum1rWwbgATiPud5mwcjGwpSMkhuBEAy8hu1QvFQTIZJ1ktW6_nDhZh39avE7gvzA66EnH1U1fKQIQPv1SVmEx_DlmHrYp8V4NL01yt3X5wPrc4Sng3una27B74TI HTTP/1.1Host: d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /3WTgJwUYjbUPdza3?e16e24aef1b00274=hClurLGuurYKHFtwHpRPHgDZRmIY1LNvla48OjzCvdjEeUKJFE8eOLdbcOIwAnTQRuNVFuFKtgzHUk_RRCS0G4YwuonLte02PQ25MpHIFuV41LGXP5Af92csneW-JV2e6Iczxg1c0STMVBTLtf9KtVvS7zugVczBWEjmWl443InlUA HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /R3x7oQp_zhGfKoOW?bd58cdf678ed48f9=oiSkEQpUF3MqsePbnuvSijQu98P2dAOgKZQ_xU9EpbhSy8WEJ0eLTUFLFMVHXrKtZ42DWJ1sfvBAcpz-MqXzRzl4kts7N2lZgafVDr4HayE3HOzxJdtLscWTmzIxr1eV2WjJMMjSPPMR86n_5e47kdcROyJ2C3sdWin53SVLL_kyEaC-gEkYqnwho-Grin_X8pUhzl6VbxlOJBPR1k12-UA_Xw&jf=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3b3424246a63633d31267867655d7d786c6374653d2735422532303b273a3027314327354227323250415b53574d5a4c25606c6f636967642532302731492737407670776527324325323a7061717b7f677064253230273243322737462d3546273546 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /BLr60ipj6Hm1mEcl?eb6cd94691293e56=DIDUdzvDCvDxiFjYxNDTZnDZigPxOVHMKm0qCCHUHMOSqXvum1rWwbgATiPud5mwcjGwpSMkhuBEAy8hu1QvFQTIZJ1ktW6_nDhZh39avE7gvzA66EnH1U1fKQIQPv1SVmEx_DlmHrYp8V4NL01yt3X5wPrc4Sng3una27B74TI HTTP/1.1Host: d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3WTgJwUYjbUPdza3?e16e24aef1b00274=hClurLGuurYKHFtwHpRPHgDZRmIY1LNvla48OjzCvdjEeUKJFE8eOLdbcOIwAnTQRuNVFuFKtgzHUk_RRCS0G4YwuonLte02PQ25MpHIFuV41LGXP5Af92csneW-JV2e6Iczxg1c0STMVBTLtf9KtVvS7zugVczBWEjmWl443InlUA HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=33323524266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341302537462d3a4b2732322530446c6f676d6c273a30273746246068716b737465352537402d3a3a696e253230273341323627304b273030693030392732322533493025354c HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /pkg/1.0.0/web/external_libs/wdcusprem/2940/onsite/generic1728321215671.js HTTP/1.1Host: mdl-medallia-digital.vanguard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; OptanonConsent=isGpcEnabled=0&datestamp=2024-11-01T16%3A52%3A55.602Z&version=202402.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=be80c41b-183a-4b62-bb57-ea391f30d152&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; s_retts=1730479979830; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~YAAQW7MUAmBUfsmSAQAAkgil6Ayta2JuCU2/P7vCVrV8t8sg360IEtBoVyEX2SxCTLeFBF7OO3zfOYTXPa0M5KBBYsTwbtffwm0f+lj+3tuRWfuIenILOLQYWx3Y0yKo2b/19aV7t9Rqqw71q8mcoPY0zGFy8zpoeIcGM0Ti89uftcvPc/D8vpmUo/SRREQt+bSezI5OB6NEhvOnT6/T6v+MjEQEZXLFVFUGuv2NJPZURDbVqRrNCLF6KWyh3Tac4BjNESVu6kdBPWBuUtVRCOSduFJzwrRwbU4ZpPvHTE4M+gjVz/FsmUT1Od5carV6Jbe5iL5id5ZBZhndOc77lq80ItOO3n5BCilk1WRIw1WlGUU8SLtIHC8r8jMY8kf3vTz7T5RMEcfW7UgvYmABHt/ZubevpWuhokq5nysES3Fd+lYQu9WG64kWjoAGlSjYlLVyeYb/McAU3M92z6WuQqJtvaeCpm0/
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3b3424246a63633d31267867655d7d786c6374653d2735422532303b273a3027314327354227323250415b53574d5a4c25606c6f636967642532302731492737407670776527324325323a7061717b7f677064253230273243312737462d3546273546 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=303b3124266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341302532412d3a3a72617373756d726425303152495151554d50462d606c6f636b6d6425303a2d3b4335253746273243253030273a446e6d656d6c2530322535442e626871637b7c673d2537402732326b6c27303a27314331372732412532326b3a3239273a3a2d3141302535462662687169717c3f273740273742273232666d2d3232273a4b2d303270617171776f726627303b52435151554d52462d626c6f6b6b65662d3a3a273243253740302532412f372d30413b3231322537442532432d3542332d3a4b2f352532413b3130392737462d3041273740322530432d36253a43393331382d374425354627354426606a716371765d6b6c66657a3d3130 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3324246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141353227354425324127303a72767b7267273230253341253a3270612d3a3a273744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=34333624266861633d312e6268716b352d37422535402732326d6f27303a27304137373b2530433434372d324333383a3c3325354427304325354027303a6f6f273030273241353734253a4334363e2d3a413130323b362535442730412d37402730306f6d27323225324b3539342d3a4b3634362530413130323b37273d462730412737422732326d6d2d3232273a4b3e3339253241363439253041333831323a2737462530432535422d32326f652d3a30253243343639253241363738273041333231323b253544253a4325374a2d3a306d6d2530302532433437372d304136373227324131303334382535462d3a4b2735422530306d6d253030273a4134373727304336353325324b313031303e2d37442532412735422530306f652730302730413637332532433c3631273a4b393234303227374425324127374a2730307627303227324325323a4449542d3a3b2732334c454c2d50415151554750462f4b4c5255562532335049535355475a4c2732322530413130343335273d462730412737422732326d6d2d3232273a4b3e363525324136383525304133383633352737462530432535422d32326f652d3a3025324334313425324137323a2730413332363331253544253a4325374a2d3a30742532302732432530304447504f273031777367726e616d6d2d70637b7b7f6d72642d646d726d25303146415427303127303227324331303c3634273d4c2d30432535402732326d6f27303a2730413433352530433532342d324333383c3e3625354427304325354027303a6f6f273030273241363039253a433531382d3a4131303434362535442737462e606a71615d6b6e6665783d35 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3324246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141373627354425324127303a72767b7267273230253341253a3270612d3a3a273744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /pkg/1.0.0/web/external_libs/wdcusprem/2940/onsite/generic1728321215671.js HTTP/1.1Host: mdl-medallia-digital.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645; bm_sz=F86A7CF6656E49E6B949FFA1242C5A12~YAAQYLMUAuCATNWSAQAAyqmk6Blqb/ccJ+56zTQXeuxWhj5aS0HMTgowYnqIcaj2AsY5RUWArDpO0cWcUgf498uma5+D6lGiHXtiRgjPsPgZzZeRq/UpQvsYaG0HNr53kHAuMHvw+dNAmz2U+RJJLoqRKK6slS9SNYLaH64dAB4ug6Js8PQMybmHiHAKtiPJYZRojEs51MruDYMEeKsvUxN/aG4hfNRiSr5Q2NQq9t4Qq6K99+fDjU0LbWmpaaeBxYI1NQoHsIagYZBCZUHil2PBhNwM8Ljm8VBdziL5zXMyUZLrNQEfA/1UlpszPOp1VK4zxaXQPIMQNQJfc+G6iU/Sp5D6/IdByYxDhnA5NRaxoLzqFO43R7WEGZkvleq81H3R9MsjqQ==~4404786~4471110; XSRF-TOKEN=vg6G10VJ-4_KUJaajUSiWtqqXflYD7xLou1c; gpv_pn=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon; OptanonConsent=isGpcEnabled=0&datestamp=2024-11-01T16%3A52%3A55.602Z&version=202402.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=be80c41b-183a-4b62-bb57-ea391f30d152&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; s_retts=1730479979830; _abck=63CC79E2698F5117E70A2306DFF46D68~-1~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~-1~\|\|0\|\|~-1
Source: global traffic	HTTP traffic detected: GET /wdcusprem/2940/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=33363524266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341302532412d3a3a72617373756d726425303152495151554d50462d606c6f636b6d6425303a2d3b4339253746273243253030273a446e6d656d6c2530322535442e626871637b7c673d2537402732326b6c27303a27314336302732412532326b3a3239273a3a2d314130253546 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /3WTgJwUYjbUPdza3?e16e24aef1b00274=hClurLGuurYKHFtwHpRPHgDZRmIY1LNvla48OjzCvdjEeUKJFE8eOLdbcOIwAnTQRuNVFuFKtgzHUk_RRCS0G4YwuonLte02PQ25MpHIFuV41LGXP5Af92csneW-JV2e6Iczxg1c0STMVBTLtf9KtVvS7zugVczBWEjmWl443InlUA HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /BLr60ipj6Hm1mEcl?eb6cd94691293e56=DIDUdzvDCvDxiFjYxNDTZnDZigPxOVHMKm0qCCHUHMOSqXvum1rWwbgATiPud5mwcjGwpSMkhuBEAy8hu1QvFQTIZJ1ktW6_nDhZh39avE7gvzA66EnH1U1fKQIQPv1SVmEx_DlmHrYp8V4NL01yt3X5wPrc4Sng3una27B74TI HTTP/1.1Host: d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R3x7oQp_zhGfKoOW?bd58cdf678ed48f9=oiSkEQpUF3MqsePbnuvSijQu98P2dAOgKZQ_xU9EpbhSy8WEJ0eLTUFLFMVHXrKtZ42DWJ1sfvBAcpz-MqXzRzl4kts7N2lZgafVDr4HayE3HOzxJdtLscWTmzIxr1eV2WjJMMjSPPMR86n_5e47kdcROyJ2C3sdWin53SVLL_kyEaC-gEkYqnwho-Grin_X8pUhzl6VbxlOJBPR1k12-UA_Xw&jf=36333424736b645f726e6c3d74667a574964346c484966335730336140613b6824716b665f666174653d393733323c3f313b373426716b645f747b7267357567603867616471612673696c5f6b6771353b323539333233333036323530693a34363a61673366303230313836303a3a69303434386367316430333233323f3231363032323036363536656a6261373c693e3331396434306332633367316a316136353230663b623837663a6565343b3e6b333263306337386631326632313431363a3032383b36333735393034613f6a386139616460306336353463666b3b32346760366267383231653a35333139313e3b663633303763343260356738673a3633676638612673696457736965353b383635303230323539646667356e60613b6336323031353837653b3132323e3b3b6131303563646230303530363b3732363b34313836303038646d61333a6c3a383b66643863603032323332326b3331606430613837376536396b6132376e3e6c3a3462353136336233666330316434643237336630626162336e3338323a693f6735333566643338323560332e716b64703f32 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3324246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141393727354425324127303a72767b7267273230253341253a3270612d3a3a273744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /BLr60ipj6Hm1mEcl?eb6cd94691293e56=DIDUdzvDCvDxiFjYxNDTZnDZigPxOVHMKm0qCCHUHMOSqXvum1rWwbgATiPud5mwcjGwpSMkhuBEAy8hu1QvFQTIZJ1ktW6_nDhZh39avE7gvzA66EnH1U1fKQIQPv1SVmEx_DlmHrYp8V4NL01yt3X5wPrc4Sng3una27B74TI HTTP/1.1Host: d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3WTgJwUYjbUPdza3?e16e24aef1b00274=hClurLGuurYKHFtwHpRPHgDZRmIY1LNvla48OjzCvdjEeUKJFE8eOLdbcOIwAnTQRuNVFuFKtgzHUk_RRCS0G4YwuonLte02PQ25MpHIFuV41LGXP5Af92csneW-JV2e6Iczxg1c0STMVBTLtf9KtVvS7zugVczBWEjmWl443InlUA HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /wdcusprem/2940/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=440913-440913If-Range: "0200dbc174ba635e9edb67608a5ec0a2"
Source: global traffic	HTTP traffic detected: GET /wdcusprem/2940/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=440913-1438276If-Range: "0200dbc174ba635e9edb67608a5ec0a2"
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d314131303a273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141313132273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /wdcusprem/2940/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=1013114-1013114If-Range: "0200dbc174ba635e9edb67608a5ec0a2"
Source: global traffic	HTTP traffic detected: GET /wdcusprem/2940/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=1013114-1438276If-Range: "0200dbc174ba635e9edb67608a5ec0a2"
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wdcusprem/2940/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wdcusprem/2940/forms/1778/formData1717598393762_en.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://logon.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wdcusprem/2940/forms/1778/formData1717598393762_en.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web/events HTTP/1.1Host: analytics-fe.digital-cloud-prem.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web/events HTTP/1.1Host: analytics-fe.digital-cloud-prem.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web/events HTTP/1.1Host: analytics-fe.digital-cloud-prem.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d314131313b273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141313434273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec
Source: global traffic	HTTP traffic detected: GET /BLr60ipj6Hm1mEcl?eb6cd94691293e56=DIDUdzvDCvDxiFjYxNDTZnDZigPxOVHMKm0qCCHUHMOSqXvum1rWwbgATiPud5mwcjGwpSMkhuBEAy8hu1QvFQTIZJ1ktW6_nDhZh39avE7gvzA66EnH1U1fKQIQPv1SVmEx_DlmHrYp8V4NL01yt3X5wPrc4Sng3una27B74TI HTTP/1.1Host: d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R3x7oQp_zhGfKoOW?bd58cdf678ed48f9=oiSkEQpUF3MqsePbnuvSijQu98P2dAOgKZQ_xU9EpbhSy8WEJ0eLTUFLFMVHXrKtZ42DWJ1sfvBAcpz-MqXzRzl4kts7N2lZgafVDr4HayE3HOzxJdtLscWTmzIxr1eV2WjJMMjSPPMR86n_5e47kdcROyJ2C3sdWin53SVLL_kyEaC-gEkYqnwho-Grin_X8pUhzl6VbxlOJBPR1k12-UA_Xw&jf=36333424736b645f726e6c3d74667a574964346c484966335730336140613b6824716b665f666174653d393733323c3f313b373426716b645f747b7267357567603867616471612673696c5f6b6771353b323539333233333036323530693a34363a61673366303230313836303a3a69303434386367316430333233323f3231363032323036363536656a6261373c693e3331396434306332633367316a316136353230663b623837663a6565343b3e6b333263306337386631326632313431363a3032383b36333735393034613f6a386139616460306336353463666b3b32346760366267383231653a35333139313e3b663633303763343260356738673a3633676638612673696457736965353b383635303230323539646667356e60613b6336323031353837653b3132323e3b3b6131303563646230303530363b3732363b34313836303038646d61333a6c3a383b66643863603032323332326b3331606430613837376536396b6132376e3e6c3a3462353136336233666330316434643237336630626162336e3338323a693f6735333566643338323560332e716b64703f32 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /3WTgJwUYjbUPdza3?e16e24aef1b00274=hClurLGuurYKHFtwHpRPHgDZRmIY1LNvla48OjzCvdjEeUKJFE8eOLdbcOIwAnTQRuNVFuFKtgzHUk_RRCS0G4YwuonLte02PQ25MpHIFuV41LGXP5Af92csneW-JV2e6Iczxg1c0STMVBTLtf9KtVvS7zugVczBWEjmWl443InlUA HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=31313024266861633d312e6268716b6d352737422530307074797267712d30302731432737402532326d677573672d3a3a2733413134302537442730412d303072767b7265273232253349253230786b2d30322537462462687360693f2d3740273740273230442532322d324331313939312532432730325350434c273a312730317177626f697425323b7573677a66696f652d70637173776f70662f7b77606f6b762f62766e2d31253a3225374c2d3a4125354227303245253030273a41313b3333372530432532325b50414c2d3a3b2732337377606d69742730317d7167706c636f652f706173737f6f7266257b7d606d69742f60746e2d3327303a273746273041253742253232612532302d3a4b31393137362732432530304447504f273031777367726e616d6d2d70637b7b7f6d72642d646d726d253030273d4627374624606871626b5f696664657a353e HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /BLr60ipj6Hm1mEcl?eb6cd94691293e56=DIDUdzvDCvDxiFjYxNDTZnDZigPxOVHMKm0qCCHUHMOSqXvum1rWwbgATiPud5mwcjGwpSMkhuBEAy8hu1QvFQTIZJ1ktW6_nDhZh39avE7gvzA66EnH1U1fKQIQPv1SVmEx_DlmHrYp8V4NL01yt3X5wPrc4Sng3una27B74TI HTTP/1.1Host: d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3WTgJwUYjbUPdza3?e16e24aef1b00274=hClurLGuurYKHFtwHpRPHgDZRmIY1LNvla48OjzCvdjEeUKJFE8eOLdbcOIwAnTQRuNVFuFKtgzHUk_RRCS0G4YwuonLte02PQ25MpHIFuV41LGXP5Af92csneW-JV2e6Iczxg1c0STMVBTLtf9KtVvS7zugVczBWEjmWl443InlUA HTTP/1.1Host: h.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d314131373b273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a373724266861633d312e6268716b352d3742253540273232742730302d3041273030444f504d2532337d736570666965672d70617171776f72662f6467706f273031464954253233253a3225304b3b313732322537462532432737402d30306f6f2730322732433634392532413d3039273243333b373232253746273a412737402730326f6d2532322d32433a39302d304336303b273243333b37303f2737462730412537422532327c2532302d3a4b273232444b542532332730315e452f54454c2f4e43562532332d3232273a4b3b3b35353827374425324127374a2730306f6f27323025324339393225304b3e3a31253243313b3535382737462d30412737402732306d6d25323a253241313b31273243363034253243313b37313227374627304327354225323a6d6d273a3a2d3043393532273243363035273a41313b3430332537442532432d3542273a3a656f25323227304339353227304b34303b273041333b363231253d4425304b2d3d402532326f6f25323227304131363b27304134323b25324333313934302d3d4c2732432537402532326f6f273a302730413b31392732433632312532413b31313432253546273243253740273a306f6f2730302530433931392d3243343a3e2d304333393b343925354627304b2737402730307427323225324b2532304e475a4f253233777165726e636f672572637171756d72662d666f72652532314c415e273233253030253243363232393327374627304327354225323a6d6d273a3a2d3043383134273243363237273a4136323233332537442532432d3542273a3a656f25323227304337393527304b3432312730413432303333253d4425304b2d3d402532326f6f2532322730413f373027304137393425324334383034312d3d4c2732432537402532326f6f273a3027304135303027324335393a2532413c38383739253546273243253740273a306f6f2730302530433635382d32433731382d3043343032353825354627304b2737402730306d6f253232253a4336313c2d3a4135393027304334303330332d37462730412735402532326d652532302d3a4b3433312530413539302730413c3233363627374427324325354a25323065652d303225324134323825304137313227304136323236302535442d3544246a607b615f696e6667783d3130 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141323033273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d314132313a273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141323230273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d314132343b273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=33363524266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341302532412d3a3a72617373756d726425303152495151554d50462d606c6f636b6d6425303a2d3b4339253746273243253030273a446e6d656d6c2530322535442e626871637b7c673d2537402732326b6c27303a27314336302732412532326b3a3239273a3a2d314130253546 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3b3424246a63633d31267867655d7d786c6374653d2735422532303b273a3027314327354227323250415b53574d5a4c25606c6f636967642532302731492737407670776527324325323a7061717b7f677064253230273243322737462d3546273546 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d314132363a273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3b3424246a63633d31267867655d7d786c6374653d2735422532303b273a3027314327354227323250415b53574d5a4c25606c6f636967642532302731492737407670776527324325323a7061717b7f677064253230273243312737462d3546273546 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=31303624266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341302532412d3a3a72617373756d726425303152495151554d50462d606c6f636b6d6425303a2d3b4331322535462532432730302d30446e6d656d6e27323225354c26626a7b637b76653d253540253232696c273a30273143363a2530432532326332323b2d3a3a2733413027354426626a71697b763f27374027354025323266652532302d3a4b27323270637173776f7066273a3152435151554f50442d626c67636b676c2d3a30253243273742302530412f393327304136373030312535442d3243273d4a392732432d3333253243363732313027374627304327354230253a432d333a2d3a413435313a342535442730412d3740332730412d33322532433c353236302d3d4625354427374426626a71697b765d6b6c6667783f3134 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=31303624266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341302532412d3a3a72617373756d726425303152495151554d50462d606c6f636b6d6425303a2d3b4331342535462532432730302d30446e6d656d6e27323225354c26626a7b637b76653d253540253232696c273a3027314337302530432532326332323b2d3a3a2733413027354426626a71697b763f27374027354025323266652532302d3a4b27323270637173776f7066273a3152435151554f50442d626c67636b676c2d3a30253243273742302530412f393127304136373330392535442d3243273d4a392732432d33312532433637363a3627374627304327354230253a432d333c2d3a413435343b322535442730412d3740332730412d33342532433c353534302d3d4625354427374426626a71697b765d6b6c6667783f3135 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141323737273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d314132393a273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3337353626246a61633d3926626a7b6b352735422537402532327627303a273041273030464d524d25323b7573677a66696f652d70637173776f70662f6e6d706f273031444b562532332d3232273a4b3c3433393227374425324127374a2730306f6f273230253243343e3025304b3a3c3a25324336343339322737462d30412737402732306d6d25323a2532413c3f3d273243323b30253243363431313127374627304327354225323a6d6d273a3a2d3043343734273243323b35273a4136343632332537442532432d3542273a3a7c273232253041253232464b542d30312730314e4140454c25323b2532302d3a4b363634313a273544253041273d402730306f6f2530322532433c3738273a4b3b3238253241363634313a27374c2730412737402530327425323a2532412d3a3a7665787427303355534750273a314133334c2f494c505554253a3325303a2d3a4134363431312535442730412d37402730306f6d27323225324b3437302d3a4b3133312530413436343131273d462730412737422732326d6d2d3232273a4b3c3637253241313635253041363e36363b2737462530432535422d3232762d3a3a27324325303070617371756d7a6627303152435351574f524425626c6d6b636d662532334133314e2d4b4c525d5627303127303227324334363c3635273d4c2d30432535402732326d6f27303a273041313b362530433433352d3243363e3c3e3725354427304325354027303a6f6f273030273241333739253a4334343c2d3a413436343a322535442730412d3740273030762530322532432d323246415e2d30332532314e474e2d5243515b554d50462f4b4e52555425323b5041515b5f4750442532302732433434363b30273746273041253742253232656d25303a2d3a4133373527304334373527304b3634363b3a273546253243253d4225303a65652732322530413337332730413c3a33273041363637313225354c2532412d3d4a2732326d6f273232253041313f31273041363a3227324334363d3333273d4c2d30432535402732326d6f27303a2730413135312530433438352d3243363e3d3e3425354427304325354027303a6f6f273030273241333738253a4335323e2d3a4134363535312535442730412d3740273030762530322532432d323244475a45273233757167726e616f672f78637171756d70642f666f726d2d323346415e2d30332532302732433434373b3a273746273041253742253232656d25303a2d3a4133383527304335313b27304b3634373b30273546253243253d4225303a65652732322530413338392730413d3037273041363634303425354c2532412d3d4a2732327427303225324127303a5152434c27303327323373756a6d69762d3a3b777365726c636d652d7263717b756d70662f7175606d69742d6a746e2f392d3a3025324336343632302737462d30412737402732306d6d25323a2532413b313b2732433536372532433634343a3227374627304327354225323a6d6d273a3a2d3043333931273243353733273a4136343431352537442532432d3542273a3a656f25323227304333383527304b37353a2730413434363637253d4425304b2d3d4025323276273232253041273a30444d504f2732317573657266616d672578697173776f70662d666f706f273a31464b5427303327323225324b343634303b2d37442532412735422530306f65273030273041333a302532433e3033273a4b3c3436383327374425324127374a2730307627303227324325323a4449542d3a3b273233464d504d25323177716d706c636f672f70637373776f7a642d64677a652732322530413436373336273d462730412737422732326d6d2d3232273a4b3b35362532413432302
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141333230273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=33363a24266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341302532412d3a3a72617373756d726425303152495151554d50462d606c6f636b6d6425303a2d3b4331342535462532432730302d30446e6d656d6e27323225354c26626a7b637b76653d253540253232696c273a3027314337302530432532326332323b2d3a3a27334130273544 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=37313424266861633d312e6268716b6d352737422530307074797267712d30302731432737402532326d677573672d3a3a2733413330362537442730412d303072767b7265273232253349253230786b2d30322537462462687360693f2d3740273740273230442532322d3243363f3e3b362532432730325350434c273a312730317177626f697425323b7573677a66696f652d70637173776f70662f7b77606f6b762f62766e2d31253a3225374c2d3a4125354227303255253030273a413635343137253043253232786173717f677a6625323352435353574d504625606e6d6169676427323225354c2532412d3d4a2732326e27303225324136353e31342730412732307375626d617425303b7d7b67726e616f672d70617171756770662f7177606d6b742d6274662d31273a3a2d3744253241273542253030472d3030273041363735303025324b2532305b58494c2532332730337375606f6b7c273031777167726c616d652d786173717f677a662d7375606f69742d60766c253327303027374427324325354a2532305d2d3a3025324336353733342730412d30307177606f6976253233757b65726c69656d2f70617371756f72642f71776a6f6b762f60766e2f312532322d3544273a4b2d37422532306b2532322730413c35353135273043273232464f5a4d25303b7d7b67726e616f672d70617171756770662f646d706d27323225354c2535462e6a6071626b5f6b6c6465783f3b HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=33333324266861633d312e6268716b352d37422535402732326d6627303a273041363a312530433537382d3243363f3e3a3025324332273544253041273d402730306f772530322532433c3833273a4b3d3538253241363736393b27304b32273746273744246268736357696e666d70353032 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /activityi;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=9752031467127;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D? HTTP/1.1Host: 12332392.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmx_ikiMTvjUTKRoG5gFRwVxqN16Cd94A_lkLzI7XqYsp5rDmaTpjezHKXH
Source: global traffic	HTTP traffic detected: GET /b/ss/vanguardretaillaunchprod/10/JS-2.26.0-LEWM/s94456308983269?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=1%2F10%2F2024%2012%3A53%3A42%205%20240&d.&nsid=2&jsonv=1&.d&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials&g=https%3A%2F%2Flogon.vanguard.com%2Flogon&c.&getPreviousValue=3.0.2&getVisitNum=4.2&.c&cc=USD&ch=retail%3Aweb&server=logon.vanguard.com&events=event284&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&h1=logon%3Anone&c4=mcmid%7C86591681061654023263392632422581144886&v4=mcmid%7C86591681061654023263392632422581144886&c13=fri%2C%201%20nov%202024%2012%3A53%20edt&v13=fri%2C%201%20nov%202024%2012%3A53%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=D%3Dv18&v18=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials&c21=ownyourfuture.vanguard.com&v23=https%3A%2F%2Flogon.vanguard.com%2Flogon&c30=logininvalidcredentials&v30=logininvalidcredentials&c31=D%3Dg&v31=D%3Dg&c36=1&v36=1&c38=logon&c39=none&v42=1.0.0&c44=pageLoaded%2CpageLoadCompleted%2CloginFlowStep&c65=ownyourfuture.vanguard.com%2F&v66=new&v84=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon&v130=true&v157=lgn&v188=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v249=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&c.&a.&activitymap.&page=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon&link=Log%20in&region=username-password-submit-btn&pageIDType=1&.activitymap&.a&.c&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=92CA3704532954400A490D44%40AdobeOrg&lrt=3544&AQE=1 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141333331273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /b/ss/vanguardretaillaunchprod/10/JS-2.26.0-LEWM/s93311359838421?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=1%2F10%2F2024%2012%3A53%3A42%205%20240&d.&nsid=2&jsonv=1&.d&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials&g=https%3A%2F%2Flogon.vanguard.com%2Flogon&cc=USD&ch=retail%3Aweb&server=logon.vanguard.com&events=event260&h1=logon%3Anone&c4=mcmid%7C86591681061654023263392632422581144886&v4=mcmid%7C86591681061654023263392632422581144886&c13=fri%2C%201%20nov%202024%2012%3A53%20edt&v13=fri%2C%201%20nov%202024%2012%3A53%20edt&v18=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials&v23=https%3A%2F%2Flogon.vanguard.com%2Flogon&v31=D%3Dg&c36=1&v36=1&c38=logon&c39=none&v42=1.0.0&v66=new&v130=true&v249=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&pe=lnk_o&pev2=loginFlowStep%20-%20Login%20Invalid%20Credentials&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=92CA3704532954400A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CNeLornMu4kDFY-ggwcdbDAJXg;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=9752031467127;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D? HTTP/1.1Host: 12332392.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmx_ikiMTvjUTKRoG5gFRwVxqN16Cd94A_lkLzI7XqYsp5rDmaTpjezHKXH
Source: global traffic	HTTP traffic detected: GET /b/ss/vanguardretaillaunchprod/10/JS-2.26.0-LEWM/s94456308983269?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=1%2F10%2F2024%2012%3A53%3A42%205%20240&d.&nsid=2&jsonv=1&.d&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials&g=https%3A%2F%2Flogon.vanguard.com%2Flogon&c.&getPreviousValue=3.0.2&getVisitNum=4.2&.c&cc=USD&ch=retail%3Aweb&server=logon.vanguard.com&events=event284&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&h1=logon%3Anone&c4=mcmid%7C86591681061654023263392632422581144886&v4=mcmid%7C86591681061654023263392632422581144886&c13=fri%2C%201%20nov%202024%2012%3A53%20edt&v13=fri%2C%201%20nov%202024%2012%3A53%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=D%3Dv18&v18=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials&c21=ownyourfuture.vanguard.com&v23=https%3A%2F%2Flogon.vanguard.com%2Flogon&c30=logininvalidcredentials&v30=logininvalidcredentials&c31=D%3Dg&v31=D%3Dg&c36=1&v36=1&c38=logon&c39=none&v42=1.0.0&c44=pageLoaded%2CpageLoadCompleted%2CloginFlowStep&c65=ownyourfuture.vanguard.com%2F&v66=new&v84=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon&v130=true&v157=lgn&v188=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v249=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&c.&a.&activitymap.&page=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon&link=Log%20in&region=username-password-submit-btn&pageIDType=1&.activitymap&.a&.c&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=92CA3704532954400A490D44%40AdobeOrg&lrt=3544&AQE=1 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141333337273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /b/ss/vanguardretaillaunchprod/10/JS-2.26.0-LEWM/s93311359838421?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=1%2F10%2F2024%2012%3A53%3A42%205%20240&d.&nsid=2&jsonv=1&.d&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials&g=https%3A%2F%2Flogon.vanguard.com%2Flogon&cc=USD&ch=retail%3Aweb&server=logon.vanguard.com&events=event260&h1=logon%3Anone&c4=mcmid%7C86591681061654023263392632422581144886&v4=mcmid%7C86591681061654023263392632422581144886&c13=fri%2C%201%20nov%202024%2012%3A53%20edt&v13=fri%2C%201%20nov%202024%2012%3A53%20edt&v18=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials&v23=https%3A%2F%2Flogon.vanguard.com%2Flogon&v31=D%3Dg&c36=1&v36=1&c38=logon&c39=none&v42=1.0.0&v66=new&v130=true&v249=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig&pe=lnk_o&pev2=loginFlowStep%20-%20Login%20Invalid%20Credentials&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=92CA3704532954400A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: vanguard.d2.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNeLornMu4kDFY-ggwcdbDAJXg;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=9752031467127;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://12332392.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141333432273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=33323124266861633d312e6268716b352d37422535402732326d6f27303a2730413b313b2530433633312d3243373a3d313b25354427304325354027303a6f6f273030273241393337253a433631392d3a41353237313a2535442737462e606a71615d6b6e6665783d323d HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141333435273744253041273a3072767b72672530322533412d3232726b2d3a30253744 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=30333624266861633d312e6268716b352d37422535402732326d6f27303a2730413b31372530433633312d3243373a3f3e3525354427304325354027303a6f6f273030273241393333253a433631392d3a41353238323b2535442730412d37402730306f6d27323225324b39333b2d3a4b3433312530413532383433273d462730412737422732326d6d2d3232273a4b313630253241343331253041373a3a35352737462530432535422d32326f652d3a302532433b363225324134313827304137303b313a253544253d442660607b6b5d696e64677a3d3236 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNeLornMu4kDFY-ggwcdbDAJXg;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=9752031467127;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=33373a24266861633d312e6268716b6d352737422530307074797267712d30302731432737402532326d677573672d3a3a2733413336352537442730412d303072767b7265273232253349253230786b2d30322537462462687360693f2d3740273740273230736125323a2532413e3c3f3636253241273232424d465b2d30312730314a544f4c2532332d3232273d4c2d374426626a71626b5f6b6c666d7a3f3332 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=33363a24266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341302532412d3a3a72617373756d726425303152495151554d50462d606c6f636b6d6425303a2d3b4331342535462532432730302d30446e6d656d6e27323225354c26626a7b637b76653d253540253232696c273a3027314337302530432532326332323b2d3a3a27334130273544 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logon.vanguard.com/logon?site=iigAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: thx_guid=c4bbd647ec499980566300c57a066319; tmx_guid=AAxWzW_yg9MD2y6P7WRYuUWNAWgdwmzZjHIdwyZsI7wWkjlA1txHpEpO5cT6tNO4Q1mXvHvnP-5fhUTyhAKPHhd4LELPMQ; thx_global_guid=1b234e58ced94052b59d9023202e056c
Source: global traffic	HTTP traffic detected: GET /retirementplans HTTP/1.1Host: www.vanguard.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.vanguard.com/retirementplansAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.vanguard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22

Source: chromecache_193.1.dr	String found in binary or memory: const Di = (n3) => at(C, { children: [at(Tt, { styles: Zi.Z }), at("div", { class: Et("bg-color-ink-100", Zi.k), children: at($i, { columns: n3 == null ? void 0 : n3.columns }) })] }), ji = ({ socialMediaLink: n3 }) => at("div", { class: "row col-xxl-3 col-xl-4 col-sm-12 col-xs-6", children: at("div", { class: Oi.xs, children: [n3 && at(Dt, { href: n3.href, linkFontWeight: "bold", class: `c11n-text-sm-bold ${Oi.j2}`, children: n3.label }), at("div", { class: Oi.kT, children: [at(Dt, { href: "https://www.linkedin.com/company/vanguard", "aria-label": "Vanguard LinkedIn Social Media", class: Oi.er, children: at(Ut, { name: "linkedin", size: "medium" }) }), at(Dt, { href: "https://facebook.com/Vanguard", "aria-label": "Vanguard FaceBook Social Media", class: Oi.er, children: at(Ut, { name: "facebook", size: "medium" }) }), at(Dt, { href: "https://twitter.com/Vanguard_Group", "aria-label": "Vanguard Twitter Social Media", class: Oi.er, children: at(Ut, { name: "x", size: "medium" }) }), at(Dt, { href: "https://www.instagram.com/vanguardgroup/", "aria-label": "Vanguard Instagram Social Media", class: Oi.er, children: at(Ut, { name: "instagram", size: "medium" }) }), at(Dt, { href: "https://www.youtube.com/user/Vanguard", "aria-label": "Vanguard YouTube Media", class: Oi.er, children: at(Ut, { name: "youtube", size: "medium" }) })] }), at("div", { class: Oi.ew, children: [at(Dt, { href: "https://apps.apple.com/us/app/vanguard/id335186209", "aria-label": "Vanguard Apple App Store Download", class: Oi.aL, children: at(Ut, { name: "apple-download", size: "medium" }) }), at(Dt, { href: "https://play.google.com/store/apps/details?id=com.vanguard", "aria-label": "Vanguard Google Play Store Download", class: Oi.aL, children: at(Ut, { name: "google-download", size: "medium" }) })] })] }) }), Wi = ({ clientInfo: n3, disclosures: t3, linkFarm: { columns: e2 } = { columns: [] }, logo: o2, ankle: i3, "no-nav": a2, noNavLogo: c2, socialFooter: r2, cobrowseText: l2 }) => { equals www.facebook.com (Facebook)
Source: chromecache_193.1.dr	String found in binary or memory: const Di = (n3) => at(C, { children: [at(Tt, { styles: Zi.Z }), at("div", { class: Et("bg-color-ink-100", Zi.k), children: at($i, { columns: n3 == null ? void 0 : n3.columns }) })] }), ji = ({ socialMediaLink: n3 }) => at("div", { class: "row col-xxl-3 col-xl-4 col-sm-12 col-xs-6", children: at("div", { class: Oi.xs, children: [n3 && at(Dt, { href: n3.href, linkFontWeight: "bold", class: `c11n-text-sm-bold ${Oi.j2}`, children: n3.label }), at("div", { class: Oi.kT, children: [at(Dt, { href: "https://www.linkedin.com/company/vanguard", "aria-label": "Vanguard LinkedIn Social Media", class: Oi.er, children: at(Ut, { name: "linkedin", size: "medium" }) }), at(Dt, { href: "https://facebook.com/Vanguard", "aria-label": "Vanguard FaceBook Social Media", class: Oi.er, children: at(Ut, { name: "facebook", size: "medium" }) }), at(Dt, { href: "https://twitter.com/Vanguard_Group", "aria-label": "Vanguard Twitter Social Media", class: Oi.er, children: at(Ut, { name: "x", size: "medium" }) }), at(Dt, { href: "https://www.instagram.com/vanguardgroup/", "aria-label": "Vanguard Instagram Social Media", class: Oi.er, children: at(Ut, { name: "instagram", size: "medium" }) }), at(Dt, { href: "https://www.youtube.com/user/Vanguard", "aria-label": "Vanguard YouTube Media", class: Oi.er, children: at(Ut, { name: "youtube", size: "medium" }) })] }), at("div", { class: Oi.ew, children: [at(Dt, { href: "https://apps.apple.com/us/app/vanguard/id335186209", "aria-label": "Vanguard Apple App Store Download", class: Oi.aL, children: at(Ut, { name: "apple-download", size: "medium" }) }), at(Dt, { href: "https://play.google.com/store/apps/details?id=com.vanguard", "aria-label": "Vanguard Google Play Store Download", class: Oi.aL, children: at(Ut, { name: "google-download", size: "medium" }) })] })] }) }), Wi = ({ clientInfo: n3, disclosures: t3, linkFarm: { columns: e2 } = { columns: [] }, logo: o2, ankle: i3, "no-nav": a2, noNavLogo: c2, socialFooter: r2, cobrowseText: l2 }) => { equals www.linkedin.com (Linkedin)
Source: chromecache_193.1.dr	String found in binary or memory: const Di = (n3) => at(C, { children: [at(Tt, { styles: Zi.Z }), at("div", { class: Et("bg-color-ink-100", Zi.k), children: at($i, { columns: n3 == null ? void 0 : n3.columns }) })] }), ji = ({ socialMediaLink: n3 }) => at("div", { class: "row col-xxl-3 col-xl-4 col-sm-12 col-xs-6", children: at("div", { class: Oi.xs, children: [n3 && at(Dt, { href: n3.href, linkFontWeight: "bold", class: `c11n-text-sm-bold ${Oi.j2}`, children: n3.label }), at("div", { class: Oi.kT, children: [at(Dt, { href: "https://www.linkedin.com/company/vanguard", "aria-label": "Vanguard LinkedIn Social Media", class: Oi.er, children: at(Ut, { name: "linkedin", size: "medium" }) }), at(Dt, { href: "https://facebook.com/Vanguard", "aria-label": "Vanguard FaceBook Social Media", class: Oi.er, children: at(Ut, { name: "facebook", size: "medium" }) }), at(Dt, { href: "https://twitter.com/Vanguard_Group", "aria-label": "Vanguard Twitter Social Media", class: Oi.er, children: at(Ut, { name: "x", size: "medium" }) }), at(Dt, { href: "https://www.instagram.com/vanguardgroup/", "aria-label": "Vanguard Instagram Social Media", class: Oi.er, children: at(Ut, { name: "instagram", size: "medium" }) }), at(Dt, { href: "https://www.youtube.com/user/Vanguard", "aria-label": "Vanguard YouTube Media", class: Oi.er, children: at(Ut, { name: "youtube", size: "medium" }) })] }), at("div", { class: Oi.ew, children: [at(Dt, { href: "https://apps.apple.com/us/app/vanguard/id335186209", "aria-label": "Vanguard Apple App Store Download", class: Oi.aL, children: at(Ut, { name: "apple-download", size: "medium" }) }), at(Dt, { href: "https://play.google.com/store/apps/details?id=com.vanguard", "aria-label": "Vanguard Google Play Store Download", class: Oi.aL, children: at(Ut, { name: "google-download", size: "medium" }) })] })] }) }), Wi = ({ clientInfo: n3, disclosures: t3, linkFarm: { columns: e2 } = { columns: [] }, logo: o2, ankle: i3, "no-nav": a2, noNavLogo: c2, socialFooter: r2, cobrowseText: l2 }) => { equals www.twitter.com (Twitter)
Source: chromecache_193.1.dr	String found in binary or memory: const Di = (n3) => at(C, { children: [at(Tt, { styles: Zi.Z }), at("div", { class: Et("bg-color-ink-100", Zi.k), children: at($i, { columns: n3 == null ? void 0 : n3.columns }) })] }), ji = ({ socialMediaLink: n3 }) => at("div", { class: "row col-xxl-3 col-xl-4 col-sm-12 col-xs-6", children: at("div", { class: Oi.xs, children: [n3 && at(Dt, { href: n3.href, linkFontWeight: "bold", class: `c11n-text-sm-bold ${Oi.j2}`, children: n3.label }), at("div", { class: Oi.kT, children: [at(Dt, { href: "https://www.linkedin.com/company/vanguard", "aria-label": "Vanguard LinkedIn Social Media", class: Oi.er, children: at(Ut, { name: "linkedin", size: "medium" }) }), at(Dt, { href: "https://facebook.com/Vanguard", "aria-label": "Vanguard FaceBook Social Media", class: Oi.er, children: at(Ut, { name: "facebook", size: "medium" }) }), at(Dt, { href: "https://twitter.com/Vanguard_Group", "aria-label": "Vanguard Twitter Social Media", class: Oi.er, children: at(Ut, { name: "x", size: "medium" }) }), at(Dt, { href: "https://www.instagram.com/vanguardgroup/", "aria-label": "Vanguard Instagram Social Media", class: Oi.er, children: at(Ut, { name: "instagram", size: "medium" }) }), at(Dt, { href: "https://www.youtube.com/user/Vanguard", "aria-label": "Vanguard YouTube Media", class: Oi.er, children: at(Ut, { name: "youtube", size: "medium" }) })] }), at("div", { class: Oi.ew, children: [at(Dt, { href: "https://apps.apple.com/us/app/vanguard/id335186209", "aria-label": "Vanguard Apple App Store Download", class: Oi.aL, children: at(Ut, { name: "apple-download", size: "medium" }) }), at(Dt, { href: "https://play.google.com/store/apps/details?id=com.vanguard", "aria-label": "Vanguard Google Play Store Download", class: Oi.aL, children: at(Ut, { name: "google-download", size: "medium" }) })] })] }) }), Wi = ({ clientInfo: n3, disclosures: t3, linkFarm: { columns: e2 } = { columns: [] }, logo: o2, ankle: i3, "no-nav": a2, noNavLogo: c2, socialFooter: r2, cobrowseText: l2 }) => { equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: ownyourfuture.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: corp-at2.web.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: corp-etm-arl.web.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: constellation-static.web.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: vanguard.demdex.net
Source: global traffic	DNS traffic detected: DNS query: vanguard.d2.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: content.zenimpact.io
Source: global traffic	DNS traffic detected: DNS query: mdl-medallia-digital.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: hub2.zenimpact.io
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: thevanguardgroup.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: insight-api-kgw.zenimpact.io
Source: global traffic	DNS traffic detected: DNS query: edge.adobedc.net
Source: global traffic	DNS traffic detected: DNS query: resources.digital-cloud-prem.medallia.com
Source: global traffic	DNS traffic detected: DNS query: udc-neb.kampyle.com
Source: global traffic	DNS traffic detected: DNS query: logon.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: corp.at2.assets.vgdynamic.info
Source: global traffic	DNS traffic detected: DNS query: ccc.vgcontent.info
Source: global traffic	DNS traffic detected: DNS query: n4v.web.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: mc3-static-assets.web.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: oob-check.cdn.web.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: corp.etm.assets.vgdynamic.info
Source: global traffic	DNS traffic detected: DNS query: corp-pmj.web.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: personal1.vanguard.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: h.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: 12332392.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: h64.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: eu-aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: analytics-fe.digital-cloud-prem.medallia.com

Source: unknown

HTTP traffic detected: POST /ee/v1/identity/acquire?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=ec87e85d-3543-4778-94e2-4109803d2c16 HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveContent-Length: 236Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain; charset=UTF-8Accept: */*Origin: https://ownyourfuture.vanguard.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ownyourfuture.vanguard.com/en/home/publoginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=84871277735491192852519433086877446357

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: ec87e85d-3543-4778-94e2-4109803d2c16vary: Origindate: Fri, 01 Nov 2024 16:52:07 GMTx-konductor: 24.10.123:a83471acax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/javascriptContent-Length: 0Connection: closeContent-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipify.org https://.decibelinsight.net https://.decibel.com 'blob:'; style-src 'self' 'unsafe-inline' .vanguard.com: .zenimpact.io .kampyle.com:* .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net; img-src 'self' data: b.videoamp.com bat.bing.com www.facebook.com .googleadservices.com .googleads.g.doubleclick.net vanguard.d2.sc.omtrdc.net sjs.bizographics.com dc.ads.likedin.com px.ads.linkedin.com snap.licdn.com p.adsymptotic.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net www.google.com ad.doubleclick.net adservice.google.com sp.analytics.yahoo.com s.amazon-adsystem.com ct.pinterest.com alb.reddit.com analytics.twitter.com t.co .pdst.fm img.byspotify.com login.dotomi.com rtb.adgrx.com; font-src 'self' data: .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net; connect-src 'self' data: .mktoresp.com* .gstatic.com .mktoutil.com* .api.company-target.com .demdex.net vanguard.d2.sc.omtrdc.net edge.adobedc.net .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .privacyportal-de.onetrust.com: .geolocation.onetrust.com: .cdn.cookielaw.org: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net pagead2.googlesyndication.com www.google.com googleads.g.doubleclick.net .bttrack.com btt
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 23a41a4e-0ff2-4378-912e-2a0f075ca3d1vary: Origindate: Fri, 01 Nov 2024 16:52:25 GMTx-konductor: 24.10.123:a83471acax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: ff673c82-2567-43cd-8b3f-29d44c0e802evary: Origindate: Fri, 01 Nov 2024 16:52:37 GMTx-konductor: 24.10.123:a83471acax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close

Source: chromecache_328.1.dr, chromecache_158.1.dr, chromecache_319.1.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: chromecache_217.1.dr, chromecache_317.1.dr, chromecache_218.1.dr, chromecache_315.1.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
Source: chromecache_231.1.dr, chromecache_179.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: http://localhost.vanguard.com:8080/rebalance-autoRebalance/rebalance-landingpage;https://sat-ownyour
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: http://localhost.vanguard.com:8080/required-minimum-distribution/confirmation?planId;https://api.ecs
Source: chromecache_328.1.dr, chromecache_158.1.dr, chromecache_319.1.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: http://satimyplanmanager.vanguard.com:56080/dcrk/beta/document-center;https://satmyplanmanager.vangu
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: http://satimyplanmanager.vanguard.com:56080/dcrk/beta/message-center;https://satmyplanmanager.vangua
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: http://satimyplanmanager.vanguard.com:56080/dcrk/beta/project-management;https://satmyplanmanager.va
Source: chromecache_328.1.dr, chromecache_158.1.dr, chromecache_319.1.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: chromecache_328.1.dr, chromecache_158.1.dr, chromecache_319.1.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: chromecache_328.1.dr, chromecache_158.1.dr, chromecache_319.1.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: http://ty7661.vanguard.com:3000;https://localhost.vanguard.com:3001;https://rmd.webe.vanguard.com/;h
Source: chromecache_217.1.dr, chromecache_317.1.dr, chromecache_218.1.dr, chromecache_315.1.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: chromecache_328.1.dr, chromecache_158.1.dr, chromecache_319.1.dr	String found in binary or memory: http://www.fontfont.comhttp://www.fontfont.com/eula/license.html
Source: chromecache_328.1.dr, chromecache_158.1.dr, chromecache_319.1.dr	String found in binary or memory: http://www.fontfont.comhttp://www.fontfont.com/eula/license.html2013
Source: chromecache_328.1.dr, chromecache_158.1.dr, chromecache_319.1.dr	String found in binary or memory: http://www.fontfont.comhttp://www.fontfont.com/eula/license.htmlMark
Source: chromecache_252.1.dr, chromecache_256.1.dr	String found in binary or memory: https://aemdam.assets.vgdynamic.info/assets/inst/target/testing/Zenapse
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://aj0-advised-journey-dash-webapp.ecswa.retp.c1.vanguard.com/aj0-advised-journey-dash-webapp;h
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://aj0-advised-journey-dash-webapp.ecswa.rett.c1.vanguard.com/aj0-advised-journey-dash-webapp;h
Source: chromecache_205.1.dr, chromecache_244.1.dr, chromecache_237.1.dr, chromecache_272.1.dr	String found in binary or memory: https://analytics-fe.digital-cloud-prem.medallia.com/api/web/events
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://api.ecs.us-east-1.inst.c1.vanguard.com/pe7-retirementplans-my-home-beta/dashboard;https://ap
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://api.ecs.us-east-1.inst.c1.vanguard.com/peg-pex-main-alpha/enroll/confirmation;https://sat-ow
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://api.ecs.us-east-1.inst.c1.vanguard.com/peg-pex-main-sandbox01/required-minimum-distribution/
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://api.ecs.us-east-1.retp.c1.vanguard.com/ps9-pas-tools/medicare-match/results;https://personal
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://apii.ecs.us-east-1.inse.c1.vanguard.com/gsu-glidepath-solutions/;https://apii.ecs.us-east-1.
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://apii.ecs.us-east-1.inse.c1.vanguard.com/pu1-asset-mgmt-port-construct/;https://apii.ecs.us-e
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://apii.ecs.us-east-1.insp.c1.vanguard.com/gsu-glidepath-solutions/;https://apii.ecs.us-east-1.
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://apii.ecs.us-east-1.insp.c1.vanguard.com/pu1-asset-mgmt-port-construct/;https://apii-inactive
Source: chromecache_174.1.dr, chromecache_176.1.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Audi
Source: chromecache_205.1.dr, chromecache_244.1.dr, chromecache_237.1.dr, chromecache_272.1.dr	String found in binary or memory: https://bitbucket.opst.c1.vanguard.com/dashboard;https://bitbucket-qa.opst.c1.vanguard.com/dashboard
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://bitbucket.opst.c1.vanguard.com/pages/IIGUX/pmed.esp/master/browse/index.html;https://bitbuck
Source: chromecache_308.1.dr	String found in binary or memory: https://constellation-static.web.vanguard.com/v1/fonts/constellation-fonts.css);
Source: chromecache_170.1.dr, chromecache_201.1.dr	String found in binary or memory: https://content.zenimpact.io
Source: chromecache_252.1.dr, chromecache_256.1.dr	String found in binary or memory: https://content.zenimpact.io/dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-
Source: chromecache_252.1.dr, chromecache_256.1.dr	String found in binary or memory: https://content.zenimpact.io/dist/data/serendipity/choice-toggle.html
Source: chromecache_252.1.dr, chromecache_256.1.dr	String found in binary or memory: https://content.zenimpact.io/dist/data/serendipity/result.html
Source: chromecache_252.1.dr, chromecache_256.1.dr	String found in binary or memory: https://content.zenimpact.io/dist/zen_serendipity.min.js
Source: chromecache_180.1.dr, chromecache_216.1.dr	String found in binary or memory: https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/EXcdd48fe7
Source: chromecache_236.1.dr, chromecache_173.1.dr	String found in binary or memory: https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6
Source: chromecache_265.1.dr, chromecache_250.1.dr	String found in binary or memory: https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/launch-fa9ce42154c5.js
Source: chromecache_208.1.dr, chromecache_264.1.dr, chromecache_157.1.dr, chromecache_314.1.dr, chromecache_184.1.dr, chromecache_312.1.dr, chromecache_155.1.dr, chromecache_330.1.dr	String found in binary or memory: https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa44
Source: chromecache_202.1.dr, chromecache_166.1.dr	String found in binary or memory: https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/launch-ecb7
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://cxa.web.vanguard.com/;https://cxa-i.web.vanguard.com/
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://cxa.webt.vanguard.com/;https://cxa-i.webt.vanguard.com/;https://cxa.webe.vanguard.com/;https
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://cxa.webt.vanguard.com/;https://cxa.webe.vanguard.com/;https://cxa-i.webt.vanguard.com/;https
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://dashboard.web.vanguard.com
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://dashboard.web.vanguard.com?at_preview_token=Vfon3nVKRLLjYKR8BKP2J5P-aq-nupXul6tr9YrAZaE&at_p
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://demo.tradewebretail.com/
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://demo.tradewebretail.com/web/(S(bc77640198d544e88c6322281a2129f7))/VGI/Search.aspx?isbr=true;
Source: chromecache_252.1.dr, chromecache_256.1.dr	String found in binary or memory: https://digital-advisor.vanguard.com/
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://digital-advisor.vanguard.com/dashboard/faq;https://digital-advisor.vanguard.com/financial-pr
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://digital-advisor.vanguard.com/dashboard/withdraw-cash;https://investforamex.vanguard.com/dash
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://etfs-stocks.web.vanguard.com/c/trade/ticket/confirmation;https://personal1.vanguard.com/twe-
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://etfs-stocks.webt.vanguard.com/c/trade/ticket/confirmation
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://etm-sandbox.webe.vanguard.com/basicScenarios
Source: chromecache_205.1.dr, chromecache_244.1.dr, chromecache_237.1.dr, chromecache_272.1.dr	String found in binary or memory: https://feedback.digital-cloud-prem.medallia.com/
Source: chromecache_205.1.dr, chromecache_244.1.dr, chromecache_237.1.dr, chromecache_272.1.dr	String found in binary or memory: https://feedback.digital-cloud-prem.medallia.com/feedback/api/v2/feedback/submit
Source: chromecache_199.1.dr, chromecache_234.1.dr, chromecache_311.1.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: chromecache_170.1.dr, chromecache_201.1.dr	String found in binary or memory: https://hub2.zenimpact.io
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://idde.inst.c1.vanguard.com/clientportal/iis/overview
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://idde.vanguard.com/service;https://institutional.vanguard.com/web/c1/clientportal;https://idd
Source: chromecache_170.1.dr, chromecache_201.1.dr	String found in binary or memory: https://insight-api-kgw.zenimpact.io
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://instaemdisppre.insp.c1.vanguard.com/content/iig-transformation/author-sandbox/sara/what-shou
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/401k-plans/dc-recordkeeping/retirement-recordkeeping.html;https:/
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/401k-plans/employee-advice
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/401k-plans/financial-well-being.html;https://institutional.vangua
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/401k-plans/vrpa;https://institutional.vanguard.com/content/iig-tr
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/asset-management
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/consultant-hub-portal/
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/home/;https://institutional.vanguard.com/home
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/how-america-saves/overview.html
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/insights-and-research/blog/peeking-into-your-neighbors-advice-win
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/investment/solutions/target-date-funds
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/investment/strategies/target-date-funds-approach.html
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/portal/hub/welcome;https://institutional.vanguard.com/consultant-
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/tools/investment-tools/
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://institutional.vanguard.com/utility/contact-us.html
Source: chromecache_210.1.dr, chromecache_254.1.dr	String found in binary or memory: https://investor.vanguard.com/privacy-center
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://investor.vanguard.com/social-media
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://investor.vanguard.com/terms-conditions
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://kong-dev-portal-infra-eng.rete.c1.vanguard.com/default/documentation/;https://kong-dev-porta
Source: chromecache_279.1.dr, chromecache_314.1.dr	String found in binary or memory: https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=dad0a533c0538b82e1f8ae74ecf9d3a3&k
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://localhost.vanguard.com:8043/;https://satpersonal1.vanguard.com/sku-security-key-enrollment/m
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://localhost.vanguard.com:8080/appointment-confirmation;https://satpersonal1.vanguard.com/pqq-a
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://mdl-medallia-digital.vanguard.com/alwayson;https://personal1.vanguard.com/utb-upgrade-to-bro
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://mdl-medallia-digital.vanguard.com/alwayson;https://satpersonal1.vanguard.com/utb-upgrade-to-
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://myplanmanager.vanguard.com/dcrk/document-center
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://myplanmanager.vanguard.com/dcrk/project-management
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://myplanmanager.vanguard.com/dcrk/reporting/report-templates;https://myplanmanager.vanguard.co
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://n4v.web.vanguard.com
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://ona-open-account-1.cdn.webt.vanguard.com/ona-open-account/review-confirm/confirm;https://ona
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://open-account.web.vanguard.com/ona-open-account/review-confirm/confirm;https://personal1.vang
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/content/en/learn/library.html;https://ownyourfuture.vanguard.com/
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/content/es/learn/library.html;https://ownyourfuture.vanguard.com/
Source: chromecache_170.1.dr, chromecache_201.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resou
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/inactive/main/enroll/confirmation;https://ownyourfuture.vanguard.
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/assets-details
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/contribution-details
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/dashboard;https://ownyourfuture.vanguard.com/main/learn;http
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/dashboard;https://ownyourfuture.vanguard.com/main/personaliz
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/financial-wellness/lesson-build-emergency-savings
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/financial-wellness/lesson-build-emergency-savings;https://ow
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/financial-wellness/lesson-manage-debt
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/financial-wellness/lesson-medicare-healthcare-planning
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/financial-wellness;https://ownyourfuture.vanguard.com/main/f
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/installments/confirmation?planId;https://ownyourfuture.vangu
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/investment-portfolio;https://ownyourfuture.vanguard.com/main
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/manage#investmentPortfolio;https://ownyourfuture.vanguard.co
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/rebalance-autoRebalance/confirmation;https://ownyourfuture.v
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/required-minimum-distribution/confirmation?planId;https://ow
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/required-minimum-distribution/maintain/landing
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://ownyourfuture.vanguard.com/main/retirement-savings-maximizer/details
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://personal-advisor.vanguard.com/manage/contact-us;https://personal-advisor.vanguard.com/manage
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://personal.vanguard.com/pdf/sofcdec.pdf
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://personal.vanguard.com/pdf/vmc_sofc.pdf
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://personal.vanguard.com/web/sc1/upgrade-to-brokerage/;https://personal.vanguard.com/web/sc1/tr
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://personal.vanguard.com/web/sc1/upgrade-to-brokerage/;https://personal.vanguard.com/web/sc1/up
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://personal1.vanguard.com/dao-dashboard/meet-with-an-advisor
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://personal1.vanguard.com/pqq-appointment-scheduler-user-interface/appointment-confirmation
Source: chromecache_154.1.dr, chromecache_161.1.dr	String found in binary or memory: https://personal1.vanguard.com/se2-security-code-enrollment-consumer-api/checkCookie
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://personal1.vanguard.com/vgn-n4v/client-data
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://port8080--talyrwilliams.coder.opst.c1.vanguard.com/social-security/calculator;https://satper
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://qa.tradewebretail.com/web/(S(bc77640198d544e88c6322281a2129f7))/VGI/Search.aspx?isbr=true
Source: chromecache_333.1.dr, chromecache_286.1.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/10000/formData1729686241649_
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/10000/invitationData17296862
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/10304/formData1730297382423_
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/10304/invitationData17302973
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1225/formData1715329759303_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1349/formData1715330067939_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1358/formData1715330019167_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1358/invitationData171533003
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1402/formData1715330260859_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1422/formData1715330018749_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1445/formData1715330074383_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1445/invitationData171533006
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1643/formData1715330459184_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1856/formData1715330031546_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2054/formData1715330286194_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2060/formData1715330046554_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2061/formData1715329737412_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2080/formData1715330018650_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2084/formData1715330288194_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2085/formData1715329732240_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2101/formData1715330034219_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2149/formData1715329934205_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2190/formData1715330164449_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2191/formData1715330020746_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2193/formData1715330065561_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2194/formData1715330188195_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2303/formData1715330069069_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2303/invitationData171533021
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2304/formData1715330071150_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2323/formData1715330071976_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2323/invitationData171533006
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2324/formData1715330069512_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2461/formData1715330033212_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2461/invitationData171533003
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2462/formData1715329984388_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2466/formData1715330004303_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2466/invitationData171533001
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2467/formData1715330070022_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2467/invitationData171532998
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2468/formData1715329993255_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2469/formData1715330034870_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2470/formData1715329990750_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2471/formData1715329988970_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2471/invitationData171533001
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2472/formData1715330014288_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2473/formData1715330064768_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2473/invitationData171533000
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2577/formData1715330036786_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2577/invitationData171533001
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2596/formData1715330070639_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2596/invitationData171533009
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2598/formData1715330020052_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2598/invitationData171533007
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2608/formData1715329934591_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2636/formData1715330237798_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2686/formData1715329888917_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2707/formData1715330070397_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2708/formData1715330068183_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2734/formData1715330035446_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2735/formData1715330063748_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2817/formData1715330073459_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2825/formData1715329912145_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2838/formData1715329889823_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2844/formData1715330065163_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2845/formData1715330069565_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2846/formData1715330070761_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2847/formData1715330020564_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2946/formData1715329843640_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2972/formData1715329985246_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2973/formData1715329984288_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2992/formData1715330067917_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3002/formData1715330018267_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3003/formData1715329984850_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3087/formData1715329994226_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3088/formData1715330010745_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3164/formData1715330017748_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3175/formData1715329933762_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3177/formData1715329868002_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3179/formData1715329937275_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3180/formData1715329890218_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3258/formData1722950230984_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3258/invitationData172295023
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3282/formData1715329985137_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3282/invitationData171533000
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3283/formData1715330019575_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3283/invitationData171532999
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3380/formData1715330075300_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3380/invitationData171533007
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3381/formData1715330070418_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3390/formData1715330033726_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3391/formData1715330013328_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3391/invitationData171533000
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3424/formData1715330068610_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3424/invitationData171533003
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3439/formData1715330032769_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3439/invitationData171533000
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3467/formData1715330072405_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3468/formData1715329988487_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3472/formData1715329713481_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3504/formData1715329616623_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3608/formData1715330044973_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3608/invitationData171533021
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3616/formData1715329995888_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3616/invitationData171532998
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3617/formData1715329889332_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3618/formData1715329843248_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3620/formData1715330254831_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3620/invitationData171533023
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3621/formData1715330163397_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3621/invitationData171533009
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3632/formData1715330016747_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3632/invitationData171533000
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3633/formData1715330037192_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3633/invitationData171533001
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3669/formData1715330071297_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3670/formData1715330044520_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3671/formData1715330014718_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3672/formData1715330036380_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3696/formData1715330068399_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3697/formData1715330044082_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3698/formData1715330068601_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3699/formData1715330071542_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3700/formData1715329984697_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3701/formData1715330011272_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3702/formData1715329992800_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3703/formData1715329993740_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3803/formData1715330069079_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3803/invitationData171533006
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3812/formData1715330037575_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3813/formData1715330071753_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3814/formData1715329990271_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3815/formData1715330064324_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3835/formData1715329889048_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3864/formData1715330043247_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3864/invitationData171533006
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3865/formData1715976352570_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3865/invitationData171597635
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3866/formData1715976434226_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3866/invitationData171597643
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4015/formData1715330031959_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4015/invitationData171533000
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4086/formData1715329842851_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4215/formData1729711278587_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4215/invitationData172971127
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4233/formData1715330043661_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4233/invitationData171533006
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4234/formData1715939380811_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4234/invitationData171593938
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4290/formData1715330070848_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4290/invitationData171533006
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4381/formData1715330067349_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4381/invitationData171533018
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4382/formData1715330073902_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4382/invitationData171533006
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4383/formData1716479149538_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4391/formData1715329989697_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4391/invitationData171533006
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4414/formData1715329910641_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4470/formData1722452880724_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4470/invitationData172245288
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4471/formData1720616214860_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4471/invitationData172061621
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4472/formData1716479569059_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4476/formData1715330021227_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4476/invitationData171533007
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4516/formData1715329958495_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4516/invitationData171533001
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4528/formData1721261542102_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4528/invitationData172126154
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4540/formData1715329986185_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4540/invitationData171533006
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4541/formData1729792322887_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4541/invitationData172979232
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4544/formData1726591063532_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4544/invitationData172659106
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4638/formData1715272759264_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4638/invitationData171527272
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4639/formData1715272720458_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4639/invitationData171527272
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4640/formData1715768246710_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4640/invitationData171576824
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4641/formData1715768161551_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4641/invitationData171576816
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/5995/formData1729865528821_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/5995/invitationData172986552
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/5997/formData1729865534703_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/5997/invitationData172986553
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/5999/formData1729865535068_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/5999/invitationData172986553
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6026/formData1729865788039_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6026/invitationData172986578
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6028/formData1729865740303_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6028/invitationData172986574
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6030/formData1729865788535_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6030/invitationData172986578
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6034/formData1729865574519_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6034/invitationData172986557
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6036/formData1729865744146_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6036/invitationData172986574
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6176/formData1721143859591_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6176/invitationData172114385
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9594/formData1726863471539_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9594/invitationData172686347
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9596/formData1726863497625_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9596/invitationData172686349
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9763/formData1724949460783_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9765/formData1725368559883_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9767/formData1729865616900_#
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9769/formData1729865616552_#
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/10043/formData1727895993607_#
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/10067/formData1728999980220_#
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/10284/formData1730150433237_#
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2226/formData1717605336843_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2229/formData1717605331373_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2441/formData1717606292069_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2441/invitationData1717605339
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2505/formData1728323721471_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2505/invitationData1728323721
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2516/formData1717599256561_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2516/invitationData1717598500
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2668/formData1717597581328_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2668/invitationData1717597768
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2949/formData1721653523503_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2949/invitationData1721653524
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2950/formData1721653642328_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2950/invitationData1721653642
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2951/formData1720444972288_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2951/invitationData1720444972
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2952/formData1720447064217_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2952/invitationData1720447034
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3268/formData1717603828349_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3269/formData1717603876749_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3275/formData1717605643550_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3275/invitationData1717605910
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3364/formData1717603524702_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3365/formData1717603878375_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3434/formData1723066877310_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3434/invitationData1723066877
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3442/formData1717605547834_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3442/invitationData1717606426
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3443/formData1717605918773_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3443/invitationData1717605547
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3448/formData1728323945854_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3448/invitationData1728324186
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3473/formData1728323939296_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3473/invitationData1728323939
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3682/formData1728323551417_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3682/invitationData1728323551
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3977/formData1727365090061_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/3977/invitationData1727365089
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/402/formData1717605331022_###
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/402/invitationData17176054523
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4024/formData1728324156808_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4024/invitationData1728324156
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4028/formData1728074730861_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4028/invitationData1728074730
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/403/formData1717605642559_###
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/403/invitationData17176053364
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4141/formData1717606700986_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4141/invitationData1717605132
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4149/formData1728324449394_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4149/invitationData1728324449
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4287/formData1717598893134_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4287/invitationData1717599257
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4315/formData1726859366259_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4315/invitationData1726859366
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4407/formData1728500862161_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4407/invitationData1728500862
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4480/formData1717603003111_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4517/formData1717602618098_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4529/formData1717598123371_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4529/invitationData1717597887
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4539/formData1717599364241_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4539/invitationData1717598394
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4555/formData1717597376273_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4556/formData1717605451499_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4629/formData1717605015154_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4636/formData1717605035844_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4637/formData1717605641765_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/478/formData1717605333501_###
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/478/invitationData17176053365
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/479/formData1717605689032_###
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/479/invitationData17176056454
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6017/formData1717605689610_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6180/formData1727107928309_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6181/formData1726846787519_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6196/formData1717598126435_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6196/invitationData1717597888
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6202/formData1717679606235_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6202/invitationData1717679605
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6219/formData1717605640138_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6222/formData1717605334739_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6224/formData1717605215585_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6226/formData1718029016486_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6226/invitationData1718029016
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6314/formData1717605640980_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6315/formData1717605034826_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6316/formData1717605639444_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6317/formData1717605036230_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9275/formData1726857466664_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9275/invitationData1726857466
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9298/formData1726160633019_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9340/formData1719847692848_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9340/invitationData1719847692
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9343/formData1719849098227_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9343/invitationData1719849097
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9544/formData1722628480326_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9544/invitationData1722628480
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9582/formData1724088014214_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9624/formData1724772308054_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9793/formData1725917157320_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9797/formData1725916802318_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9799/formData1730382616362_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9799/invitationData1730382616
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9801/formData1727114984584_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9801/invitationData1727114984
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9855/formData1726761262623_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9855/invitationData1726761262
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9911/formData1729021607847_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9911/invitationData1729021608
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9940/formData1727109757775_##
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9940/invitationData1727109758
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9969/formData1728311223105_##
Source: chromecache_274.1.dr, chromecache_258.1.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/onsite/onsiteData.json
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://retaemsitesauth.rett.c1.vanguard.com/content/retail/public/us/en/investment-products/stocks.
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://retirementplans.vanguard.com/ekit/pages/ibm/enewsletter/index.html
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://retirementplans.vanguard.com/ekit/pages/ibm/enewsletter_term/index.html
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://rgh.ecs.retp.c1.vanguard.com/log-n4v-error
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://rmd.web.vanguard.com/
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/content/en/learn/financial-planning.html;https://sat-ownyourf
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/content/es/learn/library.html;https://sat-ownyourfuture.vangu
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/assets-details
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/dashboard;https://sat-ownyourfuture.vanguard.com/main/le
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/enroll/confirmation;https://api.ecs.us-east-1.inst.c1.va
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/env/sandbox08/retirement-savings-maximizer/details;https
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/env/sandbox12/contribution-details;http://localhost.vang
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/env/sandbox13/investment-portfolio;https://sat-ownyourfu
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/env/sandbox13/personalized-dashboard;https://sat-ownyour
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/financial-wellness/lesson-build-emergency-savings;https:
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/financial-wellness/lesson-manage-debt;https://sat-ownyou
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/financial-wellness/lesson-medicare-healthcare-planning
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/financial-wellness;https://sat-ownyourfuture.vanguard.co
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/installments/confirmation?planId;http://localhost.vangua
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/investment-portfolio;https://sat-ownyourfuture.vanguard.
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://sat-ownyourfuture.vanguard.com/main/use
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://satinstitutional.vanguard.com/consultant-hub-portal/;https://api.ecs.us-east-1.inse.c1.vangu
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://satinstitutional.vanguard.com/investment/solutions/target-date-funds;https://instaemdisp.ins
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://satinstitutional.vanguard.com/investment/solutions/target-date-funds?cmpgn=IIG:XX:FNWB:WOYW:
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://satinstitutional.vanguard.com/portal/hub/welcome;https://satinstitutional.vanguard.com/consu
Source: chromecache_205.1.dr, chromecache_237.1.dr	String found in binary or memory: https://satinstitutional.vanguardfffff.com/401k-plans/financial-well-being.html
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://satlogon.vanguard.com/logon;https://tx3029.vanguard.com:8043/logon
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://satpersonal-advisor.vanguard.com/manage/contact-us;https://satpersonal-advisor.vanguard.com/
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://satpersonal-advisor.vanguard.com/manage/tools/social-security/calculator;https://personal-ad
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://satpersonal.vanguard.com:54443/web/sc1/upgrade-to-brokerage/;https://satpersonal.vanguard.co
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://satpersonal.vanguard.com:54443/web/sc1/upgrade-to-brokerage/;https://satpersonal1.vanguard.c
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://satpersonal1.vanguard.com/edt-pas-tori/results;https://satpersonal-advisor.vanguard.com/reti
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://satsupport.vanguard.com/move-money;https://satsupport.vanguard.com/account-settings;https://
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://satyour-advisors.vanguard.com/portfolio-builder/transition-congratulations
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://search.web.vanguard.com/build/search-widget.esm.js
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://securityenrollment.web.vanguard.com
Source: chromecache_154.1.dr, chromecache_161.1.dr	String found in binary or memory: https://securityenrollment.web.vanguard.com/
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://securityenrollment.webt.vanguard.com/
Source: chromecache_299.1.dr, chromecache_223.1.dr, chromecache_313.1.dr, chromecache_316.1.dr, chromecache_178.1.dr, chromecache_232.1.dr, chromecache_187.1.dr, chromecache_283.1.dr	String found in binary or memory: https://sketch.com
Source: chromecache_257.1.dr, chromecache_273.1.dr	String found in binary or memory: https://static.vgcontent.info/web/cf/vg-libs/vg-vui/4.14.0/vui-graphics/images/vui_close_icons_20150
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://support.vanguard.com/move-money;https://support.vanguard.com/account-settings;https://suppor
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://support.vanguard.com;https://rhc-help-center-internal.ecs.us-east-1.retp.c1.vanguard.com/
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://taxcenter.cdn.webt.vanguard.com/tax-center
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://taxcenter.cdn.webt.vanguard.com/ytd-activity
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://taxhealth.cdn.webt.vanguard.com
Source: chromecache_205.1.dr, chromecache_244.1.dr, chromecache_237.1.dr, chromecache_272.1.dr	String found in binary or memory: https://ubt-lb.digital-cloud-prem.medallia.com
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://www.linkedin.com/company/vanguard
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://www.vanguard.com/pdf/vaicrs.pdf
Source: chromecache_323.1.dr, chromecache_193.1.dr	String found in binary or memory: https://www.vanguard.com/pdf/vmccrs.pdf
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://your-advisors.vanguard.com/portfolio-builder/transition-congratulations
Source: chromecache_244.1.dr, chromecache_272.1.dr	String found in binary or memory: https://your-advisorsi.vanguard.com/dashboard/faq;https://your-advisorsi.vanguard.com/financial-prof

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49893 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@28/289@158/57

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.vanguard.com/retirementplans"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6096 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3164 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6096 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3164 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Scripting	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
dart.l.doubleclick.net	142.250.184.230	true	false		unknown
dza2ku99396d4.cloudfront.net	18.66.112.28	true	false		unknown
adservice.google.com	142.250.186.162	true	false		unknown
eu-aa.online-metrix.net	91.235.132.129	true	false		unknown
adobetarget.data.adobedc.net	66.235.152.225	true	false		unknown
d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.net	91.235.134.131	true	false		unknown
idsync.rlcdn.com	35.244.174.68	true	false		unknown
d299zj3g6it160.cloudfront.net	3.160.150.55	true	false		unknown
d3guyaenypd883.cloudfront.net	52.222.236.24	true	false		unknown
cdnjs.cloudflare.com	104.17.24.14	true	false		unknown
corp.etm.assets.vgdynamic.info	18.239.83.89	true	false		unknown
www.google.com	142.250.185.100	true	false		unknown
demdex.net.ssl.sc.omtrdc.net	63.140.62.222	true	false		unknown
h64.online-metrix.net	192.225.158.1	true	false		unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.247.166.172	true	false		unknown
aa.online-metrix.net	91.235.132.129	true	false		unknown
medallia2.map.fastly.net	146.75.117.230	true	false		unknown
d29netgb4x6mup.cloudfront.net	18.239.50.87	true	false		unknown
ad.doubleclick.net	172.217.16.198	true	false		unknown
insight-api-kgw.zenimpact.io	35.227.196.211	true	false		unknown
d3480ohge1xe4o.cloudfront.net	13.32.121.59	true	false		unknown
content.zenimpact.io	35.244.204.77	true	false		unknown
corp.at2.assets.vgdynamic.info	18.245.46.68	true	false		unknown
d32fcx43tccxeh.cloudfront.net	3.160.150.128	true	false		unknown
d22dlotb04zv6c.cloudfront.net	13.225.78.16	true	false		unknown
hub2.zenimpact.io	34.160.105.74	true	false		unknown
d1sm3ej6ro1fad.cloudfront.net	3.161.82.25	true	false		unknown
d35614irbxz68t.cloudfront.net	18.173.205.93	true	false		unknown
d1apt6cftkxnkw.cloudfront.net	18.66.147.79	true	false		unknown
vanguard.d2.sc.omtrdc.net	63.140.62.17	true	false		unknown
adobedc.net.ssl.sc.omtrdc.net	63.140.62.17	true	false		unknown
d1mqvp9ngntjny.cloudfront.net	18.245.60.15	true	false		unknown
www.vanguard.com	192.175.213.88	true	false		unknown
h.online-metrix.net	91.235.132.130	true	false		unknown
digital.lb.sc4.medallia.com	199.102.178.60	true	false		unknown
geolocation.onetrust.com	172.64.155.119	true	false		unknown
cooladata.kampyle.com	35.241.45.82	true	false		unknown
corp-pmj.web.vanguard.com	unknown	unknown	false		unknown
resources.digital-cloud-prem.medallia.com	unknown	unknown	false		unknown
analytics-fe.digital-cloud-prem.medallia.com	unknown	unknown	false		unknown
corp-etm-arl.web.vanguard.com	unknown	unknown	false		unknown
udc-neb.kampyle.com	unknown	unknown	false		unknown
12332392.fls.doubleclick.net	unknown	unknown	false		unknown
constellation-static.web.vanguard.com	unknown	unknown	false		unknown
corp-at2.web.vanguard.com	unknown	unknown	false		unknown
adobedc.demdex.net	unknown	unknown	false		unknown
mc3-static-assets.web.vanguard.com	unknown	unknown	false		unknown
dpm.demdex.net	unknown	unknown	false		unknown
thevanguardgroup.tt.omtrdc.net	unknown	unknown	false		unknown
personal1.vanguard.com	unknown	unknown	false		unknown
logon.vanguard.com	unknown	unknown	false		unknown
vanguard.demdex.net	unknown	unknown	false		unknown
n4v.web.vanguard.com	unknown	unknown	false		unknown
oob-check.cdn.web.vanguard.com	unknown	unknown	false		unknown
edge.adobedc.net	unknown	unknown	false		unknown
mdl-medallia-digital.vanguard.com	unknown	unknown	false		unknown
ownyourfuture.vanguard.com	unknown	unknown	false		unknown
ccc.vgcontent.info	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=31313024266861633d312e6268716b6d352737422530307074797267712d30302731432737402532326d677573672d3a3a2733413134302537442730412d303072767b7265273232253349253230786b2d30322537462462687360693f2d3740273740273230442532322d324331313939312532432730325350434c273a312730317177626f697425323b7573677a66696f652d70637173776f70662f7b77606f6b762f62766e2d31253a3225374c2d3a4125354227303245253030273a41313b3333372530432532325b50414c2d3a3b2732337377606d69742730317d7167706c636f652f706173737f6f7266257b7d606d69742f60746e2d3327303a273746273041253742253232612532302d3a4b31393137362732432530304447504f273031777367726e616d6d2d70637b7b7f6d72642d646d726d253030273d4627374624606871626b5f696664657a353e	false		unknown
https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/logos/static/powered_by_logo.svg	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=ff673c82-2567-43cd-8b3f-29d44c0e802e	false		unknown
https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/zenapse/dist/zen_init.min.js	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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	false		unknown
https://ownyourfuture.vanguard.com/home/publogin	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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	false		unknown
https://constellation-static.web.vanguard.com/v0/fonts/ff-mark.css	false		unknown
https://h.online-metrix.net/dehVRf5Ds71ceRWX?1a8262cb1a9088f1=ASnaPYXRurgSuGgS8iAE_9fhyrx9Z7ssCK45mpwRTmMrbOQyhrLCgf30ve066ylYC3k3exnENIA_8MXXwYRkG5Giwb1SzvApkPx2dSzJUvKP1q9g_RtxsNnq7fcAPVvUI2t06X68djXCZ-MhfFp2q17TkqcL&fr	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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	false		unknown
https://ownyourfuture.vanguard.com/home/ulogin	false		unknown
https://constellation-static.web.vanguard.com/v1/fonts/ff-mark.css	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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	false		unknown
https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/digital-advisor/icons/twitter.svg	false		unknown
https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/learn/Vanguard.svg	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3324246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141313927354425324127303a72767b7267273230253341253a3270612d3a3a273744	false		unknown
https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/digital-advisor/icons/instagram.svg	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=31303624266861633d312e6268717f352d374225374027323274677a762d303157514750253032253341302532412d3a3a72617373756d726425303152495151554d50462d606c6f636b6d6425303a2d3b4331342535462532432730302d30446e6d656d6e27323225354c26626a7b637b76653d253540253232696c273a3027314337302530432532326332323b2d3a3a2733413027354426626a71697b763f27374027354025323266652532302d3a4b27323270637173776f7066273a3152435151554f50442d626c67636b676c2d3a30253243273742302530412f393127304136373330392535442d3243273d4a392732432d33312532433637363a3627374627304327354230253a432d333c2d3a413435343b322535442730412d3740332730412d33342532433c353534302d3d4625354427374426626a71697b765d6b6c6667783f3135	false		unknown
https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-base.min.ACSHASH6df78a87ceef59434ba7a52da51db948.css	false		unknown
https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCdcaf05ded5df440c85dbf48ae644ec25-source.min.js	false		unknown
https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.css	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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	false		unknown
https://constellation-static.web.vanguard.com/v0/fonts/thorndale.css	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3b3424246a63633d31267867655d7d786c6374653d2735422532303b273a3027314327354227323250415b53574d5a4c25606c6f636967642532302731492737407670776527324325323a7061717b7f677064253230273243322737462d3546273546	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=3a3024246a63633d31266a6873616d352d3542253230727479706771273a302731432735422732326d6f7d7365273a3a2d3141323230273744253041273a3072767b72672530322533412d3232726b2d3a30253744	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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	false		unknown
https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.min.js	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=33333324266861633d312e6268716b352d37422535402732326d6627303a273041363a312530433537382d3243363f3e3a3025324332273544253041273d402730306f772530322532433c3833273a4b3d3538253241363736393b27304b32273746273744246268736357696e666d70353032	false		unknown
https://n4v.web.vanguard.com/svg/c11n-spritesheet.js	false		unknown
https://constellation-static.web.vanguard.com/v1/fonts/dc1646ea-4041-4648-9540-0bd7cbd10dc1.woff2	false		unknown
https://mdl-medallia-digital.vanguard.com/pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/medallia-digital-embed.js	false		unknown
https://h.online-metrix.net/xjPAyVWXyWZspMJB?f953fd9ebcef10bc=CUdWOQkpxKjMQqWkdYwmXMCb8oT6z6NpVsn2X6m1Iln-LwSp-gmJi7MJ5pnIBeJ7t_nnJgUqMo_JW9iqOglpRcY0n7D_nL6qalCwHfCFGuf5E6aSXHbRO43blNG0-LL32Ob2jeHd4YJBhT7hUESKYpNDz3tu2CaSd7i3maaWOR_fUFEj2yPWfOngYvBsQOrhKygfpx7x6GnkCEfqdacyxWygWQ&je=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	false		unknown
https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/vector-down.svg	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/1778/formData1717598393762_en.json	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3864/formData1715330043247_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/2516/invitationData1717598500	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2054/formData1715330286194_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9343/formData1719849098227_##	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://ownyourfuture.vanguard.com/main/financial-wellness/lesson-manage-debt	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://sat-ownyourfuture.vanguard.com/main/assets-details	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3701/formData1715330011272_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://etfs-stocks.web.vanguard.com/c/trade/ticket/confirmation;https://personal1.vanguard.com/twe-	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3864/invitationData171533006	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://apii.ecs.us-east-1.insp.c1.vanguard.com/pu1-asset-mgmt-port-construct/;https://apii-inactive	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://ownyourfuture.vanguard.com/main/required-minimum-distribution/maintain/landing	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4024/invitationData1728324156	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9940/formData1727109757775_##	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://digital-advisor.vanguard.com/dashboard/faq;https://digital-advisor.vanguard.com/financial-pr	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://ubt-lb.digital-cloud-prem.medallia.com	chromecache_205.1.dr, chromecache_244.1.dr, chromecache_237.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4471/invitationData172061621	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://satpersonal-advisor.vanguard.com/manage/contact-us;https://satpersonal-advisor.vanguard.com/	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://content.zenimpact.io/dist/data/serendipity/result.html	chromecache_252.1.dr, chromecache_256.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/10067/formData1728999980220_#	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6034/invitationData172986557	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3814/formData1715329990271_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2469/formData1715330034870_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/479/invitationData17176056454	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://satpersonal1.vanguard.com/edt-pas-tori/results;https://satpersonal-advisor.vanguard.com/reti	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9911/formData1729021607847_##	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3391/invitationData171533000	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9275/invitationData1726857466	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4141/invitationData1717605132	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://satyour-advisors.vanguard.com/portfolio-builder/transition-congratulations	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/1358/invitationData171533003	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/5999/invitationData172986553	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9594/invitationData172686347	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://ownyourfuture.vanguard.com/main/dashboard;https://ownyourfuture.vanguard.com/main/personaliz	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://ownyourfuture.vanguard.com/main/installments/confirmation?planId;https://ownyourfuture.vangu	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://sat-ownyourfuture.vanguard.com/main/env/sandbox12/contribution-details;http://localhost.vang	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/launch-ecb7	chromecache_202.1.dr, chromecache_166.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2844/formData1715330065163_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/2473/invitationData171533000	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://api.ecs.us-east-1.retp.c1.vanguard.com/ps9-pas-tools/medicare-match/results;https://personal	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4149/formData1728324449394_##	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3088/formData1715330010745_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4641/invitationData171576816	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://sat-ownyourfuture.vanguard.com/content/es/learn/library.html;https://sat-ownyourfuture.vangu	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4476/invitationData171533007	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9544/formData1722628480326_##	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3282/invitationData171533000	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://n4v.web.vanguard.com	chromecache_323.1.dr, chromecache_193.1.dr	false		unknown
https://ownyourfuture.vanguard.com/main/investment-portfolio;https://ownyourfuture.vanguard.com/main	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3391/formData1715330013328_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/6026/formData1729865788039_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://investor.vanguard.com/terms-conditions	chromecache_323.1.dr, chromecache_193.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4540/formData1715329986185_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/4472/formData1716479569059_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://www.linkedin.com/company/vanguard	chromecache_323.1.dr, chromecache_193.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/6181/formData1726846787519_##	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3175/formData1715329933762_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/4636/formData1717605035844_##	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://ownyourfuture.vanguard.com/main/financial-wellness/lesson-build-emergency-savings;https://ow	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9797/formData1725916802318_##	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://satinstitutional.vanguardfffff.com/401k-plans/financial-well-being.html	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://ownyourfuture.vanguard.com/main/contribution-details	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3504/formData1715329616623_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/403/formData1717605642559_###	chromecache_244.1.dr, chromecache_272.1.dr	false		unknown
https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/3002/formData1715330018267_#	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://sat-ownyourfuture.vanguard.com/main/financial-wellness;https://sat-ownyourfuture.vanguard.co	chromecache_205.1.dr, chromecache_237.1.dr	false		unknown
https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6	chromecache_236.1.dr, chromecache_173.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
35.244.204.77	content.zenimpact.io	United States		15169	GOOGLEUS	false
13.32.27.10	unknown	United States		7018	ATT-INTERNET4US	false
3.160.150.128	d32fcx43tccxeh.cloudfront.net	United States		16509	AMAZON-02US	false
54.170.25.213	unknown	United States		16509	AMAZON-02US	false
142.250.185.100	www.google.com	United States		15169	GOOGLEUS	false
18.173.205.93	d35614irbxz68t.cloudfront.net	United States		3	MIT-GATEWAYSUS	false
18.165.227.22	unknown	United States		3	MIT-GATEWAYSUS	false
66.235.152.225	adobetarget.data.adobedc.net	United States		15224	OMNITUREUS	false
54.77.215.91	unknown	United States		16509	AMAZON-02US	false
34.160.105.74	hub2.zenimpact.io	United States		2686	ATGS-MMD-ASUS	false
192.175.162.88	unknown	United States		32701	AS-VANGUARDUS	false
13.224.245.51	unknown	United States		16509	AMAZON-02US	false
104.18.32.137	unknown	United States		13335	CLOUDFLARENETUS	false
63.140.62.222	demdex.net.ssl.sc.omtrdc.net	United States		15224	OMNITUREUS	false
18.239.83.89	corp.etm.assets.vgdynamic.info	United States		16509	AMAZON-02US	false
18.239.36.40	unknown	United States		16509	AMAZON-02US	false
18.66.147.79	d1apt6cftkxnkw.cloudfront.net	United States		3	MIT-GATEWAYSUS	false
52.222.236.24	d3guyaenypd883.cloudfront.net	United States		16509	AMAZON-02US	false
18.172.153.97	unknown	United States		3	MIT-GATEWAYSUS	false
142.250.184.230	dart.l.doubleclick.net	United States		15169	GOOGLEUS	false
35.227.196.211	insight-api-kgw.zenimpact.io	United States		15169	GOOGLEUS	false
18.245.46.39	unknown	United States		16509	AMAZON-02US	false
13.225.78.16	d22dlotb04zv6c.cloudfront.net	United States		16509	AMAZON-02US	false
13.225.78.59	unknown	United States		16509	AMAZON-02US	false
63.140.62.17	vanguard.d2.sc.omtrdc.net	United States		15224	OMNITUREUS	false
172.64.155.119	geolocation.onetrust.com	United States		13335	CLOUDFLARENETUS	false
3.160.150.55	d299zj3g6it160.cloudfront.net	United States		16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
66.235.152.156	unknown	United States		15224	OMNITUREUS	false
35.244.174.68	idsync.rlcdn.com	United States		15169	GOOGLEUS	false
104.17.25.14	unknown	United States		13335	CLOUDFLARENETUS	false
91.235.132.130	h.online-metrix.net	Netherlands		30286	THMUS	false
172.217.16.198	ad.doubleclick.net	United States		15169	GOOGLEUS	false
142.250.181.230	unknown	United States		15169	GOOGLEUS	false
63.140.62.27	unknown	United States		15224	OMNITUREUS	false
54.229.135.186	unknown	United States		16509	AMAZON-02US	false
52.222.236.44	unknown	United States		16509	AMAZON-02US	false
91.235.132.129	eu-aa.online-metrix.net	Netherlands		30286	THMUS	false
146.75.117.230	medallia2.map.fastly.net	Sweden		30051	SCCGOVUS	false
18.245.46.68	corp.at2.assets.vgdynamic.info	United States		16509	AMAZON-02US	false
91.235.134.131	d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.net	Netherlands		30286	THMUS	false
18.245.60.15	d1mqvp9ngntjny.cloudfront.net	United States		16509	AMAZON-02US	false
104.17.24.14	cdnjs.cloudflare.com	United States		13335	CLOUDFLARENETUS	false
18.239.50.87	d29netgb4x6mup.cloudfront.net	United States		16509	AMAZON-02US	false
142.250.186.162	adservice.google.com	United States		15169	GOOGLEUS	false
18.66.112.28	dza2ku99396d4.cloudfront.net	United States		3	MIT-GATEWAYSUS	false
13.227.219.103	unknown	United States		16509	AMAZON-02US	false
3.161.82.25	d1sm3ej6ro1fad.cloudfront.net	United States		16509	AMAZON-02US	false
199.102.178.60	digital.lb.sc4.medallia.com	United States		30109	MEDALLIA-INCUS	false
3.160.150.35	unknown	United States		16509	AMAZON-02US	false
35.241.45.82	cooladata.kampyle.com	United States		15169	GOOGLEUS	false
13.32.121.59	d3480ohge1xe4o.cloudfront.net	United States		16509	AMAZON-02US	false
192.225.158.1	h64.online-metrix.net	United States		30286	THMUS	false
192.175.213.88	www.vanguard.com	United States		32701	AS-VANGUARDUS	false
54.247.166.172	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States		16509	AMAZON-02US	false
142.250.186.66	unknown	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546923
Start date and time:	2024-11-01 17:51:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://www.vanguard.com/retirementplans
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@28/289@158/57
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.78, 66.102.1.84, 34.104.35.123, 2.18.64.32, 2.18.64.27, 142.250.181.234, 142.250.186.106, 172.217.18.106, 172.217.18.10, 142.250.186.170, 172.217.16.202, 142.250.185.202, 216.58.212.138, 142.250.185.234, 216.58.206.42, 142.250.184.234, 142.250.186.138, 142.250.185.106, 142.250.184.202, 142.250.186.42, 172.217.16.138, 142.250.184.227, 142.250.185.110, 172.217.16.206, 142.250.74.206
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, logon.vanguard.com.akadns.net, clientservices.googleapis.com, e184614.a.akamaiedge.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, logon.vanguard.com.edgekey.net, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.vanguard.com/retirementplans

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 15:51:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9803871149430563
Encrypted:	false
SSDEEP:	48:8+Zd/T3/aHMidAKZdA1FehwiZUklqehly+3:8a7hqy
MD5:	9F2CB5A0EC0C5DD49CFD634FEBD19D03
SHA1:	0A33FB7CA32E53CD0247F643AE0EB32000A7A7DF
SHA-256:	AE5CD1B37B46829E8E2D784A30F217ED0D672DCCC19CCA61017DD89C32AB310B
SHA-512:	A80A9B4FE630FA0AB3A4C820801A7584A621E7235C93D81D18B79DD0654C7DC1FF9145BD47CD8C138A071C5562FD992A4CED8AD1197DC8563DA87FA1BB20C70B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....J.\~,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaYr.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY\|.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY\|.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY\|............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY}............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L.G.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 15:51:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.995881570946616
Encrypted:	false
SSDEEP:	48:8jd/T3/aHMidAKZdA1seh/iZUkAQkqehay+2:8Z739Qny
MD5:	B58CB9541F3D030BD0071DFCA6EDC3E0
SHA1:	D139F0C8BA3B1A8C87FF1D75B8E76EAC0560E0C3
SHA-256:	D91225D02AD42F100ED2CF9C9C06685E67E3CA10BC0497E5E8F2C871052A7B59
SHA-512:	E6F4C5237C02C3A1356A27E7EC9DE699CBB7DDFA61E7CF55DB9560C97EC2CD6FEB63EFF21F2B59D593B4713F45AD89FC6F710A1C7CEADC1458F43F9D6DF317EA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......\~,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaYr.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY\|.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY\|.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY\|............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY}............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L.G.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0043467883346056
Encrypted:	false
SSDEEP:	48:8+d/T3/AHMidAKZdA14meh7sFiZUkmgqeh7sMy+BX:8m7dnmy
MD5:	4EE6BFF1479BACB5E5A586495D23B925
SHA1:	CB0EF4A550C24A5B5BED231D6F6FAFEEB5ED9827
SHA-256:	AB0EAC046F1F8295BE50856CE3043BBC0653CEDB66F58F7F56E4B5215BF4372E
SHA-512:	898D7AAFE8772270A23BCBB4BC8B4138979EFE0CD6F5D9C4B08ED42CB7741294BD5794E69E83749EBC805F4A10D05C9CE83835D60BF114393E52DB7D0A50D001
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaYr.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY\|.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY\|.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY\|............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L.G.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 15:51:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9922933755537278
Encrypted:	false
SSDEEP:	48:81d/T3/aHMidAKZdA1TehDiZUkwqehey+R:837Eky
MD5:	173C1AC99C69AE9BD6875F8C6227C9F1
SHA1:	3175FA31920A30A9CD9673FCB9FB939E56F6D9A1
SHA-256:	3317A2C29AA6EAC7D6B6C93B9E168D70BEEBC65921EB7CD72CB0C6612E9A7141
SHA-512:	2AA9F11DCCE028C2AC229F5B1FF0A090B61B486EF5F783F8021D826C9FE69B0EA79907F96882CF11E0280B9DC9660C65A7A4199F311777E11F5CCFA418BB58C9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....h..\~,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaYr.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY\|.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY\|.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY\|............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY}............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L.G.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 15:51:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9814242634009216
Encrypted:	false
SSDEEP:	48:8sd/T3/aHMidAKZdA1dehBiZUk1W1qehoy+C:847k9Iy
MD5:	4EE9F661DAF3A515514CB1F21E72B0E3
SHA1:	13A985EC244E46FAF3DAEFBBF3532D4EBE64AD48
SHA-256:	C9CAABEA4D981838BA446E4739FB16B36B77823FB6EC92AC9A11A949AF875C2A
SHA-512:	68C4E07B79D2039932F09EBE5AF643A3FB621B8B78A87A7DA4BCE4ED338C0BA2A7ABB8B6B0F6C9ACA65221C7FF6577FF6E17E753726B57E7266F1DC1D474970F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......\~,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaYr.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY\|.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY\|.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY\|............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY}............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L.G.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 15:51:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9888297918055806
Encrypted:	false
SSDEEP:	48:8fd/T3/aHMidAKZdA1duTeehOuTbbiZUk5OjqehOuTbmy+yT+:8l7WTfTbxWOvTbmy7T
MD5:	97CA3797706B1DF650509D4DD983445B
SHA1:	1DA543940B1712C0B5FD33A3DA91F14DC17ACEF2
SHA-256:	82AFE6A80C754312656C01A63F43B1F1061BCFEF0CF00F98FF2F6A65A981770A
SHA-512:	4FE8B816C5830D8288500FA9515E60F1891A94DDA75123EF9D86228A86CD56F6C249A2348014E825E75B58BDEC7843E9E886CF075CFCDC916B9C419A5CC5D34B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......\~,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaYr.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY\|.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY\|.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY\|............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY}............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L.G.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 154

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	644
Entropy (8bit):	5.182760708430956
Encrypted:	false
SSDEEP:	12:TnPPbJw9a9Xyk1LBz2GSX+xhXZlLErU+3lsb2mMm+5akhC:T29Wyk1VKhiplLHR7+5G
MD5:	BB232071FC269E3EDB99E8C7229274C6
SHA1:	EDAC1D8F21D0A1DF18F6DD057AEBAF6ABE60C507
SHA-256:	704533C9B56167243AA3413354E0A6466DB93579B5778DFEF87DF2F178AC942E
SHA-512:	52729CE683BC44CA5AE131FAEAFF749789123714D8D3711A6F340401EC946140C81DEDBCD65628E648EC2606F470AE290BE5A5CC86587B1C61697292442A0088
Malicious:	false
Reputation:	low
Preview:	const a = {. API: "https://personal1.vanguard.com/se2-security-code-enrollment-consumer-api/checkCookie",. TFQ_ENDPOINT: "https://securityenrollment.web.vanguard.com/",. EXCEPTION_LIST: ["logon.vanguard.com", "securityenrollment.web.vanguard.com", "investor.vanguard.com", "challenges.web.vanguard.com"].};.var o = a.EXCEPTION_LIST;.if (!o.includes(window.location.hostname)) {. var r = await c();. r === !0 && (window.location.href = a.TFQ_ENDPOINT);.}.async function c() {. var t = a.API, n = !1;. try {. var e = await fetch(t, { credentials: "include" });. e.status == 200 && (n = await e.json());. } catch {. }. return n;.}.

Chrome Cache Entry: 155

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	439
Entropy (8bit):	5.182554877550943
Encrypted:	false
SSDEEP:	6:jwkMKnggYKQxUGF3m+RVeQQKb82XMYA/B3gYKQxUGF3m+RVeQQKb8EaFLTbb3Nsb:jvgaB+Rw6dct/BaB+Rw6ILXb3NVKBr
MD5:	504F92FA56BAAB020D9B875856F740B9
SHA1:	01142BECF2EACA1F251AC2114B4A1994A7429B13
SHA-256:	7A55B2E1B382B1F6336E12CEC95FBB9E4B1B11D7DBB85FCA22178E003CD67383
SHA-512:	77EF07A97F569409116CEA6E37B1298A08B94C73421EDF44F69F957C3C82649E5B8782C7ABDA79824CF1A01FF9C045C3F1639BD6863E93D4937DD2C7295042DA
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCa08d54b45c824bd99f742f7a72b0292e-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCa08d54b45c824bd99f742f7a72b0292e-source.min.js', "<script src=\"https://cdn.bttrack.com/universal/44844\" async></script>");

Chrome Cache Entry: 156

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6476), with no line terminators
Category:	downloaded
Size (bytes):	6476
Entropy (8bit):	5.270275798173518
Encrypted:	false
SSDEEP:	192:qP3uFQcXIhFB3KurcAMUAy2f3Skg+MK1GWaL:qP3uFTIhFZL4UAyMgrIS
MD5:	F9692BF66D0233782F900F4D9ACEC391
SHA1:	F549F2FEA3F9F45C9FA6255BF5DE02B0C5380A6D
SHA-256:	10CA6647966AC8A8998FF4A22F4E8FF3F80FD2E2E4D4FE31ABFCFB0C0FE4A188
SHA-512:	655507026B7EA0C1E367092B45083C2D71F4A702E5FA63243A019EA0CE7AB600691F32BBF558A8119227FC2C96DBA357B7D11C5545F02A7B6E15DF8894A5614C
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/zenapse/dist/zen_init.min.js
Preview:	(()=>{if(window.Zen)return console.warn("Zenapse script already loaded. Not loading again."),!1;window.Zen=(()=>{const e=()=>{document.querySelector("html").style.opacity=1},n=()=>Math.floor(1e10*Math.random()),t=(e,t)=>new Promise((i,a)=>{let o=t?"?ver="+n():"",d=document.createElement("script");d.src=e+o,d.async=!0,d.onload=(()=>i(d)),d.onerror=(()=>a(new Error(`Script load error for ${src}`))),document.head.appendChild(d)});var i;const a=async e=>{window.zen={}\|\|zen,window.zen.config=e,window.zen.preview=!1;let i=u(),a=e.config;if(window.zen.config.isSPA=window.zen.config.isSPA\|\|!1,""!==i){const n=await f(e.config,i);a=200===n.status?n.file:e.config,200===n.status&&h(i),i.indexOf("p")>-1&&(window.zen.preview=!0)}try{const i=await fetch(`${e.cdnPath}/dist/data/${a}?version=${n()}`),o=await i.json();window.zen.d=JSON.parse(JSON.stringify(o)).config,t(window.zen.config.scaffold,!0)}catch(e){console.warn(e)}},o=e=>{if(navigator.cookieEnabled)return window.localStorage.getItem(e)},d=(e,n

Chrome Cache Entry: 157

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	439
Entropy (8bit):	5.182554877550943
Encrypted:	false
SSDEEP:	6:jwkMKnggYKQxUGF3m+RVeQQKb82XMYA/B3gYKQxUGF3m+RVeQQKb8EaFLTbb3Nsb:jvgaB+Rw6dct/BaB+Rw6ILXb3NVKBr
MD5:	504F92FA56BAAB020D9B875856F740B9
SHA1:	01142BECF2EACA1F251AC2114B4A1994A7429B13
SHA-256:	7A55B2E1B382B1F6336E12CEC95FBB9E4B1B11D7DBB85FCA22178E003CD67383
SHA-512:	77EF07A97F569409116CEA6E37B1298A08B94C73421EDF44F69F957C3C82649E5B8782C7ABDA79824CF1A01FF9C045C3F1639BD6863E93D4937DD2C7295042DA
Malicious:	false
Reputation:	low
URL:	https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCa08d54b45c824bd99f742f7a72b0292e-source.min.js
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCa08d54b45c824bd99f742f7a72b0292e-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCa08d54b45c824bd99f742f7a72b0292e-source.min.js', "<script src=\"https://cdn.bttrack.com/universal/44844\" async></script>");

Chrome Cache Entry: 158

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	165936
Entropy (8bit):	6.680662002749288
Encrypted:	false
SSDEEP:	3072:CJxh8n/2iQFwKBUvdiuc+YXz8h2iPfzWIRuT9QY0XG8AZPm6Ryf0lG/elwz:002iQFwKBUvdiuc+Kz8OcIy0Q/e6z
MD5:	476D44B0F6C8939BB8859C9CE7598310
SHA1:	CD8FB565970C2750A12B3B47B1869578F7A041FB
SHA-256:	979AF22174E46123E6FB3C96D96360BA0EA7A5DBD00AE97AB1EBEFAE9C284D37
SHA-512:	78CCF6D558A930602E4121E20B2C450387729982A78322E17968BF1B9004873CD36356237798EBE826A614167A930F913516F3A7F728771CC857E922C88BFF7C
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/fonts/MARKPROBOLD.otf
Preview:	OTTO.......@CFF .9.....<....DSIG..z...n....DGPOS.........~.GSUB......H...&BOS/2h.t4...0...`cmap9..+...(....head.t.{.......6hhea...'.......$hmtx\|.y.........maxp.'P....(....name\|......,....post.C......... .........YhZ_.<..........C.......Cv....'.!.........................>.....!.................'..P..'.....v........./......./...h....................P...........FSI........,.\...... ..........x... ...................+.W.c....._.x.....J...X.....L.n.L.@...P.......T.-.o..S.......g.5.4.f.C.x.4...)...C...>.L.>...X...B..S...T.............{.d.........h.....\.....4.......@.\.....U...i...........G..."...w.\.).....\.P...I._... ...........".L...R....._...........@...y...........M.......M...M.Z.M.Q.)...M.......d.....G.......,.........M.......M.H.....E...).....K.......J...h.....`.q._.....q.@...v.....+.X.x...x...x...x.>.......r.....I.n...=.?.X.....-.o...%.....Z.%.......5...)...........o.....g...).).e.=.?.^...)...).C.).{.&...............................\.4...4...4...4...U...U.t.U...U...}._."...w.\.w.\

Chrome Cache Entry: 159

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12505)
Category:	downloaded
Size (bytes):	363620
Entropy (8bit):	5.58077611846137
Encrypted:	false
SSDEEP:	6144:8FHCOTkgbyiCdRCNg7kPdm6s7YOI2UJVCR:8F5TkPiCdwNg7kVmt7
MD5:	9777EE297D1CBC42E2E1D5D5DC213022
SHA1:	3090DE3464444C8DDD05D3B4F8F7479DCC3F3C93
SHA-256:	F9031239875C9D84D903678AAB7ABFCA89D236370F36E8F1AB64832819D00118
SHA-512:	BC75AE29EB34CD24EB9E7EC4E359C55742D01712BD7E84A0132EC1358890634BA27BA514F7477AF86FE98F41587E2BEE1E17019C606D7E194372715611731637
Malicious:	false
Reputation:	low
URL:	https://mdl-medallia-digital.vanguard.com/pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/generic1715176030848.js
Preview:	.(function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.54.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLDATA_API_HOST:'udc-neb.kampyle.com/',USERSNAP_ONPREM_HOST_PREFIX:'https://md-scp.kampyle.com/',USER_AGENT_CLIENT_HINTS_LIST:'["brands", "mobile", "platform", "architecture", "model", "bitness", "platformVersion", "fullVersionList", "wow64", "uaFullVersion"]'},SRC:{OPEN_SANS:'resources/form/FormBuilder/vendor/fonts-googleapis/css/open-sans-v14.css',COOLADATA:'resources/onsite/js/cool-2.1.15.min.js',OOPS:'resources/onsite/images/oops.svg'},FORM_HEIGHT:'450',FORM_WIDTH:'450',COOKIE_EXPIRATION:365,DEVICES:{DESKTOP:'desktop',MOBILE:'mobile',TABLET:'tablet',},FEATURE_VERSIONS:{MOBILE_DYNAMIC_SIZING:2,},TIME_FORMATS:{SECONDS:'seconds',MINUTES:'minutes',HOURS:'hours',DAYS:'days',WEEKS:'weeks',MONTHS:'months',YEARS:'yea

Chrome Cache Entry: 160

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1469)
Category:	downloaded
Size (bytes):	304269
Entropy (8bit):	5.116725438021271
Encrypted:	false
SSDEEP:	1536:PSK6CmjeH7jeHUKte0wfxkc8CR4YQ9Q2EoU:PaCmjeH7jeHDez8CR4YQ9Q2EoU
MD5:	1235395EE3249CF0F9725A3F8309380E
SHA1:	605331D0A7E07162161F9CE4A6ED10B63EED5DF0
SHA-256:	63EB773935FD51754A778DB6BC5A4C327A572FBAC2593F6D09B0C27EE696F36C
SHA-512:	38F4CABF033AD40DCF32E78627A778C972284D807E8C112AB59DD3CF766C7F2137BBE48F2657B05381E95DC14773C5E6DC4CB1F01FC5375657AC9E4193F8C343
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/vanguard-core-components/clientlibs/clientlib-base.min.ACSHASH1235395ee3249cf0f9725a3f8309380e.css
Preview:	@charset "UTF-8";.cmp-accordion__header{margin:0}..cmp-accordion__button{display:block;width:100%;text-align:left}..cmp-accordion__panel--hidden{display:none}..cmp-accordion__panel--expanded{display:block}..cmp-tabs__tablist{display:flex;flex-wrap:wrap;padding-left:0;list-style:none}..cmp-tabs__tab{box-sizing:border-box;border-bottom:1px solid transparent;padding:.5rem 1rem;cursor:pointer}..cmp-tabs__tab--active{border-color:inherit}..cmp-tabs__tabpanel{display:none}..cmp-tabs__tabpanel--active{display:block}..cmp-tabs__tablist{display:flex;flex-wrap:wrap;padding-left:0;list-style:none}..cmp-tabs__tab{box-sizing:border-box;border-bottom:1px solid transparent;padding:.5rem 1rem;cursor:pointer}..cmp-tabs__tab--active{border-color:inherit}..cmp-tabs__tabpanel{display:none}..cmp-tabs__tabpanel--active{display:block}..cmp-tabs__tablist{display:flex;flex-wrap:wrap;padding-left:0;list-style:none}..cmp-tabs__tab{box-sizing:border-box;border-bottom:1px solid transparent;padding:.5rem 1rem;curso

Chrome Cache Entry: 161

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	644
Entropy (8bit):	5.182760708430956
Encrypted:	false
SSDEEP:	12:TnPPbJw9a9Xyk1LBz2GSX+xhXZlLErU+3lsb2mMm+5akhC:T29Wyk1VKhiplLHR7+5G
MD5:	BB232071FC269E3EDB99E8C7229274C6
SHA1:	EDAC1D8F21D0A1DF18F6DD057AEBAF6ABE60C507
SHA-256:	704533C9B56167243AA3413354E0A6466DB93579B5778DFEF87DF2F178AC942E
SHA-512:	52729CE683BC44CA5AE131FAEAFF749789123714D8D3711A6F340401EC946140C81DEDBCD65628E648EC2606F470AE290BE5A5CC86587B1C61697292442A0088
Malicious:	false
Reputation:	low
URL:	https://oob-check.cdn.web.vanguard.com/challenge-check.esm.js
Preview:	const a = {. API: "https://personal1.vanguard.com/se2-security-code-enrollment-consumer-api/checkCookie",. TFQ_ENDPOINT: "https://securityenrollment.web.vanguard.com/",. EXCEPTION_LIST: ["logon.vanguard.com", "securityenrollment.web.vanguard.com", "investor.vanguard.com", "challenges.web.vanguard.com"].};.var o = a.EXCEPTION_LIST;.if (!o.includes(window.location.hostname)) {. var r = await c();. r === !0 && (window.location.href = a.TFQ_ENDPOINT);.}.async function c() {. var t = a.API, n = !1;. try {. var e = await fetch(t, { credentials: "include" });. e.status == 200 && (n = await e.json());. } catch {. }. return n;.}.

Chrome Cache Entry: 162

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16240), with no line terminators
Category:	downloaded
Size (bytes):	16240
Entropy (8bit):	5.613245925068857
Encrypted:	false
SSDEEP:	384:x/dFI1c5Hr3797hIHXtsphUHSWs1jeHe4s9j7HkKsKjpmfJfsOu40m6V+GuX0mJD:tHI1c5Hr3797hIHXtsphUHSWs1jeHe4v
MD5:	6B959981D6245C30A1C75A8667174ACF
SHA1:	775FD428B1BB2ACC4E3CB64FB60D07237B1C908B
SHA-256:	2B099A7E940B17CDD87F8235B393DF7BC070C193075F5FAB27F887108A5ECB73
SHA-512:	806F56458EA04E34C9DB4715DBA889DCC473A4532EDDDC352FFB59CB7B24BF723B240A311E27B85C4A1C6968C2355211FB144E2EA00BCE50C039F195CB389897
Malicious:	false
Reputation:	low
URL:	https://12332392.fls.doubleclick.net/activityi;dc_pre=COfQ46DMu4kDFcjKOwIdRz8pcg;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=COfQ46DMu4kDFcjKOwIdRz8pcg;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D"/><img src="https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDEyMzMyMzkyCmFkdmVydGlzZXJfZG9tYWluOiAiaHR0cHM6Ly92YW5ndWFyZC5jb20iCnhmYV9hdHRyaWJ1dGlvbl9pbnRlcmFjdGlvbl90eXBlOiBDT05WRVJTSU9OCmRlYnVnX2tleTogMTQ5MjI4NTAzMDUzMDE3NDQyNzkKY3RjX2NvbnZlcnNpb25fYnVja2V0OiAwCmFyY2hldHlwZV9pZDogMTIKYXJjaGV0eXBlX2lkOiAxMwphcmNoZXR5cGVfaWQ6IDE0CmFyY2hldHlwZV9pZDogMTUKYXJjaGV0eXBlX2lkOiAxNgphcmNoZXR5cGVfaWQ6IDE3CmFyY2hldHlwZV9pZDogMTgKYXJjaGV0eXBlX2lkOiAxOQphcmNoZXR5cGVfaWQ6IDIwCmFyY2hldHlwZV9pZDogMjEKYXJja

Chrome Cache Entry: 163

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3577)
Category:	dropped
Size (bytes):	3578
Entropy (8bit):	5.3124682195669575
Encrypted:	false
SSDEEP:	96:yvLXLTT54nhpL5CN6jnYEH/i3psNXDXzxIlN9rQr:SCTAWqZsNzANWr
MD5:	B51BAA8E9E038597C2CBF9049C3270C6
SHA1:	10D9AB6B0C3FDB3FBA54FA31AD200D8423366D1B
SHA-256:	41DD5E421FE221A7D2921D6FA2B36E8B01A9F2C054AAEF5FAD866FE896C1D1E0
SHA-512:	1B95EA9F6CF0FD698CE43C99F76CB0E138A2EF7FA5D53407BC4D1AE8E4E89DF713E829F3C48ABD319F0770AFA09D16F75E1A8628705BB40FDA54E9E6B9B56002
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(){return(new Date).getTime()}function c(n,e){var i=n.cookie.match(new RegExp("(?:^\|; )"+encodeURIComponent(e).replace(/([\.$?\|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;])"));return i?decodeURIComponent(i[1]):""}function l(n,e,i,o){var r=o.days_until_expiration,t=void 0===r?1:r,a=o.path,d=void 0===a?"/":a,_=o.domain,c=void 0===_?null:_,l=function(n){var e=(new Date).getTime()+n,i=new Date;return i.setTime(e),i.toUTCString()}(864e5*t),v=encodeURIComponent(e)+"="+encodeURIComponent(i);v=v+";expires="+l,c&&(v=v+";domain="+c),v=v+";path="+d,n.cookie=v}function e(n,e){(new n.Image).src="https://px.ads.linkedin.com/collect?"+e}function i(n,e){(new n.Image).src="https://px.ads.linkedin.com/insight_tag_errors.gif?"+e}function r(n){try{return n.self!==n.top}catch(e){return!0}}function o(n,e){void 0===e&&(e=r);var i=n.document;if(e(n)&&i.referrer){var o=i.createElement("a");return o.href=i.referrer,o}return n.location}function t(n){var e={},i=[];if(n._bizo_data_par

Chrome Cache Entry: 164

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=COfQ46DMu4kDFcjKOwIdRz8pcg;u1=mcmid%7C86591681061654023263392632422581144886;u3=new;u5=logged%20out;cat=vgent0;num=9766163611552;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=visit0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 165

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7111
Entropy (8bit):	3.8713445774024895
Encrypted:	false
SSDEEP:	192:Sooe5B8isDL3IS/zgYjl50hAVXxFoKh1TQU:CKaVjIS7l2+h7vQU
MD5:	B5A24523440B731B1EADFA5F45D53331
SHA1:	E9998E372F1DDEDC84262DB9BF36EA8619793A9B
SHA-256:	ABD42A64D8B22B84798BA771751CFB31D02C1DF999F95A4E85C7521A7A6633AD
SHA-512:	71236F0DDC683651B284606E43556B42C1A9F00E2EF497B5B9D55929FF5031119562DD6C8640C4B7E937ADBDBDB5FE0909A8FB7D4E3AA6191754CF80D291FE1D
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/learn/Vanguard%20logo.svg
Preview:	<svg width="111" height="24" viewBox="0 0 111 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M48.5713 5.38133H61.3291L61.3292 13.2913C61.3324 13.5149 61.4081 14.9674 62.836 14.9526L62.8534 14.9501C63.0228 14.9487 64.3801 15.0509 64.5259 13.068L64.537 12.8577L64.5398 12.8601L64.5398 7.37973C64.5242 6.92454 64.4032 5.94588 63.6398 5.79121L63.4983 5.77275V5.61294L69.0062 5.39736L69.0011 15.7022C69.0052 16.1491 69.0916 17.3736 69.9517 17.5337L70.094 17.5499V17.6936L64.5334 17.6904V16.2528L64.3936 16.388C63.9928 16.7562 62.934 17.5867 61.4337 17.6926L61.1139 17.7038C60.5362 17.7002 56.9918 17.5292 56.8435 13.8815L56.8331 13.262L56.8354 7.59521H53.484C53.6105 7.69907 53.7753 7.9243 53.7769 7.9243C55.6549 10.3523 53.828 12.3728 53.8105 12.3936C52.888 13.6958 50.3894 14.2805 49.2646 14.4836L48.7025 14.5724L48.4609 14.6011C47.2512 14.6422 47.5025 15.2147 47.5553 15.3099L47.5635 15.3232C47.7299 15.7135 48.4682 15.7128 48.6621 15.7057L48.7089

Chrome Cache Entry: 166

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32704)
Category:	dropped
Size (bytes):	561635
Entropy (8bit):	5.398580522776324
Encrypted:	false
SSDEEP:	6144:gHid6Yptn9svLfaOGv/AWpb01MB6brQuIBuiMauLKUM0WJygM:znFXv/A6g1MwIBuiMauGUgq
MD5:	8C3417CE568BE39241124D6683EBB3DA
SHA1:	2DFB4ECF612FAD1CC0CB791CE80477F336667CC1
SHA-256:	4483A39AA478F83F932AFE09A01214DB6041FB2F0F319D7995A152411110A9B9
SHA-512:	831994154298DF9BF660A699E50E7C0615E10F9FD359CB402497C6DC46D51287173EE054F54DACEAB6C944F75CE3608B29790FD7C4B055AC04204D70BBFFF3A6
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/launch-ecb7d9153f04.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-10-29T19:37:18Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN91dc7eee55844e8da7c0532e45f47c58",stage:"production"},dataElements:{user_identifiedType:{defaultValue:"",forceLowerCase:!0,modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){var e=_satellite.getVar("user_sPOID"),t="unknown";return e&&"none"!=e&&(t="known"),t}}},page_domain:{defaultValue:"",forceLowerCase:!0,modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return window.location.host.replace(/^www\./,"")}}},medallia_formname:{modulePath:"medallia-for-adobe-launch/lib/dataElements/event-name.js",settings:{}},page_pageTitle:{defaultValue:"",forceLowerCase:!0,modulePath:"data-lay

Chrome Cache Entry: 167

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	dropped
Size (bytes):	1271
Entropy (8bit):	5.184130085081704
Encrypted:	false
SSDEEP:	24:2Q+Bvk+oX/IP2iJyep9Mf9MWIMyMZ2iJRcM2n3k2RRnDbLMWhTtMXy99MJVOfMsX:P/1op9M1MTMyMIjM23pbD/MUtMXy99M0
MD5:	0A6AFF292F5CC42142779CDE92054524
SHA1:	7A4B1CB962793F47ED138A8DF2D5E4D49E73335A
SHA-256:	C250924012FDC9EA9516B30650895201CD167DBD49C9D148924F30881ABFA393
SHA-512:	A9934DC7FFF0FA59069A815C3CF795148E9A36759017037DEF66E6A228D650139FD364A004DA7A8F0706E4B28E7AA1F63A8B5F7A3BD0270369EAE9AF82D64403
Malicious:	false
Reputation:	low
Preview:	(function(){window.CQ=window.CQ\|\|{};window.CQ.CoreComponents=window.CQ.CoreComponents\|\|{};window.CQ.CoreComponents.container=window.CQ.CoreComponents.container\|\|{};window.CQ.CoreComponents.container.utils={};window.CQ.CoreComponents.container.utils={removeUrlHash:function(){history.replaceState(void 0,void 0," ")},updateUrlHash:function(a,b,c){a&&a._elements&&a._elements[b]&&a._elements[b][c]&&a._elements[b][c].id&&history.replaceState(void 0,void 0,"#"+a._elements[b][c].id)},getDeepLinkItemIdx:function(a,.b,c){if(window.location.hash){var d=window.location.hash.substring(1);if(d&&document.getElementById(d)&&a&&a._config&&a._config.element&&a._elements[b]&&a._config.element.querySelector("[id\x3d'"+d+"']"))for(var e=0;e<a._elements[b].length;e++){var g=a._elements[b][e],f=!1;a._elements[c]&&(f=(f=a._elements[c][e])&&f.querySelector("[id\x3d'"+d+"']"));if(g.id===d\|\|f)return e}}return-1},getDeepLinkItem:function(a,b,c){c=window.CQ.CoreComponents.container.utils.getDeepLinkItemIdx(a,b,c);

Chrome Cache Entry: 168

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	81
Entropy (8bit):	4.3493440438682995
Encrypted:	false
SSDEEP:	3:yionv//thPltXlfMLts0NyWn/NG8bp:6v/lhP/ZMRHNyWn/NG8bp
MD5:	1B6D2DE2867A3E11063BA25AA1CD4209
SHA1:	BD20B0E089F31F35CBA4D0FA7277E73AA74D944C
SHA-256:	95518CBEC0D55A574A9C8EF72A2A7D62AC0D40A4DE5DFE67A76A7D214DC8B743
SHA-512:	D30AC99B9140393CB2EA8EB09F0C69F6107CA5940DDF208B5EC1DD6D5ABDAB37FC60A892AA397579DA75B450965ADE6D37EE84C55550B42DD86F7AA26D99AB88
Malicious:	false
Reputation:	low
URL:	https://h.online-metrix.net/fp/clear.png
Preview:	.PNG........IHDR.............."......sRGB.........IDAT..c`.......c*......IEND.B`.

Chrome Cache Entry: 169

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 170

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1270
Entropy (8bit):	5.305224556174555
Encrypted:	false
SSDEEP:	24:YKKpXW6rZJ7UDqSyAml/2qc/vpaPPL/ocqZhSyAzpXW6rZJ7UDqSyAmg/2qc/vpa:Yr5VlkQJleqc3sHzocqZRo5VlkQJgeqX
MD5:	1206AB490D0CA7E59906010191F593E3
SHA1:	DCEB02607B32276DD81DFC044A8FF7C5F807A273
SHA-256:	81DFE9A01F0F8CC6932A2956E8E8A374A2C86661EAAD56AD468BBE776E9D5601
SHA-512:	D8678999F696F923304BC5A7D3583BE77B7855055405A166A01CF1E429AC39F248EB684228145DB19BBACD9E14380060C6D7513BD64115AFCE257060F898C007
Malicious:	false
Reputation:	low
Preview:	{"ownyourfuture.vanguard.com":{"cdnPath":"https://content.zenimpact.io","clientId":"27902609-b114-4020-bca5-e9caee1dd631","apiKey":"AIzaSyAMe8kFxrppCns3DOYAztjm6YGqSyPfHIQ","config":"27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/configv21.json","endpoint":"https://insight-api-kgw.zenimpact.io","hub":"https://hub2.zenimpact.io","isActive":true,"isSPA":false,"options":[],"previewEndpoint":null,"scaffold":"https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/zenapse/dist/scaffold/zen_insight_V4.min.js","siteId":"090d772a-b3d6-4dda-808f-773ad25b7715"},"sat-ownyourfuture.vanguard.com":{"cdnPath":"https://content.zenimpact.io","clientId":"27902609-b114-4020-bca5-e9caee1dd631","apiKey":"AIzaSyAMe8kFxrppCns3DOYAztjm6YGqSyPfHIQ","config":"27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/configv4.json","endpoint":"https://insight-api-kgw.zenimpact.io","hub":"https://hub2.zenimpact.io","isActi

Chrome Cache Entry: 171

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21215)
Category:	dropped
Size (bytes):	21216
Entropy (8bit):	5.306175166588735
Encrypted:	false
SSDEEP:	384:TRFZRwWtdbD5ABwXwLrekrff8eTr+x5RxMcKn9LuJ4vV/:T7wAD5ABwXw+krfflyxzxin9D/
MD5:	A3E7570799838F456EA59051EDF9B177
SHA1:	714E869857B96DDEEF2578B26F7151A494254BE3
SHA-256:	91B0809D8B9DC57EAA09CB0E13C210B24EDFAEADB94A8CFF0FEE02751C1B0B5F
SHA-512:	05C30ADB56D3D9F0AB84E4E5D0BFFFEADD2FEAA815EE7700E7A5806D01173AEB548BBE390E8487E0E541B27E08663F156F8AD49B7C5D3F6A4202A3FC4CE475FF
Malicious:	false
Reputation:	low
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 172

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (651)
Category:	dropped
Size (bytes):	833
Entropy (8bit):	5.421514802250148
Encrypted:	false
SSDEEP:	12:jvgaB+RwySct/BaB+RwyvLoM1lqra21FrsWkD8zTTRWxJ6//TCH:hB7ct/BaBhEU2msWI8zHRWxJSTCH
MD5:	26D70628D420D5C15D9A884D1A0DE82F
SHA1:	54F91005CDAA6A35C703786A1C0D9D4737D266DD
SHA-256:	8C539FE734FD9F4B51E886FBC71FF49CDDF4696F28290A4B8C89FAED78690E60
SHA-512:	9396D414C41298EC2E7086C440C6494339975764C2F0C921B0677D3CDA65351F9E69409FF465C1E01414C3810248F680062B06271DBCC46938224C0BF8A2F8D1
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCbd279c41a77e4e23a024c79d6922f33f-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCbd279c41a77e4e23a024c79d6922f33f-source.min.js', "!function(e,a,n,t,o){var c,r,d;e[o]=e[o]\|\|[],c=function(){var a={ti:\"247004627\",enableAutoSpaTracking:!0};a.q=e[o],e[o]=new UET(a),e[o].push(\"pageLoad\")},(r=a.createElement(n)).src=t,r.async=1,r.onload=r.onreadystatechange=function(){var e=this.readyState;e&&\"loaded\"!==e&&\"complete\"!==e\|\|(c(),r.onload=r.onreadystatechange=null)},(d=a.getElementsByTagName(n)[0]).parentNode.insertBefore(r,d)}(window,document,\"script\",\"//bat.bing.com/bat.js\",\"uetq\");");

Chrome Cache Entry: 173

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (679)
Category:	downloaded
Size (bytes):	849
Entropy (8bit):	5.39794794466921
Encrypted:	false
SSDEEP:	12:jvgnpHJBnqdncct/BnpHJBnqdn9LgZubwaK1ZtElP6T7Nw1KtCmTJw1Kt4zHkf:SQNcct/BHQNeZQwa4ZtEqn0zHkf
MD5:	AB562A053783E606939B76BB474900AE
SHA1:	0A5489EDAADA44F54E525C5AF0D0AADF27183B0B
SHA-256:	42120BD99EE7E84A89732F829A06BF0C32C227D85900507D3073C0CC21A05DDE
SHA-512:	0005112CA4ECB8A41EF5534E539B8F3CD993A14F778E4F2129C76E9E287F8D033ECD2B5C2524F34CD53E5BD953055EE00A271C8C2E94630CD303F2DDFF07FEEC
Malicious:	false
Reputation:	low
URL:	https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.min.js
Preview:	// For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.js`.._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.min.js', "function targetPageParams(){return{at_property:\"production\"===_satellite.environment.stage?\"e27bdc03-91a6-9cbe-df53-27fc099f26be\":\"f32c1df7-36d3-d871-5350-91485d4588d6\"}}var trackActivtyImpression=function(e){window.dataLayer=window.dataLayer\|\|[],window.dataLayer.push({event:\"experimentImpressions\",experiment:{experimentInfo:e}})},trackActivtyClickImpression=function(e){window.dataLayer=window.dataLayer\|\|[],window.dataLayer.push({event:\"experimentCtaClicks\",experiment:{experimentInfo:e}})};");

Chrome Cache Entry: 174

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (25109)
Category:	dropped
Size (bytes):	25262
Entropy (8bit):	5.3087262024246895
Encrypted:	false
SSDEEP:	768:YooUjeU5luNgHP1g8fEHJNIdPJWt8f4U0nd10WzsG8hJomld:XcNg13l4UeCJomr
MD5:	B4EF0D879D8E7F9F91127E74E17F5AC3
SHA1:	A0B23864D2E2475D0D4CF5AED3718E258FC0262B
SHA-256:	F704E38A9E52A1CAB17100A00C022BA4FE72BE0265805A83AB7089BAC7874AA8
SHA-512:	D5C1A45A25EBB373CA0E02EF066FAECA6B9CABC03304DE3EFEB8CC06EBED8911ADE5F663EEA97E4EE753CA4DA10A47528C9EE7AD5381A9305A9564EC4FDAE892
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_AudienceManagement.js`..function AppMeasurement_Module_AudienceManagement(e){var t=this;t.s=e;var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_m",t.setup=function(e){n.DIL&&e&&(e.disableDefaultRequest=!0,e.disableCORS=!0,e.secureDataCollection=!1,t.instance=n.DIL.create(e),t.tools=n.DIL.tools)},t.isReady=function(){return!!t.instance},t.getEventCallConfigParams=function(){return t.instance&&t.instance.api&&t.instance.api.getEventCallConfigParams?t.instance.api.getEventCallConfigParams():{}},t.passData=function(e){t.instance&&t.instance.api&&t.instance.api.passData&&t.instance.api.passData(e)}}!function(){"use strict";var e,t,n;"function"!=typeof window.DIL&&(window.DIL=function(e){function t(e){return void 0===e\|\|!0===e}function n(){W\|\|(W=!0,q.registerRequest(),X())}var s,i,r,o,a,d,u,c,l,f,p,h,g,m

Chrome Cache Entry: 175

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1619), with no line terminators
Category:	downloaded
Size (bytes):	1619
Entropy (8bit):	5.324563011210641
Encrypted:	false
SSDEEP:	48:pmrorky9ApcBa6pQL1uaejMJT9Dro8LOYhto:pyoAF2BzmL11p51hq
MD5:	92CAC509BCE9EA74C92A67FC5803E415
SHA1:	15BFEA1728BE47C34DE63416D7231626C472DCB0
SHA-256:	A04D373BE23A3F37DFE1F88CAB01061DB75F716EDADC6451C652FE538F4BE6C0
SHA-512:	31EC30DAC5EA347C48D7EE43CA1FFD280B6F23D459480E1CD4ADA4E622F4DA888F3BF447DD0DF42F73356A56EDA8C839D2EE2045361D578117390A97108DF7E8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.min.js
Preview:	!function(e){var n;if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){var t=window.Cookies,o=window.Cookies=e();o.noConflict=function(){return window.Cookies=t,o}}}(function(){function f(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var o in t)n[o]=t[o]}return n}function a(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function e(u){function c(){}function t(e,n,t){if("undefined"!=typeof document){"number"==typeof(t=f({path:"/"},c.defaults,t)).expires&&(t.expires=new Date(1new Date+864e5t.expires)),t.expires=t.expires?t.expires.toUTCString():"";try{var o=JSON.stringify(n);/^[\{\[]/.test(o)&&(n=o)}catch(e){}n=u.write?u.write(n,e):encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),e=encodeURIComponent(String(e)).replace(/%(23\|24\|26\|2B\|5E\|60\|7C)/g,decodeURIComponent).replace(/[\(\)]/g,escape);var r="";for(var i in t)t[i]

Chrome Cache Entry: 176

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (25109)
Category:	downloaded
Size (bytes):	25262
Entropy (8bit):	5.3087262024246895
Encrypted:	false
SSDEEP:	768:YooUjeU5luNgHP1g8fEHJNIdPJWt8f4U0nd10WzsG8hJomld:XcNg13l4UeCJomr
MD5:	B4EF0D879D8E7F9F91127E74E17F5AC3
SHA1:	A0B23864D2E2475D0D4CF5AED3718E258FC0262B
SHA-256:	F704E38A9E52A1CAB17100A00C022BA4FE72BE0265805A83AB7089BAC7874AA8
SHA-512:	D5C1A45A25EBB373CA0E02EF066FAECA6B9CABC03304DE3EFEB8CC06EBED8911ADE5F663EEA97E4EE753CA4DA10A47528C9EE7AD5381A9305A9564EC4FDAE892
Malicious:	false
Reputation:	low
URL:	https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/hostedLibFiles/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_AudienceManagement.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_AudienceManagement.js`..function AppMeasurement_Module_AudienceManagement(e){var t=this;t.s=e;var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_m",t.setup=function(e){n.DIL&&e&&(e.disableDefaultRequest=!0,e.disableCORS=!0,e.secureDataCollection=!1,t.instance=n.DIL.create(e),t.tools=n.DIL.tools)},t.isReady=function(){return!!t.instance},t.getEventCallConfigParams=function(){return t.instance&&t.instance.api&&t.instance.api.getEventCallConfigParams?t.instance.api.getEventCallConfigParams():{}},t.passData=function(e){t.instance&&t.instance.api&&t.instance.api.passData&&t.instance.api.passData(e)}}!function(){"use strict";var e,t,n;"function"!=typeof window.DIL&&(window.DIL=function(e){function t(e){return void 0===e\|\|!0===e}function n(){W\|\|(W=!0,q.registerRequest(),X())}var s,i,r,o,a,d,u,c,l,f,p,h,g,m

Chrome Cache Entry: 177

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6756)
Category:	downloaded
Size (bytes):	14296
Entropy (8bit):	5.39349498513202
Encrypted:	false
SSDEEP:	192:PqHHyiP78YlPYYjYGQYZyYSY5igUp7sQdf9rpwYEtNQdf9rpwvfxiDl08UIGw8Jx:in77VZ0rI0rWodUIh8qwtXpd3H
MD5:	18B44E6DB5110392873FDBFDA422061B
SHA1:	079A036A589EB68E82CE996528B489B455A8BB94
SHA-256:	92C59CB8FA975DA310E4901E6D3BE89567614FA0CFBB94FD053D634C2EF67FDD
SHA-512:	F00834482C7CB32F43C496E95C0F086CFD85564B72A9FF792A82264F002F1E858205DF69B42A993642E659866F7D692E1CDC87E368D5161636CF16B9BAEC7B94
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/wtl-request-information-webservice/rs/requestInfo/getUserDetail
Preview:	<!DOCTYPE html><html lang="en-US"><head>. <meta charset="utf-8">. <title>Login</title>.. <meta name="viewport" content="width=device-width, initial-scale=1">. meta tag for set IE document mode to 11 -->. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">. <link rel="icon" type="image/x-icon" href="favicon.png">. <script type="application/json" id="cccVMSConfigg">. [{"text":"<strong>Because older browsers--like the one you're using--can have security risks, we won't be supporting this one much longer, So to help keep your information, and to make sure everything works the way it's supposed to, please update your browser.. <a style='color:#e37222' class='vmsHelpLink'. href='https://investor.vanguard.com/customer-service/password-user-name-browser?cmpgn=EM:RIG:ED:browser:CREATIV1:Email:0518:0101:MEC:OSC:0323'. target='_blank'>Learn more about browser updates</a>",. "for":"BROWSER","enabled":false},. {"text":"Our website is scheduled to be

Chrome Cache Entry: 178

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1484
Entropy (8bit):	5.02481082462968
Encrypted:	false
SSDEEP:	24:2d2pU1Lu3qvKBTKSxqeaxM2Tsm7Rhf7OM3o003kSdjriEj0+cI/mYr8RKvp8DhR:cIQwqilRxw7v+DFnpqR
MD5:	6F2FF6AC99A2D04BA997A18B588E7DC4
SHA1:	61133CA3C2637CCE4C7A40D6186AD197D77AD069
SHA-256:	B833C559FBB6374D65B66A4EBE30724A2A90AE579C7FE74646126E83A03E176B
SHA-512:	BF6FAE3764613FA3732468226521A3BD10A2CA959DE3B37690462DCBC581BD9036D43B961EDC6C5AFAD1412CB4A03A8678881590F9065D3573A5FD16B16C9362
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 64 (101010) - https://sketch.com -->. <title>CB05E68F-5D94-4601-A0D4-106ECABB3116@1.5x</title>. <desc>Created with sketchtool.</desc>. <g id="Header-Footer---Desktop-&-Mobile" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Tab---001--Public-Header-&-Footer" transform="translate(-192.000000, -810.000000)" fill-rule="nonzero">. <g id="Footer/Tab" transform="translate(0.000000, 770.000000)">. <g id="Social-Media" transform="translate(192.000000, 40.000000)">. <g id="Icon/-Facebook">. <g>. <ellipse id="Oval" fill="#3C5A9A" cx="12" cy="12.5" rx="12" ry="12.5"></ellipse>. <path d="M10.1,20.4166667 L10.1,13.958333

Chrome Cache Entry: 179

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (839)
Category:	dropped
Size (bytes):	614152
Entropy (8bit):	5.450661905353636
Encrypted:	false
SSDEEP:	6144:kD8p9odVs+9CNs+9CRjebWcMYYkSUo5JSMRNBYd4+gdORY0euKqYtQW/eck5OOFb:S8WsvsPeotSsP5XtQW/eckXyQnB
MD5:	8C2FF07B7A77F8D850A1FF64EF8817C6
SHA1:	10DC49985927C70C43A35B1BF7F9D5D62B3D7F11
SHA-256:	F4D3ADF307CC132374B0F9D8D704F1C20C8544E22B586F2792F9AB5ED1D16747
SHA-512:	369FB4D8B41F25802B5F54E747CCB423832CE74ACCE68578A9D5E568F59949545C0BCEE5751EBFE3BFA84BBDD7EFD01F48CF25D010BEBDE1E947C714EB39F8DB
Malicious:	false
Reputation:	low
Preview:	/.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause.. Copyright 2021 Google LLC. SPDX-License-Identifier: BSD-3-Clause. **************************************************************************. Copyright (c) Microsoft Corporation... Permission to use, copy, modify, and/or distribute this software for any. purpose with or without fee is hereby granted... THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH. REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY. AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,. INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM. LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR. OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR. PERFORMANCE OF THIS SOFTWARE..**************************************************

Chrome Cache Entry: 180

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32766)
Category:	dropped
Size (bytes):	39448
Entropy (8bit):	5.346741589705456
Encrypted:	false
SSDEEP:	768:HRZIGa9YowVYJFmNX/9Br7l0V+WGUgxtu2KD7DZVAJXotmyO0:HRZIF9pIYJF+X/nfWVyTEYJB0
MD5:	940296C3996A3445DB4E39CD11D793DF
SHA1:	92F9E641B0604D226851D6052EEA27BB26DDF710
SHA-256:	77343FC9C3947CF904EE57C4B10FBC82BB419CC37F3FA37C399D6A46B3973737
SHA-512:	90941DB1865EC438D2977E65F8F36F99ADEC0784D2292CD454F5C05B8FB5C556E135BE3EF141495E83EDB116BD9908191A6ABAED3B6CECE8258901899CE09BF5
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/EXcdd48fe7cd4640a1bbab483674626e32-libraryCode_source.js`..function AppMeasurement_Module_Integrate(e){var t=this;t.s=e;var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_m",t.list=[],t.add=function(a,i){var r;i\|\|(i="s_Integrate_"+a),n[i]\|\|(n[i]={}),(r=t[a]=n[i]).a=a,r.e=t,r._c=0,r._d=0,null==r.disable&&(r.disable=0),r.get=function(e,a){var i,o,c=document,s=c.getElementsByTagName("HEAD");if(!r.disable&&(a\|\|(o="s_"+t._in+"_Integrate_"+r.a+"_get_"+r._c),r._c++,r.VAR=o,r.CALLBACK="s_c_il["+t._in+"]."+r.a+".callback",r.delay(),s=s&&0<s.length?s[0]:c.body))try{(i=c.createElement("SCRIPT")).type="text/javascript",i.setAttribute("async","async"),i.src=t.c(r,e),0>e.indexOf("[CALLBACK]")&&(i.onload=i.onreadystatechange=function(){r.callback(n[o])}),s.firstChild?s.insertBefore(i,s.firstChild):s.appendChild(i)}catch

Chrome Cache Entry: 181

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3493440438682995
Encrypted:	false
SSDEEP:	3:yionv//thPltXlfMLts0NyWn/NG8bp:6v/lhP/ZMRHNyWn/NG8bp
MD5:	1B6D2DE2867A3E11063BA25AA1CD4209
SHA1:	BD20B0E089F31F35CBA4D0FA7277E73AA74D944C
SHA-256:	95518CBEC0D55A574A9C8EF72A2A7D62AC0D40A4DE5DFE67A76A7D214DC8B743
SHA-512:	D30AC99B9140393CB2EA8EB09F0C69F6107CA5940DDF208B5EC1DD6D5ABDAB37FC60A892AA397579DA75B450965ADE6D37EE84C55550B42DD86F7AA26D99AB88
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............."......sRGB.........IDAT..c`.......c*......IEND.B`.

Chrome Cache Entry: 182

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 183

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6756)
Category:	dropped
Size (bytes):	14296
Entropy (8bit):	5.39349498513202
Encrypted:	false
SSDEEP:	192:PqHHyiP78YlPYYjYGQYZyYSY5igUp7sQdf9rpwYEtNQdf9rpwvfxiDl08UIGw8Jx:in77VZ0rI0rWodUIh8qwtXpd3H
MD5:	18B44E6DB5110392873FDBFDA422061B
SHA1:	079A036A589EB68E82CE996528B489B455A8BB94
SHA-256:	92C59CB8FA975DA310E4901E6D3BE89567614FA0CFBB94FD053D634C2EF67FDD
SHA-512:	F00834482C7CB32F43C496E95C0F086CFD85564B72A9FF792A82264F002F1E858205DF69B42A993642E659866F7D692E1CDC87E368D5161636CF16B9BAEC7B94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en-US"><head>. <meta charset="utf-8">. <title>Login</title>.. <meta name="viewport" content="width=device-width, initial-scale=1">. meta tag for set IE document mode to 11 -->. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">. <link rel="icon" type="image/x-icon" href="favicon.png">. <script type="application/json" id="cccVMSConfigg">. [{"text":"<strong>Because older browsers--like the one you're using--can have security risks, we won't be supporting this one much longer, So to help keep your information, and to make sure everything works the way it's supposed to, please update your browser.. <a style='color:#e37222' class='vmsHelpLink'. href='https://investor.vanguard.com/customer-service/password-user-name-browser?cmpgn=EM:RIG:ED:browser:CREATIV1:Email:0518:0101:MEC:OSC:0323'. target='_blank'>Learn more about browser updates</a>",. "for":"BROWSER","enabled":false},. {"text":"Our website is scheduled to be

Chrome Cache Entry: 184

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (560)
Category:	downloaded
Size (bytes):	742
Entropy (8bit):	5.22789849387177
Encrypted:	false
SSDEEP:	12:jvgaB+RYqPXct/BaB+RYqPWL6QXLORidGlORidGoxORidGyaQPFDRWxGfurS0m34:hBmct/BaBPXuidGMidGridG4P1RWxiuj
MD5:	C612EE7CFDAE5550F80434BAE5D0F323
SHA1:	45748810185267860DE448CDAE4D5F3906BD82C2
SHA-256:	A2F92949EC77FB3DDB775A689B06B333BDF03BEAA89E74B675CDDF724BE86B85
SHA-512:	BF3DCF6A2B4E6C0E5E09A93F6B11AC8BB0EC0B991B2CB2D2564A92D24C0F535BC00470B957E4872992C5E18B8F88DC8E80A8FCB28B170D8DC068E026A64E7358
Malicious:	false
Reputation:	low
URL:	https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCdcaf05ded5df440c85dbf48ae644ec25-source.min.js
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCdcaf05ded5df440c85dbf48ae644ec25-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCdcaf05ded5df440c85dbf48ae644ec25-source.min.js', "_linkedin_partner_id=\"7608\",window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[],window._linkedin_data_partner_ids.push(_linkedin_partner_id);var s=document.getElementsByTagName(\"script\")[0],b=document.createElement(\"script\");b.type=\"text/javascript\",b.async=!0,b.src=_satellite.getVar(\"linkedin_insight_tag_url\"),s.parentNode.insertBefore(b,s);");

Chrome Cache Entry: 185

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3940
Entropy (8bit):	4.964956758081167
Encrypted:	false
SSDEEP:	96:npymy40wvaupCdpUVKGa6AyOhQjdj4jJjFZQ23nw8A:rCSCdpZ6vi4FAJg8hA
MD5:	80E7E06A820F2059A61282DB339A5321
SHA1:	0D881624B7D5EFFADE1BF7BE89DC965ADA95A408
SHA-256:	09553782CDD2B8B2B90B77254F334CC5471262CF252CA5D0DBDD1A2871795530
SHA-512:	596B5C1255F2E2248E901981C106AF85D065595DD5C1953DA91580A2C349365935AFBB74FFD65BB2307CB9F861FEE9527C6CB41E18E68A41A0D727CF3534A1E5
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"202402.1.0","OptanonDataJSON":"767da967-88bb-4648-bd02-c7a263423698","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"01917eff-192a-70a3-919c-8e66142ae41f","Name":"Global","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","br","sc","sd","bs","bt","sg","bv","bw","sh","sj","by","bz","sl","sn","so","ca","sr","cc","ss","st","cd","cf","sv","cg","ch","sx","ci","sy","sz","ck","cl","cm","cn","co","cr","tc","td","cu","tf","cv","tg","cw","th","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","tz","dj","dm","

Chrome Cache Entry: 186

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3111
Entropy (8bit):	4.163798393638205
Encrypted:	false
SSDEEP:	96:G6nXq2K2fsc8s7IsFDsX7SwB18tvgtWl72:XrpQjEt72
MD5:	C715D927ABE49D752760FCE7DC779B20
SHA1:	BB8263AC0147853CDBEA84BA174D7C9C0F49C75B
SHA-256:	E785BBB5FEB9DF54DD049C2EF6EB6E9CAD5C10D359C62973B6BA315D0F9D3CF6
SHA-512:	98260EBFB143FCFAEAA69FC51511210C0D79010A6BAF901005286FBF4A06BF7FC3EEE99037DEB6793D587255B79E1A542290CE3C6A18B26064393987C198BED2
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-analytics.min.ACSHASHc715d927abe49d752760fce7dc779b20.js
Preview:	(function($) {. "use strict";. $(document).ready(function() { . var location = $("#countrycodeValue").val()+":"+$("#languagecodeValue").val(). ... +":"+$("#siteidentifierValue").val()+":"+$("#platformValue").val()+":"+. ....$("#pagenameValue").val()+":"+$("#sitesectiononeValue").val()+":"+. $("#sitesectiontwoValue").val()+":"+$("#pageidentifierValue").val();. $("#tlFilters-show-filter-link").click(function(e) {. console.log("ShowFilters Clicked");. window.dataLayer = window.dataLayer \|\| [];. window.dataLayer.push({. "event" : "callToAction", //e111. "callToAction": {. "location": location, //v103 . "ctaName": "show filter", //v104. "ctaType": "link" //v111. }. });.. ..});. $("#tlFilters-hide-filter-link").click(function(e) {. window.dataLayer.push({.

Chrome Cache Entry: 187

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2492
Entropy (8bit):	4.932646033582626
Encrypted:	false
SSDEEP:	48:cIQwq0RxwOJ/PlRhGwROsj+X4jY1TlHIBIZZrBRcDoKEqR:swq0RWOJHl2Jl8eNcc+R
MD5:	9BF9F21EFF4B00D4157B5B5145D5DB6C
SHA1:	352C59064B0F2E1FC10B2DF887A1925B39C0A23E
SHA-256:	59DD819499B20E87555ABA96DC02EED7F6CF0305ADA22F3DCC4881D13A1AF431
SHA-512:	1603CF088A5D91E1EE4976C93B90C563E54F7DCCD6EAB6C7BB62B3532DA28CABDB1D948DB30EB25A59178EB05939C02D06A933A920AC6758440851AF4B3FD23D
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/digital-advisor/icons/twitter.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 64 (101010) - https://sketch.com -->. <title>9CDB01EA-95B0-41DD-8689-27896E1C0FEE@1.5x</title>. <desc>Created with sketchtool.</desc>. <g id="Header-Footer---Desktop-&-Mobile" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Tab---001--Public-Header-&-Footer" transform="translate(-225.000000, -810.000000)" fill-rule="nonzero">. <g id="Footer/Tab" transform="translate(0.000000, 770.000000)">. <g id="Social-Media" transform="translate(192.000000, 40.000000)">. <g id="Icon/-Google-plus" transform="translate(33.000000, 0.000000)">. <g id="Icon/-Twitter">. <ellipse id="Oval-Copy-4" fill="#5FA9DD" cx="12" cy="12.5" rx="12" ry="12.5"></ellips

Chrome Cache Entry: 188

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	196892
Entropy (8bit):	4.6930862607664325
Encrypted:	false
SSDEEP:	384:5SKA/Lc8hBVh465MMScQZuwtpYCCpHFw5KhVvsI:5SKA/k2MRc4UdhVvsI
MD5:	6DF78A87CEEF59434BA7A52DA51DB948
SHA1:	78E64A5EE347C3FC62D365AF4D3B98C25C8886CA
SHA-256:	B1B54DA75A95C42AA97E0A9B212C7948E04B56CB6503F8C9598A4E465291A033
SHA-512:	6AD770BCB53DF5202EF24F1034A904698EF3249F84378F2E7C284A2B91383EE14BD3A6A2F25F2DBD5FB0A7484F1B9B2D6120B484ACB91A5AA85DC6E5757B49F3
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-base.min.ACSHASH6df78a87ceef59434ba7a52da51db948.css
Preview:	.aem-Grid{display:block;width:100%}..aem-Grid::before,.aem-Grid::after{display:table;content:" "}..aem-Grid::after{clear:both}..aem-Grid-newComponent{clear:both;margin:0}..aem-GridColumn{box-sizing:border-box;clear:both}..aem-GridShowHidden>.aem-Grid>.aem-GridColumn{display:block !important}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:50%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:50%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--

Chrome Cache Entry: 189

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	440693
Entropy (8bit):	5.3572623362394305
Encrypted:	false
SSDEEP:	6144:/m1EuxkaXxsE7qo2q/I2KaciDBkXmMbgbnz+dWhql25+qEzLs:OnxkaXKE7qzmMWLXT
MD5:	77897224C74905A48B78D28865CF415C
SHA1:	42322EA8A206061BEEAA4018242283EB48D3F79B
SHA-256:	E912EFBA4DD82B798FB061F872B0016687932D1648098F501DFF644A7AD77A35
SHA-512:	130FD17F36F0BF0241FBE649CAA3C3C770D4643CE3251C6797DF021C95574E01718DF0B53D6079FF49B8C8595BED68396E680A5E0806198562665DC5E451A193
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202402.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function F(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 190

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.261301029168016
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HVjROE9HSxmQqyRHfHyI:x2pHDKcElSDPyI
MD5:	806699ED4BB65178112F5BAD2242C52D
SHA1:	F44771599DB97A9EA255845DC886AE69EC293024
SHA-256:	6595E4AA67EA4D50268F53193CBE84B2201B3130DC15F690165007BDB829E068
SHA-512:	01FD5927CB4F6A6C1EA7B91F9ADD3F39AB3CC936FC06D806BF0A7A656E008F4281A96B7F8A850D8D470E8DF832B95A539836D734DC19D33B9946C31C948839FA
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"TX","stateName":"Texas","continent":"NA"});

Chrome Cache Entry: 191

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 49940, version 0.0
Category:	downloaded
Size (bytes):	49940
Entropy (8bit):	7.994585196481799
Encrypted:	true
SSDEEP:	1536:xs73gCVDMvUIE0z2rh0JTwNEvic0BCdFw:xMhIE0CeJTwNEKc0QFw
MD5:	EEAB248B9BFF52E652AE342DAE8FFE59
SHA1:	C5B4471FA02248606B95C6C00E93A7F70CDC3172
SHA-256:	AD4E4276809E74AA189653409471C9DDCB6655B2998563D2C359BD2099FA8130
SHA-512:	50586CC60D565828125103A8D747E7A0EBCE3AC7AB5B083274647C8904F286B92F23E2B2874DCF39CBC79C94F6B7E0501FB47AC53217F52E6916DEE3E9F594D3
Malicious:	false
Reputation:	low
URL:	https://constellation-static.web.vanguard.com/v1/fonts/31b07b3f-1c2f-4320-90e5-bc52e0ed0b65.woff2
Preview:	wOF2.............................................X...<....`......,..>.6.$..v..\|.. .... [.U............E.h....I........?/!..U..@..............................:pp..l..\|C=\|...}f....._y 1.<.}.....W.....<H.P..Rp.b....o.bd\|HM......Y.+.V......wa&~..T...).....Ir......hl9......jk.......}..u`./.0.......O`Z.....0kBJE......~..=......@...j...O9.r..a.Kv..)..3.......7e3.;vI.!.h..%.........W..R...~q.....;m.n......"j..a.I..)....?..\|^..}.N....Q....PD..e.......m.Ru;7...t..2..?....m....Q&.P......h...(.n.,...a.^h.K.....Y.=.=./(.........`..E.9fVaD...`F4XT.. .....Z......Z......iz.g...yt.&<......#.\|.?..W=h...E..u...+z.....!.l.O...t_...fwQ.bT.H.....R....B(]H....$4i...5.H....S.;!..@.... `....q.'......7....m......3..V.V......Fa..V.C{rqV...d.`.D...U...nZ9.{.Z.4B.X..'.Pq...2a.mP.p>3....]a..!...BR.N.)=...M.H.P.9..."J.F.....4..#5.jT..B{R.r.5.Dt....t{....(.P.......-N.kk......v.\|U....0]..,9?S.1.Z.I.,\|..I&.D.5.rw.{....."...RT,-...oj...........z......X.../K..w.2..2e.e....*m.=........r.

Chrome Cache Entry: 192

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	75116
Entropy (8bit):	5.919357539470458
Encrypted:	false
SSDEEP:	1536:r9YrY0xxPl72T1KNS5eBIIF4UvvdrL5hk570n6:2rYMPSeWIqc5f6
MD5:	1A385ADD0716F5E96395F3717D4597DC
SHA1:	B4F1AE7A1B4EB452CA976FCCAD45E76CEEEDCF28
SHA-256:	792011989D203BA5A3915F7DD545AB28ACD492E88D0F301290E6EC54CFF723A2
SHA-512:	6640A9D1F370AE41D6E801D9B80293933AEAE9FEF56FD0082FA267663C71535200BC176F93B1CBFD24280A8C79415EAA34FB4FB73BDE83B63A4380C890DAE419
Malicious:	false
Reputation:	low
URL:	https://logon.vanguard.com/pX4N_uX9/ULPepmz/v4Uv9mS/jE/2t/WBAMI1QC/LS/pZCCxvW08o
Preview:	(function fvsBEZDPMP(){O();NR();wR();var bv=function(Rv){return -Rv;};var Kv=function(){return ["_25&","k.J4","UA1.F....9a<:Z","L%^..\v.","$&Z...;%J).","F12J-.+\'LFA","&,JBH$/","]O","QE5\"I..9\n(P5.P.",".\"M#.Y,.#\'UW","\n./\'V^","1O...\v=L+\x00[..#!\\\x40","...9V6\'[!\b","\x00\n,N 1Q+.\'7","5.Q-.6<IW","\n.\x07.,J..O,.11","\b-ra","UA1.F\x07..\v=L+\x00[..#!\\\x40W","!\\TE0:^",".","\b8P-","_FZldz\x40%\\KkZk+YzVv","1/JmV",",.. J6.",".j}j","S7.H0.\'7fAA&$O.#.\r/O,.",">\x407.R5.,\"","V 7N.2.5W","I",".8P1.M>",".L8.&,WU{0$F4.\t.9F+\x07","z5Z.Q..&F+N",".6$MW{73Y..\b\v(","P \x07l<\r7 JFl 7N..",".\t.(","yu...W.S..V8.. WUAj O..\x00.",".Xg#49Foft~)2P+Y:3&y","=.6$.VQ77^..\b"];};var Iv=function(qv,cv){return qv>>cv;};var rv=function(Hv,hv){return Hv%hv;};var Gv=function(Ev,Mv){return Ev>=Mv;};var Lv=function(){return Wv.apply(this,[Ps,arguments]);};var Pv=function(Cv,l8){return Cv\|l8;};var f;var Wv=function F8(f8,X8){var s8=F8;while(f8!=Cs){switch(f8){case f7:{f8+=l7;return F8(F7,[O8]);}break;

Chrome Cache Entry: 193

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50567)
Category:	dropped
Size (bytes):	277872
Entropy (8bit):	5.250911699647991
Encrypted:	false
SSDEEP:	6144:ZYbfSkqp/rJwaIJvKJzrOUmKsJhPhmvgtAcIroXYePspuHSQw:ZYbfSkqp/rJwaIJvKJzrOUmKs7PMvgCv
MD5:	084A65A81480FD3D228171753ACF6963
SHA1:	128033F50D80E05014623FD1674F750D3DC7A957
SHA-256:	5BBFF9F8D99D32499B8C50032C8F037A317407A2189F90E7B1D16BE930AD202F
SHA-512:	8C5101570D13E08529F2E92674734F7C6D27333827CC9DD7F97BACE13511E045D0DA8489CA306D7631D7369A444DE67DC3C5BCE7BAC8EEEBF1E026B5B43F3128
Malicious:	false
Reputation:	low
Preview:	(function(global, factory) {. typeof exports === "object" && typeof module !== "undefined" ? factory(exports) : typeof define === "function" && define.amd ? define(["exports"], factory) : (global = typeof globalThis !== "undefined" ? globalThis : global \|\| self, factory(global["n4v-components"] = {}));.})(this, function(exports2) {. "use strict";var __defProp = Object.defineProperty;.var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;.var __publicField = (obj, key, value) => {. __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);. return value;.};.. var n = { 922: (n2) => {. n2.exports = function(n3) {. var t2 = [];. return t2.toString = function() {. return this.map(function(t3) {. var e2 = "", o2 = void 0 !== t3[5];. return t3[4] && (e2 += "@supports (".concat(t3[4], ") {")), t3[2] && (e2 += "@media ".concat(t3[2], "

Chrome Cache Entry: 194

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1568
Entropy (8bit):	4.993306000369513
Encrypted:	false
SSDEEP:	24:tVvnjutOGOfu8Tfby1+C+dJ3dw/+0ixqhlltgf2qixqhlltSflixqhlltqUlixqx:rnHdby1+fNwkvfEnAs4Z+CjO
MD5:	CA3D650ADBA487C281D2AF221324963C
SHA1:	BF5B784D4C5BE2D06C291AF691B8E481E15C2E0D
SHA-256:	805AE7FBDA2E566BB627D297FFF8A20BC640D147D1797FD69B4C4B0CFC7119B4
SHA-512:	E34DF4C238635D615C2A8F13CE87E086810C5F8D0A4A4B28758B3721DE8A10CA719F33A0587A9FE849C2F7578F09335752B44F3FC32FC9249ECD6768C05959A8
Malicious:	false
Reputation:	low
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2059_28054)">.<path d="M15.6666 7.96077C15.6671 8.9709 15.4687 9.97124 15.0826 10.9047C14.6965 11.8381 14.1304 12.6864 13.4165 13.401C12.7026 14.1156 11.8549 14.6827 10.9219 15.0697C9.98884 15.4568 8.9887 15.6562 7.97858 15.6568C5.92879 15.6227 3.97541 14.7805 2.54356 13.3133C1.11172 11.8461 0.317315 9.87278 0.333243 7.82277C0.334884 5.86327 1.10361 3.98228 2.47485 2.5825C3.84609 1.18273 5.71085 0.37543 7.66991 0.333439C7.78058 0.328772 7.89124 0.326772 8.00324 0.326772C9.00866 0.321319 10.0052 0.51484 10.9355 0.896191C11.8658 1.27754 12.7115 1.83918 13.4238 2.54877C14.1361 3.25835 14.701 4.10185 15.0859 5.03069C15.4708 5.95953 15.6682 6.95534 15.6666 7.96077V7.96077Z" stroke="#040505" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M7.66992 0.333252C3.66992 4.66659 3.66992 10.3199 7.66992 15.6533" stroke="#040505" stroke-linecap="round" stroke-linejoin="ro

Chrome Cache Entry: 195

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3166
Entropy (8bit):	5.266761971170596
Encrypted:	false
SSDEEP:	48:3vhuREn2/dyCiWkX3/GYjCPQ8t9NuHavPZNcJq5Aq:3vh01yf/GGd8t9jZyJCAq
MD5:	1D7663621F17F435BD2FB323C2DB9004
SHA1:	4DDC3A4D20BAF781C4C2F9B6000A7698BD5BBFEE
SHA-256:	219420ECB0359058E53545070EA21A09E355488D6994FA209DFCC145277AC95C
SHA-512:	DEA714A238E562A65ECFC4CC961078BCEDDB997E055D4DB436849A9C49514C116F1813C9748DBF452186B43F082343005B764148EB7EBF956D962ACE29E2BCDD
Malicious:	false
Reputation:	low
URL:	https://constellation-static.web.vanguard.com/v0/fonts/ff-mark.css
Preview:	/..This CSS resource incorporates links to font software which is the valuable copyrighted..property of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,..redistribute, convert, modify or reverse engineer this font software. Please contact Monotype..Imaging with any questions regarding Web Fonts: http://www.fonts.com../../* ================================== FF Mark Font Family ================================== /.. {.. font-variant-numeric: tabular-nums;..}..../* FF Mark Regular /..@font-face {.. font-family: "FF Mark";.. src: url("31b07b3f-1c2f-4320-90e5-bc52e0ed0b65.woff2") format("woff2"),.. url("3eff48e2-1bfb-4565-82a4-2190f0e36a2c.woff") format("woff");.. font-weight: 400;.. font-style: normal;..}..../ FF Mark Regular Italic */..@font-face {.. font-family: "FF Mark";.. src: url("b617d235-a910-41de-9a77-871b1946a3f5.woff2") format("woff2"),.. url("ab57d3dd-752d-4852-8704-dfb2f20a1522.woff") format("woff");.. font-weight: 400;..

Chrome Cache Entry: 196

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (667)
Category:	dropped
Size (bytes):	668
Entropy (8bit):	5.020455884983761
Encrypted:	false
SSDEEP:	12:UZH9w+Ed3PhFaLVSy3RMZQcZW2KRRfIsbjribOILAd8tJuxge3RG8SY:bLFAVSy2ZzWhRRfI4vAOIL4gJz+RyY
MD5:	B9868BEFB789DDD4672B36DECDD1A4AD
SHA1:	419783D45B5C0822DFBD25333C5BFB5609423F30
SHA-256:	EBBD54050B789E5120B82A551780D0CEE345E113F39AAFACD63D01649290F2DC
SHA-512:	ED200D4B1C98208B9980F80F1BC04E094BFAD3F6D04AD2678577D5198AD34A5C8956AB694523802C7D22BB571075598950570274BBB83E51AB6F927ECC2429AF
Malicious:	false
Reputation:	low
Preview:	/prehiding snippet for Adobe Target and AJO with asynchronous Launch deployment/!function(e, a, n, t) { var i = e.head; if (i) { if (a) return; var o = e.createElement("style"); o.id = "alloy-prehiding"; o.innerText = n + '{ opacity: 0 !important }'; i.appendChild(o); setTimeout(function() { const afsEle = e.getElementById("alloy-prehiding"); if(afsEle) { console.log('Target AFS: body is releasing by AF Script'); o.parentNode && o.parentNode.removeChild(o) } else { console.log('Target AFS: body was released by Adobe Server'); } }, t) } }(document, document.location.href.indexOf("adobe_authoring_enabled") !== -1, window.targetcssSelectors \|\| ["body"], 2500);.

Chrome Cache Entry: 197

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1051)
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.192379181230006
Encrypted:	false
SSDEEP:	24:hBbSct/BaBbG4AMAJmN6MaCJvaJXJuXh+J4AJJuA0989TAWJuA09+eRrBin1rvPq:9t/BVMAoOCkhoQLJxAWxj8rBi1rvPq
MD5:	3242DDDD9DE7501FAC001F14D9FB4F4E
SHA1:	608831A7ED3075348D37BC087FBB4336B737068A
SHA-256:	F7E72DB2C079AEDB7C18EF44AC0D7B2E0B884E5C0F9D5DC263A413A4BA5B17DC
SHA-512:	44437889D8E98EBE65249988D4F60583218F91C6FEC5005601FFA2179205E2F8A03F0EA671B81768162F98D761FB49A46342F9BD41258DB012751EF254EC2CB1
Malicious:	false
Reputation:	low
URL:	https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC2500743be69f4be0aa042674acca9b86-source.min.js
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC2500743be69f4be0aa042674acca9b86-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC2500743be69f4be0aa042674acca9b86-source.min.js', "if(adobe&&adobe.target){var params={};let e=_satellite.getVar(\"target_user_categoryId\");\"\"!=e&&(params[\"user.categoryId\"]=e);var login_status=_satellite.getVar(\"user_loginStatus\"),spoid_id=_satellite.getVar(\"user_sPOID\");params.current_user_loginStatus=login_status,params.current_user_crewFlag=_satellite.getVar(\"user_crewFlagString\"),\"logged in\"==login_status&&\"\"!=spoid_id&&(params.current_user_spoid=_satellite.getVar(\"user_sPOID\"),params.current_user_clientSegment=_satellite.getVar(\"user_clientSegment\"),params[\"profile.user_profile_clientSegment\"]=_satellite.getVar(\"user_clientSegment\"),params[\"profile

Chrome Cache Entry: 198

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	494
Entropy (8bit):	5.018509811924596
Encrypted:	false
SSDEEP:	12:Y/6cuKjOXq0R6cuKjOXqc1Gy6cymiw1Gy6cymU0y6cs2SBEgJMJkF0y6cs2SBEgL:Y/5XKXBR5XKXx1Gy53iw1Gy53Up5hSyV
MD5:	9ACC16EA62DEBCEA613715E324B6F506
SHA1:	27B5DD74C7C49996589CC3EEF3F356B9D69BE7DA
SHA-256:	98EC9104AC4B9EA92092D7C89597AC804A425B66D3DCFBCEBA71D5E3C5FBEBA0
SHA-512:	ADB76BF07CAD08DD943EAAB4AADCC9500AE829146F041F9B55997CADE5DFD896ED7554C3B86E1E5A8D5A947AB73A1C4FC379B0AAAC60798C79AAFF2240051BB7
Malicious:	false
Reputation:	low
URL:	https://content.zenimpact.io/dist/data/27902609-b114-4020-bca5-e9caee1dd631/client.json?ver=470689357
Preview:	{"investor.vanguard.com":{"siteId":"4c6c8412-1f33-4c61-9607-3112260b5810"},"instaemsitesauth.inst.c1.vanguard.com":{"siteId":"4c6c8412-1f33-4c61-9607-3112260b5810"},"retirementplans.vanguard.com":{"siteId":"0b87fa46-90db-4c9e-bc03-6e3158067443"},"test.retirementplans.vanguard.com":{"siteId":"0b87fa46-90db-4c9e-bc03-6e3158067443"},"ownyourfuture.vanguard.com":{"siteId":"090d772a-b3d6-4dda-808f-773ad25b7715"},"sat-ownyourfuture.vanguard.com":{"siteId":"090d772a-b3d6-4dda-808f-773ad25b7715"}}

Chrome Cache Entry: 199

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14760)
Category:	downloaded
Size (bytes):	21354
Entropy (8bit):	5.198305321458049
Encrypted:	false
SSDEEP:	384:Ji2u9cIkL7n3NiAv+clL5DJNLoCiBBXaOtCJ2jvb2xLt6s28HqW6Ov1p:Ji9NkL7n3bgWR
MD5:	C212796BE6047E2B0404BF46C943585C
SHA1:	CD1A00709106A5216C1076583B8412DBBAC3B09E
SHA-256:	4CA9AA9E0A92E943700F3C73CF405A25ABBB2A906CA7FBD373ACF2E7FD16ACEB
SHA-512:	6675D7DEE723A63896824AD39F2B68BB02BB9F934DB2ADABA6184B9254C528A26AFDCABCCF8EFFAB31B1265479E7575F8DB17E348880B09972EB70CF80E141BE
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-dependencies.min.ACSHASHc212796be6047e2b0404bf46c943585c.css
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-ca

Chrome Cache Entry: 200

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	404290
Entropy (8bit):	5.07857319477764
Encrypted:	false
SSDEEP:	6144:iT7Ko7K6QXt3MdckAkHCyfycx7d6fzv91TaprZyP9:iKo7K6QXRMdckAkHCyfycx7d6fpke
MD5:	B857EACD0E4F666EF310F27533FD5FE2
SHA1:	7B85D4F0E70395A49826CBF243DD6D8FBD31A70F
SHA-256:	F84E78BDCBCB0BF84DB01698F7C41FFB4D09D45C88E862E97F114A28CCC81085
SHA-512:	473561B04CAD477CFA73DECE3960083F3B0CF717E6EFDEDDE6832CA66B3D26193F2DC9FF60FD4E81E55C1D77D8E5D43CDDC3FAC3CE7C0B68A80476B92FA4D8AF
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.css
Preview:	@import url(https://constellation-static.web.vanguard.com/v0/fonts/constellation-fonts.css);.chart-container{position:relative;margin:auto;height:100%;width:100%;background:#fff;display:flex;align-items:center;justify-content:center}.chart-container .chart_img{position:absolute;bottom:0;left:0;width:100%}.line{width:100%;height:0;position:absolute}.year{height:7px;float:left;position:relative}#customChart{height:100%;position:relative}.year .vl{position:absolute;height:3rem;width:2px;background:#979797}.year .circledAge{height:34px;width:34px;border:2px solid #979797;border-radius:50%;left:-19px;position:absolute;top:-17px;z-index:1;background:#fff;color:#040505;display:flex;align-items:center;justify-content:center;cursor:pointer;font-family:Mark Pro Heavy;font-size:14px;font-weight:900;font-stretch:normal;font-style:normal;line-height:normal;letter-spacing:normal;-webkit-tap-highlight-color:transparent}.year .circledAge:hover{background:#cbcece;color:#040505}.year .circledAge.selecte

Chrome Cache Entry: 201

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1270
Entropy (8bit):	5.305224556174555
Encrypted:	false
SSDEEP:	24:YKKpXW6rZJ7UDqSyAml/2qc/vpaPPL/ocqZhSyAzpXW6rZJ7UDqSyAmg/2qc/vpa:Yr5VlkQJleqc3sHzocqZRo5VlkQJgeqX
MD5:	1206AB490D0CA7E59906010191F593E3
SHA1:	DCEB02607B32276DD81DFC044A8FF7C5F807A273
SHA-256:	81DFE9A01F0F8CC6932A2956E8E8A374A2C86661EAAD56AD468BBE776E9D5601
SHA-512:	D8678999F696F923304BC5A7D3583BE77B7855055405A166A01CF1E429AC39F248EB684228145DB19BBACD9E14380060C6D7513BD64115AFCE257060F898C007
Malicious:	false
Reputation:	low
URL:	https://content.zenimpact.io/dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/init.json?ver=4354856871
Preview:	{"ownyourfuture.vanguard.com":{"cdnPath":"https://content.zenimpact.io","clientId":"27902609-b114-4020-bca5-e9caee1dd631","apiKey":"AIzaSyAMe8kFxrppCns3DOYAztjm6YGqSyPfHIQ","config":"27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/configv21.json","endpoint":"https://insight-api-kgw.zenimpact.io","hub":"https://hub2.zenimpact.io","isActive":true,"isSPA":false,"options":[],"previewEndpoint":null,"scaffold":"https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/zenapse/dist/scaffold/zen_insight_V4.min.js","siteId":"090d772a-b3d6-4dda-808f-773ad25b7715"},"sat-ownyourfuture.vanguard.com":{"cdnPath":"https://content.zenimpact.io","clientId":"27902609-b114-4020-bca5-e9caee1dd631","apiKey":"AIzaSyAMe8kFxrppCns3DOYAztjm6YGqSyPfHIQ","config":"27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/configv4.json","endpoint":"https://insight-api-kgw.zenimpact.io","hub":"https://hub2.zenimpact.io","isActi

Chrome Cache Entry: 202

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32704)
Category:	downloaded
Size (bytes):	561635
Entropy (8bit):	5.398580522776324
Encrypted:	false
SSDEEP:	6144:gHid6Yptn9svLfaOGv/AWpb01MB6brQuIBuiMauLKUM0WJygM:znFXv/A6g1MwIBuiMauGUgq
MD5:	8C3417CE568BE39241124D6683EBB3DA
SHA1:	2DFB4ECF612FAD1CC0CB791CE80477F336667CC1
SHA-256:	4483A39AA478F83F932AFE09A01214DB6041FB2F0F319D7995A152411110A9B9
SHA-512:	831994154298DF9BF660A699E50E7C0615E10F9FD359CB402497C6DC46D51287173EE054F54DACEAB6C944F75CE3608B29790FD7C4B055AC04204D70BBFFF3A6
Malicious:	false
Reputation:	low
URL:	https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/launch-ecb7d9153f04.min.js
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/launch-ecb7d9153f04.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-10-29T19:37:18Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN91dc7eee55844e8da7c0532e45f47c58",stage:"production"},dataElements:{user_identifiedType:{defaultValue:"",forceLowerCase:!0,modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){var e=_satellite.getVar("user_sPOID"),t="unknown";return e&&"none"!=e&&(t="known"),t}}},page_domain:{defaultValue:"",forceLowerCase:!0,modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return window.location.host.replace(/^www\./,"")}}},medallia_formname:{modulePath:"medallia-for-adobe-launch/lib/dataElements/event-name.js",settings:{}},page_pageTitle:{defaultValue:"",forceLowerCase:!0,modulePath:"data-lay

Chrome Cache Entry: 203

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1662)
Category:	downloaded
Size (bytes):	1832
Entropy (8bit):	5.2335079927838475
Encrypted:	false
SSDEEP:	48:d9t/BgNWS/PW6IbBfIwnl5PW8lIBqnGeMi5CM:d9BBgkL6E/nl88lIMl5CM
MD5:	38401A394F33FC8CA441CECE82FE7F2E
SHA1:	3C6C34FC1BCF7A1C03770399D2367C526E1D3486
SHA-256:	BCB4A174B24F63527DAE59E979DF2C07F025A53F4419122600362BD7B58B144F
SHA-512:	91ADA6873FECC66EA9A44CDADE327ED710D635ED665C1CA2E388114D63C58D814E5EE62CF835CBC337BED0CE14D240E2C2BE2A9A9861FE139FAEBC8B983817A8
Malicious:	false
Reputation:	low
URL:	https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.min.js
Preview:	// For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.js`.._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.min.js', "document.addEventListener(\"at-request-succeeded\",(function(e){window.onload=function(){if(\"undefined\"!=typeof TLT&&e.detail.responseTokens){console.log(\"TeaLeaf found and response token found\");var n=[];e.detail.responseTokens.forEach((function(e){var t=e[\"experience.name\"],a=e[\"activity.id\"],s=e[\"activity.name\"];t&&a&&s&&!n.includes(a+\":\"+s+\":\"+t)&&(n.push(a+\":\"+s+\":\"+t),console.log(\"Logging experience - \"+a+\": \"+s+\": \"+t),TLT.logCustomEvent(a+\": \"+s,{variant:t}),console.log(\"flushing tealeaf\"),TLT.flushAll())}))}else console.log(\"TeaLeaf not found and/or response token not found\")}})),document.addEventListener(\"at-co

Chrome Cache Entry: 204

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21215)
Category:	downloaded
Size (bytes):	21216
Entropy (8bit):	5.306175166588735
Encrypted:	false
SSDEEP:	384:TRFZRwWtdbD5ABwXwLrekrff8eTr+x5RxMcKn9LuJ4vV/:T7wAD5ABwXw+krfflyxzxin9D/
MD5:	A3E7570799838F456EA59051EDF9B177
SHA1:	714E869857B96DDEEF2578B26F7151A494254BE3
SHA-256:	91B0809D8B9DC57EAA09CB0E13C210B24EDFAEADB94A8CFF0FEE02751C1B0B5F
SHA-512:	05C30ADB56D3D9F0AB84E4E5D0BFFFEADD2FEAA815EE7700E7A5806D01173AEB548BBE390E8487E0E541B27E08663F156F8AD49B7C5D3F6A4202A3FC4CE475FF
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 205

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	531788
Entropy (8bit):	5.115532310728114
Encrypted:	false
SSDEEP:	768:DXiNRXikMXpBnXpBcXJ7giXOMaXGHpsJXGFSVSsXOeiXJiVSfXJORAv0XJupxEuu:LqffAjjXbqLE
MD5:	46B351D9E6F367F5091E777066CA1AD1
SHA1:	A0ABFFB92E9010C1B998A653AD2D3EB9E9FAADAD
SHA-256:	20638B582BAD62A2D749C2C4A7B0D3B6366D91A9E09626EFC96100C07B962B18
SHA-512:	B9A7953393B4A7621560C234B5CE61101AADECA3FF4A8753AE9BE78BC07F372417C801275E729ED3BE7D8D2FEAE9577CA5D764E84B746F5425CEB21B6EA93EF3
Malicious:	false
Reputation:	low
URL:	https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/onsite/onsiteData.json
Preview:	{. "sbtServerDomain" : "https://ubt-lb.digital-cloud-prem.medallia.com",. "sbtEnvPrefix" : "wdcusprem_",. "endUserIdentifier" : { },. "formNodes" : [ {. "formId" : "9596",. "isCustomHtmlEnabled" : "false",. "formVersion" : "2",. "formHtmlUrl" : "/**ONPREM_URL_PREFIX**//liveApp/2.54.5/form-app-web.html",. "formDataUrl" : "https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9596/formData1726863497625_###LANGUAGE_CODE###.json",. "formWidth" : "850",. "formHeight" : "830",. "isFixedSize" : "false",. "isFullWidthEmbedded" : "null",. "designSettings" : {. "formBackgroundColor" : "",. "thankYouPageBackgroundColor" : "". },. "formLouserzationSettings" : {. "defaultLanguage" : "en",. "useCustomParam" : "false",. "customParam" : "null". },. "formJsonRelativePath" : "wdcusprem/13700/forms/9596/formData1726863497625_###LANGUAGE_CODE###.json",. "formJsonV2RelativePath" : "wdcusprem/13700/forms/9596/for

Chrome Cache Entry: 206

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	3.9721077567347134
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HVjROE9HSxmQqyRHfHyY:YGKed2pHDKcElSDPyY
MD5:	A20F61BBF661147FA65EC1ABF4093AED
SHA1:	C7306A9A3F8224E2E564FD170242E4B26BBA7047
SHA-256:	EFA3DA3BC784514C792213E4B3C842CF4DA752C0EC3EF14F4592A6A849DBEFCA
SHA-512:	1BD4A45DC90A18265C78720955D80FCAC6A3656C23BBC0C480078D9407ACF205399FBDD22942242642D20EC73759DF5613620BFC27084C71AF448CC2F36D55F6
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"TX","stateName":"Texas","continent":"NA"}

Chrome Cache Entry: 207

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10393)
Category:	dropped
Size (bytes):	10575
Entropy (8bit):	5.4758738804879235
Encrypted:	false
SSDEEP:	192:IBCFL1gvHKFp3vQwjKwjRU2b0mDKGuQjBdVaQKFnMJORHaIN5H:IcFL1gvHKT3vQw+MU2bfdLwQKdwORHLX
MD5:	74D036FF6C687A9648887E0F6ACB4ED7
SHA1:	D9F055005453F78B41ABBC29C2A7C5389AE46620
SHA-256:	4C8E4D6178DBD4C11E6BFA64AA7340140CCDFBA679DDF925E4D2865F24B698CD
SHA-512:	129394C2243D681BFE9A2645E606E338D64D09807E28FD05AC7789E297D6C8093759211C08466FE33D3C0B545610BB9668EB6DC96EA3F8320B9903124085D193
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC9e850eb0c29147bdb5c53bed16ddb818-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC9e850eb0c29147bdb5c53bed16ddb818-source.min.js', "function OpenProfileId(){function e(){var e=!1,t=\"\",n=null,r=\"\",i=\"\";try{r=\"AcroPDF.PDF\",n=new ActiveXObject(r)}catch(e){}if(!n)try{r=\"PDF.PdfCtrl\",n=new ActiveXObject(r)}catch(e){}if(n)try{e=!0,i=r,t=(t=n.GetVersions().split(\",\"))[0].split(\"=\"),t=parseFloat(t[1])}catch(e){}return{isInstalled:e,version:t,name:i}}function t(){var e=!1,t=\"\",n=null,r=\"\",i=\"\";try{r=\"ShockwaveFlash.ShockwaveFlash\",n=new ActiveXObject(r)}catch(e){}if(n)try{e=!0,i=r,t=(t=n.GetVariable(\"$version\").substring(4)).split(\",\"),t=parseFloat(t[0]+\".\"+t[1])}catch(e){}return{isInstalled:e,version:t,name:i}}function n(){var e=!1,t=\"\

Chrome Cache Entry: 208

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1051)
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.192379181230006
Encrypted:	false
SSDEEP:	24:hBbSct/BaBbG4AMAJmN6MaCJvaJXJuXh+J4AJJuA0989TAWJuA09+eRrBin1rvPq:9t/BVMAoOCkhoQLJxAWxj8rBi1rvPq
MD5:	3242DDDD9DE7501FAC001F14D9FB4F4E
SHA1:	608831A7ED3075348D37BC087FBB4336B737068A
SHA-256:	F7E72DB2C079AEDB7C18EF44AC0D7B2E0B884E5C0F9D5DC263A413A4BA5B17DC
SHA-512:	44437889D8E98EBE65249988D4F60583218F91C6FEC5005601FFA2179205E2F8A03F0EA671B81768162F98D761FB49A46342F9BD41258DB012751EF254EC2CB1
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC2500743be69f4be0aa042674acca9b86-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC2500743be69f4be0aa042674acca9b86-source.min.js', "if(adobe&&adobe.target){var params={};let e=_satellite.getVar(\"target_user_categoryId\");\"\"!=e&&(params[\"user.categoryId\"]=e);var login_status=_satellite.getVar(\"user_loginStatus\"),spoid_id=_satellite.getVar(\"user_sPOID\");params.current_user_loginStatus=login_status,params.current_user_crewFlag=_satellite.getVar(\"user_crewFlagString\"),\"logged in\"==login_status&&\"\"!=spoid_id&&(params.current_user_spoid=_satellite.getVar(\"user_sPOID\"),params.current_user_clientSegment=_satellite.getVar(\"user_clientSegment\"),params[\"profile.user_profile_clientSegment\"]=_satellite.getVar(\"user_clientSegment\"),params[\"profile

Chrome Cache Entry: 209

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.214669229508714
Encrypted:	false
SSDEEP:	6:jwkMKngnAMHnG+6XuB8B6CpRGegGdef1XMYA/B3nAMHnG+6XuB8B6CpRGegGdefK:jvgnpHJBnqgodedct/BnpHJBnqgodeI9
MD5:	1B1E92D067C0335F1B8ABB3EA14D37A1
SHA1:	CC5BCC1712E22ED3A812B64C8ED9C6FA9E5E3AB1
SHA-256:	6346B99F9B62DE119F3B1BF84B636F9103901AF030857B695E9D09CA462462FB
SHA-512:	96B38E8DAF8A61C3983F469BE225F2D871FED62099480B8FF9B6DEA3244D2BB317767205BDB26100D3981BB2E3D1DE562676347A7B3B87BD18E2BDFE6FC08B6F
Malicious:	false
Reputation:	low
URL:	https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.min.js
Preview:	// For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.js`.._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.min.js', "_satellite.track(\"fireTriggerView\");");

Chrome Cache Entry: 210

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	303969
Entropy (8bit):	5.190407379957432
Encrypted:	false
SSDEEP:	3072:ROBkC4CjmxIOrqC4ChtwRpknkO4pk4qNYIY2p7B:ROBkC4CKqC4ChtlkcNYpI7B
MD5:	647C49854C32F072DBB2895E018873CB
SHA1:	05254E383D764C301F8C0057AD4436745B886786
SHA-256:	92C75C8D3AAB4BF89CE19493AC54CFB13DEBDA3DFD79D7E15DB328300578BAD2
SHA-512:	AA187A35F1899A6DC90217CF24FC4588228DEC278494019B8F78F6CC143B5CFDFD372E5CED9EAE84B1BAB0E8714BB857DCC2CEEEB2E5227F3BDAE366CDAA6F73
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Your privacy","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose to set some types of cookies to .Off.. However, setting cookies to .Off. may impact your experience on the site and the services we are able to offer. Click on the different category headings to find out more and to change your default settings, where possible. Clearing cookies on your device will delete your

Chrome Cache Entry: 211

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21778), with no line terminators
Category:	downloaded
Size (bytes):	21778
Entropy (8bit):	4.769188103585108
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ
MD5:	73BC4067D312180A1B19A4D883F42D6A
SHA1:	AD328A9A572FBEA43F295E7769835FF08F6FF1FD
SHA-256:	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
SHA-512:	20B89462521684C258A8CE15E94DA67182C66397B0DE528357E01294FF06883C1AD96037A9D739E4575DB8722B1A1967578709A0C844CD45A49E6A51E1B6479D
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 212

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2349
Entropy (8bit):	4.233962167443139
Encrypted:	false
SSDEEP:	48:3Pnrwbzcg+esr2x/mEQc2JnjAmlpcsPZA1KUkoi9nHY:frwnc8qw2ZjAmZPGKke4
MD5:	679DA4B521BF0592A785500F57D2F059
SHA1:	38A3DDBA9E814E0C707583656EDE67D14900D44D
SHA-256:	7D498A9E787FEF78D0A58FD2D328E425F1A0A183A8BD7AED5DB475DCA7744E84
SHA-512:	99DBDA472877190FB54426C8EE8ED614925C9573E2D92DA765C29BD97CFD38600C42B25BC7C58BE5599134FC21365092DCABFB0392981FA2491F5B02ED71A1A9
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/home-icon.svg
Preview:	<svg width="14" height="14" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_1824_27242)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M12.616 7.92571C12.7379 7.97547 12.8683 8.0007 12.9999 7.99994C13.1315 8.0007 13.262 7.97547 13.3838 7.92571C13.5057 7.87595 13.6165 7.80262 13.7099 7.70994C13.8037 7.61698 13.8781 7.50637 13.9288 7.38452C13.9796 7.26266 14.0057 7.13195 14.0057 6.99994C14.0057 6.86793 13.9796 6.73722 13.9288 6.61536C13.8781 6.4935 13.8037 6.3829 13.7099 6.28994L7.70994 0.289939C7.61698 0.196211 7.50638 0.121816 7.38452 0.0710475C7.26266 0.0202789 7.13195 -0.00585938 6.99994 -0.00585938C6.86793 -0.00585938 6.73722 0.0202789 6.61536 0.0710475C6.49351 0.121816 6.3829 0.196211 6.28994 0.289939L0.289941 6.28994C0.101638 6.47824 -0.00415039 6.73364 -0.00415039 6.99994C-0.00415039 7.26624 0.101638 7.52164 0.289941 7.70994C0.38318 7.80318 0.49387 7.87714 0.615692 7.9276C0.737514 7.97806 0.868082 8.00403 0.999941 8.00403C1.1318 8.

Chrome Cache Entry: 213

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 214

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (609)
Category:	downloaded
Size (bytes):	2075
Entropy (8bit):	5.022571620741154
Encrypted:	false
SSDEEP:	24:QNu0eg5cFTVGzYO7AvkA3RGfN2L7JuQ8mmSSfQQJyaKqAuKyGgQKDunoKUNd4g6v:QA0KTVvO7AvkA3RbVknryFAwE4dv
MD5:	8084DA3C9E7258595971AEFA1864CEE1
SHA1:	02F1E2F249863AE2F0F6296AED46DC96FA42EC16
SHA-256:	B3F0A51197E77B186F31DE4B16A5281246CC58F540F510B3329BC236508A531E
SHA-512:	22A34E410FB834A01D58809AFB43A00C563DB961DA8A8E0BF8799DDF0D6490F337FC118E9B0C00870B0E78A9096034ED49969739BA07105592A24C3123C7DA6F
Malicious:	false
Reputation:	low
URL:	https://logon.vanguard.com/pX4N_uX9/ULPepmz/v4Uv9mS/jE/2t/WBAMI1QC/Oj/MrEDVGfiJY
Preview:	.sec-container{padding-top:30px;margin:0 auto;width:1140px}#sec-overlay{display:none;position:fixed;top:0;left:0;right:0;bottom:0;z-index:2147483647;background-color:rgba(0,0,0,0.5)}#sec-container{position:absolute;top:50%;left:50%;transform:translate(-50%,-50%);-ms-transform:translate(-50%,-50%);background-color:#fff;border-radius:5px;box-shadow:0 0 10px gray;min-width:500px;z-index:2147483647}#sec-container .closebtn{position:absolute;top:10px;right:25px;font-size:20px}#sec-if-container{font-family:arial;color:#515151;text-align:center;width:-webkit-fill-available;padding-bottom:20px;overflow:hidden}.#sec-if-container .behavioral{height:148px;width:655px}#sec-if-container .adaptive{height:154px;width:655px}#sec-if-container iframe{border:0;border-style:none}#sec-if-container iframe.funcaptcha{width:308px;height:300px}#sec-if-container iframe.whiteshadow{width:250px;height:75px}#sec-text-if{display:block;margin:0 auto;width:700px;border:0}#sec-text-container{overflow:auto;-webkit-over

Chrome Cache Entry: 215

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2212
Entropy (8bit):	4.903004142658906
Encrypted:	false
SSDEEP:	48:cfLwG4ZWl/nT0zw0uPs2rxJhjelmvmQBPJP:8CsngzwXs2r9hp
MD5:	1ACA7EB0509ACA86124957513B50B712
SHA1:	95D24A0A6F618E2B7A947A06FD98474AB2807CFD
SHA-256:	BB005C7882E8B0922F7C9AF990130F13F611F0BB73511DF9BE911A93A7253C26
SHA-512:	FF28319769E14A569A8581BB5D3A5D86DBE97ED720F995CB170DF482DB9F13AEEE885BEB4A17A09F46AE955E93A5C2DC43910DD2AF374135DA8ECBE208FEDDE5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>..Icons/Desktop/Social/Linkedin</title>. <g id="Header-/-Footer" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="c11n-grid-xxl-(1440px)-Advice-Footer" transform="translate(-385.000000, -840.000000)">. <g id="..Footer/Desktop/NotLoggedIn-Copy-2" transform="translate(0.000000, 813.000000)">. <g id="Social-Icons" transform="translate(162.000000, 24.000000)">. <g id="Group" transform="translate(220.000000, 0.000000)">. <polygon id="Path" points="0 0 30 0 30 30 0 30"></polygon>. <g id="Icon/-Linkedin" transform="translate(3.000000, 3.000000)">. <circle id="Oval-Copy-5" fill="#0065A1" fill-rule="nonzero" cx="12" cy="12" r="12"></circle>.

Chrome Cache Entry: 216

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32766)
Category:	downloaded
Size (bytes):	39448
Entropy (8bit):	5.346741589705456
Encrypted:	false
SSDEEP:	768:HRZIGa9YowVYJFmNX/9Br7l0V+WGUgxtu2KD7DZVAJXotmyO0:HRZIF9pIYJF+X/nfWVyTEYJB0
MD5:	940296C3996A3445DB4E39CD11D793DF
SHA1:	92F9E641B0604D226851D6052EEA27BB26DDF710
SHA-256:	77343FC9C3947CF904EE57C4B10FBC82BB419CC37F3FA37C399D6A46B3973737
SHA-512:	90941DB1865EC438D2977E65F8F36F99ADEC0784D2292CD454F5C05B8FB5C556E135BE3EF141495E83EDB116BD9908191A6ABAED3B6CECE8258901899CE09BF5
Malicious:	false
Reputation:	low
URL:	https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/EXcdd48fe7cd4640a1bbab483674626e32-libraryCode_source.min.js
Preview:	// For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/EXcdd48fe7cd4640a1bbab483674626e32-libraryCode_source.js`..function AppMeasurement_Module_Integrate(e){var t=this;t.s=e;var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_m",t.list=[],t.add=function(a,i){var r;i\|\|(i="s_Integrate_"+a),n[i]\|\|(n[i]={}),(r=t[a]=n[i]).a=a,r.e=t,r._c=0,r._d=0,null==r.disable&&(r.disable=0),r.get=function(e,a){var i,o,c=document,s=c.getElementsByTagName("HEAD");if(!r.disable&&(a\|\|(o="s_"+t._in+"_Integrate_"+r.a+"_get_"+r._c),r._c++,r.VAR=o,r.CALLBACK="s_c_il["+t._in+"]."+r.a+".callback",r.delay(),s=s&&0<s.length?s[0]:c.body))try{(i=c.createElement("SCRIPT")).type="text/javascript",i.setAttribute("async","async"),i.src=t.c(r,e),0>e.indexOf("[CALLBACK]")&&(i.onload=i.onreadystatechange=function(){r.callback(n[o])}),s.firstChild?s.insertBefore(i,s.firstChild):s.appendChild(i)}catch

Chrome Cache Entry: 217

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1578 x 1113, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	59213
Entropy (8bit):	7.7493497233073025
Encrypted:	false
SSDEEP:	1536:TcKlP9HLqRfo0wkCovwOCwT/fz+1gMvXKNhrEn/UZ/diPnV:YKllHLqi0wkCov0w/UkNRy/8/APV
MD5:	F8E31A59219AE53194292918D8F9C1E9
SHA1:	7577DA15CF49A84700511DD6EF8C00FC27D7AFDE
SHA-256:	0BED5BA31A3D369B0B4F643EB9EBB31CE396BF6743D337B20DF1A7CDF0D442BF
SHA-512:	337EBBBA967661D0D79E8ED965523409C2B9CF94CAB28898CD7FFD9C0482F840CCBD45F4752996D0700003A9007AC8F7135934D9FBF48610E6A2D2C67E12C226
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/public-home/PH_1920.png
Preview:	.PNG........IHDR...*...Y.....T.Xd....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". dam:Physicalheightininches="5.152739524841309". dam:Physicalwidthininches="7.305501461029053". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2023-06-22T14:24:38.457-04:00". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Physicalwidthindpi="216". dam:Physicalheightindpi="216". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="d991c09d46e3c2b764bf9994582d8e4c3a557204". dam:size="59213". tiff:ImageLeng

Chrome Cache Entry: 218

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1578 x 1113, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	59213
Entropy (8bit):	7.7493497233073025
Encrypted:	false
SSDEEP:	1536:TcKlP9HLqRfo0wkCovwOCwT/fz+1gMvXKNhrEn/UZ/diPnV:YKllHLqi0wkCov0w/UkNRy/8/APV
MD5:	F8E31A59219AE53194292918D8F9C1E9
SHA1:	7577DA15CF49A84700511DD6EF8C00FC27D7AFDE
SHA-256:	0BED5BA31A3D369B0B4F643EB9EBB31CE396BF6743D337B20DF1A7CDF0D442BF
SHA-512:	337EBBBA967661D0D79E8ED965523409C2B9CF94CAB28898CD7FFD9C0482F840CCBD45F4752996D0700003A9007AC8F7135934D9FBF48610E6A2D2C67E12C226
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...*...Y.....T.Xd....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". dam:Physicalheightininches="5.152739524841309". dam:Physicalwidthininches="7.305501461029053". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2023-06-22T14:24:38.457-04:00". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Physicalwidthindpi="216". dam:Physicalheightindpi="216". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="d991c09d46e3c2b764bf9994582d8e4c3a557204". dam:size="59213". tiff:ImageLeng

Chrome Cache Entry: 219

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	440693
Entropy (8bit):	5.3572623362394305
Encrypted:	false
SSDEEP:	6144:/m1EuxkaXxsE7qo2q/I2KaciDBkXmMbgbnz+dWhql25+qEzLs:OnxkaXKE7qzmMWLXT
MD5:	77897224C74905A48B78D28865CF415C
SHA1:	42322EA8A206061BEEAA4018242283EB48D3F79B
SHA-256:	E912EFBA4DD82B798FB061F872B0016687932D1648098F501DFF644A7AD77A35
SHA-512:	130FD17F36F0BF0241FBE649CAA3C3C770D4643CE3251C6797DF021C95574E01718DF0B53D6079FF49B8C8595BED68396E680A5E0806198562665DC5E451A193
Malicious:	false
Reputation:	low
Preview:	/** . * onetrust-banner-sdk. * v202402.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function F(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 220

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 351
Category:	downloaded
Size (bytes):	275
Entropy (8bit):	7.295588535495933
Encrypted:	false
SSDEEP:	6:XtTDryEADiHex0yzpl9SIK3srPrthsHgLdyjZwfH3sD:XVr9miH/a39jzphmgLkjSfH3w
MD5:	2841BC7D2F6944F63A6B1F30E95F2BB9
SHA1:	6BA07B59D5064FAF1D1652A7F5B377E2043FBAA8
SHA-256:	8605A9BA29812CDCB838A672D7C556F78A9B408BC9010AFA8247382B7315EEB6
SHA-512:	1DB3BD1291DF68DDF8A16E392AE8F1DC46802BEDC0AFEA65655191BEC5BD89A3507F2CFF8508CBBE12C8B0B5AF31F63E816ADFB91AF8A42B1C0B09E417EE1983
Malicious:	false
Reputation:	low
URL:	http://www.vanguard.com/retirementplans
Preview:	..........m.Ao.@......^<.h...$.4.h.fi..*$.K.A...U.....K.{.eF#.)..\|.DPP]A.......9..C..W.7k....:.mI..Y...1`.Q......l.O.w8......E.H;....-o.+.z..L....Td.....wW.=.(IB../.`p.+.....4.C..V...W..n".........v.E[0.~...........G..:}...>g..e:....J.J9.v.8Z......x..1.F?...%_...

Chrome Cache Entry: 221

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1240)
Category:	downloaded
Size (bytes):	1241
Entropy (8bit):	5.119413025040683
Encrypted:	false
SSDEEP:	24:pQMTj6cNIPy61NtpK+6zbm+CJOPQJ51oU1+KWQKIVPp:jWPdNty+OF+v
MD5:	269AE0F4DE1382D43C68582D95D0EE2E
SHA1:	641366D6C830341EE98C5C9ECCA0AD353A749F22
SHA-256:	8BFC337887320A8DE33553D83F0680CCD4433111D261BCAC102297010C585DCE
SHA-512:	474A9BBD9F3186C21E8887389AAF05D84C6E81DACAECEACDDFA68FDCF9FC036F097B76B257EBC6F8209259490DDAEBA24A373F2BAA5A46AFC753A0FD2DD3FE08
Malicious:	false
Reputation:	low
URL:	https://n4v.web.vanguard.com/nav-preload.css
Preview:	.c11n-elevation-100,vg-vgn-nav:not(:defined,[no-header])::before{z-index:100;box-shadow:0 0 .25rem .0625rem rgba(4,5,5,.06),0 .0625rem .0625rem 0 rgba(4,5,5,.18)}.c11n-z-index-100{z-index:100}.c11n-elevation-800{z-index:800;box-shadow:0 0 .25rem .0625rem rgba(4,5,5,.06),0 .0625rem .0625rem 0 rgba(4,5,5,.06),0 .125rem .25rem 0 rgba(4,5,5,.08),0 .25rem .5rem 0 rgba(4,5,5,.12)}.c11n-z-index-800{z-index:800}.c11n-elevation-3200{z-index:3200;box-shadow:0 0 .25rem .0625rem rgba(4,5,5,.06),0 .0625rem .0625rem 0 rgba(4,5,5,.04),0 .125rem .25rem 0 rgba(4,5,5,.04),0 .25rem .5rem 0 rgba(4,5,5,.04),0 .5rem 1rem 0 rgba(4,5,5,.08),0 1rem 2rem .25rem rgba(4,5,5,.08)}.c11n-z-index-3200{z-index:3200}vg-vgn-nav:not(:defined){display:contents}vg-vgn-nav:not(:defined,[no-header])::before{content:"";display:block;height:137px;background:linear-gradient(to bottom, transparent 51%, rgb(232, 233, 233) 51.5%, transparent 53%)}@media(max-width: 991.98px){vg-vgn-nav:not(:defined,[no-header])::before{height:64px;

Chrome Cache Entry: 222

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	815
Entropy (8bit):	4.274712290392585
Encrypted:	false
SSDEEP:	12:2/uCMht0rvHYoBVFl4FBbetD1i/w3K0zK3E5NiSCyQ:2/V4+7IBitK00EXiSCyQ
MD5:	0C4B1C61E4ED0E14F079763904B4349B
SHA1:	C110F06000ABD8605CD13A508B383E765000DF10
SHA-256:	4152FBCEAA73D06F0004B93F1C7546C5D13550A37060520E423FE981AF3C1837
SHA-512:	52206DE19E0845830BEE412290E872BE9AFD2127AE85BE281222E09690C433FE64AE36F0BC1ECD5590A84B22799F1B20F846831BA5A182E5362DBBD4FB47F421
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/components/dwcharts/clientlibs/site.min.ACSHASH0c4b1c61e4ed0e14f079763904b4349b.js
Preview:	(function () {. "use strict";.. // dynamically adjust iframe height to ensure chart isn't cutoff on mobile,. // doesn't have scrollbars, and doesn't have too much whitespace underneath on desktop.. window.addEventListener('message', function(event) {. if (typeof event.data['datawrapper-height'] !== 'undefined') {. let iframes = document.querySelectorAll('iframe');. for (let chartId in event.data['datawrapper-height']) {. for (let i = 0; i < iframes.length; i++) {. if (iframes[i].contentWindow === event.source) {. let iframe = iframes[i];. iframe.style.height = event.data['datawrapper-height'][chartId] + 'px';. }. }. }. }. });.})();

Chrome Cache Entry: 223

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1484
Entropy (8bit):	5.02481082462968
Encrypted:	false
SSDEEP:	24:2d2pU1Lu3qvKBTKSxqeaxM2Tsm7Rhf7OM3o003kSdjriEj0+cI/mYr8RKvp8DhR:cIQwqilRxw7v+DFnpqR
MD5:	6F2FF6AC99A2D04BA997A18B588E7DC4
SHA1:	61133CA3C2637CCE4C7A40D6186AD197D77AD069
SHA-256:	B833C559FBB6374D65B66A4EBE30724A2A90AE579C7FE74646126E83A03E176B
SHA-512:	BF6FAE3764613FA3732468226521A3BD10A2CA959DE3B37690462DCBC581BD9036D43B961EDC6C5AFAD1412CB4A03A8678881590F9065D3573A5FD16B16C9362
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/digital-advisor/icons/facebook.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 64 (101010) - https://sketch.com -->. <title>CB05E68F-5D94-4601-A0D4-106ECABB3116@1.5x</title>. <desc>Created with sketchtool.</desc>. <g id="Header-Footer---Desktop-&-Mobile" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Tab---001--Public-Header-&-Footer" transform="translate(-192.000000, -810.000000)" fill-rule="nonzero">. <g id="Footer/Tab" transform="translate(0.000000, 770.000000)">. <g id="Social-Media" transform="translate(192.000000, 40.000000)">. <g id="Icon/-Facebook">. <g>. <ellipse id="Oval" fill="#3C5A9A" cx="12" cy="12.5" rx="12" ry="12.5"></ellipse>. <path d="M10.1,20.4166667 L10.1,13.958333

Chrome Cache Entry: 224

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47786), with no line terminators
Category:	dropped
Size (bytes):	47786
Entropy (8bit):	5.367298060745276
Encrypted:	false
SSDEEP:	768:89nLH32kS9n29LCLtIaz9V4b2MA6AABl9n8fXuaUqXcUyNff3whvP3GnhXQ6KT0g:cjMyaPWA1ABQ+mlhDrq85nmKG8YX8D
MD5:	081FFDACF8AEBE0D7A00757A3B9C08ED
SHA1:	1CF3DCB274BEC0D20AB7B31BB0B4A82E93E96FC8
SHA-256:	0A3EFFE89DC665EF330959DA4834241796383DA186C7CD13FD33A6F8029CD2FB
SHA-512:	BF187B9BEF4C71272D80B6EB836942B5A803F29F4D2A4C581F5D707141CDAA753D33F051C31430CB3B44B2FFA3443F2D6CE8467BA541A45C574E390AA7CA1C5A
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e={235:e=>{e.exports=function(e){var t=new Array(10);function n(t){return 9-e.charAt(t)}return null===e\|\|isNaN(e)\|\|""===e?"":(e=function(e,t){for(var n=e.toString();n.length<t;)n="0"+n;return n}(e,10),t[0]=n(8),t[1]=n(9),t[2]=n(4),t[3]=n(3),t[4]=n(2),t[5]=n(7),t[6]=n(6),t[7]=n(5),t[8]=n(0),t[9]=n(1),t.join(""))}},150:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0});t.default=class{constructor(e,t,n){this.eventData={event:e},t&&(this.eventData[t]=n)}getData(){return this.eventData}}},502:function(e,t,n){var r=this&&this.__awaiter\|\|function(e,t,n,r){return new(n\|\|(n=Promise))((function(o,s){function i(e){try{c(r.next(e))}catch(e){s(e)}}function a(e){try{c(r.throw(e))}catch(e){s(e)}}function c(e){var t;e.done?o(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(i,a)}c((r=r.apply(e,t\|\|[])).next())}))};Object.defineProperty(t,"__esModule",{value:!0});const o=n(150),s=n(413),i=n(371),a=n(625),c=n(603),l=n(12),u=n(322),d=n(668),f=n(367);t.defa

Chrome Cache Entry: 225

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6476), with no line terminators
Category:	dropped
Size (bytes):	6476
Entropy (8bit):	5.270275798173518
Encrypted:	false
SSDEEP:	192:qP3uFQcXIhFB3KurcAMUAy2f3Skg+MK1GWaL:qP3uFTIhFZL4UAyMgrIS
MD5:	F9692BF66D0233782F900F4D9ACEC391
SHA1:	F549F2FEA3F9F45C9FA6255BF5DE02B0C5380A6D
SHA-256:	10CA6647966AC8A8998FF4A22F4E8FF3F80FD2E2E4D4FE31ABFCFB0C0FE4A188
SHA-512:	655507026B7EA0C1E367092B45083C2D71F4A702E5FA63243A019EA0CE7AB600691F32BBF558A8119227FC2C96DBA357B7D11C5545F02A7B6E15DF8894A5614C
Malicious:	false
Reputation:	low
Preview:	(()=>{if(window.Zen)return console.warn("Zenapse script already loaded. Not loading again."),!1;window.Zen=(()=>{const e=()=>{document.querySelector("html").style.opacity=1},n=()=>Math.floor(1e10*Math.random()),t=(e,t)=>new Promise((i,a)=>{let o=t?"?ver="+n():"",d=document.createElement("script");d.src=e+o,d.async=!0,d.onload=(()=>i(d)),d.onerror=(()=>a(new Error(`Script load error for ${src}`))),document.head.appendChild(d)});var i;const a=async e=>{window.zen={}\|\|zen,window.zen.config=e,window.zen.preview=!1;let i=u(),a=e.config;if(window.zen.config.isSPA=window.zen.config.isSPA\|\|!1,""!==i){const n=await f(e.config,i);a=200===n.status?n.file:e.config,200===n.status&&h(i),i.indexOf("p")>-1&&(window.zen.preview=!0)}try{const i=await fetch(`${e.cdnPath}/dist/data/${a}?version=${n()}`),o=await i.json();window.zen.d=JSON.parse(JSON.stringify(o)).config,t(window.zen.config.scaffold,!0)}catch(e){console.warn(e)}},o=e=>{if(navigator.cookieEnabled)return window.localStorage.getItem(e)},d=(e,n

Chrome Cache Entry: 226

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12505)
Category:	dropped
Size (bytes):	363620
Entropy (8bit):	5.58077611846137
Encrypted:	false
SSDEEP:	6144:8FHCOTkgbyiCdRCNg7kPdm6s7YOI2UJVCR:8F5TkPiCdwNg7kVmt7
MD5:	9777EE297D1CBC42E2E1D5D5DC213022
SHA1:	3090DE3464444C8DDD05D3B4F8F7479DCC3F3C93
SHA-256:	F9031239875C9D84D903678AAB7ABFCA89D236370F36E8F1AB64832819D00118
SHA-512:	BC75AE29EB34CD24EB9E7EC4E359C55742D01712BD7E84A0132EC1358890634BA27BA514F7477AF86FE98F41587E2BEE1E17019C606D7E194372715611731637
Malicious:	false
Reputation:	low
Preview:	.(function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.54.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLDATA_API_HOST:'udc-neb.kampyle.com/',USERSNAP_ONPREM_HOST_PREFIX:'https://md-scp.kampyle.com/',USER_AGENT_CLIENT_HINTS_LIST:'["brands", "mobile", "platform", "architecture", "model", "bitness", "platformVersion", "fullVersionList", "wow64", "uaFullVersion"]'},SRC:{OPEN_SANS:'resources/form/FormBuilder/vendor/fonts-googleapis/css/open-sans-v14.css',COOLADATA:'resources/onsite/js/cool-2.1.15.min.js',OOPS:'resources/onsite/images/oops.svg'},FORM_HEIGHT:'450',FORM_WIDTH:'450',COOKIE_EXPIRATION:365,DEVICES:{DESKTOP:'desktop',MOBILE:'mobile',TABLET:'tablet',},FEATURE_VERSIONS:{MOBILE_DYNAMIC_SIZING:2,},TIME_FORMATS:{SECONDS:'seconds',MINUTES:'minutes',HOURS:'hours',DAYS:'days',WEEKS:'weeks',MONTHS:'months',YEARS:'yea

Chrome Cache Entry: 227

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16370), with no line terminators
Category:	downloaded
Size (bytes):	16370
Entropy (8bit):	5.624385466796078
Encrypted:	false
SSDEEP:	384:jwN/AdI1c5Hr3797hIHXtsphUHSWs1jeHe4s9j7HkKsKjpmfJfsOu40m6V+GuX04:8N/AdI1c5Hr3797hIHXtsphUHSWs1jeB
MD5:	051D9F7347F641F5F92CF3BD5AB37462
SHA1:	380A8AF70116421C945D74BC0233F7D857CC479C
SHA-256:	6F6BCBFD087FABAE9FD5A38D08D463FB4AFB6FB7923BF678883179B8452700F7
SHA-512:	9FB949DC6B15ABC4AAFC1F89EE70D2900F26621295AE62A985A2D75B8058077460C9D86C1928AFC6C4485935013AFEB26CCF2FDFB0356484294BA040DE64CE9B
Malicious:	false
Reputation:	low
URL:	https://12332392.fls.doubleclick.net/activityi;dc_pre=CNeLornMu4kDFY-ggwcdbDAJXg;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=9752031467127;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNeLornMu4kDFY-ggwcdbDAJXg;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=9752031467127;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D"/><img src="https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDEyMzMyMzkyCmFkdmVydGlzZXJfZG9tYWluOiAiaHR0cHM6Ly92YW5ndWFyZC5jb20iCnhmYV9hdHRyaWJ1dGlvbl9pbnRlcmFjdGlvbl90eXBlOiBDT05WRVJTSU9OCmRlYnVnX2tleTogOTAyMzU3MDUyNzk4NTYwNDgzMwpjdGNfY29udmVyc2lvbl9idWNrZXQ6IDAKYXJjaGV0eXBlX2lkOiAxMgphcmNoZXR5cGVfaWQ6IDEzCmFyY2hldHlwZV9pZDogMTQKYXJjaGV0eXBlX2lkOiAxNQphcmNoZXR5cGV

Chrome Cache Entry: 228

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 229

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3940
Entropy (8bit):	4.964956758081167
Encrypted:	false
SSDEEP:	96:npymy40wvaupCdpUVKGa6AyOhQjdj4jJjFZQ23nw8A:rCSCdpZ6vi4FAJg8hA
MD5:	80E7E06A820F2059A61282DB339A5321
SHA1:	0D881624B7D5EFFADE1BF7BE89DC965ADA95A408
SHA-256:	09553782CDD2B8B2B90B77254F334CC5471262CF252CA5D0DBDD1A2871795530
SHA-512:	596B5C1255F2E2248E901981C106AF85D065595DD5C1953DA91580A2C349365935AFBB74FFD65BB2307CB9F861FEE9527C6CB41E18E68A41A0D727CF3534A1E5
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/767da967-88bb-4648-bd02-c7a263423698.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"202402.1.0","OptanonDataJSON":"767da967-88bb-4648-bd02-c7a263423698","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"01917eff-192a-70a3-919c-8e66142ae41f","Name":"Global","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","br","sc","sd","bs","bt","sg","bv","bw","sh","sj","by","bz","sl","sn","so","ca","sr","cc","ss","st","cd","cf","sv","cg","ch","sx","ci","sy","sz","ck","cl","cm","cn","co","cr","tc","td","cu","tf","cv","tg","cw","th","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","tz","dj","dm","

Chrome Cache Entry: 230

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 231

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (839)
Category:	downloaded
Size (bytes):	614152
Entropy (8bit):	5.450661905353636
Encrypted:	false
SSDEEP:	6144:kD8p9odVs+9CNs+9CRjebWcMYYkSUo5JSMRNBYd4+gdORY0euKqYtQW/eck5OOFb:S8WsvsPeotSsP5XtQW/eckXyQnB
MD5:	8C2FF07B7A77F8D850A1FF64EF8817C6
SHA1:	10DC49985927C70C43A35B1BF7F9D5D62B3D7F11
SHA-256:	F4D3ADF307CC132374B0F9D8D704F1C20C8544E22B586F2792F9AB5ED1D16747
SHA-512:	369FB4D8B41F25802B5F54E747CCB423832CE74ACCE68578A9D5E568F59949545C0BCEE5751EBFE3BFA84BBDD7EFD01F48CF25D010BEBDE1E947C714EB39F8DB
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/vanguard-core-components/clientlibs/clientlib-base.min.ACSHASH8c2ff07b7a77f8d850a1ff64ef8817c6.js
Preview:	/.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause.. Copyright 2021 Google LLC. SPDX-License-Identifier: BSD-3-Clause. **************************************************************************. Copyright (c) Microsoft Corporation... Permission to use, copy, modify, and/or distribute this software for any. purpose with or without fee is hereby granted... THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH. REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY. AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,. INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM. LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR. OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR. PERFORMANCE OF THIS SOFTWARE..**************************************************

Chrome Cache Entry: 232

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10456
Entropy (8bit):	4.2339413816196405
Encrypted:	false
SSDEEP:	192:sTCgGIXvXXe68o6j8L6xZ2zrZtzSW2LAt9U4hJILUv+/5Xlew61mQGJ5Ooupcx5:sHGOpPbzSWN9U4AL8ElmmQo5nupy
MD5:	CDCD035B8B17D693823B15ADFFFE81B9
SHA1:	D636267B22626160CCE94C4F713FEA8E31F7EA26
SHA-256:	B8CD4A2297B4D9C33386A92DEA138603FCBECBED5A15AA14FAFA415A5835AB5D
SHA-512:	0979B4AFBDCA4468A2DDF8DE6D33F25B26DF5DCCDBC789BC92DAEF9CE3F5769CD246E1B54792994051EB1B1379D6FED30723E8D5AE73743FF5BE7EA18CE7D789
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/digital-advisor/logo-vanguard_advice.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg viewBox="0 0 127 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: sketchtool 64 (101010) - https://sketch.com -->.. <title>02554590-BCC5-4543-97EE-9E4C6B14B896@1.5x</title>.. <desc>Created with sketchtool.</desc>.. <g id="Header-Footer---Desktop-&-Mobile" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Global_Desktop---002---Logged-in-Header-&-Footer" transform="translate(-72.000000, -26.000000)" fill="#96151D">.. <g id="Header/-Desktop/-Logged-in">.. <g id="Atoms-/-Logo-/-Logomark-/-Red" transform="translate(72.000000, 26.000000)">.. <path d="M42.5703656,20.5150469 L48.8673629,20.5157383 L48.863577,20.3442815 C48.8673629,20.3442815 47.5870377,20.3107506 47.6262734,18.0227012 C47.6262734,18.0227012 47.6200783,10.9687753 47.61939,10.9660099 C47.6262734,6.06428148 42.6870404,6.242651

Chrome Cache Entry: 233

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	413
Entropy (8bit):	4.763340326996971
Encrypted:	false
SSDEEP:	6:UeB0AWKFzjIN4afV2opC08hAbGKSGNVJ96yUGdTk5P2iAHRMw1rn4WK/LCKlJKAs:UeB5NFhCVpCiqWNh6y6u7V15KjHlZsn
MD5:	B60BF0A1F8A241936C988D1FA2F6AC42
SHA1:	34AE9C4F7CC28A00A6758595E303E7195E6E87C3
SHA-256:	3991D121A959E3C1B7F8D3D35EA6109AA9097F650D910E36F6E1028F62F70437
SHA-512:	D7014B1760E26695EE9BBFC50A8A46630B35D658F5475F5ECA7E98C88CC3C786C311A40F41060E12C8A9D37F0D4CB7C45F05D5969A8C383B28FD1B2AB52A8DD6
Malicious:	false
Reputation:	low
URL:	https://constellation-static.web.vanguard.com/v0/fonts/constellation-fonts.css
Preview:	/..This CSS resource incorporates links to font software which is the valuable copyrighted..property of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,..redistribute, convert, modify or reverse engineer this font software. Please contact Monotype..Imaging with any questions regarding Web Fonts: http://www.fonts.com../..@import url("ff-mark.css");..@import url("thorndale.css");..

Chrome Cache Entry: 234

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	226822
Entropy (8bit):	5.352510792552689
Encrypted:	false
SSDEEP:	3072:AYh8eip3huuf6IidlrvakdtQ47GKlVbmwpc1TL/jONjE0l3tyeCF0dr:Ai8eGRuufsr5zQ47GKLmwpw/O5htmEr
MD5:	D45B9E1AF27F3E2E822F5ADAF58A1EF1
SHA1:	4F72C01956C59FA083436F70F0DA28E217996640
SHA-256:	45542DAF06C6876A91BE16F8E9CE94C5D4CA10398B335861B1107A07E8B1C6D0
SHA-512:	99472D381CD2721B599A1444ACE8976FC381C1C5155CB6570E718E550D11DDE17272767CACF9185900C7F8AC9ECE5A5077DD45B09BCA5071B02DCE465F771523
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-dependencies.min.ACSHASHd45b9e1af27f3e2e822f5adaf58a1ef1.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 235

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3638
Category:	downloaded
Size (bytes):	2142
Entropy (8bit):	7.904584942956409
Encrypted:	false
SSDEEP:	48:Xns/cLdlxsoAAmOpJyQLoto7Seyk0MwH6nfYSy0LinA/SuCXUrY9haBK:3lLdqAm0wQWhMFnxOA/DCErgag
MD5:	FE33FFAA1EEF22DEFE6F6FDC9408714C
SHA1:	F0E430FE78D69E4520CAEDA2202AA3A44C72D5CC
SHA-256:	B994FB6A9FC6D5BA221473C56D2C8944290C3ABFA84DFEAE2741C030C63734B0
SHA-512:	273B02A6AD14EBDFD6F589935D174A69D0A5BADC1ADC38200E7D65AD063E8D1ABCC639400A92D7427F16912790A37CA831D2D02264981732615C256D6AF36024
Malicious:	false
Reputation:	low
URL:	http://www.vanguard.com/favicon.ico
Preview:	...........ViTTG...hq."."...h.....1v4D4..d..hb:...,fB.U.I.g..G.e.`.j...+h...TDQ.Q...4.....>.3..........W..-...~~h..4.`......i.m(.U..3C.v.L....(H._.....p.......u.0..0.7#........5..h.+k1ov..m....6.......F+.c..:...".8..........lL....g..#...-?....>(.vF5..4..aDx9N~....B...K..`......0qh.$....kI..C.!.7...hhp..b..m.B.m2.[.0.......c-.....W...W..E....."C.e..w..p..[.@Cx(.._...(P...=.d..7. _..4...uW.G....U.=.Z+...C.h.U...V..~.....+..)..7......b..J..?.j...XL..{..Ul....[.p....cG.a.....l..{<..2..........}.<3.-Ih...........U.D.?.....{t.vy...z..o.P.@....z",!A.d..U.[P....-.<y..._85..ys.^.X....c~....`.D.w{...1.?..>..Z..K._C.>..S..h..o^.Zk....0.jH.w.^Yq...BC..HT.b...Q.......j...G....^......1....T"~Z.>.v._}.....-V.^. .g9....U....(.t..b....iMxo.M..j. ...M2bD..s.. \|.......t...7.....U...#...eF;..\.).......j\|1.PF..A......N..ST...&L.w.N..S.....A..1!....n...-..Cqh...\|O..`..+p)6....v....J..a.U.b...`.z.e.s..........$H....I.`..N...B}H..}....)B0..`T!..x.W..\|h.R

Chrome Cache Entry: 236

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (679)
Category:	dropped
Size (bytes):	849
Entropy (8bit):	5.39794794466921
Encrypted:	false
SSDEEP:	12:jvgnpHJBnqdncct/BnpHJBnqdn9LgZubwaK1ZtElP6T7Nw1KtCmTJw1Kt4zHkf:SQNcct/BHQNeZQwa4ZtEqn0zHkf
MD5:	AB562A053783E606939B76BB474900AE
SHA1:	0A5489EDAADA44F54E525C5AF0D0AADF27183B0B
SHA-256:	42120BD99EE7E84A89732F829A06BF0C32C227D85900507D3073C0CC21A05DDE
SHA-512:	0005112CA4ECB8A41EF5534E539B8F3CD993A14F778E4F2129C76E9E287F8D033ECD2B5C2524F34CD53E5BD953055EE00A271C8C2E94630CD303F2DDFF07FEEC
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.js`.._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.min.js', "function targetPageParams(){return{at_property:\"production\"===_satellite.environment.stage?\"e27bdc03-91a6-9cbe-df53-27fc099f26be\":\"f32c1df7-36d3-d871-5350-91485d4588d6\"}}var trackActivtyImpression=function(e){window.dataLayer=window.dataLayer\|\|[],window.dataLayer.push({event:\"experimentImpressions\",experiment:{experimentInfo:e}})},trackActivtyClickImpression=function(e){window.dataLayer=window.dataLayer\|\|[],window.dataLayer.push({event:\"experimentCtaClicks\",experiment:{experimentInfo:e}})};");

Chrome Cache Entry: 237

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	531788
Entropy (8bit):	5.115532310728114
Encrypted:	false
SSDEEP:	768:DXiNRXikMXpBnXpBcXJ7giXOMaXGHpsJXGFSVSsXOeiXJiVSfXJORAv0XJupxEuu:LqffAjjXbqLE
MD5:	46B351D9E6F367F5091E777066CA1AD1
SHA1:	A0ABFFB92E9010C1B998A653AD2D3EB9E9FAADAD
SHA-256:	20638B582BAD62A2D749C2C4A7B0D3B6366D91A9E09626EFC96100C07B962B18
SHA-512:	B9A7953393B4A7621560C234B5CE61101AADECA3FF4A8753AE9BE78BC07F372417C801275E729ED3BE7D8D2FEAE9577CA5D764E84B746F5425CEB21B6EA93EF3
Malicious:	false
Reputation:	low
Preview:	{. "sbtServerDomain" : "https://ubt-lb.digital-cloud-prem.medallia.com",. "sbtEnvPrefix" : "wdcusprem_",. "endUserIdentifier" : { },. "formNodes" : [ {. "formId" : "9596",. "isCustomHtmlEnabled" : "false",. "formVersion" : "2",. "formHtmlUrl" : "/**ONPREM_URL_PREFIX**//liveApp/2.54.5/form-app-web.html",. "formDataUrl" : "https://resources.digital-cloud-prem.medallia.com/wdcusprem/13700/forms/9596/formData1726863497625_###LANGUAGE_CODE###.json",. "formWidth" : "850",. "formHeight" : "830",. "isFixedSize" : "false",. "isFullWidthEmbedded" : "null",. "designSettings" : {. "formBackgroundColor" : "",. "thankYouPageBackgroundColor" : "". },. "formLouserzationSettings" : {. "defaultLanguage" : "en",. "useCustomParam" : "false",. "customParam" : "null". },. "formJsonRelativePath" : "wdcusprem/13700/forms/9596/formData1726863497625_###LANGUAGE_CODE###.json",. "formJsonV2RelativePath" : "wdcusprem/13700/forms/9596/for

Chrome Cache Entry: 238

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (651)
Category:	downloaded
Size (bytes):	833
Entropy (8bit):	5.421514802250148
Encrypted:	false
SSDEEP:	12:jvgaB+RwySct/BaB+RwyvLoM1lqra21FrsWkD8zTTRWxJ6//TCH:hB7ct/BaBhEU2msWI8zHRWxJSTCH
MD5:	26D70628D420D5C15D9A884D1A0DE82F
SHA1:	54F91005CDAA6A35C703786A1C0D9D4737D266DD
SHA-256:	8C539FE734FD9F4B51E886FBC71FF49CDDF4696F28290A4B8C89FAED78690E60
SHA-512:	9396D414C41298EC2E7086C440C6494339975764C2F0C921B0677D3CDA65351F9E69409FF465C1E01414C3810248F680062B06271DBCC46938224C0BF8A2F8D1
Malicious:	false
Reputation:	low
URL:	https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCbd279c41a77e4e23a024c79d6922f33f-source.min.js
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCbd279c41a77e4e23a024c79d6922f33f-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCbd279c41a77e4e23a024c79d6922f33f-source.min.js', "!function(e,a,n,t,o){var c,r,d;e[o]=e[o]\|\|[],c=function(){var a={ti:\"247004627\",enableAutoSpaTracking:!0};a.q=e[o],e[o]=new UET(a),e[o].push(\"pageLoad\")},(r=a.createElement(n)).src=t,r.async=1,r.onload=r.onreadystatechange=function(){var e=this.readyState;e&&\"loaded\"!==e&&\"complete\"!==e\|\|(c(),r.onload=r.onreadystatechange=null)},(d=a.getElementsByTagName(n)[0]).parentNode.insertBefore(r,d)}(window,document,\"script\",\"//bat.bing.com/bat.js\",\"uetq\");");

Chrome Cache Entry: 239

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606), with no line terminators
Category:	downloaded
Size (bytes):	606
Entropy (8bit):	5.00836239408004
Encrypted:	false
SSDEEP:	12:+1SbRG8SV4oNFsGSksnOiRWgEyMg2RWytFoRRdHDIsMjLAd8tJg8BYHtn:+cbRyV6GSksOiRW1yqRWyt6RRBI5L4g2
MD5:	A4C4068383095FEEDF588749482F1D79
SHA1:	1B027E8B856B1595787D7B701ECD36B31E347D03
SHA-256:	D73919F3703E5C3B1A47F4347ED029977431583F1D8E9E32C155F52E2E33EDB2
SHA-512:	68DCA97C87E3F69EF4BCED72DA47EA02AD443F178A654FC5A31C9AAC5095FD1221D860DC1924A1A04E62884841E561BDEC347481E6D0026AF02F8E71D33B6689
Malicious:	false
Reputation:	low
URL:	https://corp.at2.assets.vgdynamic.info/files/js/core/antiflicker-v2.min.js
Preview:	let cssSelectors = window.targetcssSelectors \|\| ["body"];!function(e, t, n, o) { !function(e, n, o) { if (e) { var a = t.createElement("style"); a.id = "at-body-style", a.innerHTML = o, e.appendChild(a) } }(t.getElementsByTagName("head")[0], 0, n), setTimeout(function() { var e = t.getElementsByTagName("head")[0]; if (e) { var n = t.getElementById("at-body-style"); if(n) { console.log('Target AFS: body is releasing by AF Script'); e.removeChild(n) }else{ console.log('Target AFS: body was released by Adobe Server'); } } }, 2500)}(window, document, cssSelectors.toString() + " {opacity:0 !important}");

Chrome Cache Entry: 240

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606), with no line terminators
Category:	dropped
Size (bytes):	606
Entropy (8bit):	5.00836239408004
Encrypted:	false
SSDEEP:	12:+1SbRG8SV4oNFsGSksnOiRWgEyMg2RWytFoRRdHDIsMjLAd8tJg8BYHtn:+cbRyV6GSksOiRW1yqRWyt6RRBI5L4g2
MD5:	A4C4068383095FEEDF588749482F1D79
SHA1:	1B027E8B856B1595787D7B701ECD36B31E347D03
SHA-256:	D73919F3703E5C3B1A47F4347ED029977431583F1D8E9E32C155F52E2E33EDB2
SHA-512:	68DCA97C87E3F69EF4BCED72DA47EA02AD443F178A654FC5A31C9AAC5095FD1221D860DC1924A1A04E62884841E561BDEC347481E6D0026AF02F8E71D33B6689
Malicious:	false
Reputation:	low
Preview:	let cssSelectors = window.targetcssSelectors \|\| ["body"];!function(e, t, n, o) { !function(e, n, o) { if (e) { var a = t.createElement("style"); a.id = "at-body-style", a.innerHTML = o, e.appendChild(a) } }(t.getElementsByTagName("head")[0], 0, n), setTimeout(function() { var e = t.getElementsByTagName("head")[0]; if (e) { var n = t.getElementById("at-body-style"); if(n) { console.log('Target AFS: body is releasing by AF Script'); e.removeChild(n) }else{ console.log('Target AFS: body was released by Adobe Server'); } } }, 2500)}(window, document, cssSelectors.toString() + " {opacity:0 !important}");

Chrome Cache Entry: 241

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 242

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16337
Entropy (8bit):	4.977710867579442
Encrypted:	false
SSDEEP:	192:svHTw3H/O32O53Habhxxp1NbLScWbhxxp1NbLSC3H/O32OJ7fx8ur/PILOMV6:A/zyhxxp1NbYhxxp1NbONzJOutg6
MD5:	6DE59706FA3DFA50C0181C95959EDC43
SHA1:	CEA116D900343D7235ADE7E5F68560F457C71E6C
SHA-256:	0C11263C47822A78796B2BAC61D6AB51CBAD49E6EAFBF8A82DCCD8356A85012C
SHA-512:	4E1DE0E0DF8AFDD25BACDD0D4405FD3F47C23466B203DE875DFABF9A3FD0BD12225EE83FF0783B689F3D4F5FB26A4471029B379F57D260139BC7E6089F069664
Malicious:	false
Reputation:	low
Preview:	{"name":"LMI_PROD_EF_SuccessfulReset","id":1778,"creationDate":1611693866939,"formChangeTime":1717597438859,"triggers":[{"triggerType":".EmbeddedContract","id":36645,"triggerEntityDraftId":null,"triggerEntityFormId":null,"rules":{},"displayType":"embedded","displayDirection":"centerRight","isSelfHosted":null,"selfHostedUrl":null,"formId":1778,"isPartialTranslated":null,"currentVersion":null,"pageElementId":"lmi-csat-survey"}],"published":true,"isDeleted":false,"isLocked":true,"advancedFormData":{"customParametersInUse":[]},"isDarkModeEnabled":false,"customHTMLEnabled":false,"templateVersion":2,"folderId":128,"uuid":"2ef7263d-35ea-c948-b970-a8dd6f98368d","pages":[{"name":"Page 1","index":0,"dynamicData":[{"id":36370,"unique_name":"Page 1 text 61728","component":"label","role":null,"options":[],"optionsById":null,"label":"Label Field","description":"Open Sans","placeholder":"Insert label text","labelWithCP":"","position":null,"descriptionWithCP":"","index":0,"nebUuid":"2156-d3fe-b76e-bcc

Chrome Cache Entry: 243

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (667)
Category:	downloaded
Size (bytes):	668
Entropy (8bit):	5.020455884983761
Encrypted:	false
SSDEEP:	12:UZH9w+Ed3PhFaLVSy3RMZQcZW2KRRfIsbjribOILAd8tJuxge3RG8SY:bLFAVSy2ZzWhRRfI4vAOIL4gJz+RyY
MD5:	B9868BEFB789DDD4672B36DECDD1A4AD
SHA1:	419783D45B5C0822DFBD25333C5BFB5609423F30
SHA-256:	EBBD54050B789E5120B82A551780D0CEE345E113F39AAFACD63D01649290F2DC
SHA-512:	ED200D4B1C98208B9980F80F1BC04E094BFAD3F6D04AD2678577D5198AD34A5C8956AB694523802C7D22BB571075598950570274BBB83E51AB6F927ECC2429AF
Malicious:	false
Reputation:	low
URL:	https://corp-at2.web.vanguard.com/antiflicker_v1/antiflicker.min.js
Preview:	/prehiding snippet for Adobe Target and AJO with asynchronous Launch deployment/!function(e, a, n, t) { var i = e.head; if (i) { if (a) return; var o = e.createElement("style"); o.id = "alloy-prehiding"; o.innerText = n + '{ opacity: 0 !important }'; i.appendChild(o); setTimeout(function() { const afsEle = e.getElementById("alloy-prehiding"); if(afsEle) { console.log('Target AFS: body is releasing by AF Script'); o.parentNode && o.parentNode.removeChild(o) } else { console.log('Target AFS: body was released by Adobe Server'); } }, t) } }(document, document.location.href.indexOf("adobe_authoring_enabled") !== -1, window.targetcssSelectors \|\| ["body"], 2500);.

Chrome Cache Entry: 244

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12479)
Category:	downloaded
Size (bytes):	1438277
Entropy (8bit):	5.1542734620750705
Encrypted:	false
SSDEEP:	6144:pr+zMjwc7xftgSPUlkA23SObrVFi8LpWY:X
MD5:	0200DBC174BA635E9EDB67608A5EC0A2
SHA1:	D98A6A459CE7BEDBFA8C2C7BB64AE82E25053C13
SHA-256:	72536A69CB5B85A497ECD64AFDC87EA6C7BDAA614B24E753914710649C9E91C1
SHA-512:	03F125AC20978D80659EE2C3F2CFBB81DF49AA3735D13895CAB5B184FBBB172523BD210DC33082FD8CBC93B6AC0C3E222B0A3EBA6DC70429AB69FBDCB5F2EF88
Malicious:	false
Reputation:	low
URL:	https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/onsite/onsiteData.json
Preview:	{. "sbtServerDomain" : "https://ubt-lb.digital-cloud-prem.medallia.com",. "sbtEnvPrefix" : "wdcusprem_",. "endUserIdentifier" : { },. "formNodes" : [ {. "formId" : "9911",. "isCustomHtmlEnabled" : "false",. "formVersion" : "2",. "formHtmlUrl" : "/**ONPREM_URL_PREFIX**//liveApp/2.56.3/form-app-web.html",. "formDataUrl" : "https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9911/formData1729021607847_###LANGUAGE_CODE###.json",. "formWidth" : "500",. "formHeight" : "450",. "isFixedSize" : "false",. "isFullWidthEmbedded" : "null",. "designSettings" : {. "formBackgroundColor" : "",. "thankYouPageBackgroundColor" : "". },. "formLouserzationSettings" : {. "defaultLanguage" : "en",. "useCustomParam" : "false",. "customParam" : "null". },. "formJsonRelativePath" : "wdcusprem/2940/forms/9911/formData1729021607847_###LANGUAGE_CODE###.json",. "formJsonV2RelativePath" : "wdcusprem/2940/forms/9911/formDa

Chrome Cache Entry: 245

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1568
Entropy (8bit):	4.993306000369513
Encrypted:	false
SSDEEP:	24:tVvnjutOGOfu8Tfby1+C+dJ3dw/+0ixqhlltgf2qixqhlltSflixqhlltqUlixqx:rnHdby1+fNwkvfEnAs4Z+CjO
MD5:	CA3D650ADBA487C281D2AF221324963C
SHA1:	BF5B784D4C5BE2D06C291AF691B8E481E15C2E0D
SHA-256:	805AE7FBDA2E566BB627D297FFF8A20BC640D147D1797FD69B4C4B0CFC7119B4
SHA-512:	E34DF4C238635D615C2A8F13CE87E086810C5F8D0A4A4B28758B3721DE8A10CA719F33A0587A9FE849C2F7578F09335752B44F3FC32FC9249ECD6768C05959A8
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/learn/icons/globe.svg
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2059_28054)">.<path d="M15.6666 7.96077C15.6671 8.9709 15.4687 9.97124 15.0826 10.9047C14.6965 11.8381 14.1304 12.6864 13.4165 13.401C12.7026 14.1156 11.8549 14.6827 10.9219 15.0697C9.98884 15.4568 8.9887 15.6562 7.97858 15.6568C5.92879 15.6227 3.97541 14.7805 2.54356 13.3133C1.11172 11.8461 0.317315 9.87278 0.333243 7.82277C0.334884 5.86327 1.10361 3.98228 2.47485 2.5825C3.84609 1.18273 5.71085 0.37543 7.66991 0.333439C7.78058 0.328772 7.89124 0.326772 8.00324 0.326772C9.00866 0.321319 10.0052 0.51484 10.9355 0.896191C11.8658 1.27754 12.7115 1.83918 13.4238 2.54877C14.1361 3.25835 14.701 4.10185 15.0859 5.03069C15.4708 5.95953 15.6682 6.95534 15.6666 7.96077V7.96077Z" stroke="#040505" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M7.66992 0.333252C3.66992 4.66659 3.66992 10.3199 7.66992 15.6533" stroke="#040505" stroke-linecap="round" stroke-linejoin="ro

Chrome Cache Entry: 246

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	4.766852981035365
Encrypted:	false
SSDEEP:	3:WLKLZCCFGDLBh6pGQWAs7IL98SPBXGQiM0XEUBRNovYn:W+L4DLyoWY29TBXGtMpUBR6An
MD5:	53F049F22E99AFD3786D80801A989555
SHA1:	D7362472B19AFBF25F9976BEFD6C802D9FAE4A99
SHA-256:	41488EA29A5725038A972EB58935A9EFABD45C149AFEBA703F4C178A0909380F
SHA-512:	0456F69CF3FE3B1CEE1FA86CCF0907162F7A96DC2261366DDAFF6C117AC1157EC7EE06C4640A4821EBA95A72602D8546D29F40BE52CFC7D27FC18F957943BB24
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/components/dwcharts/clientlibs/site.min.ACSHASH53f049f22e99afd3786d80801a989555.css
Preview:	@import "../../../../../structure/page/clientlib/less/helper-customizations.less";.cmp-dwcharts{&__container{max-width:1296px}.}

Chrome Cache Entry: 247

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32x32
Category:	dropped
Size (bytes):	3638
Entropy (8bit):	5.025016845948011
Encrypted:	false
SSDEEP:	96:OhBf7rtG+oeIOsluWZUdU+l+Q7ZPmlbwPmdLcG9DgZGIwkph:OhBulRZUdU+lBZPmlzdLb9DPIwy
MD5:	9CE12231C2DA0C35D62573DB355929CF
SHA1:	7AFD4E5E85ACE89380B931FDE21C478ECE8F57EA
SHA-256:	5CFFA84BE6843F729FC633BFEA97FC0E55B0FCEFD4D04187524768E3C3DCCD4B
SHA-512:	C3A7B5CD9776CF79968FD58DFE45029F191F8B6B5A78EE31CCD36B32533D5E30990AFB900A545538B9F24561350FD1B0A587BA41566A96C5AE5697D5099766C7
Malicious:	false
Reputation:	low
Preview:	..............h...&... ..............(....... ...........@...........................[K..............6#..uj.................D2..*...i^..IB......................SF..bS../...........!...pa..>.......................N?..........-...............XG.._N..'...6(......[P..........................................PE......................#...cQ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 248

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 249

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2349
Entropy (8bit):	4.233962167443139
Encrypted:	false
SSDEEP:	48:3Pnrwbzcg+esr2x/mEQc2JnjAmlpcsPZA1KUkoi9nHY:frwnc8qw2ZjAmZPGKke4
MD5:	679DA4B521BF0592A785500F57D2F059
SHA1:	38A3DDBA9E814E0C707583656EDE67D14900D44D
SHA-256:	7D498A9E787FEF78D0A58FD2D328E425F1A0A183A8BD7AED5DB475DCA7744E84
SHA-512:	99DBDA472877190FB54426C8EE8ED614925C9573E2D92DA765C29BD97CFD38600C42B25BC7C58BE5599134FC21365092DCABFB0392981FA2491F5B02ED71A1A9
Malicious:	false
Reputation:	low
Preview:	<svg width="14" height="14" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_1824_27242)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M12.616 7.92571C12.7379 7.97547 12.8683 8.0007 12.9999 7.99994C13.1315 8.0007 13.262 7.97547 13.3838 7.92571C13.5057 7.87595 13.6165 7.80262 13.7099 7.70994C13.8037 7.61698 13.8781 7.50637 13.9288 7.38452C13.9796 7.26266 14.0057 7.13195 14.0057 6.99994C14.0057 6.86793 13.9796 6.73722 13.9288 6.61536C13.8781 6.4935 13.8037 6.3829 13.7099 6.28994L7.70994 0.289939C7.61698 0.196211 7.50638 0.121816 7.38452 0.0710475C7.26266 0.0202789 7.13195 -0.00585938 6.99994 -0.00585938C6.86793 -0.00585938 6.73722 0.0202789 6.61536 0.0710475C6.49351 0.121816 6.3829 0.196211 6.28994 0.289939L0.289941 6.28994C0.101638 6.47824 -0.00415039 6.73364 -0.00415039 6.99994C-0.00415039 7.26624 0.101638 7.52164 0.289941 7.70994C0.38318 7.80318 0.49387 7.87714 0.615692 7.9276C0.737514 7.97806 0.868082 8.00403 0.999941 8.00403C1.1318 8.

Chrome Cache Entry: 250

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32765)
Category:	dropped
Size (bytes):	675724
Entropy (8bit):	5.377773036769291
Encrypted:	false
SSDEEP:	12288:oqtw/styYRA1w5ymPKu1qMuV7qtGt/NdmCXRDhs:btw/styYRA1w5ZPKu1ruJqktHrs
MD5:	C745B717BDFB1633027B8B2EB0197D39
SHA1:	D4E50D5A5FFDC07B0966698BD42EAE41DF8D41CE
SHA-256:	F864B0EB146664441A213BC859F833BA469B75F25620A66A2DCB329FFB859E40
SHA-512:	297EE07466C65A83A4974EA8094003DF3EF76A29FF1722B23972A4614B4A1FCD773EB64E42A5670C7F5B0B67B80FF21F80EE89BD2470631C90E738F904E92E77
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/launch-fa9ce42154c5.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-09-24T18:37:50Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN3117f54b68b6417486ef287b1ba8da85",stage:"production"},dataElements:{page_pageURLFull:{defaultValue:"",forceLowerCase:!0,storageDuration:"pageview",modulePath:"core/src/lib/dataElements/pageInfo.js",settings:{attribute:"url"}},page_userAgentString:{defaultValue:"",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return navigator.userAgent}}},linkedin_insight_tag_url:{defaultValue:"error",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return("production"===_satellite.environment.stage?"https://corp.etm.assets.vgdynamic.info/files/vendor_libs_prd":"https://corp.etm.testassets.vgdynamic.

Chrome Cache Entry: 251

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 252

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	19966
Entropy (8bit):	5.3819665727517165
Encrypted:	false
SSDEEP:	192:f8qCHscAcIcKcgcBoejcecYGcHy89FwcgDQugXl0DNbcDo0jczcMEcIc+c9ewFL:zCHPjQe9LugXl0hGMLFL
MD5:	E5198E6617B486B0D233DB0265B4475E
SHA1:	3400E45280A6AAD441E4FDE53B1F7F01F71B635C
SHA-256:	8A2EAB2DFD9CF493FB348E06663D3A226C78406C47226882469756050A43C5C6
SHA-512:	4A867BEAF05F96E3CF52E0BE477F8000A36C9C5FCA55BA92A830372FEE3D8791F7F31B3D55450E9AAB5FBA39EADF4330FE48781910908789F35F79CABB1BDF50
Malicious:	false
Reputation:	low
Preview:	{"config":{"vanities":{"*":"Wildcard","/en/home/publogin":"Public Homepage","/content/en/advice/advice-overview/compare.html":"Advice Education Site (Home)","/content/en/advice/digital-advisor/what-is-it.html":"Digital Advisor","/content/en/advice/personal-advisor/what-is-it.html":"Personal Advisor"},"pages":{"Wildcard":{"description":"Wildcard","rakutan":"u1","links":[],"events":["listeners","links"],"predictions":[],"listeners":[{"pageName":"Wildcard","type":3,"triggerType":2,"trigger":"","guid":"33c5bd74-b4d7-4801-bfe8-26e0a0c8534b","eventname":"PageView","metricId":676,"labels":["Observed","Page","Target"],"properties":[{"selector":"","name":"","value":null,"type":null}],"interactionProperties":[]},{"pageName":"Wildcard","type":1,"triggerType":1,"trigger":"#container-9c0c452151 > div > div > div > div.cmp-advice-header__mid > div.cmp-advice-header__mid--desktop > div.cmp-advice-header__mid--desktop-cta > div > a","guid":"9e5b6f69-245b-49ce-b065-47fbb27dba83","eventname":"LeadStart"

Chrome Cache Entry: 253

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1567
Entropy (8bit):	5.019906626071019
Encrypted:	false
SSDEEP:	24:2d2S8eLwDmxFeaxM2p4Wm99nyA++0W8bGzTyDgRlICxKzt1X64VfKVIu+Mm+MchS:cfLwa4Z9Rl/tzTBLBitfh+/m/chW1R
MD5:	AE2C94820DA309D73300E3F8699E459F
SHA1:	A585CDCD719ADA667A37D41F32780CA1B1C7337F
SHA-256:	C92E0D2D36F6F6AE11CDCDE00B7F02AE02B48C217419ADFC5C4F24EAA90EA996
SHA-512:	D748974EA1073D3211C7B47F43C4CEB99AFB103A549C34D745BAF50D3AECE8908B5221FCFFDA8F99168CC4F52D5F40146B3BD5C5CA274438651E8A29DD1672B6
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/learn/Vanguard.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>..Icons/Desktop/Social/Vanguard</title>. <g id="Header-/-Footer" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="c11n-grid-xxl-(1440px)-Advice-Footer" transform="translate(-481.000000, -840.000000)">. <g id="..Footer/Desktop/NotLoggedIn-Copy-2" transform="translate(0.000000, 813.000000)">. <g id="Social-Icons" transform="translate(162.000000, 24.000000)">. <g id="Group" transform="translate(316.000000, 0.000000)">. <polygon id="Path" points="0 0 30 0 30 30 0 30"></polygon>. <g id="Icon/-VG" transform="translate(3.000000, 3.000000)" fill-rule="nonzero">. <circle id="Oval-Copy-3" fill="#971B1F" cx="12" cy="12" r="12"></circle>.

Chrome Cache Entry: 254

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	303969
Entropy (8bit):	5.190407379957432
Encrypted:	false
SSDEEP:	3072:ROBkC4CjmxIOrqC4ChtwRpknkO4pk4qNYIY2p7B:ROBkC4CKqC4ChtlkcNYpI7B
MD5:	647C49854C32F072DBB2895E018873CB
SHA1:	05254E383D764C301F8C0057AD4436745B886786
SHA-256:	92C75C8D3AAB4BF89CE19493AC54CFB13DEBDA3DFD79D7E15DB328300578BAD2
SHA-512:	AA187A35F1899A6DC90217CF24FC4588228DEC278494019B8F78F6CC143B5CFDFD372E5CED9EAE84B1BAB0E8714BB857DCC2CEEEB2E5227F3BDAE366CDAA6F73
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/en-us.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Your privacy","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose to set some types of cookies to .Off.. However, setting cookies to .Off. may impact your experience on the site and the services we are able to offer. Click on the different category headings to find out more and to change your default settings, where possible. Clearing cookies on your device will delete your

Chrome Cache Entry: 255

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 56116, version 0.0
Category:	downloaded
Size (bytes):	56116
Entropy (8bit):	7.995590607979416
Encrypted:	true
SSDEEP:	1536:MJEtAPOYB1KhFdjIfMBGxULy+cT0Zdp78zcuuAb:McAGYB+7IfC7ybMn7bjq
MD5:	33184E45D95BB74DD4C272F0C6ECFBEF
SHA1:	4A94C65B72184BE6215C09019BCBB76A8623CCA0
SHA-256:	B4390127628CFCC5DE4197C3A5C2F7171D8834DEDDD223B07E9610C585343758
SHA-512:	6B2794AE8386060BA805608F31C5C85FB0C5BF4774DB823C923C1267A69763A7ADC8E2250B55261058E5D2D3EACC41A94E3780E8D1E17D89CA55F75D655C528B
Malicious:	false
Reputation:	low
URL:	https://constellation-static.web.vanguard.com/v1/fonts/30274a56-042d-447a-aff9-6da0dae01586.woff2
Preview:	wOF2.......4.......d..............................>...L..,.`..0......_.6.$..J..P.. .... [.V.....6...W..I...KDNZ=......'%.<f..@UU.?...~...........?.................i......G...O.;..f.$Z.v....Q..,.PJ.."..T.D\|.../_&..q.{..)i. ..U...i'..X1....U.......3..#..I.k..../...U.....X.>._.J.f....&>.{..F,....aw5b3WD.A.\|S{M........K.!.OA.c.^..v.........}3d&...L..H...BC....K........(....O%....s..Bo?.....dO.......aMR...z._...L. I.....H...(t...`O....;"JL..R...Dh.NJ..8T.......tI.!{....O..)...U...y.W.WV%V ~...7;..,...$..S.............Z.Pu..-.j-.AZrdGT..47R..w?r....+K..v...s.....2.1`0p..#6F8.Fl#6.h..$6. FH."a.......z.'.`..m.oU....1cJY.D.....- F..HX5....1..2..].s....o....?..r..vUFc_@...XL."`.ba2EW..`!.f~qf..ns>..j...y...3..73a.$...!.m......T.>.h.^..]RS\|...~.o!o...B.@Hcil.+KfF.;..T=EC.....Z...a.r-.... c....".1.~UQ.......R..%..2U.......].9R.;..lO4=........m...2.S.g.M.....6L7.(.=.Oc.D............b..w....L..Pr....&..r.XzT.?!6)+.Y.>..{P8T.....a.V....r+...\ <~.....w..

Chrome Cache Entry: 256

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	19966
Entropy (8bit):	5.3819665727517165
Encrypted:	false
SSDEEP:	192:f8qCHscAcIcKcgcBoejcecYGcHy89FwcgDQugXl0DNbcDo0jczcMEcIc+c9ewFL:zCHPjQe9LugXl0hGMLFL
MD5:	E5198E6617B486B0D233DB0265B4475E
SHA1:	3400E45280A6AAD441E4FDE53B1F7F01F71B635C
SHA-256:	8A2EAB2DFD9CF493FB348E06663D3A226C78406C47226882469756050A43C5C6
SHA-512:	4A867BEAF05F96E3CF52E0BE477F8000A36C9C5FCA55BA92A830372FEE3D8791F7F31B3D55450E9AAB5FBA39EADF4330FE48781910908789F35F79CABB1BDF50
Malicious:	false
Reputation:	low
URL:	https://content.zenimpact.io/dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/configv21.json?version=9308211776
Preview:	{"config":{"vanities":{"*":"Wildcard","/en/home/publogin":"Public Homepage","/content/en/advice/advice-overview/compare.html":"Advice Education Site (Home)","/content/en/advice/digital-advisor/what-is-it.html":"Digital Advisor","/content/en/advice/personal-advisor/what-is-it.html":"Personal Advisor"},"pages":{"Wildcard":{"description":"Wildcard","rakutan":"u1","links":[],"events":["listeners","links"],"predictions":[],"listeners":[{"pageName":"Wildcard","type":3,"triggerType":2,"trigger":"","guid":"33c5bd74-b4d7-4801-bfe8-26e0a0c8534b","eventname":"PageView","metricId":676,"labels":["Observed","Page","Target"],"properties":[{"selector":"","name":"","value":null,"type":null}],"interactionProperties":[]},{"pageName":"Wildcard","type":1,"triggerType":1,"trigger":"#container-9c0c452151 > div > div > div > div.cmp-advice-header__mid > div.cmp-advice-header__mid--desktop > div.cmp-advice-header__mid--desktop-cta > div > a","guid":"9e5b6f69-245b-49ce-b065-47fbb27dba83","eventname":"LeadStart"

Chrome Cache Entry: 257

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4099)
Category:	downloaded
Size (bytes):	4164
Entropy (8bit):	5.30447296775267
Encrypted:	false
SSDEEP:	48:QICpDuMY6wRQAQl07k/9O12+gbuCBDaasU1OGgwzwtLGY2ordwU4RuTpUvO9B9Qy:lsnIQ/s1jgW+05Gye0TVbHBxsjQssN
MD5:	898C2944799721CD5AF40AE7711C2927
SHA1:	8DEABD5D0A42DEA9D726EA727DC4B5B3ABDE41A1
SHA-256:	78246E45BCEC244B38C40DC3008A54E3144548919815ADA3B2E10E0151020689
SHA-512:	D41D40C77E3D4D02C1057B378153080532E1D6C3697EE072C553027285550F60B3ADB2637682EE1DDB3A0750D79FA9E9ADBB7E9F680407E3E5A5151D6A675550
Malicious:	false
Reputation:	low
URL:	https://mc3-static-assets.web.vanguard.com/vg-message-svc/vms.min.js
Preview:	/! For license information please see vms.min.js.LICENSE.txt /.!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(o,r,function(t){return e[t]}.bind(null,r));return o},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/",n(n.s=0)}([function(e,t,n){e.expo

Chrome Cache Entry: 258

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12607)
Category:	downloaded
Size (bytes):	366960
Entropy (8bit):	5.578751435027952
Encrypted:	false
SSDEEP:	3072:6tNePFMII5KAvmh8g1TNOgbsDi/++dXR8TNMmnBBypheLFxCTEc5yp+lvBjPyx3B:NFZmwTkgbyi5XRqNMmvLkEc7jmRr4W
MD5:	A9E73563CC07131A9BA45BDAC7B54BF1
SHA1:	EE1152C52AF6FD19928F0F586B1B55AA7829859B
SHA-256:	8E0C553CAEF0E0CBB38575FD10B26D48C9B3BCD9D947D2B4FD479D2E352D8424
SHA-512:	7AD26076414E433E8E2DA6999DDF795DD42AE2E848629DD6B24855BE47EEBF868940B1E69802E5CCD3838A477095719125AD440AA6B6FC2BABB26E0E40B837AA
Malicious:	false
Reputation:	low
URL:	https://mdl-medallia-digital.vanguard.com/pkg/1.0.0/web/external_libs/wdcusprem/2940/onsite/generic1728321215671.js
Preview:	.(function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.56.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLDATA_API_HOST:'udc-neb.kampyle.com/',USERSNAP_ONPREM_HOST_PREFIX:'https://md-scp.kampyle.com/',USER_AGENT_CLIENT_HINTS_LIST:'["brands", "mobile", "platform", "architecture", "model", "bitness", "platformVersion", "fullVersionList", "wow64", "uaFullVersion"]'},SRC:{OPEN_SANS:'resources/form/FormBuilder/vendor/fonts-googleapis/css/open-sans-v14.css',COOLADATA:'resources/onsite/js/cool-2.1.15.min.js',OOPS:'resources/onsite/images/oops.svg'},FORM_HEIGHT:'450',FORM_WIDTH:'450',COOKIE_EXPIRATION:365,DEVICES:{DESKTOP:'desktop',MOBILE:'mobile',TABLET:'tablet',},FEATURE_VERSIONS:{MOBILE_DYNAMIC_SIZING:2,},TIME_FORMATS:{SECONDS:'seconds',MINUTES:'minutes',HOURS:'hours',DAYS:'days',WEEKS:'weeks',MONTHS:'months',YEARS:'yea

Chrome Cache Entry: 259

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	5.167048536237212
Encrypted:	false
SSDEEP:	3:fhvUM8H3erfa18h0Xd0l0T2AvhcOfhvk/RAmrA/:JvOH3e25N0l+2AvKCe/RAmrA/
MD5:	19FA632D2D393AA30456D99C3CFD9A13
SHA1:	4D82FCF624828D57EA494B44593F28577EAEEB2F
SHA-256:	FA1C01EF7289E79931850BDF72CDCFD280DDED39FBA815CE58DFD16AB4C7EADD
SHA-512:	98ADAC3F0F89872D24ED5B5E9AFB33E8AAF53A11DED4BBF213FDA15E73ED6136FFABD5668B6B8625169D7A0DEC9238D869E46D1D38936BEF834EB18E0F4DB294
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmmHqOoSbcmsRIFDeqIV54SBQ1U4vPYEhAJjK82RDHJi0USBQ2lkzYk?alt=proto
Preview:	Cj4KDQ3qiFeeGgQIVhgCIAEKLQ1U4vPYGgQISxgCKiAIClIcChIhQCQjKi5fPy0lJl4rLyk9KDoQARj/////DwoJCgcNpZM2JBoA

Chrome Cache Entry: 260

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	413
Entropy (8bit):	4.763340326996971
Encrypted:	false
SSDEEP:	6:UeB0AWKFzjIN4afV2opC08hAbGKSGNVJ96yUGdTk5P2iAHRMw1rn4WK/LCKlJKAs:UeB5NFhCVpCiqWNh6y6u7V15KjHlZsn
MD5:	B60BF0A1F8A241936C988D1FA2F6AC42
SHA1:	34AE9C4F7CC28A00A6758595E303E7195E6E87C3
SHA-256:	3991D121A959E3C1B7F8D3D35EA6109AA9097F650D910E36F6E1028F62F70437
SHA-512:	D7014B1760E26695EE9BBFC50A8A46630B35D658F5475F5ECA7E98C88CC3C786C311A40F41060E12C8A9D37F0D4CB7C45F05D5969A8C383B28FD1B2AB52A8DD6
Malicious:	false
Reputation:	low
URL:	https://constellation-static.web.vanguard.com/v1/fonts/constellation-fonts.css
Preview:	/..This CSS resource incorporates links to font software which is the valuable copyrighted..property of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,..redistribute, convert, modify or reverse engineer this font software. Please contact Monotype..Imaging with any questions regarding Web Fonts: http://www.fonts.com../..@import url("ff-mark.css");..@import url("thorndale.css");..

Chrome Cache Entry: 261

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50864, version 0.0
Category:	downloaded
Size (bytes):	50864
Entropy (8bit):	7.994732594559298
Encrypted:	true
SSDEEP:	768:A5rhh6S6pdpTzvsiDNDN6kRoeYkVw2yI4X7g75M256RY1FjH1oEkjO1yXEgE1Qk:yoqubdLYkq2GLQ5p551FjYXEg7k
MD5:	88D12A6792BDFB469435AD303C8B8D0D
SHA1:	570DE0668B8A5B70CC1A964B37729010459A8FEC
SHA-256:	7263391394814FEA7A72064D821E1324CD6D81B90D58D30D7A0245B15860674F
SHA-512:	5F7EB9B92898ECECA31B908E0AB8AB6C659D2AC04FA679CC0C80908430A38EB1DEB3DD4A2106442EC7923B1C05CA18158CF82FE5158BD3F892A49364DD852819
Malicious:	false
Reputation:	low
URL:	https://constellation-static.web.vanguard.com/v1/fonts/dc1646ea-4041-4648-9540-0bd7cbd10dc1.woff2
Preview:	wOF2..................W..........................X........`......0..%.6.$..~..... ..o. [.z.....8..T..R.zXF.........J.8.m{UU....'?..~.?../..o....._..?...../.cw@,.q=.V.u..]..{w.....+O...u^.'j.:q.N.x#....8....B.x..t]..8U.{c.nK..M?3...$/.^.fL.c\G.Q.4P.3....N....3.zL.s....Xg..o.~..3..%G..6.......Q.k....+.@X./..B...`)&..I...e...../..O......o..!nMU........R.3.B......h.&3+.v... bY.....U..5^....RQ....._.L..73f....".!....y.-.,..D.B}/.6.....k..+...+.XEK..Y...b.`......b....@D...{..W.....\..BT...T.0.._....PuG........]...!k.h%^...}?..wa.._n"3].....=.[6.}. .....u.[.;....Q....O{.)."..v8. .....R...5..05..._.&7....@\|.\.....-.l.Vp..Y..........wfx.....$G@?.V}.......".M.R.H..!Mg.^F....[...'...i.#.2.n..X........A7C.....L..c.K+q4L.i..23M.......6k..l..c.{W..f.....D...i4F........3.7.s.:.............\..m..\].Z.&.q.Z..[...u.I.......'...$...8.P.......y..Y.a......E...wf.[R.......O.b.....uq?.......mv......bn..L.*./.hl.M...)9.S.E.E.....m.W@P..Uu...oT..q5.B..~.O...

Chrome Cache Entry: 262

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	3402139
Entropy (8bit):	5.612038924724896
Encrypted:	false
SSDEEP:	49152:BpzM4oNLm14HugBzczbhsToW2E3bZMbsuAoz/P1xkpw7KQoZkf0P9aimfSbAh0Tk:4yz/P1xkpt+fSbAh0Tt5FDJbSgzk
MD5:	0B524CDEF39893463854517C5D39CA98
SHA1:	D608828CF11B069BFB992F078F9D3676413FFFC4
SHA-256:	428BC07153AE24A8B4415E053ED6A1869FDF3389D4214A8F519C317EBCD0F363
SHA-512:	B923C5557337D4742FFED0763D6F61F86FE4871C6FA1B3CDC4CF0143E2408E420C22045A4F3701131091E23A1DCFE33F9105F9B78CBFD78029E1F9B88E877A77
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e,p={},b={};function t(e){var n=b[e];if(void 0!==n)return n.exports;var r=b[e]={id:e,loaded:!1,exports:{}};return p[e].call(r.exports,r,r.exports,t),r.loaded=!0,r.exports}t.m=p,e=[],t.O=(n,r,a,o)=>{if(!r){var i=1/0;for(f=0;f<e.length;f++){for(var[r,a,o]=e[f],l=!0,c=0;c<r.length;c++)(!1&o\|\|i>=o)&&Object.keys(t.O).every(h=>t.O[h](r[c]))?r.splice(c--,1):(l=!1,o<i&&(i=o));if(l){e.splice(f--,1);var s=a();void 0!==s&&(n=s)}}return n}o=o\|\|0;for(var f=e.length;f>0&&e[f-1][2]>o;f--)e[f]=e[f-1];e[f]=[r,a,o]},t.n=e=>{var n=e&&e.__esModule?()=>e.default:()=>e;return t.d(n,{a:n}),n},(()=>{var n,e=Object.getPrototypeOf?r=>Object.getPrototypeOf(r):r=>r.__proto__;t.t=function(r,a){if(1&a&&(r=this(r)),8&a\|\|"object"==typeof r&&r&&(4&a&&r.__esModule\|\|16&a&&"function"==typeof r.then))return r;var o=Object.create(null);t.r(o);var f={};n=n\|\|[null,e({}),e([]),e(e)];for(var i=2&a&&r;"object"==typeof i&&!~n.indexOf(i);i=e(i))Object.getOwnPropertyNames(i).forEach(l=>f[l]=()=>r[l]);return

Chrome Cache Entry: 263

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	30
Entropy (8bit):	4.081727678869736
Encrypted:	false
SSDEEP:	3:7MQvUAXNovn:I2ZXNovn
MD5:	336B798433FA1A99B69F617092F09208
SHA1:	585095A819C01CE0635C3EFD017B107FA38CCE1A
SHA-256:	BD59BA93D99DFCD05B30A705535AA4FDA28B60311B1C500611B4E06C12BC4756
SHA-512:	4DDB7BE10BC5A76A1B343C0AB64C7FE80B5F3C3E91AF20DFE4AF8C75D9880F79C66CD82059618EDD0D6B78ECEC2F9B9988453DBBFC558E02A21CDED1AB73D904
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/VG/script/otOptanonWrapper.js
Preview:	.function OptanonWrapper() {}.

Chrome Cache Entry: 264

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10393)
Category:	downloaded
Size (bytes):	10575
Entropy (8bit):	5.4758738804879235
Encrypted:	false
SSDEEP:	192:IBCFL1gvHKFp3vQwjKwjRU2b0mDKGuQjBdVaQKFnMJORHaIN5H:IcFL1gvHKT3vQw+MU2bfdLwQKdwORHLX
MD5:	74D036FF6C687A9648887E0F6ACB4ED7
SHA1:	D9F055005453F78B41ABBC29C2A7C5389AE46620
SHA-256:	4C8E4D6178DBD4C11E6BFA64AA7340140CCDFBA679DDF925E4D2865F24B698CD
SHA-512:	129394C2243D681BFE9A2645E606E338D64D09807E28FD05AC7789E297D6C8093759211C08466FE33D3C0B545610BB9668EB6DC96EA3F8320B9903124085D193
Malicious:	false
Reputation:	low
URL:	https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC9e850eb0c29147bdb5c53bed16ddb818-source.min.js
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC9e850eb0c29147bdb5c53bed16ddb818-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RC9e850eb0c29147bdb5c53bed16ddb818-source.min.js', "function OpenProfileId(){function e(){var e=!1,t=\"\",n=null,r=\"\",i=\"\";try{r=\"AcroPDF.PDF\",n=new ActiveXObject(r)}catch(e){}if(!n)try{r=\"PDF.PdfCtrl\",n=new ActiveXObject(r)}catch(e){}if(n)try{e=!0,i=r,t=(t=n.GetVersions().split(\",\"))[0].split(\"=\"),t=parseFloat(t[1])}catch(e){}return{isInstalled:e,version:t,name:i}}function t(){var e=!1,t=\"\",n=null,r=\"\",i=\"\";try{r=\"ShockwaveFlash.ShockwaveFlash\",n=new ActiveXObject(r)}catch(e){}if(n)try{e=!0,i=r,t=(t=n.GetVariable(\"$version\").substring(4)).split(\",\"),t=parseFloat(t[0]+\".\"+t[1])}catch(e){}return{isInstalled:e,version:t,name:i}}function n(){var e=!1,t=\"\

Chrome Cache Entry: 265

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32765)
Category:	downloaded
Size (bytes):	675724
Entropy (8bit):	5.377773036769291
Encrypted:	false
SSDEEP:	12288:oqtw/styYRA1w5ymPKu1qMuV7qtGt/NdmCXRDhs:btw/styYRA1w5ZPKu1ruJqktHrs
MD5:	C745B717BDFB1633027B8B2EB0197D39
SHA1:	D4E50D5A5FFDC07B0966698BD42EAE41DF8D41CE
SHA-256:	F864B0EB146664441A213BC859F833BA469B75F25620A66A2DCB329FFB859E40
SHA-512:	297EE07466C65A83A4974EA8094003DF3EF76A29FF1722B23972A4614B4A1FCD773EB64E42A5670C7F5B0B67B80FF21F80EE89BD2470631C90E738F904E92E77
Malicious:	false
Reputation:	low
URL:	https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/launch-fa9ce42154c5.min.js
Preview:	// For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/launch-fa9ce42154c5.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-09-24T18:37:50Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN3117f54b68b6417486ef287b1ba8da85",stage:"production"},dataElements:{page_pageURLFull:{defaultValue:"",forceLowerCase:!0,storageDuration:"pageview",modulePath:"core/src/lib/dataElements/pageInfo.js",settings:{attribute:"url"}},page_userAgentString:{defaultValue:"",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return navigator.userAgent}}},linkedin_insight_tag_url:{defaultValue:"error",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return("production"===_satellite.environment.stage?"https://corp.etm.assets.vgdynamic.info/files/vendor_libs_prd":"https://corp.etm.testassets.vgdynamic.

Chrome Cache Entry: 266

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	815
Entropy (8bit):	4.274712290392585
Encrypted:	false
SSDEEP:	12:2/uCMht0rvHYoBVFl4FBbetD1i/w3K0zK3E5NiSCyQ:2/V4+7IBitK00EXiSCyQ
MD5:	0C4B1C61E4ED0E14F079763904B4349B
SHA1:	C110F06000ABD8605CD13A508B383E765000DF10
SHA-256:	4152FBCEAA73D06F0004B93F1C7546C5D13550A37060520E423FE981AF3C1837
SHA-512:	52206DE19E0845830BEE412290E872BE9AFD2127AE85BE281222E09690C433FE64AE36F0BC1ECD5590A84B22799F1B20F846831BA5A182E5362DBBD4FB47F421
Malicious:	false
Reputation:	low
Preview:	(function () {. "use strict";.. // dynamically adjust iframe height to ensure chart isn't cutoff on mobile,. // doesn't have scrollbars, and doesn't have too much whitespace underneath on desktop.. window.addEventListener('message', function(event) {. if (typeof event.data['datawrapper-height'] !== 'undefined') {. let iframes = document.querySelectorAll('iframe');. for (let chartId in event.data['datawrapper-height']) {. for (let i = 0; i < iframes.length; i++) {. if (iframes[i].contentWindow === event.source) {. let iframe = iframes[i];. iframe.style.height = event.data['datawrapper-height'][chartId] + 'px';. }. }. }. }. });.})();

Chrome Cache Entry: 267

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	3402139
Entropy (8bit):	5.612038924724896
Encrypted:	false
SSDEEP:	49152:BpzM4oNLm14HugBzczbhsToW2E3bZMbsuAoz/P1xkpw7KQoZkf0P9aimfSbAh0Tk:4yz/P1xkpt+fSbAh0Tt5FDJbSgzk
MD5:	0B524CDEF39893463854517C5D39CA98
SHA1:	D608828CF11B069BFB992F078F9D3676413FFFC4
SHA-256:	428BC07153AE24A8B4415E053ED6A1869FDF3389D4214A8F519C317EBCD0F363
SHA-512:	B923C5557337D4742FFED0763D6F61F86FE4871C6FA1B3CDC4CF0143E2408E420C22045A4F3701131091E23A1DCFE33F9105F9B78CBFD78029E1F9B88E877A77
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/vanguard-components/clientlibs/clientlib-site.min.ACSHASH0b524cdef39893463854517c5d39ca98.js
Preview:	(()=>{"use strict";var e,p={},b={};function t(e){var n=b[e];if(void 0!==n)return n.exports;var r=b[e]={id:e,loaded:!1,exports:{}};return p[e].call(r.exports,r,r.exports,t),r.loaded=!0,r.exports}t.m=p,e=[],t.O=(n,r,a,o)=>{if(!r){var i=1/0;for(f=0;f<e.length;f++){for(var[r,a,o]=e[f],l=!0,c=0;c<r.length;c++)(!1&o\|\|i>=o)&&Object.keys(t.O).every(h=>t.O[h](r[c]))?r.splice(c--,1):(l=!1,o<i&&(i=o));if(l){e.splice(f--,1);var s=a();void 0!==s&&(n=s)}}return n}o=o\|\|0;for(var f=e.length;f>0&&e[f-1][2]>o;f--)e[f]=e[f-1];e[f]=[r,a,o]},t.n=e=>{var n=e&&e.__esModule?()=>e.default:()=>e;return t.d(n,{a:n}),n},(()=>{var n,e=Object.getPrototypeOf?r=>Object.getPrototypeOf(r):r=>r.__proto__;t.t=function(r,a){if(1&a&&(r=this(r)),8&a\|\|"object"==typeof r&&r&&(4&a&&r.__esModule\|\|16&a&&"function"==typeof r.then))return r;var o=Object.create(null);t.r(o);var f={};n=n\|\|[null,e({}),e([]),e(e)];for(var i=2&a&&r;"object"==typeof i&&!~n.indexOf(i);i=e(i))Object.getOwnPropertyNames(i).forEach(l=>f[l]=()=>r[l]);return

Chrome Cache Entry: 268

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32x32
Category:	downloaded
Size (bytes):	3638
Entropy (8bit):	5.025016845948011
Encrypted:	false
SSDEEP:	96:OhBf7rtG+oeIOsluWZUdU+l+Q7ZPmlbwPmdLcG9DgZGIwkph:OhBulRZUdU+lBZPmlzdLb9DPIwy
MD5:	9CE12231C2DA0C35D62573DB355929CF
SHA1:	7AFD4E5E85ACE89380B931FDE21C478ECE8F57EA
SHA-256:	5CFFA84BE6843F729FC633BFEA97FC0E55B0FCEFD4D04187524768E3C3DCCD4B
SHA-512:	C3A7B5CD9776CF79968FD58DFE45029F191F8B6B5A78EE31CCD36B32533D5E30990AFB900A545538B9F24561350FD1B0A587BA41566A96C5AE5697D5099766C7
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/favicon.ico
Preview:	..............h...&... ..............(....... ...........@...........................[K..............6#..uj.................D2..*...i^..IB......................SF..bS../...........!...pa..>.......................N?..........-...............XG.._N..'...6(......[P..........................................PE......................#...cQ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 269

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (720)
Category:	downloaded
Size (bytes):	1944
Entropy (8bit):	5.463585130522863
Encrypted:	false
SSDEEP:	24:/O5zJIXvuPQa8VyIaoK8d7mQMJHvIOtmRY/Itt7Ikdjer55uIO/3nIRWU9w0XO0C:2KgJTS7m9Zm71Qg/IwUrVgzs9p4J
MD5:	56113523AB647E6DB6BFF10EC7F6AE58
SHA1:	4927B3094BF44F0160D85ADDD3A1BA881121988F
SHA-256:	18DB8B12975EDCDA21AF851D4CF0B3765FCABCE86C3C8CDB4377248CD74CDF54
SHA-512:	B832AB9D46FE23CA8A860D3543A69F77D2DDF8DD210FE76205230E319E85E715BB941B354A76DFE1D5904459301B8C13735659DF776BAB4233429690559BBC15
Malicious:	false
Reputation:	low
URL:	https://mdl-medallia-digital.vanguard.com/pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/medallia-digital-embed.js
Preview:	.(function(){if(!window.KAMPYLE_EMBED){var onPremEmbedRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/medallia-digital-embed\.js$/;var genericPathRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/generic\d{13}\.js$/;window.KAMPYLE_EMBED={kampyleInit:function(){var t=document.createElement('script');t.type='text/javascript';t.async=true;t.src=KAMPYLE_EMBED.getGenericLocation();t.charset='UTF-8';document.body.appendChild(t);},kampyleLoadLogger:function(){},kampyleEventHandler:function(elem,eventType,handler){if(elem.addEventListener){elem.addEventListener(eventType,handler,false);}.else if(elem.attachEvent){elem.attachEvent('on'+eventType,handler);}},isSupported:function(){var trident=window.KAMPYLE_EMBED.getUserAgent().match(/Trident\/(\d+)/);var msie=navigator.userAgent.match(/MSIE (\d+)/);return!(trident\|\|msie);},getUserAgent:function(){return navigator.userAgent;},getGenericLocation:function(){var genericLocation=location.protocol+'//'+'resources.digital-cloud-prem.medallia.com/wdcusprem/13700/onsite/generic1

Chrome Cache Entry: 270

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16337
Entropy (8bit):	4.977710867579442
Encrypted:	false
SSDEEP:	192:svHTw3H/O32O53Habhxxp1NbLScWbhxxp1NbLSC3H/O32OJ7fx8ur/PILOMV6:A/zyhxxp1NbYhxxp1NbONzJOutg6
MD5:	6DE59706FA3DFA50C0181C95959EDC43
SHA1:	CEA116D900343D7235ADE7E5F68560F457C71E6C
SHA-256:	0C11263C47822A78796B2BAC61D6AB51CBAD49E6EAFBF8A82DCCD8356A85012C
SHA-512:	4E1DE0E0DF8AFDD25BACDD0D4405FD3F47C23466B203DE875DFABF9A3FD0BD12225EE83FF0783B689F3D4F5FB26A4471029B379F57D260139BC7E6089F069664
Malicious:	false
Reputation:	low
URL:	https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/1778/formData1717598393762_en.json
Preview:	{"name":"LMI_PROD_EF_SuccessfulReset","id":1778,"creationDate":1611693866939,"formChangeTime":1717597438859,"triggers":[{"triggerType":".EmbeddedContract","id":36645,"triggerEntityDraftId":null,"triggerEntityFormId":null,"rules":{},"displayType":"embedded","displayDirection":"centerRight","isSelfHosted":null,"selfHostedUrl":null,"formId":1778,"isPartialTranslated":null,"currentVersion":null,"pageElementId":"lmi-csat-survey"}],"published":true,"isDeleted":false,"isLocked":true,"advancedFormData":{"customParametersInUse":[]},"isDarkModeEnabled":false,"customHTMLEnabled":false,"templateVersion":2,"folderId":128,"uuid":"2ef7263d-35ea-c948-b970-a8dd6f98368d","pages":[{"name":"Page 1","index":0,"dynamicData":[{"id":36370,"unique_name":"Page 1 text 61728","component":"label","role":null,"options":[],"optionsById":null,"label":"Label Field","description":"Open Sans","placeholder":"Insert label text","labelWithCP":"","position":null,"descriptionWithCP":"","index":0,"nebUuid":"2156-d3fe-b76e-bcc

Chrome Cache Entry: 271

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	75116
Entropy (8bit):	5.919357539470458
Encrypted:	false
SSDEEP:	1536:r9YrY0xxPl72T1KNS5eBIIF4UvvdrL5hk570n6:2rYMPSeWIqc5f6
MD5:	1A385ADD0716F5E96395F3717D4597DC
SHA1:	B4F1AE7A1B4EB452CA976FCCAD45E76CEEEDCF28
SHA-256:	792011989D203BA5A3915F7DD545AB28ACD492E88D0F301290E6EC54CFF723A2
SHA-512:	6640A9D1F370AE41D6E801D9B80293933AEAE9FEF56FD0082FA267663C71535200BC176F93B1CBFD24280A8C79415EAA34FB4FB73BDE83B63A4380C890DAE419
Malicious:	false
Reputation:	low
Preview:	(function fvsBEZDPMP(){O();NR();wR();var bv=function(Rv){return -Rv;};var Kv=function(){return ["_25&","k.J4","UA1.F....9a<:Z","L%^..\v.","$&Z...;%J).","F12J-.+\'LFA","&,JBH$/","]O","QE5\"I..9\n(P5.P.",".\"M#.Y,.#\'UW","\n./\'V^","1O...\v=L+\x00[..#!\\\x40","...9V6\'[!\b","\x00\n,N 1Q+.\'7","5.Q-.6<IW","\n.\x07.,J..O,.11","\b-ra","UA1.F\x07..\v=L+\x00[..#!\\\x40W","!\\TE0:^",".","\b8P-","_FZldz\x40%\\KkZk+YzVv","1/JmV",",.. J6.",".j}j","S7.H0.\'7fAA&$O.#.\r/O,.",">\x407.R5.,\"","V 7N.2.5W","I",".8P1.M>",".L8.&,WU{0$F4.\t.9F+\x07","z5Z.Q..&F+N",".6$MW{73Y..\b\v(","P \x07l<\r7 JFl 7N..",".\t.(","yu...W.S..V8.. WUAj O..\x00.",".Xg#49Foft~)2P+Y:3&y","=.6$.VQ77^..\b"];};var Iv=function(qv,cv){return qv>>cv;};var rv=function(Hv,hv){return Hv%hv;};var Gv=function(Ev,Mv){return Ev>=Mv;};var Lv=function(){return Wv.apply(this,[Ps,arguments]);};var Pv=function(Cv,l8){return Cv\|l8;};var f;var Wv=function F8(f8,X8){var s8=F8;while(f8!=Cs){switch(f8){case f7:{f8+=l7;return F8(F7,[O8]);}break;

Chrome Cache Entry: 272

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12479)
Category:	dropped
Size (bytes):	1438277
Entropy (8bit):	5.1542734620750705
Encrypted:	false
SSDEEP:	6144:pr+zMjwc7xftgSPUlkA23SObrVFi8LpWY:X
MD5:	0200DBC174BA635E9EDB67608A5EC0A2
SHA1:	D98A6A459CE7BEDBFA8C2C7BB64AE82E25053C13
SHA-256:	72536A69CB5B85A497ECD64AFDC87EA6C7BDAA614B24E753914710649C9E91C1
SHA-512:	03F125AC20978D80659EE2C3F2CFBB81DF49AA3735D13895CAB5B184FBBB172523BD210DC33082FD8CBC93B6AC0C3E222B0A3EBA6DC70429AB69FBDCB5F2EF88
Malicious:	false
Reputation:	low
Preview:	{. "sbtServerDomain" : "https://ubt-lb.digital-cloud-prem.medallia.com",. "sbtEnvPrefix" : "wdcusprem_",. "endUserIdentifier" : { },. "formNodes" : [ {. "formId" : "9911",. "isCustomHtmlEnabled" : "false",. "formVersion" : "2",. "formHtmlUrl" : "/**ONPREM_URL_PREFIX**//liveApp/2.56.3/form-app-web.html",. "formDataUrl" : "https://resources.digital-cloud-prem.medallia.com/wdcusprem/2940/forms/9911/formData1729021607847_###LANGUAGE_CODE###.json",. "formWidth" : "500",. "formHeight" : "450",. "isFixedSize" : "false",. "isFullWidthEmbedded" : "null",. "designSettings" : {. "formBackgroundColor" : "",. "thankYouPageBackgroundColor" : "". },. "formLouserzationSettings" : {. "defaultLanguage" : "en",. "useCustomParam" : "false",. "customParam" : "null". },. "formJsonRelativePath" : "wdcusprem/2940/forms/9911/formData1729021607847_###LANGUAGE_CODE###.json",. "formJsonV2RelativePath" : "wdcusprem/2940/forms/9911/formDa

Chrome Cache Entry: 273

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4099)
Category:	dropped
Size (bytes):	4164
Entropy (8bit):	5.30447296775267
Encrypted:	false
SSDEEP:	48:QICpDuMY6wRQAQl07k/9O12+gbuCBDaasU1OGgwzwtLGY2ordwU4RuTpUvO9B9Qy:lsnIQ/s1jgW+05Gye0TVbHBxsjQssN
MD5:	898C2944799721CD5AF40AE7711C2927
SHA1:	8DEABD5D0A42DEA9D726EA727DC4B5B3ABDE41A1
SHA-256:	78246E45BCEC244B38C40DC3008A54E3144548919815ADA3B2E10E0151020689
SHA-512:	D41D40C77E3D4D02C1057B378153080532E1D6C3697EE072C553027285550F60B3ADB2637682EE1DDB3A0750D79FA9E9ADBB7E9F680407E3E5A5151D6A675550
Malicious:	false
Reputation:	low
Preview:	/! For license information please see vms.min.js.LICENSE.txt /.!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(o,r,function(t){return e[t]}.bind(null,r));return o},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/",n(n.s=0)}([function(e,t,n){e.expo

Chrome Cache Entry: 274

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12607)
Category:	dropped
Size (bytes):	366960
Entropy (8bit):	5.578751435027952
Encrypted:	false
SSDEEP:	3072:6tNePFMII5KAvmh8g1TNOgbsDi/++dXR8TNMmnBBypheLFxCTEc5yp+lvBjPyx3B:NFZmwTkgbyi5XRqNMmvLkEc7jmRr4W
MD5:	A9E73563CC07131A9BA45BDAC7B54BF1
SHA1:	EE1152C52AF6FD19928F0F586B1B55AA7829859B
SHA-256:	8E0C553CAEF0E0CBB38575FD10B26D48C9B3BCD9D947D2B4FD479D2E352D8424
SHA-512:	7AD26076414E433E8E2DA6999DDF795DD42AE2E848629DD6B24855BE47EEBF868940B1E69802E5CCD3838A477095719125AD440AA6B6FC2BABB26E0E40B837AA
Malicious:	false
Reputation:	low
Preview:	.(function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.56.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLDATA_API_HOST:'udc-neb.kampyle.com/',USERSNAP_ONPREM_HOST_PREFIX:'https://md-scp.kampyle.com/',USER_AGENT_CLIENT_HINTS_LIST:'["brands", "mobile", "platform", "architecture", "model", "bitness", "platformVersion", "fullVersionList", "wow64", "uaFullVersion"]'},SRC:{OPEN_SANS:'resources/form/FormBuilder/vendor/fonts-googleapis/css/open-sans-v14.css',COOLADATA:'resources/onsite/js/cool-2.1.15.min.js',OOPS:'resources/onsite/images/oops.svg'},FORM_HEIGHT:'450',FORM_WIDTH:'450',COOKIE_EXPIRATION:365,DEVICES:{DESKTOP:'desktop',MOBILE:'mobile',TABLET:'tablet',},FEATURE_VERSIONS:{MOBILE_DYNAMIC_SIZING:2,},TIME_FORMATS:{SECONDS:'seconds',MINUTES:'minutes',HOURS:'hours',DAYS:'days',WEEKS:'weeks',MONTHS:'months',YEARS:'yea

Chrome Cache Entry: 275

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CNeLornMu4kDFY-ggwcdbDAJXg;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogininvalidcredentials;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=9752031467127;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 276

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 529 x 113, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6790
Entropy (8bit):	7.93779296840046
Encrypted:	false
SSDEEP:	192:A09FSNsTLnvwGD0WffaQEQ3SLBsb394482:RwK3vwGgUfaQEGEsB5
MD5:	D2D56D1C42AE17249DCE5982089EEC1A
SHA1:	8D7053CD981FFCC980CC9991CEA4E572E8BF8AE2
SHA-256:	87F9CE362CEDA453E026FC213E4CF38F544C0A9DFD7E38FD3B86552E2F307CE4
SHA-512:	5E9765A2B024CFA4720ACD4E9F467C38DEC85DB18C8081C0C84C0D7B11AD44ACCED216F16AEAC11D523003107B0FD5AAE62E37CF64CD603B62A329238C091955
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/consent/767da967-88bb-4648-bd02-c7a263423698/01917eff-192a-70a3-919c-8e66142ae41f/logos/e23663a9-a49c-4250-9892-0022f609291d/c3d93706-3ccf-4e23-aec5-3af38fdcc954/d2097a83-ab1d-4d11-84ea-83fc12092ed1/Vanguard.png
Preview:	.PNG........IHDR.......q.....k..a...MIDATx..R.K....m....B...Xd_f.nm.\.R........R.....+.\|..P..l..n5..i.3.Lw.==..W..9..fz..~.~.v{O.7...1.9...../'..W.c.B.i1.n.....\|C..N..?.\|f>Y-..i..WJ.)..d.....MV....Y).M)u...GzLk.Tt...:PJ](....[.w!.......H)u.56.:..i..E..5Q..b..-.Y......M..B....r].;...b.Z...=.!...v.Cl.,.!.V..2.....p../...z.P)5.~.8.v....!.......@...8..d....{.B.i..n..Z.CSJDL.=-.....o./......k..-$....1....E...D..0.n.3n..te.B.).9..Z...@.....\|.....-.c1.u...@...x.C...nO.......4..z.8...../..BH...R..h.@.Y.^...t0..c..}....M.S..........n...-..r..B.L]..3d_.......s.k. #x..........r.......g...A.!.....a.?.ys......s.!...?.][ ..Z.....]z..`^i"s;...B..@.%@..sj..c.0.E.o.7.."...6..5.....`..]...B....(.^cY...e.].A..*tg.H.......g...A.!.)......d.y@<.u."s.Q(".....Y.u.R....B.!M.Y.B...?Fl....lrg(.1..(...=$.\|DU.+..BH.0"bPd..X..Z.C.3X;..s.;C...t.i].....A.!.I..B..H.........("...9...ba.+..BH.......&.2.;xj.{..q..fE-<...q/.!.....l.(..e.@.M.v...V...........U.2.!.4.T..!.!._.oXU-u

Chrome Cache Entry: 277

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CMfB46DMu4kDFUDLOwIdfBsViw;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 278

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	121
Entropy (8bit):	4.84474983370803
Encrypted:	false
SSDEEP:	3:zIRBEBc2LGRFf9mnI0KMgBI1VMyRMRE3DVihLE37VA4OMen:0ULk9qhKMgBUnQEzghLK7V7je
MD5:	C29C4E6FEF4A1EEBACB63C6E38026AD6
SHA1:	216679A88B88B8091160CFE4A9C15F08D4A687EC
SHA-256:	5C03E77236A25D364A7B205A5A6B3CB3F38E6A9FF1328DF760C99F53E33B7F71
SHA-512:	37D42AB5788FF26F8C37FA32D4EBDCDC067D4EE2D0B1D14B7D1CD100156324BCAED5C67CDBD07836DF7DC028FE25ECC0F8A40E1AAB6125C6803FF2813972F62A
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-fpid.min.ACSHASHc29c4e6fef4a1eebacb63c6e38026ad6.js
Preview:	$(document).ready(function(){$.ajax({method:"GET",url:"/api/institutional/fpid",headers:{"Cache-Control":"no-store"}})});

Chrome Cache Entry: 279

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1290)
Category:	dropped
Size (bytes):	1472
Entropy (8bit):	5.344864525038891
Encrypted:	false
SSDEEP:	24:hBDct/BaBon1uromuGR5OHyEudw80erxgxOxizytuSrK3dsNr:It/B2aRaQIKk
MD5:	944AEACBEDF8C5B4D7F40F3B2B26DC98
SHA1:	5277F4E062AEEF4FDAB175823034ACF5BD2AF080
SHA-256:	7772BE8598414F93C211DBBFCFD3C254B958384FA5D912B29313A17E142B6BFF
SHA-512:	A0CD347AB4100DE63D173D56F4C1B3E8C8B630F160DA6E381400E67530639CFCFA7D07AB3DA0EAECE57CE8D61242A8782E3FB18FB7BC8FE7535AE1CBFB84EAFA
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCc976cd0ba5ef495295a72d563106d95e-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCc976cd0ba5ef495295a72d563106d95e-source.min.js', "<script async type=\"text/javascript\">\n function zync_call() {\n var z = document.createElement(\"script\");\n var zmpID=\"vanguard-direct-inc\";\n var OrderID=\"{OrderID}\";\n var OrderAmount=\"{OrderAmount}\";\n var cache_buster=Date.now();\n var page_referrer=encodeURIComponent(document.referrer);\n var PageUrl=encodeURIComponent(window.top.location.href).replace(/[!'()~]/g, escape).replace(/\\*/g, \"%2A\");\n\n var z_src = \"https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=dad0a533c0538b82e1f8ae74ecf9d3a3&k=vanguard-direct-inc-pixel-7103&zmpID=\"+

Chrome Cache Entry: 280

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21778), with no line terminators
Category:	dropped
Size (bytes):	21778
Entropy (8bit):	4.769188103585108
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ
MD5:	73BC4067D312180A1B19A4D883F42D6A
SHA1:	AD328A9A572FBEA43F295E7769835FF08F6FF1FD
SHA-256:	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
SHA-512:	20B89462521684C258A8CE15E94DA67182C66397B0DE528357E01294FF06883C1AD96037A9D739E4575DB8722B1A1967578709A0C844CD45A49E6A51E1B6479D
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 281

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	64670
Entropy (8bit):	5.445559151761842
Encrypted:	false
SSDEEP:	384:IaMapYA02vw93aR8HdCSzqZBkFL/Rvq/GI2s/6LYlpCglbiwQqyNMqpGiaq3l/v+:DpYAm3rCpBvGhsxpCObicq3JsJLPqjdi
MD5:	67EAFE0CA141B9B52080C52D281966C4
SHA1:	93308B43A6234C01123881A7B02E9B014B082294
SHA-256:	51DFBAD7E1A227D3935016E5C4190E5E46E03DAA4B249E5DED55F54235EFBD7A
SHA-512:	BB006F610699E0912464ADB609509FE9CDCF35088FED00331CB14A2B4A6FFB0684C2763E13EF2FAE6152665C662076CE506118D14B2897851BA039BD9BAB9B79
Malicious:	false
Reputation:	low
URL:	https://corp-pmj.web.vanguard.com/files/us_b2c/cc/prod/onetrust/scripttemplates/202402.1.0/assets/v2/otPcTab.json
Preview:	. {. "name": "otPcTab",. "html": "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

Chrome Cache Entry: 282

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	494
Entropy (8bit):	5.018509811924596
Encrypted:	false
SSDEEP:	12:Y/6cuKjOXq0R6cuKjOXqc1Gy6cymiw1Gy6cymU0y6cs2SBEgJMJkF0y6cs2SBEgL:Y/5XKXBR5XKXx1Gy53iw1Gy53Up5hSyV
MD5:	9ACC16EA62DEBCEA613715E324B6F506
SHA1:	27B5DD74C7C49996589CC3EEF3F356B9D69BE7DA
SHA-256:	98EC9104AC4B9EA92092D7C89597AC804A425B66D3DCFBCEBA71D5E3C5FBEBA0
SHA-512:	ADB76BF07CAD08DD943EAAB4AADCC9500AE829146F041F9B55997CADE5DFD896ED7554C3B86E1E5A8D5A947AB73A1C4FC379B0AAAC60798C79AAFF2240051BB7
Malicious:	false
Reputation:	low
Preview:	{"investor.vanguard.com":{"siteId":"4c6c8412-1f33-4c61-9607-3112260b5810"},"instaemsitesauth.inst.c1.vanguard.com":{"siteId":"4c6c8412-1f33-4c61-9607-3112260b5810"},"retirementplans.vanguard.com":{"siteId":"0b87fa46-90db-4c9e-bc03-6e3158067443"},"test.retirementplans.vanguard.com":{"siteId":"0b87fa46-90db-4c9e-bc03-6e3158067443"},"ownyourfuture.vanguard.com":{"siteId":"090d772a-b3d6-4dda-808f-773ad25b7715"},"sat-ownyourfuture.vanguard.com":{"siteId":"090d772a-b3d6-4dda-808f-773ad25b7715"}}

Chrome Cache Entry: 283

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2492
Entropy (8bit):	4.932646033582626
Encrypted:	false
SSDEEP:	48:cIQwq0RxwOJ/PlRhGwROsj+X4jY1TlHIBIZZrBRcDoKEqR:swq0RWOJHl2Jl8eNcc+R
MD5:	9BF9F21EFF4B00D4157B5B5145D5DB6C
SHA1:	352C59064B0F2E1FC10B2DF887A1925B39C0A23E
SHA-256:	59DD819499B20E87555ABA96DC02EED7F6CF0305ADA22F3DCC4881D13A1AF431
SHA-512:	1603CF088A5D91E1EE4976C93B90C563E54F7DCCD6EAB6C7BB62B3532DA28CABDB1D948DB30EB25A59178EB05939C02D06A933A920AC6758440851AF4B3FD23D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 64 (101010) - https://sketch.com -->. <title>9CDB01EA-95B0-41DD-8689-27896E1C0FEE@1.5x</title>. <desc>Created with sketchtool.</desc>. <g id="Header-Footer---Desktop-&-Mobile" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Tab---001--Public-Header-&-Footer" transform="translate(-225.000000, -810.000000)" fill-rule="nonzero">. <g id="Footer/Tab" transform="translate(0.000000, 770.000000)">. <g id="Social-Media" transform="translate(192.000000, 40.000000)">. <g id="Icon/-Google-plus" transform="translate(33.000000, 0.000000)">. <g id="Icon/-Twitter">. <ellipse id="Oval-Copy-4" fill="#5FA9DD" cx="12" cy="12.5" rx="12" ry="12.5"></ellips

Chrome Cache Entry: 284

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	91
Entropy (8bit):	4.1925825200734
Encrypted:	false
SSDEEP:	3:YXLfcglsW0GxoW/eYJzAXWMSIp24brEJ4:YaixoW/9FMSUrZ
MD5:	3944D2F4EF92AF425D5A341E3D40D7A8
SHA1:	4392645F29C17DED10D16622BA237CE690224FD9
SHA-256:	9369B2673DB55DE20067C87D7BE63F4197A69C3236D0A1C108000B938594B9DF
SHA-512:	D233DEE1FBC2143015BB77156AF6BA35D64FDF634A08F69EE7DB092282AA540ADEE892E00CE2C136D004FF7BC262D485D07B16872198790B5FA1E4EA57E4A8CA
Malicious:	false
Reputation:	low
Preview:	{"reason":"Invalid arguments","events_count":"0","results":{},"version":"5","status":false}

Chrome Cache Entry: 285

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	325
Entropy (8bit):	5.044437641823879
Encrypted:	false
SSDEEP:	6:tnrVli/UTumc4slvIfpWiS9kU2djIyu/9Ds4mqZllR:trVumuCsiS9d8Ru/nhllR
MD5:	520C165E230E4EC540EA0C3831009D6B
SHA1:	BA0085CDEFAAEC503F9016C49A10B51CDF38E3BB
SHA-256:	B3D3526E74A6D1C9C35A2306E3F615068D85318788EFC2E65B07F6740F891DC5
SHA-512:	4DC29C9EC9CB5E8AF5FCD1CAF8C78E8EE4E84BC18885895FBA0E8194D3B03DA3767ABEE4EB758F0B1AD0B07DB74B8372E92B1347C410BB7F445D03BE1CE808A4
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/vector-down.svg
Preview:	<svg width="12" height="8" viewBox="0 0 12 8" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.270508 0.813477L5.83301 7.09998C5.88046 7.15362 5.94864 7.18433 6.02026 7.18433C6.09188 7.18433 6.16006 7.15362 6.20751 7.09998L11.7705 0.813477" stroke="#717777" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 286

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64417)
Category:	dropped
Size (bytes):	207738
Entropy (8bit):	5.267135190898744
Encrypted:	false
SSDEEP:	3072:Ukp11qjEmtD+KoTIZppFlJFwcHC+kArqB42p2tRW:Uk9mMcZppAcHyr
MD5:	19C0971C237B914197972E901DB2F496
SHA1:	52AE03A8A738AA954228499072FE355FFF47DABA
SHA-256:	A67D8DFCAC484B02506396563758DC3AFA563B859448419CFEC37800942A5F6B
SHA-512:	7DBD102AF6E0A85F9AF1F5006A568927D0696C7877DC7B712A5B78442D184E01F3DDEAA0CCE437DD040F45A651BD14ABF4300259E50EEF8D54CBB3D324E284FA
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function i(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)i.d(n,r,function(t){return e[t]}.bind(null,r));return n},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=48)}([function(e,t,i){./*! @license DOMPurify 2.4.4 \| (c) Cure53 and other contributors \| Rel

Chrome Cache Entry: 287

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	5.014266528556901
Encrypted:	false
SSDEEP:	3:fhvUM8H3erfa18h0Xd0l0T2AvhcOfhvk/RArY:JvOH3e25N0l+2AvKCe/RAM
MD5:	EFE4C95C17932C9E7AAFE763CF34433F
SHA1:	403EF1F7FD824FE45F9DEF030B0DFCFA550DED6E
SHA-256:	98C70F629A71746C88F97D7110F6813550262337620B147B98C1C8013329250A
SHA-512:	F50260E22C28C9F6FC013F4EEA93F9D449836F76AA22639C2D81BDC4D4B430ECD1A225D22DE61A4B9B87413120F1D31283FF5C112A045175C517B1809F8A5906
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmmHqOoSbcmsRIFDeqIV54SBQ1U4vPY?alt=proto
Preview:	Cj4KDQ3qiFeeGgQIVhgCIAEKLQ1U4vPYGgQISxgCKiAIClIcChIhQCQjKi5fPy0lJl4rLyk9KDoQARj/////Dw==

Chrome Cache Entry: 288

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2274
Entropy (8bit):	4.925056370828309
Encrypted:	false
SSDEEP:	24:2d2S8eLwLxFeaxM2p4WmPnyA++0W8bET2IeA9LESUZdkhFa4mmE/qsed3qcDC2la:cfLwT4Zfl/xT2VSUZdkz3gqsed3XLTd8
MD5:	493BF686838AB68BF9F048B592B668D9
SHA1:	F2377A95DF1EF883D4165B8931F5A643698746F8
SHA-256:	7AC807CE8C938EB72BB283F6C6B42B208E03C2A10FDF36EAAC2267CBBA7D8845
SHA-512:	E012538B63C644A12935E22B7A4A710DE823F392B1FA7193AE244DC9C9D9A58CD77E1903C7D3723E329D2E65A40EFAB389B595170C2759D490ACAAAF3308E8F8
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/learn/Youtube.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>..Icons/Desktop/Social/Youtube </title>. <g id="Header-/-Footer" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="c11n-grid-xxl-(1440px)-Advice-Footer" transform="translate(-449.000000, -840.000000)">. <g id="..Footer/Desktop/NotLoggedIn-Copy-2" transform="translate(0.000000, 813.000000)">. <g id="Social-Icons" transform="translate(162.000000, 24.000000)">. <g id="Group" transform="translate(284.000000, 0.000000)">. <polygon id="Path" points="0 0 30 0 30 30 0 30"></polygon>. <circle id="Oval-Copy-2" fill="#CC181E" fill-rule="nonzero" cx="15" cy="15" r="12"></circle>. <path d="M22.8154447,12.231858 C22.8154447,12.231858 22.659042,11.2181625 22.180

Chrome Cache Entry: 289

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3638
Category:	dropped
Size (bytes):	2142
Entropy (8bit):	7.904584942956409
Encrypted:	false
SSDEEP:	48:Xns/cLdlxsoAAmOpJyQLoto7Seyk0MwH6nfYSy0LinA/SuCXUrY9haBK:3lLdqAm0wQWhMFnxOA/DCErgag
MD5:	FE33FFAA1EEF22DEFE6F6FDC9408714C
SHA1:	F0E430FE78D69E4520CAEDA2202AA3A44C72D5CC
SHA-256:	B994FB6A9FC6D5BA221473C56D2C8944290C3ABFA84DFEAE2741C030C63734B0
SHA-512:	273B02A6AD14EBDFD6F589935D174A69D0A5BADC1ADC38200E7D65AD063E8D1ABCC639400A92D7427F16912790A37CA831D2D02264981732615C256D6AF36024
Malicious:	false
Reputation:	low
Preview:	...........ViTTG...hq."."...h.....1v4D4..d..hb:...,fB.U.I.g..G.e.`.j...+h...TDQ.Q...4.....>.3..........W..-...~~h..4.`......i.m(.U..3C.v.L....(H._.....p.......u.0..0.7#........5..h.+k1ov..m....6.......F+.c..:...".8..........lL....g..#...-?....>(.vF5..4..aDx9N~....B...K..`......0qh.$....kI..C.!.7...hhp..b..m.B.m2.[.0.......c-.....W...W..E....."C.e..w..p..[.@Cx(.._...(P...=.d..7. _..4...uW.G....U.=.Z+...C.h.U...V..~.....+..)..7......b..J..?.j...XL..{..Ul....[.p....cG.a.....l..{<..2..........}.<3.-Ih...........U.D.?.....{t.vy...z..o.P.@....z",!A.d..U.[P....-.<y..._85..ys.^.X....c~....`.D.w{...1.?..>..Z..K._C.>..S..h..o^.Zk....0.jH.w.^Yq...BC..HT.b...Q.......j...G....^......1....T"~Z.>.v._}.....-V.^. .g9....U....(.t..b....iMxo.M..j. ...M2bD..s.. \|.......t...7.....U...#...eF;..\.).......j\|1.PF..A......N..ST...&L.w.N..S.....A..1!....n...-..Cqh...\|O..`..+p)6....v....J..a.U.b...`.z.e.s..........$H....I.`..N...B}H..}....)B0..`T!..x.W..\|h.R

Chrome Cache Entry: 290

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (560)
Category:	dropped
Size (bytes):	742
Entropy (8bit):	5.22789849387177
Encrypted:	false
SSDEEP:	12:jvgaB+RYqPXct/BaB+RYqPWL6QXLORidGlORidGoxORidGyaQPFDRWxGfurS0m34:hBmct/BaBPXuidGMidGridG4P1RWxiuj
MD5:	C612EE7CFDAE5550F80434BAE5D0F323
SHA1:	45748810185267860DE448CDAE4D5F3906BD82C2
SHA-256:	A2F92949EC77FB3DDB775A689B06B333BDF03BEAA89E74B675CDDF724BE86B85
SHA-512:	BF3DCF6A2B4E6C0E5E09A93F6B11AC8BB0EC0B991B2CB2D2564A92D24C0F535BC00470B957E4872992C5E18B8F88DC8E80A8FCB28B170D8DC068E026A64E7358
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCdcaf05ded5df440c85dbf48ae644ec25-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCdcaf05ded5df440c85dbf48ae644ec25-source.min.js', "_linkedin_partner_id=\"7608\",window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[],window._linkedin_data_partner_ids.push(_linkedin_partner_id);var s=document.getElementsByTagName(\"script\")[0],b=document.createElement(\"script\");b.type=\"text/javascript\",b.async=!0,b.src=_satellite.getVar(\"linkedin_insight_tag_url\"),s.parentNode.insertBefore(b,s);");

Chrome Cache Entry: 291

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 292

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53333)
Category:	dropped
Size (bytes):	68637
Entropy (8bit):	4.965932329168001
Encrypted:	false
SSDEEP:	1536:/q/UIdiX8BQQPGDfmEAmBSMK4UHliw1ApP6O:/q/ULXK7HYD
MD5:	F6DA3D96F939537C6AFD92C54C571F57
SHA1:	941217C87F64665E7833AA011090B8AF2AC71F62
SHA-256:	106B61DAA49BC1D4EF8C7FEAEFD833CF68DD0EC4E93D688199F2286A0A241B5B
SHA-512:	89355394C63F61FDB3E02D471AC877FCD0FF31ED7594F93537E83A05CD88B7E88A25A5175D0F25600C0C38706996F0BB00A2A40CA304E375029621B4AEEB7466
Malicious:	false
Reputation:	low
Preview:	const l = `.c11n-warning-medium use,.c11n-view-list-medium use,.c11n-view-grid-medium use,.c11n-user-medium use,.c11n-upload-medium use,.c11n-success-medium use,.c11n-search-medium use,.c11n-remove-medium use,.c11n-print-medium use,.c11n-play-medium use,.c11n-help-medium use,.c11n-log-out-medium use,.c11n-log-in-medium use,.c11n-feedback-like-medium use,.c11n-feedback-dislike-medium use,.c11n-error-medium use,.c11n-email-medium use,.c11n-download-medium use,.c11n-document-pdf-medium use,.c11n-document-medium use,.c11n-disallowed-medium use,.c11n-date-picker-medium use,.c11n-check-medium use,.c11n-chat-internal-medium use,.c11n-caret-up-medium use,.c11n-caret-down-medium use,.c11n-bank-medium use,.c11n-announcement-medium use,.c11n-accordion-closed-caret-small use,.c11n-accordion-open-caret-small use{fill:none;stroke:currentColor;stroke-linecap:round;stroke-linejoin:round}.c11n-feedback-like-fill-medium use,.c11n-feedback-dislike-fill-medium use,.c11n-warning-fill-medium use,.c11n-succe

Chrome Cache Entry: 293

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3111
Entropy (8bit):	4.163798393638205
Encrypted:	false
SSDEEP:	96:G6nXq2K2fsc8s7IsFDsX7SwB18tvgtWl72:XrpQjEt72
MD5:	C715D927ABE49D752760FCE7DC779B20
SHA1:	BB8263AC0147853CDBEA84BA174D7C9C0F49C75B
SHA-256:	E785BBB5FEB9DF54DD049C2EF6EB6E9CAD5C10D359C62973B6BA315D0F9D3CF6
SHA-512:	98260EBFB143FCFAEAA69FC51511210C0D79010A6BAF901005286FBF4A06BF7FC3EEE99037DEB6793D587255B79E1A542290CE3C6A18B26064393987C198BED2
Malicious:	false
Reputation:	low
Preview:	(function($) {. "use strict";. $(document).ready(function() { . var location = $("#countrycodeValue").val()+":"+$("#languagecodeValue").val(). ... +":"+$("#siteidentifierValue").val()+":"+$("#platformValue").val()+":"+. ....$("#pagenameValue").val()+":"+$("#sitesectiononeValue").val()+":"+. $("#sitesectiontwoValue").val()+":"+$("#pageidentifierValue").val();. $("#tlFilters-show-filter-link").click(function(e) {. console.log("ShowFilters Clicked");. window.dataLayer = window.dataLayer \|\| [];. window.dataLayer.push({. "event" : "callToAction", //e111. "callToAction": {. "location": location, //v103 . "ctaName": "show filter", //v104. "ctaType": "link" //v111. }. });.. ..});. $("#tlFilters-hide-filter-link").click(function(e) {. window.dataLayer.push({.

Chrome Cache Entry: 294

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2274
Entropy (8bit):	4.925056370828309
Encrypted:	false
SSDEEP:	24:2d2S8eLwLxFeaxM2p4WmPnyA++0W8bET2IeA9LESUZdkhFa4mmE/qsed3qcDC2la:cfLwT4Zfl/xT2VSUZdkz3gqsed3XLTd8
MD5:	493BF686838AB68BF9F048B592B668D9
SHA1:	F2377A95DF1EF883D4165B8931F5A643698746F8
SHA-256:	7AC807CE8C938EB72BB283F6C6B42B208E03C2A10FDF36EAAC2267CBBA7D8845
SHA-512:	E012538B63C644A12935E22B7A4A710DE823F392B1FA7193AE244DC9C9D9A58CD77E1903C7D3723E329D2E65A40EFAB389B595170C2759D490ACAAAF3308E8F8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>..Icons/Desktop/Social/Youtube </title>. <g id="Header-/-Footer" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="c11n-grid-xxl-(1440px)-Advice-Footer" transform="translate(-449.000000, -840.000000)">. <g id="..Footer/Desktop/NotLoggedIn-Copy-2" transform="translate(0.000000, 813.000000)">. <g id="Social-Icons" transform="translate(162.000000, 24.000000)">. <g id="Group" transform="translate(284.000000, 0.000000)">. <polygon id="Path" points="0 0 30 0 30 30 0 30"></polygon>. <circle id="Oval-Copy-2" fill="#CC181E" fill-rule="nonzero" cx="15" cy="15" r="12"></circle>. <path d="M22.8154447,12.231858 C22.8154447,12.231858 22.659042,11.2181625 22.180

Chrome Cache Entry: 295

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (720)
Category:	dropped
Size (bytes):	1944
Entropy (8bit):	5.463585130522863
Encrypted:	false
SSDEEP:	24:/O5zJIXvuPQa8VyIaoK8d7mQMJHvIOtmRY/Itt7Ikdjer55uIO/3nIRWU9w0XO0C:2KgJTS7m9Zm71Qg/IwUrVgzs9p4J
MD5:	56113523AB647E6DB6BFF10EC7F6AE58
SHA1:	4927B3094BF44F0160D85ADDD3A1BA881121988F
SHA-256:	18DB8B12975EDCDA21AF851D4CF0B3765FCABCE86C3C8CDB4377248CD74CDF54
SHA-512:	B832AB9D46FE23CA8A860D3543A69F77D2DDF8DD210FE76205230E319E85E715BB941B354A76DFE1D5904459301B8C13735659DF776BAB4233429690559BBC15
Malicious:	false
Reputation:	low
Preview:	.(function(){if(!window.KAMPYLE_EMBED){var onPremEmbedRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/medallia-digital-embed\.js$/;var genericPathRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/generic\d{13}\.js$/;window.KAMPYLE_EMBED={kampyleInit:function(){var t=document.createElement('script');t.type='text/javascript';t.async=true;t.src=KAMPYLE_EMBED.getGenericLocation();t.charset='UTF-8';document.body.appendChild(t);},kampyleLoadLogger:function(){},kampyleEventHandler:function(elem,eventType,handler){if(elem.addEventListener){elem.addEventListener(eventType,handler,false);}.else if(elem.attachEvent){elem.attachEvent('on'+eventType,handler);}},isSupported:function(){var trident=window.KAMPYLE_EMBED.getUserAgent().match(/Trident\/(\d+)/);var msie=navigator.userAgent.match(/MSIE (\d+)/);return!(trident\|\|msie);},getUserAgent:function(){return navigator.userAgent;},getGenericLocation:function(){var genericLocation=location.protocol+'//'+'resources.digital-cloud-prem.medallia.com/wdcusprem/13700/onsite/generic1

Chrome Cache Entry: 296

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	717
Entropy (8bit):	5.065222072207143
Encrypted:	false
SSDEEP:	12:UeB5NFhCVpCiqWNh6y6u7V15Kw4pmM33yBDWg3ZR3Fj:3vhCiiqeEu7VffI3yBNpj
MD5:	141C5B976AB322C879B7EAC70C69C93F
SHA1:	88143D42AF8D03709464ADC3A5E6A3AB2A1C94B2
SHA-256:	0F511B83706E30D2328E7B198E9BDCF4A0A2819B5E7294DA205F43E54163B126
SHA-512:	E87D7B330FD066ACDB9C9FB0201AE4E35447AC99C6ED6C47B5EFCE57D697336BA5DCDF590EE7798190583C22D735C2160B291BC751E214DFC430BB07229E33E1
Malicious:	false
Reputation:	low
URL:	https://constellation-static.web.vanguard.com/v1/fonts/thorndale.css
Preview:	/..This CSS resource incorporates links to font software which is the valuable copyrighted..property of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,..redistribute, convert, modify or reverse engineer this font software. Please contact Monotype..Imaging with any questions regarding Web Fonts: http://www.fonts.com../../* ================================== Thorndale Font Family ================================== /..../ Thorndale Regular */..@font-face {.. font-family: "Thorndale";.. src: url("75e50095-66d5-48bc-a397-eeac6b7ec81b.woff2") format("woff2"),.. url("f90c18f6-4aa1-4d6c-9c3d-2e8133dffe1f.woff") format("woff");.. font-weight: 400;.. font-style: normal;..}..

Chrome Cache Entry: 297

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (719)
Category:	dropped
Size (bytes):	1943
Entropy (8bit):	5.4657035035140416
Encrypted:	false
SSDEEP:	24:/O5zJIXvuPQa8VyIaoK8d7mQMJHvIOtmRY/Itt7Ikfr55uIO/3nIRWU9w0XO0o2k:2KgJTS7m9Zm79g/IwUrVgzs9p4J
MD5:	40AB5B2E4737FAE97C872DE25C10338C
SHA1:	22639869AA9433608A09E2AB382CFC1E25CAE765
SHA-256:	5519FFEB013C4C261140B08E3E3415DCC517B95EE3B90DD5F2BF25A770FDF30B
SHA-512:	5A032B95B1C3FAAC0274BBBE170C7312CE6D30147F7A57A5ACBDD8977E0D0E4C689255A9571E2DAB3FFFE980B51F411780DED9721B239FB1BCAE6A8368FFA06E
Malicious:	false
Reputation:	low
Preview:	.(function(){if(!window.KAMPYLE_EMBED){var onPremEmbedRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/medallia-digital-embed\.js$/;var genericPathRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/generic\d{13}\.js$/;window.KAMPYLE_EMBED={kampyleInit:function(){var t=document.createElement('script');t.type='text/javascript';t.async=true;t.src=KAMPYLE_EMBED.getGenericLocation();t.charset='UTF-8';document.body.appendChild(t);},kampyleLoadLogger:function(){},kampyleEventHandler:function(elem,eventType,handler){if(elem.addEventListener){elem.addEventListener(eventType,handler,false);}.else if(elem.attachEvent){elem.attachEvent('on'+eventType,handler);}},isSupported:function(){var trident=window.KAMPYLE_EMBED.getUserAgent().match(/Trident\/(\d+)/);var msie=navigator.userAgent.match(/MSIE (\d+)/);return!(trident\|\|msie);},getUserAgent:function(){return navigator.userAgent;},getGenericLocation:function(){var genericLocation=location.protocol+'//'+'resources.digital-cloud-prem.medallia.com/wdcusprem/2940/onsite/generic17

Chrome Cache Entry: 298

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	325
Entropy (8bit):	5.044437641823879
Encrypted:	false
SSDEEP:	6:tnrVli/UTumc4slvIfpWiS9kU2djIyu/9Ds4mqZllR:trVumuCsiS9d8Ru/nhllR
MD5:	520C165E230E4EC540EA0C3831009D6B
SHA1:	BA0085CDEFAAEC503F9016C49A10B51CDF38E3BB
SHA-256:	B3D3526E74A6D1C9C35A2306E3F615068D85318788EFC2E65B07F6740F891DC5
SHA-512:	4DC29C9EC9CB5E8AF5FCD1CAF8C78E8EE4E84BC18885895FBA0E8194D3B03DA3767ABEE4EB758F0B1AD0B07DB74B8372E92B1347C410BB7F445D03BE1CE808A4
Malicious:	false
Reputation:	low
Preview:	<svg width="12" height="8" viewBox="0 0 12 8" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.270508 0.813477L5.83301 7.09998C5.88046 7.15362 5.94864 7.18433 6.02026 7.18433C6.09188 7.18433 6.16006 7.15362 6.20751 7.09998L11.7705 0.813477" stroke="#717777" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 299

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10456
Entropy (8bit):	4.2339413816196405
Encrypted:	false
SSDEEP:	192:sTCgGIXvXXe68o6j8L6xZ2zrZtzSW2LAt9U4hJILUv+/5Xlew61mQGJ5Ooupcx5:sHGOpPbzSWN9U4AL8ElmmQo5nupy
MD5:	CDCD035B8B17D693823B15ADFFFE81B9
SHA1:	D636267B22626160CCE94C4F713FEA8E31F7EA26
SHA-256:	B8CD4A2297B4D9C33386A92DEA138603FCBECBED5A15AA14FAFA415A5835AB5D
SHA-512:	0979B4AFBDCA4468A2DDF8DE6D33F25B26DF5DCCDBC789BC92DAEF9CE3F5769CD246E1B54792994051EB1B1379D6FED30723E8D5AE73743FF5BE7EA18CE7D789
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg viewBox="0 0 127 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: sketchtool 64 (101010) - https://sketch.com -->.. <title>02554590-BCC5-4543-97EE-9E4C6B14B896@1.5x</title>.. <desc>Created with sketchtool.</desc>.. <g id="Header-Footer---Desktop-&-Mobile" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Global_Desktop---002---Logged-in-Header-&-Footer" transform="translate(-72.000000, -26.000000)" fill="#96151D">.. <g id="Header/-Desktop/-Logged-in">.. <g id="Atoms-/-Logo-/-Logomark-/-Red" transform="translate(72.000000, 26.000000)">.. <path d="M42.5703656,20.5150469 L48.8673629,20.5157383 L48.863577,20.3442815 C48.8673629,20.3442815 47.5870377,20.3107506 47.6262734,18.0227012 C47.6262734,18.0227012 47.6200783,10.9687753 47.61939,10.9660099 C47.6262734,6.06428148 42.6870404,6.242651

Chrome Cache Entry: 300

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53333)
Category:	downloaded
Size (bytes):	68637
Entropy (8bit):	4.965932329168001
Encrypted:	false
SSDEEP:	1536:/q/UIdiX8BQQPGDfmEAmBSMK4UHliw1ApP6O:/q/ULXK7HYD
MD5:	F6DA3D96F939537C6AFD92C54C571F57
SHA1:	941217C87F64665E7833AA011090B8AF2AC71F62
SHA-256:	106B61DAA49BC1D4EF8C7FEAEFD833CF68DD0EC4E93D688199F2286A0A241B5B
SHA-512:	89355394C63F61FDB3E02D471AC877FCD0FF31ED7594F93537E83A05CD88B7E88A25A5175D0F25600C0C38706996F0BB00A2A40CA304E375029621B4AEEB7466
Malicious:	false
Reputation:	low
URL:	https://n4v.web.vanguard.com/svg/c11n-spritesheet.js
Preview:	const l = `.c11n-warning-medium use,.c11n-view-list-medium use,.c11n-view-grid-medium use,.c11n-user-medium use,.c11n-upload-medium use,.c11n-success-medium use,.c11n-search-medium use,.c11n-remove-medium use,.c11n-print-medium use,.c11n-play-medium use,.c11n-help-medium use,.c11n-log-out-medium use,.c11n-log-in-medium use,.c11n-feedback-like-medium use,.c11n-feedback-dislike-medium use,.c11n-error-medium use,.c11n-email-medium use,.c11n-download-medium use,.c11n-document-pdf-medium use,.c11n-document-medium use,.c11n-disallowed-medium use,.c11n-date-picker-medium use,.c11n-check-medium use,.c11n-chat-internal-medium use,.c11n-caret-up-medium use,.c11n-caret-down-medium use,.c11n-bank-medium use,.c11n-announcement-medium use,.c11n-accordion-closed-caret-small use,.c11n-accordion-open-caret-small use{fill:none;stroke:currentColor;stroke-linecap:round;stroke-linejoin:round}.c11n-feedback-like-fill-medium use,.c11n-feedback-dislike-fill-medium use,.c11n-warning-fill-medium use,.c11n-succe

Chrome Cache Entry: 301

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1619), with no line terminators
Category:	dropped
Size (bytes):	1619
Entropy (8bit):	5.324563011210641
Encrypted:	false
SSDEEP:	48:pmrorky9ApcBa6pQL1uaejMJT9Dro8LOYhto:pyoAF2BzmL11p51hq
MD5:	92CAC509BCE9EA74C92A67FC5803E415
SHA1:	15BFEA1728BE47C34DE63416D7231626C472DCB0
SHA-256:	A04D373BE23A3F37DFE1F88CAB01061DB75F716EDADC6451C652FE538F4BE6C0
SHA-512:	31EC30DAC5EA347C48D7EE43CA1FFD280B6F23D459480E1CD4ADA4E622F4DA888F3BF447DD0DF42F73356A56EDA8C839D2EE2045361D578117390A97108DF7E8
Malicious:	false
Reputation:	low
Preview:	!function(e){var n;if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){var t=window.Cookies,o=window.Cookies=e();o.noConflict=function(){return window.Cookies=t,o}}}(function(){function f(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var o in t)n[o]=t[o]}return n}function a(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function e(u){function c(){}function t(e,n,t){if("undefined"!=typeof document){"number"==typeof(t=f({path:"/"},c.defaults,t)).expires&&(t.expires=new Date(1new Date+864e5t.expires)),t.expires=t.expires?t.expires.toUTCString():"";try{var o=JSON.stringify(n);/^[\{\[]/.test(o)&&(n=o)}catch(e){}n=u.write?u.write(n,e):encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),e=encodeURIComponent(String(e)).replace(/%(23\|24\|26\|2B\|5E\|60\|7C)/g,decodeURIComponent).replace(/[\(\)]/g,escape);var r="";for(var i in t)t[i]

Chrome Cache Entry: 302

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2212
Entropy (8bit):	4.903004142658906
Encrypted:	false
SSDEEP:	48:cfLwG4ZWl/nT0zw0uPs2rxJhjelmvmQBPJP:8CsngzwXs2r9hp
MD5:	1ACA7EB0509ACA86124957513B50B712
SHA1:	95D24A0A6F618E2B7A947A06FD98474AB2807CFD
SHA-256:	BB005C7882E8B0922F7C9AF990130F13F611F0BB73511DF9BE911A93A7253C26
SHA-512:	FF28319769E14A569A8581BB5D3A5D86DBE97ED720F995CB170DF482DB9F13AEEE885BEB4A17A09F46AE955E93A5C2DC43910DD2AF374135DA8ECBE208FEDDE5
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/learn/Linkedin.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>..Icons/Desktop/Social/Linkedin</title>. <g id="Header-/-Footer" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="c11n-grid-xxl-(1440px)-Advice-Footer" transform="translate(-385.000000, -840.000000)">. <g id="..Footer/Desktop/NotLoggedIn-Copy-2" transform="translate(0.000000, 813.000000)">. <g id="Social-Icons" transform="translate(162.000000, 24.000000)">. <g id="Group" transform="translate(220.000000, 0.000000)">. <polygon id="Path" points="0 0 30 0 30 30 0 30"></polygon>. <g id="Icon/-Linkedin" transform="translate(3.000000, 3.000000)">. <circle id="Oval-Copy-5" fill="#0065A1" fill-rule="nonzero" cx="12" cy="12" r="12"></circle>.

Chrome Cache Entry: 303

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	337858
Entropy (8bit):	5.873337287894242
Encrypted:	false
SSDEEP:	6144:h28vDKNEwBqwo6tZvGdRysx2P4n9p9scggsEIA:h2bNEwno6G5O5gs+
MD5:	99BE856CD1D05169FADAC09943668262
SHA1:	4AA687D82B2D0B0938E07CC6BB94466BEB79D8D6
SHA-256:	C8AA988DDF6BB5E2C7DBBC8301C8800964694B022C4F92C155072A51E52A46CB
SHA-512:	E96C97CEE5D42594656FEBC8A7836F59871E3C2DA035773E9018B6B0EDF6653BE1F07F8972E84FD34035EB0B926B5FC6FF08AAB4DF249F89E6AC282D935C367B
Malicious:	false
Reputation:	low
Preview:	(function(){pI();kDI();YjI();var nt=function(hB){if(hB===undefined\|\|hB==null){return 0;}var PM=hB["toLowerCase"]()["replace"](/[^a-z]+/gi,'');return PM["length"];};var Yr=function(VM){var ss=['text','search','url','email','tel','number'];VM=VM["toLowerCase"]();if(ss["indexOf"](VM)!==-1)return 0;else if(VM==='password')return 1;else return 2;};var sF=function(Os){var KB=Os%4;if(KB===2)KB=3;var xN=42+KB;var pG;if(xN===42){pG=function ZV(VO,PV){return VO*PV;};}else if(xN===43){pG=function vF(kF,M1){return kF+M1;};}else{pG=function Zx(Lt,ER){return Lt-ER;};}return pG;};var mO=function(){var WB;if(typeof ZP["window"]["XMLHttpRequest"]!=='undefined'){WB=new (ZP["window"]["XMLHttpRequest"])();}else if(typeof ZP["window"]["XDomainRequest"]!=='undefined'){WB=new (ZP["window"]["XDomainRequest"])();WB["onload"]=function(){this["readyState"]=4;if(this["onreadystatechange"] instanceof ZP["Function"])this["onreadystatechange"]();};}else{WB=new (ZP["window"]["ActiveXObject"])('Microsoft.XMLHTTP');}if

Chrome Cache Entry: 304

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	30
Entropy (8bit):	4.081727678869736
Encrypted:	false
SSDEEP:	3:7MQvUAXNovn:I2ZXNovn
MD5:	336B798433FA1A99B69F617092F09208
SHA1:	585095A819C01CE0635C3EFD017B107FA38CCE1A
SHA-256:	BD59BA93D99DFCD05B30A705535AA4FDA28B60311B1C500611B4E06C12BC4756
SHA-512:	4DDB7BE10BC5A76A1B343C0AB64C7FE80B5F3C3E91AF20DFE4AF8C75D9880F79C66CD82059618EDD0D6B78ECEC2F9B9988453DBBFC558E02A21CDED1AB73D904
Malicious:	false
Reputation:	low
Preview:	.function OptanonWrapper() {}.

Chrome Cache Entry: 305

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	64670
Entropy (8bit):	5.445559151761842
Encrypted:	false
SSDEEP:	384:IaMapYA02vw93aR8HdCSzqZBkFL/Rvq/GI2s/6LYlpCglbiwQqyNMqpGiaq3l/v+:DpYAm3rCpBvGhsxpCObicq3JsJLPqjdi
MD5:	67EAFE0CA141B9B52080C52D281966C4
SHA1:	93308B43A6234C01123881A7B02E9B014B082294
SHA-256:	51DFBAD7E1A227D3935016E5C4190E5E46E03DAA4B249E5DED55F54235EFBD7A
SHA-512:	BB006F610699E0912464ADB609509FE9CDCF35088FED00331CB14A2B4A6FFB0684C2763E13EF2FAE6152665C662076CE506118D14B2897851BA039BD9BAB9B79
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcTab",. "html": "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

Chrome Cache Entry: 306

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	121
Entropy (8bit):	4.84474983370803
Encrypted:	false
SSDEEP:	3:zIRBEBc2LGRFf9mnI0KMgBI1VMyRMRE3DVihLE37VA4OMen:0ULk9qhKMgBUnQEzghLK7V7je
MD5:	C29C4E6FEF4A1EEBACB63C6E38026AD6
SHA1:	216679A88B88B8091160CFE4A9C15F08D4A687EC
SHA-256:	5C03E77236A25D364A7B205A5A6B3CB3F38E6A9FF1328DF760C99F53E33B7F71
SHA-512:	37D42AB5788FF26F8C37FA32D4EBDCDC067D4EE2D0B1D14B7D1CD100156324BCAED5C67CDBD07836DF7DC028FE25ECC0F8A40E1AAB6125C6803FF2813972F62A
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function(){$.ajax({method:"GET",url:"/api/institutional/fpid",headers:{"Cache-Control":"no-store"}})});

Chrome Cache Entry: 307

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1662)
Category:	dropped
Size (bytes):	1832
Entropy (8bit):	5.2335079927838475
Encrypted:	false
SSDEEP:	48:d9t/BgNWS/PW6IbBfIwnl5PW8lIBqnGeMi5CM:d9BBgkL6E/nl88lIMl5CM
MD5:	38401A394F33FC8CA441CECE82FE7F2E
SHA1:	3C6C34FC1BCF7A1C03770399D2367C526E1D3486
SHA-256:	BCB4A174B24F63527DAE59E979DF2C07F025A53F4419122600362BD7B58B144F
SHA-512:	91ADA6873FECC66EA9A44CDADE327ED710D635ED665C1CA2E388114D63C58D814E5EE62CF835CBC337BED0CE14D240E2C2BE2A9A9861FE139FAEBC8B983817A8
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.js`.._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.min.js', "document.addEventListener(\"at-request-succeeded\",(function(e){window.onload=function(){if(\"undefined\"!=typeof TLT&&e.detail.responseTokens){console.log(\"TeaLeaf found and response token found\");var n=[];e.detail.responseTokens.forEach((function(e){var t=e[\"experience.name\"],a=e[\"activity.id\"],s=e[\"activity.name\"];t&&a&&s&&!n.includes(a+\":\"+s+\":\"+t)&&(n.push(a+\":\"+s+\":\"+t),console.log(\"Logging experience - \"+a+\": \"+s+\": \"+t),TLT.logCustomEvent(a+\": \"+s,{variant:t}),console.log(\"flushing tealeaf\"),TLT.flushAll())}))}else console.log(\"TeaLeaf not found and/or response token not found\")}})),document.addEventListener(\"at-co

Chrome Cache Entry: 308

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31914)
Category:	downloaded
Size (bytes):	182946
Entropy (8bit):	4.946787547699375
Encrypted:	false
SSDEEP:	1536:+KW000rccJXZ068EKccc/Zh868EEF8/bA+Accc/Zh868EKF8Uccc/Zh868EKActJ:+KW000rnm8e
MD5:	AB1E694AF2E688E019466C9B3D4048E3
SHA1:	CDDB97D6CB2C5C1B50BB72363CE36C27B1D25E19
SHA-256:	81E6178E5F3D8D1EE9D9E356FD3FC97F5DBCF21FCC46EE5C69BCD62F8E800E7F
SHA-512:	B2C5855AAFBE88A31ABB53363968D6CBD109ABB346DD68150FB7300E646880F30BA98A0A88A261FC70CEE44DD3CC4E765083761CE83CEA4555D8229234C055C8
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/vanguard-components/clientlibs/clientlib-site.min.ACSHASHab1e694af2e688e019466c9b3d4048e3.css
Preview:	@import"https://constellation-static.web.vanguard.com/v1/fonts/constellation-fonts.css";html{box-sizing:border-box;-webkit-text-size-adjust:100%},:before,:after{box-sizing:inherit}blockquote,body,button,dd,div,dl,figcaption,figure,h1,h2,h3,h4,h5,h6,header,html,p,section{margin:0;padding:0}button,h1,h2,h3,h4,h5,h6{font-weight:400}img{max-width:100%;height:auto;display:block}a{text-decoration:none}input,button,textarea,select{font-family:inherit}@media (prefers-reduced-motion: reduce){{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}button:-moz-focusring,input:-moz-focusring,select:-moz-focusring{color:transparent;text-shadow:none}button::-moz-focus-inner,input::-moz-focus-inner,select::-moz-focus-inner{border:0}body{font-family:FF Mark,Arial,sans-serif;font-size:1.0625rem;line-height:1.5;color:#040505}body.c11n-modal-dialog-open{overflow:hidden}.c11n-text-crop{display:grid}.c11n-text-crop .c

Chrome Cache Entry: 309

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 529 x 113, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6790
Entropy (8bit):	7.93779296840046
Encrypted:	false
SSDEEP:	192:A09FSNsTLnvwGD0WffaQEQ3SLBsb394482:RwK3vwGgUfaQEGEsB5
MD5:	D2D56D1C42AE17249DCE5982089EEC1A
SHA1:	8D7053CD981FFCC980CC9991CEA4E572E8BF8AE2
SHA-256:	87F9CE362CEDA453E026FC213E4CF38F544C0A9DFD7E38FD3B86552E2F307CE4
SHA-512:	5E9765A2B024CFA4720ACD4E9F467C38DEC85DB18C8081C0C84C0D7B11AD44ACCED216F16AEAC11D523003107B0FD5AAE62E37CF64CD603B62A329238C091955
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......q.....k..a...MIDATx..R.K....m....B...Xd_f.nm.\.R........R.....+.\|..P..l..n5..i.3.Lw.==..W..9..fz..~.~.v{O.7...1.9...../'..W.c.B.i1.n.....\|C..N..?.\|f>Y-..i..WJ.)..d.....MV....Y).M)u...GzLk.Tt...:PJ](....[.w!.......H)u.56.:..i..E..5Q..b..-.Y......M..B....r].;...b.Z...=.!...v.Cl.,.!.V..2.....p../...z.P)5.~.8.v....!.......@...8..d....{.B.i..n..Z.CSJDL.=-.....o./......k..-$....1....E...D..0.n.3n..te.B.).9..Z...@.....\|.....-.c1.u...@...x.C...nO.......4..z.8...../..BH...R..h.@.Y.^...t0..c..}....M.S..........n...-..r..B.L]..3d_.......s.k. #x..........r.......g...A.!.....a.?.ys......s.!...?.][ ..Z.....]z..`^i"s;...B..@.%@..sj..c.0.E.o.7.."...6..5.....`..]...B....(.^cY...e.].A..*tg.H.......g...A.!.)......d.y@<.u."s.Q(".....Y.u.R....B.!M.Y.B...?Fl....lrg(.1..(...=$.\|DU.+..BH.0"bPd..X..Z.C.3X;..s.;C...t.i].....A.!.I..B..H.........("...9...ba.+..BH.......&.2.;xj.{..q..fE-<...q/.!.....l.(..e.@.M.v...V...........U.2.!.4.T..!.!._.oXU-u

Chrome Cache Entry: 310

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7111
Entropy (8bit):	3.8713445774024895
Encrypted:	false
SSDEEP:	192:Sooe5B8isDL3IS/zgYjl50hAVXxFoKh1TQU:CKaVjIS7l2+h7vQU
MD5:	B5A24523440B731B1EADFA5F45D53331
SHA1:	E9998E372F1DDEDC84262DB9BF36EA8619793A9B
SHA-256:	ABD42A64D8B22B84798BA771751CFB31D02C1DF999F95A4E85C7521A7A6633AD
SHA-512:	71236F0DDC683651B284606E43556B42C1A9F00E2EF497B5B9D55929FF5031119562DD6C8640C4B7E937ADBDBDB5FE0909A8FB7D4E3AA6191754CF80D291FE1D
Malicious:	false
Reputation:	low
Preview:	<svg width="111" height="24" viewBox="0 0 111 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M48.5713 5.38133H61.3291L61.3292 13.2913C61.3324 13.5149 61.4081 14.9674 62.836 14.9526L62.8534 14.9501C63.0228 14.9487 64.3801 15.0509 64.5259 13.068L64.537 12.8577L64.5398 12.8601L64.5398 7.37973C64.5242 6.92454 64.4032 5.94588 63.6398 5.79121L63.4983 5.77275V5.61294L69.0062 5.39736L69.0011 15.7022C69.0052 16.1491 69.0916 17.3736 69.9517 17.5337L70.094 17.5499V17.6936L64.5334 17.6904V16.2528L64.3936 16.388C63.9928 16.7562 62.934 17.5867 61.4337 17.6926L61.1139 17.7038C60.5362 17.7002 56.9918 17.5292 56.8435 13.8815L56.8331 13.262L56.8354 7.59521H53.484C53.6105 7.69907 53.7753 7.9243 53.7769 7.9243C55.6549 10.3523 53.828 12.3728 53.8105 12.3936C52.888 13.6958 50.3894 14.2805 49.2646 14.4836L48.7025 14.5724L48.4609 14.6011C47.2512 14.6422 47.5025 15.2147 47.5553 15.3099L47.5635 15.3232C47.7299 15.7135 48.4682 15.7128 48.6621 15.7057L48.7089

Chrome Cache Entry: 311

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	226822
Entropy (8bit):	5.352510792552689
Encrypted:	false
SSDEEP:	3072:AYh8eip3huuf6IidlrvakdtQ47GKlVbmwpc1TL/jONjE0l3tyeCF0dr:Ai8eGRuufsr5zQ47GKLmwpw/O5htmEr
MD5:	D45B9E1AF27F3E2E822F5ADAF58A1EF1
SHA1:	4F72C01956C59FA083436F70F0DA28E217996640
SHA-256:	45542DAF06C6876A91BE16F8E9CE94C5D4CA10398B335861B1107A07E8B1C6D0
SHA-512:	99472D381CD2721B599A1444ACE8976FC381C1C5155CB6570E718E550D11DDE17272767CACF9185900C7F8AC9ECE5A5077DD45B09BCA5071B02DCE465F771523
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 312

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32721)
Category:	downloaded
Size (bytes):	40934
Entropy (8bit):	5.3431141477197865
Encrypted:	false
SSDEEP:	768:IRZIGa9YJc/Fw3mNF/i3r5lzh0Aq9JQxpTQuVDfDRVNKy/IQcKmYXa:IRZIF9IAFw3+F/UFthQ9uphcqDa
MD5:	71B8B95ED934E6FD7B80EE53ECFBE7F2
SHA1:	E0DF20A310F8DE6F41B5BB3002DC2DBA7792CFD7
SHA-256:	310F988E7185C88A97DACC2DC6D43891CFA4841001B675BE0CE175C411957846
SHA-512:	959CC750535238666A07316EAEE4C37CC5A39B2917D77B155FB553902D1F011A47FBAC74290DA1364C6EC51D333D26FC291A3A4B2CD11F3A516DAFC50DF11707
Malicious:	false
Reputation:	low
URL:	https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/EXe3fe2040233f481bae80b3b8574290df-libraryCode_source.min.js
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/EXe3fe2040233f481bae80b3b8574290df-libraryCode_source.js`..function AppMeasurement_Module_Integrate(e){var t=this;t.s=e;var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_m",t.list=[],t.add=function(a,i){var r;i\|\|(i="s_Integrate_"+a),n[i]\|\|(n[i]={}),(r=t[a]=n[i]).a=a,r.e=t,r._c=0,r._d=0,null==r.disable&&(r.disable=0),r.get=function(e,a){var i,o,c=document,s=c.getElementsByTagName("HEAD");if(!r.disable&&(a\|\|(o="s_"+t._in+"_Integrate_"+r.a+"_get_"+r._c),r._c++,r.VAR=o,r.CALLBACK="s_c_il["+t._in+"]."+r.a+".callback",r.delay(),s=s&&0<s.length?s[0]:c.body))try{(i=c.createElement("SCRIPT")).type="text/javascript",i.setAttribute("async","async"),i.src=t.c(r,e),0>e.indexOf("[CALLBACK]")&&(i.onload=i.onreadystatechange=function(){r.callback(n[o])}),s.firstChild?s.insertBefore(i,s.firstChild):s.appendCh

Chrome Cache Entry: 313

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5238
Entropy (8bit):	4.929185759807113
Encrypted:	false
SSDEEP:	48:cIQwq9rVekxi7TAONRwyttvuGYEbxw0BdekhXmrLueM8WduusMKOvjNJzVaY6ocI:swqfbzAWO+9SLNJRmoKXSACyYnv
MD5:	DFAF7B984A36FECE34B0558E4228A5AC
SHA1:	DEAA15053DC802CF26865498F5677317B7BB0298
SHA-256:	84CC32BB8A3F07EF24C036711F742B3E263C8E93CE11025CE5EB52C2157B8EA1
SHA-512:	F02C22CF124ECAB83562ADA0B9FD81671D29798A4EEC587E3B2369AB0DE2230D606E3F2A21B2CA067BED3C1562A5B2D14AA92BA0BEA00DFF036558C2C7B513A8
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/digital-advisor/icons/instagram.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 64 (101010) - https://sketch.com -->. <title>FCD2BE14-336F-4170-A81E-6D3F68958F86@1.5x</title>. <desc>Created with sketchtool.</desc>. <defs>. <ellipse id="path-1" cx="12" cy="12.5" rx="12" ry="12.5"></ellipse>. <linearGradient x1="65.4957399%" y1="-10.5072748%" x2="94.5529859%" y2="111.45127%" id="linearGradient-3">. <stop stop-color="#4E60D3" offset="0%"></stop>. <stop stop-color="#913BAF" offset="14.2763214%"></stop>. <stop stop-color="#D52D88" offset="76.145798%"></stop>. <stop stop-color="#F26D4F" offset="100%"></stop>. </linearGradient>. <radialGradient cx="30.2743283%" cy="100%" fx="30.2743283%" fy="100%" r="120.314536%" gradientTransform="translate(0.302743,1.000000),scale(0.721630,1.000

Chrome Cache Entry: 314

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1290)
Category:	downloaded
Size (bytes):	1472
Entropy (8bit):	5.344864525038891
Encrypted:	false
SSDEEP:	24:hBDct/BaBon1uromuGR5OHyEudw80erxgxOxizytuSrK3dsNr:It/B2aRaQIKk
MD5:	944AEACBEDF8C5B4D7F40F3B2B26DC98
SHA1:	5277F4E062AEEF4FDAB175823034ACF5BD2AF080
SHA-256:	7772BE8598414F93C211DBBFCFD3C254B958384FA5D912B29313A17E142B6BFF
SHA-512:	A0CD347AB4100DE63D173D56F4C1B3E8C8B630F160DA6E381400E67530639CFCFA7D07AB3DA0EAECE57CE8D61242A8782E3FB18FB7BC8FE7535AE1CBFB84EAFA
Malicious:	false
Reputation:	low
URL:	https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCc976cd0ba5ef495295a72d563106d95e-source.min.js
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCc976cd0ba5ef495295a72d563106d95e-source.js`.._satellite.__registerScript('https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/RCc976cd0ba5ef495295a72d563106d95e-source.min.js', "<script async type=\"text/javascript\">\n function zync_call() {\n var z = document.createElement(\"script\");\n var zmpID=\"vanguard-direct-inc\";\n var OrderID=\"{OrderID}\";\n var OrderAmount=\"{OrderAmount}\";\n var cache_buster=Date.now();\n var page_referrer=encodeURIComponent(document.referrer);\n var PageUrl=encodeURIComponent(window.top.location.href).replace(/[!'()~]/g, escape).replace(/\\*/g, \"%2A\");\n\n var z_src = \"https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=dad0a533c0538b82e1f8ae74ecf9d3a3&k=vanguard-direct-inc-pixel-7103&zmpID=\"+

Chrome Cache Entry: 315

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 394, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10420
Entropy (8bit):	6.748222034959822
Encrypted:	false
SSDEEP:	192:9hkDMLCxwwenELbLOoMRd+4798LNoQie5gTzXUwVkyAnys22X0QUGA2FKEoUH0ti:96xpqd+47SylQgTLUOs22X0QUr2FLoyp
MD5:	0769FD2E721451A25C39EB90512D3BB3
SHA1:	FAEF53962308CE774447C9E9D5A9BB0396F419D9
SHA-256:	AE0DDA849F84C8627DDA947551A6F9CE3AEF18F03148D11B51039A82A49837DF
SHA-512:	A97E3A81A453554468E7F01407D157B320E3FC126389371A7520D166DA3C61DB6D763DEDC483460422B9C7FDF0DDC28DE775BD8353A50D2B8FE1900DAA9811BC
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/content/dam/inst/retirement-plans/learn/banners/ib2_hero_banner.png
Preview:	.PNG........IHDR...............\.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". dam:Physicalheightininches="2.7362518310546875". dam:Physicalwidthininches="13.33401870727539". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2024-09-27T13:36:30.601-04:00". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Physicalwidthindpi="144". dam:Physicalheightindpi="144". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="87b7dbd875d3cd76659c937be47e980c9d0e68e2". dam:size="10420". tiff:ImageLen

Chrome Cache Entry: 316

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5238
Entropy (8bit):	4.929185759807113
Encrypted:	false
SSDEEP:	48:cIQwq9rVekxi7TAONRwyttvuGYEbxw0BdekhXmrLueM8WduusMKOvjNJzVaY6ocI:swqfbzAWO+9SLNJRmoKXSACyYnv
MD5:	DFAF7B984A36FECE34B0558E4228A5AC
SHA1:	DEAA15053DC802CF26865498F5677317B7BB0298
SHA-256:	84CC32BB8A3F07EF24C036711F742B3E263C8E93CE11025CE5EB52C2157B8EA1
SHA-512:	F02C22CF124ECAB83562ADA0B9FD81671D29798A4EEC587E3B2369AB0DE2230D606E3F2A21B2CA067BED3C1562A5B2D14AA92BA0BEA00DFF036558C2C7B513A8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 64 (101010) - https://sketch.com -->. <title>FCD2BE14-336F-4170-A81E-6D3F68958F86@1.5x</title>. <desc>Created with sketchtool.</desc>. <defs>. <ellipse id="path-1" cx="12" cy="12.5" rx="12" ry="12.5"></ellipse>. <linearGradient x1="65.4957399%" y1="-10.5072748%" x2="94.5529859%" y2="111.45127%" id="linearGradient-3">. <stop stop-color="#4E60D3" offset="0%"></stop>. <stop stop-color="#913BAF" offset="14.2763214%"></stop>. <stop stop-color="#D52D88" offset="76.145798%"></stop>. <stop stop-color="#F26D4F" offset="100%"></stop>. </linearGradient>. <radialGradient cx="30.2743283%" cy="100%" fx="30.2743283%" fy="100%" r="120.314536%" gradientTransform="translate(0.302743,1.000000),scale(0.721630,1.000

Chrome Cache Entry: 317

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 394, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10420
Entropy (8bit):	6.748222034959822
Encrypted:	false
SSDEEP:	192:9hkDMLCxwwenELbLOoMRd+4798LNoQie5gTzXUwVkyAnys22X0QUGA2FKEoUH0ti:96xpqd+47SylQgTLUOs22X0QUr2FLoyp
MD5:	0769FD2E721451A25C39EB90512D3BB3
SHA1:	FAEF53962308CE774447C9E9D5A9BB0396F419D9
SHA-256:	AE0DDA849F84C8627DDA947551A6F9CE3AEF18F03148D11B51039A82A49837DF
SHA-512:	A97E3A81A453554468E7F01407D157B320E3FC126389371A7520D166DA3C61DB6D763DEDC483460422B9C7FDF0DDC28DE775BD8353A50D2B8FE1900DAA9811BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............\.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". dam:Physicalheightininches="2.7362518310546875". dam:Physicalwidthininches="13.33401870727539". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2024-09-27T13:36:30.601-04:00". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Physicalwidthindpi="144". dam:Physicalheightindpi="144". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="87b7dbd875d3cd76659c937be47e980c9d0e68e2". dam:size="10420". tiff:ImageLen

Chrome Cache Entry: 318

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47786), with no line terminators
Category:	downloaded
Size (bytes):	47786
Entropy (8bit):	5.367298060745276
Encrypted:	false
SSDEEP:	768:89nLH32kS9n29LCLtIaz9V4b2MA6AABl9n8fXuaUqXcUyNff3whvP3GnhXQ6KT0g:cjMyaPWA1ABQ+mlhDrq85nmKG8YX8D
MD5:	081FFDACF8AEBE0D7A00757A3B9C08ED
SHA1:	1CF3DCB274BEC0D20AB7B31BB0B4A82E93E96FC8
SHA-256:	0A3EFFE89DC665EF330959DA4834241796383DA186C7CD13FD33A6F8029CD2FB
SHA-512:	BF187B9BEF4C71272D80B6EB836942B5A803F29F4D2A4C581F5D707141CDAA753D33F051C31430CB3B44B2FFA3443F2D6CE8467BA541A45C574E390AA7CA1C5A
Malicious:	false
Reputation:	low
URL:	https://mc3-static-assets.web.vanguard.com/adobe-data-layer/adobe-data-layer.min.js
Preview:	(()=>{"use strict";var e={235:e=>{e.exports=function(e){var t=new Array(10);function n(t){return 9-e.charAt(t)}return null===e\|\|isNaN(e)\|\|""===e?"":(e=function(e,t){for(var n=e.toString();n.length<t;)n="0"+n;return n}(e,10),t[0]=n(8),t[1]=n(9),t[2]=n(4),t[3]=n(3),t[4]=n(2),t[5]=n(7),t[6]=n(6),t[7]=n(5),t[8]=n(0),t[9]=n(1),t.join(""))}},150:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0});t.default=class{constructor(e,t,n){this.eventData={event:e},t&&(this.eventData[t]=n)}getData(){return this.eventData}}},502:function(e,t,n){var r=this&&this.__awaiter\|\|function(e,t,n,r){return new(n\|\|(n=Promise))((function(o,s){function i(e){try{c(r.next(e))}catch(e){s(e)}}function a(e){try{c(r.throw(e))}catch(e){s(e)}}function c(e){var t;e.done?o(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(i,a)}c((r=r.apply(e,t\|\|[])).next())}))};Object.defineProperty(t,"__esModule",{value:!0});const o=n(150),s=n(413),i=n(371),a=n(625),c=n(603),l=n(12),u=n(322),d=n(668),f=n(367);t.defa

Chrome Cache Entry: 319

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	165396
Entropy (8bit):	6.637510844603968
Encrypted:	false
SSDEEP:	3072:L5u8omQS3oLv/dJtXS+XxLlwMnPPRzWLNNgVLkzk+tDi6DiEFC8lw6:Zc/dJttWLNKVLkzk+tW6uEY866
MD5:	12D6724A254D3BE629FC6B2871AE5A6A
SHA1:	D3A93C9ED090BE9366B9513E5515E8E19FF48459
SHA-256:	EAA561F9F8EF5B69BD39E15E332DC3700DECACEBF48E08B0640AD3A5D8711F65
SHA-512:	25AB0D1ECA4A13F35439807AF142F830D9DC9B62C613F06FC2115E9BCF1AE57B9E7349DE881111F63ACEF49CE3A8BEFF0EB7E2735C082FC070203AE2FFE37CA6
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/fonts/MARKPRO.otf
Preview:	OTTO.......@CFF ............DSIG.YL1..l....DGPOSH........y.GSUB......F...&BOS/2f.qU...0...`cmap9..+........head..........6hhea...f.......$hmtxT...........maxp.'P....(....name.......,....post.C......... ........kH.._.<..........C.......C.x...#.<.........................c.....<.................'..P..'.....m........./......./...h....................P...........FSI........,.\...... ..........x... .............................y.x.....a.~.o.....1...1.Q...e.........F...............L.B.K.U.Y.B...4...U...O.G.O...o...U.....................`.........$.z.....y.>...D.......g.y.%...5...~.(.l.......N...).....y.0.....y.I...B.y...(.....r.$...:.W.<.....".y...........Q...............g.......g...g.a.g._.5...g.............".......z.........g.......g.>.....X...5...........-...#.......z.V.y.....V.Q.............x...x...x...x.k.............o.....O...~.....F.....0.......0.......A...2...................l.&.2.X.O.....Z.2...2...2.`.<...$...$...$...$...$...$.......y.D...D...D...D...5...5...5...5.....y.).....y...y

Chrome Cache Entry: 320

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1567
Entropy (8bit):	5.019906626071019
Encrypted:	false
SSDEEP:	24:2d2S8eLwDmxFeaxM2p4Wm99nyA++0W8bGzTyDgRlICxKzt1X64VfKVIu+Mm+MchS:cfLwa4Z9Rl/tzTBLBitfh+/m/chW1R
MD5:	AE2C94820DA309D73300E3F8699E459F
SHA1:	A585CDCD719ADA667A37D41F32780CA1B1C7337F
SHA-256:	C92E0D2D36F6F6AE11CDCDE00B7F02AE02B48C217419ADFC5C4F24EAA90EA996
SHA-512:	D748974EA1073D3211C7B47F43C4CEB99AFB103A549C34D745BAF50D3AECE8908B5221FCFFDA8F99168CC4F52D5F40146B3BD5C5CA274438651E8A29DD1672B6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>..Icons/Desktop/Social/Vanguard</title>. <g id="Header-/-Footer" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="c11n-grid-xxl-(1440px)-Advice-Footer" transform="translate(-481.000000, -840.000000)">. <g id="..Footer/Desktop/NotLoggedIn-Copy-2" transform="translate(0.000000, 813.000000)">. <g id="Social-Icons" transform="translate(162.000000, 24.000000)">. <g id="Group" transform="translate(316.000000, 0.000000)">. <polygon id="Path" points="0 0 30 0 30 30 0 30"></polygon>. <g id="Icon/-VG" transform="translate(3.000000, 3.000000)" fill-rule="nonzero">. <circle id="Oval-Copy-3" fill="#971B1F" cx="12" cy="12" r="12"></circle>.

Chrome Cache Entry: 321

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	717
Entropy (8bit):	5.065222072207143
Encrypted:	false
SSDEEP:	12:UeB5NFhCVpCiqWNh6y6u7V15Kw4pmM33yBDWg3ZR3Fj:3vhCiiqeEu7VffI3yBNpj
MD5:	141C5B976AB322C879B7EAC70C69C93F
SHA1:	88143D42AF8D03709464ADC3A5E6A3AB2A1C94B2
SHA-256:	0F511B83706E30D2328E7B198E9BDCF4A0A2819B5E7294DA205F43E54163B126
SHA-512:	E87D7B330FD066ACDB9C9FB0201AE4E35447AC99C6ED6C47B5EFCE57D697336BA5DCDF590EE7798190583C22D735C2160B291BC751E214DFC430BB07229E33E1
Malicious:	false
Reputation:	low
URL:	https://constellation-static.web.vanguard.com/v0/fonts/thorndale.css
Preview:	/..This CSS resource incorporates links to font software which is the valuable copyrighted..property of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,..redistribute, convert, modify or reverse engineer this font software. Please contact Monotype..Imaging with any questions regarding Web Fonts: http://www.fonts.com../../* ================================== Thorndale Font Family ================================== /..../ Thorndale Regular */..@font-face {.. font-family: "Thorndale";.. src: url("75e50095-66d5-48bc-a397-eeac6b7ec81b.woff2") format("woff2"),.. url("f90c18f6-4aa1-4d6c-9c3d-2e8133dffe1f.woff") format("woff");.. font-weight: 400;.. font-style: normal;..}..

Chrome Cache Entry: 322

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	downloaded
Size (bytes):	1271
Entropy (8bit):	5.184130085081704
Encrypted:	false
SSDEEP:	24:2Q+Bvk+oX/IP2iJyep9Mf9MWIMyMZ2iJRcM2n3k2RRnDbLMWhTtMXy99MJVOfMsX:P/1op9M1MTMyMIjM23pbD/MUtMXy99M0
MD5:	0A6AFF292F5CC42142779CDE92054524
SHA1:	7A4B1CB962793F47ED138A8DF2D5E4D49E73335A
SHA-256:	C250924012FDC9EA9516B30650895201CD167DBD49C9D148924F30881ABFA393
SHA-512:	A9934DC7FFF0FA59069A815C3CF795148E9A36759017037DEF66E6A228D650139FD364A004DA7A8F0706E4B28E7AA1F63A8B5F7A3BD0270369EAE9AF82D64403
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.ACSHASH0a6aff292f5cc42142779cde92054524.js
Preview:	(function(){window.CQ=window.CQ\|\|{};window.CQ.CoreComponents=window.CQ.CoreComponents\|\|{};window.CQ.CoreComponents.container=window.CQ.CoreComponents.container\|\|{};window.CQ.CoreComponents.container.utils={};window.CQ.CoreComponents.container.utils={removeUrlHash:function(){history.replaceState(void 0,void 0," ")},updateUrlHash:function(a,b,c){a&&a._elements&&a._elements[b]&&a._elements[b][c]&&a._elements[b][c].id&&history.replaceState(void 0,void 0,"#"+a._elements[b][c].id)},getDeepLinkItemIdx:function(a,.b,c){if(window.location.hash){var d=window.location.hash.substring(1);if(d&&document.getElementById(d)&&a&&a._config&&a._config.element&&a._elements[b]&&a._config.element.querySelector("[id\x3d'"+d+"']"))for(var e=0;e<a._elements[b].length;e++){var g=a._elements[b][e],f=!1;a._elements[c]&&(f=(f=a._elements[c][e])&&f.querySelector("[id\x3d'"+d+"']"));if(g.id===d\|\|f)return e}}return-1},getDeepLinkItem:function(a,b,c){c=window.CQ.CoreComponents.container.utils.getDeepLinkItemIdx(a,b,c);

Chrome Cache Entry: 323

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50567)
Category:	downloaded
Size (bytes):	277872
Entropy (8bit):	5.250911699647991
Encrypted:	false
SSDEEP:	6144:ZYbfSkqp/rJwaIJvKJzrOUmKsJhPhmvgtAcIroXYePspuHSQw:ZYbfSkqp/rJwaIJvKJzrOUmKs7PMvgCv
MD5:	084A65A81480FD3D228171753ACF6963
SHA1:	128033F50D80E05014623FD1674F750D3DC7A957
SHA-256:	5BBFF9F8D99D32499B8C50032C8F037A317407A2189F90E7B1D16BE930AD202F
SHA-512:	8C5101570D13E08529F2E92674734F7C6D27333827CC9DD7F97BACE13511E045D0DA8489CA306D7631D7369A444DE67DC3C5BCE7BAC8EEEBF1E026B5B43F3128
Malicious:	false
Reputation:	low
URL:	https://n4v.web.vanguard.com/secure-site-components.js
Preview:	(function(global, factory) {. typeof exports === "object" && typeof module !== "undefined" ? factory(exports) : typeof define === "function" && define.amd ? define(["exports"], factory) : (global = typeof globalThis !== "undefined" ? globalThis : global \|\| self, factory(global["n4v-components"] = {}));.})(this, function(exports2) {. "use strict";var __defProp = Object.defineProperty;.var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;.var __publicField = (obj, key, value) => {. __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);. return value;.};.. var n = { 922: (n2) => {. n2.exports = function(n3) {. var t2 = [];. return t2.toString = function() {. return this.map(function(t3) {. var e2 = "", o2 = void 0 !== t3[5];. return t3[4] && (e2 += "@supports (".concat(t3[4], ") {")), t3[2] && (e2 += "@media ".concat(t3[2], "

Chrome Cache Entry: 324

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16353), with no line terminators
Category:	downloaded
Size (bytes):	16353
Entropy (8bit):	5.622733578374105
Encrypted:	false
SSDEEP:	384:NU1mNJXsZufLE7SYvJZ9hllJF/IlDJN/e+SJa/woHrL0/0jPHaTs/ppHylsupA:+1mNJXsZufLE7SYvJZ9hllJF/IlDJN/T
MD5:	91AEB36E599BA868323B9497DE5C519A
SHA1:	831F86D98B1473B1A007F0461711C9FFF92A2186
SHA-256:	23DC2DB69C223828E3B4C0D3282070245CBD1F1F587B027E91DE97C985EAD50E
SHA-512:	6E30079A1B4C2EB7F50A04F25545BA5A607965D56EE787599FE47A3885819F827B25EFB54605431D6B87E1E9F733AA11979E4A1EFC26C827932AD74053AE9464
Malicious:	false
Reputation:	low
URL:	https://12332392.fls.doubleclick.net/activityi;dc_pre=CMfB46DMu4kDFUDLOwIdfBsViw;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CMfB46DMu4kDFUDLOwIdfBsViw;u1=86591681061654023263392632422581144886;u6=https%3A%2F%2Flogon.vanguard.com%2Flogon%3Fsite%3Diig;u7=us%3Aen%3Aretail%3Aweb%3Alogon%3Alogon;u8=https%3A%2F%2Flogon.vanguard.com%2Flogon;cat=vgent0;num=8507864499876;ord=1;src=12332392;gdpr=%24%7BGDPR%7D;type=allla0;gdpr_consent=%24%7BGDPR_CONSENT_755%7D"/><img src="https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDEyMzMyMzkyCmFkdmVydGlzZXJfZG9tYWluOiAiaHR0cHM6Ly92YW5ndWFyZC5jb20iCnhmYV9hdHRyaWJ1dGlvbl9pbnRlcmFjdGlvbl90eXBlOiBDT05WRVJTSU9OCmRlYnVnX2tleTogMTA2ODE0NTc2Nzc3NDk3NjU1MzEKY3RjX2NvbnZlcnNpb25fYnVja2V0OiAwCmFyY2hldHlwZV9pZDogMTIKYXJjaGV0eXBlX2lkOiAxMwphcmNoZXR5cGVfaWQ6IDE0CmFyY2hldHlwZV9pZDogMTUKYXJjaGV0eXBlX2lkOiAxNgphcmNoZ

Chrome Cache Entry: 325

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmMrzZEMcmLRRIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 326

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71384
Entropy (8bit):	5.117269914494581
Encrypted:	false
SSDEEP:	768:k+++R+D+G+E+d+r+GeG3ItFfWlxWms4kPWM8XXexc1odvTplFy2ZL1hwMiVf0SAR:t2s48IkFnd2Gv5
MD5:	9A6ED5E100A3DE281A0CCDC6B72774C8
SHA1:	46B984AFBCF90381C39CBB0D36B84905A036D339
SHA-256:	C1897F39096D6AE9FC64C22F11C572C3F2AD5C685C1332972FA825CE98C2F8D1
SHA-512:	00CC4AC7F0CEE411795710EC1DF13F173ABAF22890DEE70736A9AF947A7E850D8D27F95EDCE560EF8F555B23C81579636B99425DEF1360733AC4157DF02F9042
Malicious:	false
Reputation:	low
URL:	https://ccc.vgcontent.info/vg-vgn/latest/css/vgn.min.css?appPrefix=LGN
Preview:	/! vg-vgn - v7.6.58 - Wed Feb 14 2024-19:47:56 /@import url(https://constellation-static.web.vanguard.com/v0/fonts/ff-mark.css);.nonCntAlign .vgn-section .vgn-container,.nonCntAlign .vgn-section .vgn-isCenterAligned,.nonCntAlign .vgn-section .vgn-navBar .vgn-navigation .vgn-highLevelNav .vgn-silo .vgn-siloPanel .vgn-actionBar,.nonCntAlign .vgn-section .vgn-navBar .vgn-navigation .vgn-highLevelNav .vgn-silo .vgn-siloPanel .vgn-actionBar ul,.nonCntAlign .vgn-section .vgn-navBar .vgn-navigation .vgn-highLevelNav .vgn-silo .vgn-siloPanel .vgn-subSiloSection,.nonCntAlign .vgn-section .vgn-navBar .vgn-navigation .vgn-highLevelNav .vgn-silo .vgn-siloPanel .vgn-topRow,.nonCntAlign .vgn-section .vgn-sitePreferenceScreen,.vuiLeftAlignPage .vgn-section .vgn-container,.vuiLeftAlignPage .vgn-section .vgn-isCenterAligned,.vuiLeftAlignPage .vgn-section .vgn-navBar .vgn-navigation .vgn-highLevelNav .vgn-silo .vgn-siloPanel .vgn-actionBar,.vuiLeftAlignPage .vgn-section .vgn-navBar .vgn-navigation .vg

Chrome Cache Entry: 327

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (719)
Category:	downloaded
Size (bytes):	1943
Entropy (8bit):	5.4657035035140416
Encrypted:	false
SSDEEP:	24:/O5zJIXvuPQa8VyIaoK8d7mQMJHvIOtmRY/Itt7Ikfr55uIO/3nIRWU9w0XO0o2k:2KgJTS7m9Zm79g/IwUrVgzs9p4J
MD5:	40AB5B2E4737FAE97C872DE25C10338C
SHA1:	22639869AA9433608A09E2AB382CFC1E25CAE765
SHA-256:	5519FFEB013C4C261140B08E3E3415DCC517B95EE3B90DD5F2BF25A770FDF30B
SHA-512:	5A032B95B1C3FAAC0274BBBE170C7312CE6D30147F7A57A5ACBDD8977E0D0E4C689255A9571E2DAB3FFFE980B51F411780DED9721B239FB1BCAE6A8368FFA06E
Malicious:	false
Reputation:	low
URL:	https://mdl-medallia-digital.vanguard.com/pkg/1.0.0/web/external_libs/wdcusprem/2940/onsite/medallia-digital-embed.js
Preview:	.(function(){if(!window.KAMPYLE_EMBED){var onPremEmbedRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/medallia-digital-embed\.js$/;var genericPathRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/generic\d{13}\.js$/;window.KAMPYLE_EMBED={kampyleInit:function(){var t=document.createElement('script');t.type='text/javascript';t.async=true;t.src=KAMPYLE_EMBED.getGenericLocation();t.charset='UTF-8';document.body.appendChild(t);},kampyleLoadLogger:function(){},kampyleEventHandler:function(elem,eventType,handler){if(elem.addEventListener){elem.addEventListener(eventType,handler,false);}.else if(elem.attachEvent){elem.attachEvent('on'+eventType,handler);}},isSupported:function(){var trident=window.KAMPYLE_EMBED.getUserAgent().match(/Trident\/(\d+)/);var msie=navigator.userAgent.match(/MSIE (\d+)/);return!(trident\|\|msie);},getUserAgent:function(){return navigator.userAgent;},getGenericLocation:function(){var genericLocation=location.protocol+'//'+'resources.digital-cloud-prem.medallia.com/wdcusprem/2940/onsite/generic17

Chrome Cache Entry: 328

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	165096
Entropy (8bit):	6.692070567896907
Encrypted:	false
SSDEEP:	3072:7S81OtEnkXVN7we7eDipB4rmvUniHhZ3Wv4vm0dGNQCkFM02qHpAkQlwy:MmyNj7eDip9HhZ3Wv4vmw9rFX2qHmkQR
MD5:	E415D23018A80118157C3D4B8F61BD40
SHA1:	810DFAC8111049B91631FEDBB8C97243A9400326
SHA-256:	6EE29EAED3E7871EC26A9015448275754ABD192C89D0DD72CA1454451EEE9D58
SHA-512:	F972FBBA25A77345BE9B8B5D03F8FDB576635395D24DAF4238073D841CEC0270D4EEBCA8F38302483C8A8CF9774C9E877AB46725A40065F8D0BA4C4B1A01622F
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/fonts/MARKPROHEAVY.otf
Preview:	OTTO.......@CFF ...]...D...xDSIG.@.;..k....DGPOSd@.......~.GSUB......E`..&BOS/2htu....0...`cmap9..+...0....head.A.z.......6hhea...........$hmtxk.1.........maxp.'P....(....namexOGW...,....post.u.....$... ........{..._.<..........C.n.....Cwd.......................................................'..P..'.....r. ......./......./...h....................P...........FSI........,.\...... ..........x... .....n.............D.T.m.....L.x.p...7...G.....F.S.F.3...@.....5.D...Y.D.L.+...y.T....v.7.}...."...7...2.Q.2...G...7.D.L.5.D.............{.[.g.a.....U.....E...............E.....L...T...........-.......N.E.%...d.E.C...K.L.......r.........L...v.....L.....+.....3...e...........:...n...:...:.V.:.W.!...:...n...N.....Q.n...n...n...n...:...n...:.5.n...7...!...g.r.......\|.........M.q.L.....q.3...g.....D.T.x...x...x.p.x.#.......[.a.....S...5.X.F.......Y.....V...k.........,...".......g...U...........".g.5.X.E..."...".[.".{.!...............................E.................L...L.U.L...L...U.L.....N.E.N.E

Chrome Cache Entry: 329

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3166
Entropy (8bit):	5.266761971170596
Encrypted:	false
SSDEEP:	48:3vhuREn2/dyCiWkX3/GYjCPQ8t9NuHavPZNcJq5Aq:3vh01yf/GGd8t9jZyJCAq
MD5:	1D7663621F17F435BD2FB323C2DB9004
SHA1:	4DDC3A4D20BAF781C4C2F9B6000A7698BD5BBFEE
SHA-256:	219420ECB0359058E53545070EA21A09E355488D6994FA209DFCC145277AC95C
SHA-512:	DEA714A238E562A65ECFC4CC961078BCEDDB997E055D4DB436849A9C49514C116F1813C9748DBF452186B43F082343005B764148EB7EBF956D962ACE29E2BCDD
Malicious:	false
Reputation:	low
URL:	https://constellation-static.web.vanguard.com/v1/fonts/ff-mark.css
Preview:	/..This CSS resource incorporates links to font software which is the valuable copyrighted..property of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,..redistribute, convert, modify or reverse engineer this font software. Please contact Monotype..Imaging with any questions regarding Web Fonts: http://www.fonts.com../../* ================================== FF Mark Font Family ================================== /.. {.. font-variant-numeric: tabular-nums;..}..../* FF Mark Regular /..@font-face {.. font-family: "FF Mark";.. src: url("31b07b3f-1c2f-4320-90e5-bc52e0ed0b65.woff2") format("woff2"),.. url("3eff48e2-1bfb-4565-82a4-2190f0e36a2c.woff") format("woff");.. font-weight: 400;.. font-style: normal;..}..../ FF Mark Regular Italic */..@font-face {.. font-family: "FF Mark";.. src: url("b617d235-a910-41de-9a77-871b1946a3f5.woff2") format("woff2"),.. url("ab57d3dd-752d-4852-8704-dfb2f20a1522.woff") format("woff");.. font-weight: 400;..

Chrome Cache Entry: 330

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32721)
Category:	dropped
Size (bytes):	40934
Entropy (8bit):	5.3431141477197865
Encrypted:	false
SSDEEP:	768:IRZIGa9YJc/Fw3mNF/i3r5lzh0Aq9JQxpTQuVDfDRVNKy/IQcKmYXa:IRZIF9IAFw3+F/UFthQ9uphcqDa
MD5:	71B8B95ED934E6FD7B80EE53ECFBE7F2
SHA1:	E0DF20A310F8DE6F41B5BB3002DC2DBA7792CFD7
SHA-256:	310F988E7185C88A97DACC2DC6D43891CFA4841001B675BE0CE175C411957846
SHA-512:	959CC750535238666A07316EAEE4C37CC5A39B2917D77B155FB553902D1F011A47FBAC74290DA1364C6EC51D333D26FC291A3A4B2CD11F3A516DAFC50DF11707
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp.etm.assets.vgdynamic.info/files/retail_global_prd/379f26abac75/9d4ec58961b2/3f1bc29aa445/EXe3fe2040233f481bae80b3b8574290df-libraryCode_source.js`..function AppMeasurement_Module_Integrate(e){var t=this;t.s=e;var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_m",t.list=[],t.add=function(a,i){var r;i\|\|(i="s_Integrate_"+a),n[i]\|\|(n[i]={}),(r=t[a]=n[i]).a=a,r.e=t,r._c=0,r._d=0,null==r.disable&&(r.disable=0),r.get=function(e,a){var i,o,c=document,s=c.getElementsByTagName("HEAD");if(!r.disable&&(a\|\|(o="s_"+t._in+"_Integrate_"+r.a+"_get_"+r._c),r._c++,r.VAR=o,r.CALLBACK="s_c_il["+t._in+"]."+r.a+".callback",r.delay(),s=s&&0<s.length?s[0]:c.body))try{(i=c.createElement("SCRIPT")).type="text/javascript",i.setAttribute("async","async"),i.src=t.c(r,e),0>e.indexOf("[CALLBACK]")&&(i.onload=i.onreadystatechange=function(){r.callback(n[o])}),s.firstChild?s.insertBefore(i,s.firstChild):s.appendCh

Chrome Cache Entry: 331

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	382
Entropy (8bit):	5.214669229508714
Encrypted:	false
SSDEEP:	6:jwkMKngnAMHnG+6XuB8B6CpRGegGdef1XMYA/B3nAMHnG+6XuB8B6CpRGegGdefK:jvgnpHJBnqgodedct/BnpHJBnqgodeI9
MD5:	1B1E92D067C0335F1B8ABB3EA14D37A1
SHA1:	CC5BCC1712E22ED3A812B64C8ED9C6FA9E5E3AB1
SHA-256:	6346B99F9B62DE119F3B1BF84B636F9103901AF030857B695E9D09CA462462FB
SHA-512:	96B38E8DAF8A61C3983F469BE225F2D871FED62099480B8FF9B6DEA3244D2BB317767205BDB26100D3981BB2E3D1DE562676347A7B3B87BD18E2BDFE6FC08B6F
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.js`.._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.min.js', "_satellite.track(\"fireTriggerView\");");

Chrome Cache Entry: 332

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3577)
Category:	downloaded
Size (bytes):	3578
Entropy (8bit):	5.3124682195669575
Encrypted:	false
SSDEEP:	96:yvLXLTT54nhpL5CN6jnYEH/i3psNXDXzxIlN9rQr:SCTAWqZsNzANWr
MD5:	B51BAA8E9E038597C2CBF9049C3270C6
SHA1:	10D9AB6B0C3FDB3FBA54FA31AD200D8423366D1B
SHA-256:	41DD5E421FE221A7D2921D6FA2B36E8B01A9F2C054AAEF5FAD866FE896C1D1E0
SHA-512:	1B95EA9F6CF0FD698CE43C99F76CB0E138A2EF7FA5D53407BC4D1AE8E4E89DF713E829F3C48ABD319F0770AFA09D16F75E1A8628705BB40FDA54E9E6B9B56002
Malicious:	false
Reputation:	low
URL:	https://corp.etm.assets.vgdynamic.info/files/vendor_libs_prd/linkedin/insight.min.js
Preview:	!function(){"use strict";function n(){return(new Date).getTime()}function c(n,e){var i=n.cookie.match(new RegExp("(?:^\|; )"+encodeURIComponent(e).replace(/([\.$?\|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;])"));return i?decodeURIComponent(i[1]):""}function l(n,e,i,o){var r=o.days_until_expiration,t=void 0===r?1:r,a=o.path,d=void 0===a?"/":a,_=o.domain,c=void 0===_?null:_,l=function(n){var e=(new Date).getTime()+n,i=new Date;return i.setTime(e),i.toUTCString()}(864e5*t),v=encodeURIComponent(e)+"="+encodeURIComponent(i);v=v+";expires="+l,c&&(v=v+";domain="+c),v=v+";path="+d,n.cookie=v}function e(n,e){(new n.Image).src="https://px.ads.linkedin.com/collect?"+e}function i(n,e){(new n.Image).src="https://px.ads.linkedin.com/insight_tag_errors.gif?"+e}function r(n){try{return n.self!==n.top}catch(e){return!0}}function o(n,e){void 0===e&&(e=r);var i=n.document;if(e(n)&&i.referrer){var o=i.createElement("a");return o.href=i.referrer,o}return n.location}function t(n){var e={},i=[];if(n._bizo_data_par

Chrome Cache Entry: 333

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64417)
Category:	downloaded
Size (bytes):	207738
Entropy (8bit):	5.267135190898744
Encrypted:	false
SSDEEP:	3072:Ukp11qjEmtD+KoTIZppFlJFwcHC+kArqB42p2tRW:Uk9mMcZppAcHyr
MD5:	19C0971C237B914197972E901DB2F496
SHA1:	52AE03A8A738AA954228499072FE355FFF47DABA
SHA-256:	A67D8DFCAC484B02506396563758DC3AFA563B859448419CFEC37800942A5F6B
SHA-512:	7DBD102AF6E0A85F9AF1F5006A568927D0696C7877DC7B712A5B78442D184E01F3DDEAA0CCE437DD040F45A651BD14ABF4300259E50EEF8D54CBB3D324E284FA
Malicious:	false
Reputation:	low
URL:	https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASH19c0971c237b914197972e901db2f496.js
Preview:	!function(e){var t={};function i(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)i.d(n,r,function(t){return e[t]}.bind(null,r));return n},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=48)}([function(e,t,i){./*! @license DOMPurify 2.4.4 \| (c) Cure53 and other contributors \| Rel

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-01T17:52:05.744937+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.109.210.53	443	192.168.2.16	49730	TCP
2024-11-01T17:52:43.522039+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.109.210.53	443	192.168.2.16	49893	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 17:51:55.490916014 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 17:51:55.793648958 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 17:51:56.397617102 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 17:51:57.399519920 CET	49704	80	192.168.2.16	192.175.213.88
Nov 1, 2024 17:51:57.399966955 CET	49705	80	192.168.2.16	192.175.213.88
Nov 1, 2024 17:51:57.404521942 CET	80	49704	192.175.213.88	192.168.2.16
Nov 1, 2024 17:51:57.404737949 CET	49704	80	192.168.2.16	192.175.213.88
Nov 1, 2024 17:51:57.404743910 CET	80	49705	192.175.213.88	192.168.2.16
Nov 1, 2024 17:51:57.404813051 CET	49705	80	192.168.2.16	192.175.213.88
Nov 1, 2024 17:51:57.404969931 CET	49704	80	192.168.2.16	192.175.213.88
Nov 1, 2024 17:51:57.409787893 CET	80	49704	192.175.213.88	192.168.2.16
Nov 1, 2024 17:51:57.606610060 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 17:51:58.074419022 CET	80	49704	192.175.213.88	192.168.2.16
Nov 1, 2024 17:51:58.118784904 CET	49704	80	192.168.2.16	192.175.213.88
Nov 1, 2024 17:51:58.144748926 CET	49704	80	192.168.2.16	192.175.213.88
Nov 1, 2024 17:51:58.149939060 CET	80	49704	192.175.213.88	192.168.2.16
Nov 1, 2024 17:51:58.191879988 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:58.192001104 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:58.192082882 CET	49710	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:58.192151070 CET	443	49710	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:58.192193031 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:58.192210913 CET	49710	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:58.192307949 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:58.192327976 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:58.192430973 CET	49710	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:58.192447901 CET	443	49710	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:58.309540033 CET	80	49704	192.175.213.88	192.168.2.16
Nov 1, 2024 17:51:58.309662104 CET	80	49704	192.175.213.88	192.168.2.16
Nov 1, 2024 17:51:58.309673071 CET	80	49704	192.175.213.88	192.168.2.16
Nov 1, 2024 17:51:58.309714079 CET	49704	80	192.168.2.16	192.175.213.88
Nov 1, 2024 17:51:58.418281078 CET	49711	80	192.168.2.16	192.175.162.88
Nov 1, 2024 17:51:58.423302889 CET	80	49711	192.175.162.88	192.168.2.16
Nov 1, 2024 17:51:58.423376083 CET	49711	80	192.168.2.16	192.175.162.88
Nov 1, 2024 17:51:58.423556089 CET	49711	80	192.168.2.16	192.175.162.88
Nov 1, 2024 17:51:58.428375959 CET	80	49711	192.175.162.88	192.168.2.16
Nov 1, 2024 17:51:59.028048038 CET	49690	80	192.168.2.16	192.229.211.108
Nov 1, 2024 17:51:59.041083097 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.041147947 CET	443	49710	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.041501045 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.041515112 CET	49710	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.041532993 CET	443	49710	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.041557074 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.042588949 CET	443	49710	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.042642117 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.042654037 CET	49710	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.042722940 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.043678045 CET	49710	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.043797016 CET	443	49710	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.043855906 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.043947935 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.044054985 CET	49710	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.044065952 CET	443	49710	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.085614920 CET	49710	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.085624933 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.085647106 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.133626938 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.320128918 CET	80	49711	192.175.162.88	192.168.2.16
Nov 1, 2024 17:51:59.320189953 CET	80	49711	192.175.162.88	192.168.2.16
Nov 1, 2024 17:51:59.320199966 CET	80	49711	192.175.162.88	192.168.2.16
Nov 1, 2024 17:51:59.320250988 CET	49711	80	192.168.2.16	192.175.162.88
Nov 1, 2024 17:51:59.320341110 CET	80	49711	192.175.162.88	192.168.2.16
Nov 1, 2024 17:51:59.320389986 CET	49711	80	192.168.2.16	192.175.162.88
Nov 1, 2024 17:51:59.597006083 CET	443	49710	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.597093105 CET	443	49710	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.597148895 CET	49710	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.597598076 CET	49710	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.597623110 CET	443	49710	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.600306034 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.643353939 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.957942009 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.958058119 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.958256960 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.958395004 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.958395004 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.958445072 CET	443	49709	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.958517075 CET	49709	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.960705042 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.960756063 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:51:59.960836887 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.961071968 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:51:59.961086988 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:00.008733988 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 17:52:00.805748940 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:00.806348085 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:00.806385040 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:00.806757927 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:00.808598995 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:00.808670998 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:00.808907032 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:00.855346918 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.178556919 CET	49714	443	192.168.2.16	142.250.185.100
Nov 1, 2024 17:52:01.178628922 CET	443	49714	142.250.185.100	192.168.2.16
Nov 1, 2024 17:52:01.178710938 CET	49714	443	192.168.2.16	142.250.185.100
Nov 1, 2024 17:52:01.178913116 CET	49714	443	192.168.2.16	142.250.185.100
Nov 1, 2024 17:52:01.178936958 CET	443	49714	142.250.185.100	192.168.2.16
Nov 1, 2024 17:52:01.383749008 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.383795023 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.383815050 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.383897066 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.383944988 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.383970976 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.384007931 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.405062914 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.405102968 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.405175924 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.405745983 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.405839920 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.405916929 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.406408072 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.406440973 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.406508923 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.407409906 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.407426119 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.408143997 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.408165932 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.408236027 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.409173012 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.409209013 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.409291029 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.409307003 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.409660101 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.409667015 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.409734964 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.410057068 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.410084009 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.410712004 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.410721064 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.424906969 CET	49720	443	192.168.2.16	18.66.112.28
Nov 1, 2024 17:52:01.424921036 CET	443	49720	18.66.112.28	192.168.2.16
Nov 1, 2024 17:52:01.425000906 CET	49720	443	192.168.2.16	18.66.112.28
Nov 1, 2024 17:52:01.425256014 CET	49720	443	192.168.2.16	18.66.112.28
Nov 1, 2024 17:52:01.425266027 CET	443	49720	18.66.112.28	192.168.2.16
Nov 1, 2024 17:52:01.425486088 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:01.425529957 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:01.425621033 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:01.425776958 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:01.425785065 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:01.501087904 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.501158953 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.501218081 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.501261950 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.501307964 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.501351118 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.618969917 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.618998051 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.619083881 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.619132996 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.619205952 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.626152992 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.626265049 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.626264095 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.626324892 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.626760960 CET	49713	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.626790047 CET	443	49713	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.627176046 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.627232075 CET	443	49722	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.627331018 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.627871037 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:01.627887011 CET	443	49722	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:01.696747065 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:01.696818113 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:01.696922064 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:01.698472977 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:01.698493004 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.023864985 CET	443	49714	142.250.185.100	192.168.2.16
Nov 1, 2024 17:52:02.024218082 CET	49714	443	192.168.2.16	142.250.185.100
Nov 1, 2024 17:52:02.024264097 CET	443	49714	142.250.185.100	192.168.2.16
Nov 1, 2024 17:52:02.025299072 CET	443	49714	142.250.185.100	192.168.2.16
Nov 1, 2024 17:52:02.025382042 CET	49714	443	192.168.2.16	142.250.185.100
Nov 1, 2024 17:52:02.026326895 CET	49714	443	192.168.2.16	142.250.185.100
Nov 1, 2024 17:52:02.026398897 CET	443	49714	142.250.185.100	192.168.2.16
Nov 1, 2024 17:52:02.072690964 CET	49714	443	192.168.2.16	142.250.185.100
Nov 1, 2024 17:52:02.072738886 CET	443	49714	142.250.185.100	192.168.2.16
Nov 1, 2024 17:52:02.120676041 CET	49714	443	192.168.2.16	142.250.185.100
Nov 1, 2024 17:52:02.241838932 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.242101908 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.242129087 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.243206978 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.243280888 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.243556976 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.243617058 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.243731976 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.243740082 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.250328064 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.250567913 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.250602961 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.250911951 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.250933886 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.251107931 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.251195908 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.251286983 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.251355886 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.251370907 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.251568079 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.251893044 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.251956940 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.251981974 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.254395008 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.254575968 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.254591942 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.255240917 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.255409002 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.255417109 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.255585909 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.255656004 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.255899906 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.255959034 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.255991936 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.256380081 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.256443977 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.256675959 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.256745100 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.256752968 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.275001049 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.275213957 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.275238991 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.276700020 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.276762962 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.277604103 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.277741909 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.277746916 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.279454947 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.286000013 CET	443	49720	18.66.112.28	192.168.2.16
Nov 1, 2024 17:52:02.286215067 CET	49720	443	192.168.2.16	18.66.112.28
Nov 1, 2024 17:52:02.286245108 CET	443	49720	18.66.112.28	192.168.2.16
Nov 1, 2024 17:52:02.287677050 CET	443	49720	18.66.112.28	192.168.2.16
Nov 1, 2024 17:52:02.287735939 CET	49720	443	192.168.2.16	18.66.112.28
Nov 1, 2024 17:52:02.288574934 CET	49720	443	192.168.2.16	18.66.112.28
Nov 1, 2024 17:52:02.288655043 CET	443	49720	18.66.112.28	192.168.2.16
Nov 1, 2024 17:52:02.288713932 CET	49720	443	192.168.2.16	18.66.112.28
Nov 1, 2024 17:52:02.288719893 CET	443	49720	18.66.112.28	192.168.2.16
Nov 1, 2024 17:52:02.295332909 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.295609951 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.295641899 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.295650959 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.295651913 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.303328037 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.303339958 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.311638117 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.311661005 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.311672926 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.311705112 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.327747107 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.327754974 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.343761921 CET	49720	443	192.168.2.16	18.66.112.28
Nov 1, 2024 17:52:02.359642029 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.359643936 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.375761032 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.472840071 CET	443	49722	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.473107100 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.473134041 CET	443	49722	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.474140882 CET	443	49722	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.474220037 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.474488974 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.474535942 CET	443	49722	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.474637985 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.474644899 CET	443	49722	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.518620968 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.526197910 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.537215948 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.537322044 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:02.541769981 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:02.541788101 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.542066097 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.543320894 CET	443	49720	18.66.112.28	192.168.2.16
Nov 1, 2024 17:52:02.543416977 CET	443	49720	18.66.112.28	192.168.2.16
Nov 1, 2024 17:52:02.543462038 CET	49720	443	192.168.2.16	18.66.112.28
Nov 1, 2024 17:52:02.544239044 CET	49720	443	192.168.2.16	18.66.112.28
Nov 1, 2024 17:52:02.544258118 CET	443	49720	18.66.112.28	192.168.2.16
Nov 1, 2024 17:52:02.566629887 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.586262941 CET	49724	443	192.168.2.16	13.224.245.51
Nov 1, 2024 17:52:02.586340904 CET	443	49724	13.224.245.51	192.168.2.16
Nov 1, 2024 17:52:02.586421967 CET	49724	443	192.168.2.16	13.224.245.51
Nov 1, 2024 17:52:02.586703062 CET	49724	443	192.168.2.16	13.224.245.51
Nov 1, 2024 17:52:02.586720943 CET	443	49724	13.224.245.51	192.168.2.16
Nov 1, 2024 17:52:02.599137068 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:02.639059067 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.639100075 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.639126062 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.639166117 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.639180899 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.639198065 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.639333963 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.643671036 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.643687010 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.643728971 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.643749952 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.643760920 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.643774986 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.643785954 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.643790960 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.643800974 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.643819094 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.643846035 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.741792917 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.741806984 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.741857052 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.741871119 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.741877079 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.741888046 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.741904020 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.741911888 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.741925001 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.741967916 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.744566917 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.744575024 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.744635105 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.744656086 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.744674921 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.744740963 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.745803118 CET	49718	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.745824099 CET	443	49718	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.746192932 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.746272087 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.746680021 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.747694016 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.747716904 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.757687092 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.757699966 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.757740974 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.757761002 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.757795095 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.757810116 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.757833004 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.760915041 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.760935068 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.760970116 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.760993004 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.761007071 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.761051893 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.761056900 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.761101007 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.802905083 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.802974939 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.803004026 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.803021908 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.803049088 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.803064108 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.804320097 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.804331064 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.804389000 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.804450035 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.804488897 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.811638117 CET	49716	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.811661959 CET	443	49716	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.812031031 CET	49726	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.812071085 CET	443	49726	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.812341928 CET	49726	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.815921068 CET	49726	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.815932035 CET	443	49726	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.842029095 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.842113018 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.842183113 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:02.845168114 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:02.845168114 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:02.845192909 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.845206976 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.877433062 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.877458096 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.877537966 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.877593040 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.877628088 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.878226995 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.878254890 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.878299952 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.878326893 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.878346920 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.878411055 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.927299023 CET	49727	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:02.927362919 CET	443	49727	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.927447081 CET	49727	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:02.927764893 CET	49727	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:02.927779913 CET	443	49727	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:02.989398956 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.989491940 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.989532948 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.995320082 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.995347023 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.995438099 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.995467901 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:02.995522022 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:02.999516010 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.999530077 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.999551058 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.999557972 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.999588966 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.999610901 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.999625921 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.999669075 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:02.999681950 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:02.999716043 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.002068043 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.002135992 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.002145052 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.011332035 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.011346102 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.011373043 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.011389971 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.011398077 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.011415005 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.011439085 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.011457920 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.011462927 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.011518002 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.023109913 CET	443	49722	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.023190975 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.023207903 CET	443	49722	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.023267031 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.024022102 CET	49722	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.024041891 CET	443	49722	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.024425030 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.024470091 CET	443	49728	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.024550915 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.024954081 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.024967909 CET	443	49728	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.038305998 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.038389921 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.038413048 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.038572073 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.038626909 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.038635969 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.038676977 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.042655945 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.042748928 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.106614113 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.106631041 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.106705904 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.106743097 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.106756926 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.106825113 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.111298084 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.111361980 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.112289906 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.112317085 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.112361908 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.112387896 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.112497091 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.114849091 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.114857912 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.114901066 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.114932060 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.228183031 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.228208065 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.228291988 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.228327990 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.228410959 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.229484081 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.229510069 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.229569912 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.229598045 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.229743958 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.230444908 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.230469942 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.230520010 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.230557919 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.230576992 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.230608940 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.245529890 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.245554924 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.245635986 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.245672941 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.245728016 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.344926119 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.344950914 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.345079899 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.345122099 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.345572948 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.345824957 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.345855951 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.345900059 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.345932961 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.345952034 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.346245050 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.346443892 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.346471071 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.346513987 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.346541882 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.346553087 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.346630096 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.362520933 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.362555981 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.362674952 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.362692118 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.362729073 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.390322924 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.390357018 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.390429020 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.390453100 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.390497923 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.405858040 CET	443	49724	13.224.245.51	192.168.2.16
Nov 1, 2024 17:52:03.406604052 CET	49724	443	192.168.2.16	13.224.245.51
Nov 1, 2024 17:52:03.406670094 CET	443	49724	13.224.245.51	192.168.2.16
Nov 1, 2024 17:52:03.408174038 CET	443	49724	13.224.245.51	192.168.2.16
Nov 1, 2024 17:52:03.408266068 CET	49724	443	192.168.2.16	13.224.245.51
Nov 1, 2024 17:52:03.408544064 CET	49724	443	192.168.2.16	13.224.245.51
Nov 1, 2024 17:52:03.408622980 CET	443	49724	13.224.245.51	192.168.2.16
Nov 1, 2024 17:52:03.408694983 CET	49724	443	192.168.2.16	13.224.245.51
Nov 1, 2024 17:52:03.408710957 CET	443	49724	13.224.245.51	192.168.2.16
Nov 1, 2024 17:52:03.457644939 CET	49724	443	192.168.2.16	13.224.245.51
Nov 1, 2024 17:52:03.459336996 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.459358931 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.459429979 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.459495068 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.459541082 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.461704016 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.461729050 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.461772919 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.461797953 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.461813927 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.461874008 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.464682102 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.464709997 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.464745045 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.464771032 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.464783907 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.464816093 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.470578909 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.470597982 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.470654964 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.470663071 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.470700979 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.507440090 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.507472038 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.507582903 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.507626057 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.507678986 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.575983047 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.576009035 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.576116085 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.576150894 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.576271057 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.577130079 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.577161074 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.577223063 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.577265978 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.577286005 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.577642918 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.587804079 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.587832928 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.587933064 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.587960005 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.588012934 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.592581987 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.593163967 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.593190908 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.593573093 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.593873978 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.593938112 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.594041109 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.624571085 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.624607086 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.624699116 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.624742031 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.624793053 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.639331102 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.649508953 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 17:52:03.668816090 CET	443	49726	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.671016932 CET	49726	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.671029091 CET	443	49726	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.671354055 CET	443	49726	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.672633886 CET	49726	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.672692060 CET	443	49726	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.672772884 CET	49726	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.692995071 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.693015099 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.693109989 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.693131924 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.693406105 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.693428040 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.693475008 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.693491936 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.693502903 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.693506956 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.693849087 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.702059031 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.702081919 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.702166080 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.702191114 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.702239990 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.702673912 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.702691078 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.702743053 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.702755928 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.703309059 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.715373039 CET	443	49726	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.737056971 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.737073898 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.737132072 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.737149954 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.737485886 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.740878105 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.740952015 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.740976095 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.741611004 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.741669893 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.741677046 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.787951946 CET	443	49727	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:03.788060904 CET	49727	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:03.788635969 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.789288998 CET	49727	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:03.789295912 CET	443	49727	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:03.790196896 CET	443	49727	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:03.791542053 CET	49727	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:03.816430092 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.816454887 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.816534042 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.816579103 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.817059040 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.819721937 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.819756985 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.819814920 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.819829941 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.819885015 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.822360992 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.822386026 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.822432041 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.822438002 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.822465897 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.822488070 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.832681894 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.832776070 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.832812071 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.839329958 CET	443	49727	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:03.853811026 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.853833914 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.853949070 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.853981018 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.854480982 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.858098984 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.858177900 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.858211040 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.859230042 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.859277964 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.859304905 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.859339952 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.859569073 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.860435009 CET	443	49728	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.860661983 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.860680103 CET	443	49728	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.861572027 CET	443	49728	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.861635923 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.861902952 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.861958027 CET	443	49728	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.862030029 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.907335997 CET	443	49728	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.916631937 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.916646957 CET	443	49728	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.928502083 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.928550005 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.928605080 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.928607941 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.928647041 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.928654909 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.928920031 CET	49715	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.928941965 CET	443	49715	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.929650068 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.929680109 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.929800987 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.930463076 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.930474043 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.931138039 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.931164980 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.931382895 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.931421041 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.931638002 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.937841892 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.937868118 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.937993050 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.938007116 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:03.938054085 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:03.964634895 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 17:52:03.964699984 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.975296021 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.975400925 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.976866961 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.976886988 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.976962090 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.976985931 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:03.977082014 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:03.994400978 CET	443	49724	13.224.245.51	192.168.2.16
Nov 1, 2024 17:52:03.994544029 CET	443	49724	13.224.245.51	192.168.2.16
Nov 1, 2024 17:52:03.994626999 CET	49724	443	192.168.2.16	13.224.245.51
Nov 1, 2024 17:52:03.995268106 CET	49724	443	192.168.2.16	13.224.245.51
Nov 1, 2024 17:52:03.995291948 CET	443	49724	13.224.245.51	192.168.2.16
Nov 1, 2024 17:52:04.282802105 CET	443	49727	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:04.282876968 CET	443	49727	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:04.282944918 CET	49727	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:04.283061028 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.283073902 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.283128977 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.283144951 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.283174992 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.283194065 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.283210039 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.283986092 CET	49727	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:04.284012079 CET	443	49727	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:04.284028053 CET	49727	443	192.168.2.16	184.28.90.27
Nov 1, 2024 17:52:04.284034014 CET	443	49727	184.28.90.27	192.168.2.16
Nov 1, 2024 17:52:04.285180092 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.285201073 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.285262108 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.285269976 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.285304070 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.286160946 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.286187887 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.286233902 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.286252022 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.286279917 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.286294937 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.288671017 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.288701057 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.288738966 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.288753986 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.288775921 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.288794041 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.289609909 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.289675951 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.289685011 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.290312052 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.290383101 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.290390968 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.292716026 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.292737961 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.292789936 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.292797089 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.292824984 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.292840958 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.293628931 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.293639898 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.293663025 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.293684006 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.293715000 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.293730021 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.293752909 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.293765068 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.293770075 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.293804884 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.296354055 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.296356916 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.296374083 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.296437979 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.297734022 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.297750950 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.297777891 CET	443	49726	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.297804117 CET	443	49728	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.297822952 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.297838926 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.297859907 CET	443	49726	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.297888994 CET	49726	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.297923088 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.297926903 CET	49726	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.299545050 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.299568892 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.299666882 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.299666882 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.299675941 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.299698114 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.299710035 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.299737930 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.299756050 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.299779892 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.299782038 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.299803019 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.299837112 CET	49726	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.299851894 CET	443	49726	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.300410032 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.300458908 CET	443	49728	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.300503969 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.300554037 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.300569057 CET	49728	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.300605059 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.300610065 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.300657988 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.308075905 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.308099985 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.308171034 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.308182955 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.308221102 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.308734894 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.308763027 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.308808088 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.308826923 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.308842897 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.308864117 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.327949047 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.327972889 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.328026056 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.328042030 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.328064919 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.328075886 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.391561031 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.391588926 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.391725063 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.391752005 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.392401934 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.405649900 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.405684948 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.405812979 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.405841112 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.405883074 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.421506882 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.421528101 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.421653032 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.421684027 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.424747944 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.426172972 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.426203012 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.426274061 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.426302910 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.426317930 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.426470041 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.426964998 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.426984072 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.427032948 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.427040100 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.427078009 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.427094936 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.444112062 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.444150925 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.444256067 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.444274902 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.444317102 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.486382961 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.486419916 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.486464977 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.486485004 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.486526966 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.486543894 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.509691000 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.509717941 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.509799957 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.509826899 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.510023117 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.524161100 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.524187088 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.524267912 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.524310112 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.524496078 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.537585020 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.537611961 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.537672997 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.537727118 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.537744045 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.537796974 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.543596983 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.543623924 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.543665886 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.543693066 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.543716908 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.543735027 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.545044899 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.545070887 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.545159101 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.545176983 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.545219898 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.561260939 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.561363935 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.561382055 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.565068007 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.565109968 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.565156937 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.565165997 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.565203905 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.567656994 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 17:52:04.603444099 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.603540897 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.607481956 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:04.607544899 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:04.607680082 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:04.608918905 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:04.608952999 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:04.625437021 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.625500917 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.625531912 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.625547886 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.625603914 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.625628948 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.625940084 CET	49717	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.625966072 CET	443	49717	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.643029928 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.643054962 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.643132925 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.643177986 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.643270016 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.660845995 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.660886049 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.660938978 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.660972118 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.660994053 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.661012888 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.662224054 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.662244081 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.662321091 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.662342072 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.662378073 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.682074070 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.682107925 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.682162046 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.682190895 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.682205915 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.682607889 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.761671066 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.761697054 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.761778116 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.761811972 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.761826992 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.761848927 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.776940107 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.776973963 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.777038097 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.777064085 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.777086020 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.777115107 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.778453112 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.778482914 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.778522015 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.778544903 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.778559923 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.778614998 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.779666901 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.779685020 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.779726028 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.779743910 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.779771090 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.779802084 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.781793118 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.782012939 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.782025099 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.782913923 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.782969952 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.783246040 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.783303976 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.783386946 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.795521021 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.795597076 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.799798012 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.799829006 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.799866915 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.799880981 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.799909115 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.822622061 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 17:52:04.831331968 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.838606119 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.838613033 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.854604959 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.880805969 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.880830050 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.880892038 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.880912066 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.880933046 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.880953074 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.885606050 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.895231962 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.895256042 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.895296097 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.895332098 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.895358086 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.895374060 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.896318913 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.896336079 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.896378040 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.896397114 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:04.896414995 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.896437883 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:04.903657913 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.903673887 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.903726101 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.903739929 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.903784037 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.912609100 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.912671089 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.912672043 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.912688971 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.912730932 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.912744999 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.913247108 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.913306952 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.917203903 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.917260885 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:04.917268038 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:04.963639975 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.012468100 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.012496948 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.012562990 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.012599945 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.012698889 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.013689041 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.013705015 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.013767958 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.013787031 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.013823032 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.022159100 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.022186995 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.022234917 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.022284031 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.022308111 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.022319078 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.029999971 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.030031919 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.030093908 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.030118942 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.030157089 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.030452967 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.030543089 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.030550957 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.030567884 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.030616999 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.030776978 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.030776978 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.030797005 CET	443	49719	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.030853033 CET	49719	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.034168005 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.034213066 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.034284115 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.034991980 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.035002947 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.106856108 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.106920958 CET	443	49732	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:05.106992960 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.107203007 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.107215881 CET	443	49732	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:05.129621983 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.129653931 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.129713058 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.129743099 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.129765034 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.129796028 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.130758047 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.130772114 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.130829096 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.130841970 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.130889893 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.132220030 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.132236004 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.132275105 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.132287025 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.132309914 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.132328987 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.140619993 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.140645981 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.140706062 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.140733004 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.140801907 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.237427950 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.237457037 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.237574100 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.237612009 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.237662077 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.247180939 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.247205973 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.247287035 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.247318029 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.247385025 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.248615980 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.248631954 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.248734951 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.248744965 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.248784065 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.259310961 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.259407997 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.259433985 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.259475946 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.259695053 CET	49725	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.259720087 CET	443	49725	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.262234926 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.262285948 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:05.262368917 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.262553930 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.262569904 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:05.364226103 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.364258051 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.364370108 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.364398956 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.364454031 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.365420103 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.365437984 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.365506887 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.365520954 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.365575075 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.366455078 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.366470098 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.366544962 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.366563082 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.366611004 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.416122913 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.416270018 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.419146061 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.419164896 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.419501066 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.424684048 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.424696922 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.424806118 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.424827099 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.424943924 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.471656084 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.477319956 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.481731892 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.481765985 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.481812954 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.481841087 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.481854916 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.481894970 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.482736111 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.482754946 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.482791901 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.482799053 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.482841015 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.482858896 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.483160019 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.483207941 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.483213902 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.483237982 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.483256102 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.483288050 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.483825922 CET	49721	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.483845949 CET	443	49721	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.508398056 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.508420944 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.508492947 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.508692026 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:05.508702993 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:05.523330927 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.536036015 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:05.536084890 CET	443	49735	54.247.166.172	192.168.2.16
Nov 1, 2024 17:52:05.536142111 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:05.536369085 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:05.536380053 CET	443	49735	54.247.166.172	192.168.2.16
Nov 1, 2024 17:52:05.541554928 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.541568041 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.541603088 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.541621923 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.541647911 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.541649103 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.541681051 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.582622051 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.632086039 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.632159948 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.658818007 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.658826113 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.658859968 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.658909082 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.658909082 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.658925056 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.658968925 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.744065046 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.744090080 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.744097948 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.744111061 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.744117975 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.744124889 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.744160891 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.744218111 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.744236946 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.744286060 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.744477034 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.744541883 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.744550943 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.744817019 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.744859934 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.755901098 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.755922079 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.755932093 CET	49730	443	192.168.2.16	20.109.210.53
Nov 1, 2024 17:52:05.755939960 CET	443	49730	20.109.210.53	192.168.2.16
Nov 1, 2024 17:52:05.772656918 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 17:52:05.866137981 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.866152048 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.866197109 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.866240978 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.866256952 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.866292000 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.866292000 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.908358097 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.908626080 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.908647060 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.908993959 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.909290075 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.909356117 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.909466028 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.947612047 CET	443	49732	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:05.947931051 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.947972059 CET	443	49732	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:05.948996067 CET	443	49732	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:05.949069977 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.953330040 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.953399897 CET	443	49732	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:05.953484058 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.955331087 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.983138084 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.983163118 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.983334064 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.983352900 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:05.983396053 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:05.994638920 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:05.994668961 CET	443	49732	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.009748936 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.009768009 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.009876966 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.009893894 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.009987116 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.042648077 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.103866100 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.104130030 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.104166031 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.105149031 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.105205059 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.105629921 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.105700970 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.105792046 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.126636982 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.126666069 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.126744986 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.126765013 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.126780033 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.126919031 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.151329041 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.151634932 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.151660919 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.198673964 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.198841095 CET	443	49732	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.199042082 CET	443	49732	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.199115992 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.201179028 CET	49732	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.201200008 CET	443	49732	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.202786922 CET	49736	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.202836990 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.203300953 CET	49736	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.203346968 CET	49737	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.203388929 CET	443	49737	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.203496933 CET	49737	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.203562975 CET	49736	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.203581095 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.203768969 CET	49737	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.203779936 CET	443	49737	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.243582010 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.243606091 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.243768930 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.243792057 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.243880033 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.313318014 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.313390970 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.313431025 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.313541889 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.313541889 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.313575029 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.314325094 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.314588070 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.314663887 CET	443	49731	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.314764977 CET	49731	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.342076063 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.342098951 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.342216969 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.342242002 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.343194962 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.344198942 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.344433069 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.344492912 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.345539093 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.345669985 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.345909119 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.345987082 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.346052885 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.374478102 CET	443	49735	54.247.166.172	192.168.2.16
Nov 1, 2024 17:52:06.374823093 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:06.374852896 CET	443	49735	54.247.166.172	192.168.2.16
Nov 1, 2024 17:52:06.375982046 CET	443	49735	54.247.166.172	192.168.2.16
Nov 1, 2024 17:52:06.376059055 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:06.377125025 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:06.377190113 CET	443	49735	54.247.166.172	192.168.2.16
Nov 1, 2024 17:52:06.377259016 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:06.390672922 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.390702963 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.422661066 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:06.422729969 CET	443	49735	54.247.166.172	192.168.2.16
Nov 1, 2024 17:52:06.438632965 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.458905935 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.458930016 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.459002972 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.459022045 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.459074974 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.470652103 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:06.570106983 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.570128918 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.570261955 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.570281029 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.570888996 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.595129013 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.595145941 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.595242977 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.595261097 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.595930099 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.621290922 CET	443	49735	54.247.166.172	192.168.2.16
Nov 1, 2024 17:52:06.621371031 CET	443	49735	54.247.166.172	192.168.2.16
Nov 1, 2024 17:52:06.622286081 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:06.622390032 CET	49735	443	192.168.2.16	54.247.166.172
Nov 1, 2024 17:52:06.622412920 CET	443	49735	54.247.166.172	192.168.2.16
Nov 1, 2024 17:52:06.632806063 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:06.632855892 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:06.633457899 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:06.633680105 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:06.633691072 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:06.646841049 CET	49739	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:06.646877050 CET	443	49739	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:06.647028923 CET	49739	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:06.647226095 CET	49739	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:06.647242069 CET	443	49739	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:06.649512053 CET	49740	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:06.649552107 CET	443	49740	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:06.654301882 CET	49740	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:06.654484034 CET	49740	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:06.654508114 CET	443	49740	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:06.658627987 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:06.658663988 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:06.662288904 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:06.662484884 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:06.662508011 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:06.708931923 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.708976984 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.708986044 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.709003925 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.709009886 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.709012985 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.709103107 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.709131956 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.709841013 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.711209059 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.711219072 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.711252928 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.711286068 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.711328030 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.711335897 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.711359978 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.711775064 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.711801052 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.711822033 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.711879015 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.711889029 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.711954117 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.791299105 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:06.791380882 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:06.791486025 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:06.791740894 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:06.791771889 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:06.809187889 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.809274912 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.809958935 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.809989929 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.810091972 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.810242891 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.810266018 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.810369015 CET	49733	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.810372114 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.810415030 CET	443	49733	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.812663078 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.812702894 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.812937975 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.812974930 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.813076973 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.813260078 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.813262939 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.813272953 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.813400984 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:06.813412905 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:06.826826096 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.826852083 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.826929092 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.826956034 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.827270985 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.921756983 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.921782017 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.921813965 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.921895981 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.921947002 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.922027111 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.922615051 CET	49729	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:06.922632933 CET	443	49729	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:06.926457882 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:06.926554918 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:06.926651001 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:06.926884890 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:06.926908016 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:06.944423914 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.944453955 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.944545031 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.944571972 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.944966078 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.945501089 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.945530891 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.945558071 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:06.945566893 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:06.945600033 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.051239967 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.051537037 CET	49736	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.051598072 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.051968098 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.052261114 CET	49736	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.052347898 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.052397966 CET	49736	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.060915947 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.060940027 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.061016083 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.061037064 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.062272072 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.063779116 CET	443	49737	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.064799070 CET	49737	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.064821959 CET	443	49737	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.065186024 CET	443	49737	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.065473080 CET	49737	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.065531015 CET	443	49737	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.065591097 CET	49737	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.092645884 CET	49736	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.092686892 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.111330032 CET	443	49737	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.184315920 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.184336901 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.184361935 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.184427023 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.184463024 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.184475899 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.220896959 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.220940113 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.221041918 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.221060038 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.267611027 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.301587105 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.301595926 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.301642895 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.301673889 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.301676989 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.301687002 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.301697016 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.301727057 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.305087090 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.305109978 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.305160046 CET	49736	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.305201054 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.305217028 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.305267096 CET	49736	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.306030035 CET	49736	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.306042910 CET	443	49736	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.320986986 CET	443	49737	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.321073055 CET	443	49737	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.321140051 CET	49737	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.321706057 CET	49737	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.321722984 CET	443	49737	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.346379042 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.346398115 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.346477032 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.346503973 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.350277901 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.418881893 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.418901920 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.418973923 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.418998957 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.419480085 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.463639975 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.463660002 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.463731050 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.463754892 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.464083910 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.475234985 CET	443	49739	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:07.475557089 CET	49739	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:07.475583076 CET	443	49739	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:07.476615906 CET	443	49739	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:07.476692915 CET	49739	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:07.477869034 CET	49739	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:07.477953911 CET	443	49739	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:07.478050947 CET	49739	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:07.478056908 CET	443	49739	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:07.480261087 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:07.480458975 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:07.480468035 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:07.481478930 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:07.481551886 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:07.481904030 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:07.481996059 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:07.482052088 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:07.489737034 CET	443	49740	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:07.489926100 CET	49740	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:07.489947081 CET	443	49740	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:07.490963936 CET	443	49740	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:07.491044998 CET	49740	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:07.491962910 CET	49740	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:07.492024899 CET	443	49740	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:07.492105007 CET	49740	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:07.492115974 CET	443	49740	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:07.504978895 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.505191088 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.505202055 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.508846998 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.508936882 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.509777069 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.509921074 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.509927034 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.509978056 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.523339987 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:07.523657084 CET	49739	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:07.523655891 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:07.523682117 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:07.536309004 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.536335945 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.536427975 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.536453962 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.536640882 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.539638996 CET	49740	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:07.554615974 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.554634094 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.570715904 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:07.602618933 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.615247965 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.615581036 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.615628004 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.616636992 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.616719961 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.617055893 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.617122889 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.617300034 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.617310047 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.646049976 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.646071911 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.646150112 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.646188021 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.646249056 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.653567076 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.653583050 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.653645039 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.653666019 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.653683901 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.653707981 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.666644096 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.669512033 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.669760942 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.669789076 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.670787096 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.670850992 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.671153069 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.671210051 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.671291113 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.676388979 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.676585913 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.676599026 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.677608967 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.677666903 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.678129911 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.678129911 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.678142071 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.678186893 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.711337090 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.713835001 CET	443	49739	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:07.713916063 CET	443	49739	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:07.713977098 CET	49739	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:07.714342117 CET	49739	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:07.714366913 CET	443	49739	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:07.714715958 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.714737892 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.728929043 CET	49746	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:07.728954077 CET	443	49746	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:07.729018927 CET	49746	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:07.729242086 CET	49746	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:07.729257107 CET	443	49746	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:07.730632067 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.730647087 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.744834900 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:07.744918108 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:07.744991064 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:07.745352030 CET	49738	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:07.745371103 CET	443	49738	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:07.754223108 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.754307032 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.754329920 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.754381895 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.754407883 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.754409075 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.754544020 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.754561901 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.754782915 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.754937887 CET	49741	443	192.168.2.16	54.229.135.186
Nov 1, 2024 17:52:07.754954100 CET	443	49741	54.229.135.186	192.168.2.16
Nov 1, 2024 17:52:07.755081892 CET	443	49740	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:07.755150080 CET	443	49740	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:07.755234003 CET	49740	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:07.756081104 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.756181955 CET	49740	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:07.756189108 CET	443	49740	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:07.757396936 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.757407904 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.758554935 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.758619070 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.762952089 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.763011932 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.763041019 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.763086081 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.763118029 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.763144970 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.763278008 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.764170885 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.764250994 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.764383078 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.764398098 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.765028000 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.765074015 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.765171051 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.765559912 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.765592098 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.765646935 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.765917063 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.765935898 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.766088963 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.766103983 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.770724058 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.770754099 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.770788908 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.770807981 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.770827055 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.770843029 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.775115967 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:07.775132895 CET	443	49749	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:07.775347948 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:07.775532007 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:07.775543928 CET	443	49749	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:07.778636932 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.805803061 CET	49750	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:07.805851936 CET	443	49750	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:07.805927038 CET	49750	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:07.806114912 CET	49750	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:07.806127071 CET	443	49750	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:07.810623884 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.816271067 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.816301107 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.816350937 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.816376925 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.816400051 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.816416025 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.887830973 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.887861013 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.887932062 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.887962103 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.888015985 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.927907944 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.927931070 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.927987099 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.927994967 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.928035975 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.928750992 CET	49744	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.928769112 CET	443	49744	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.930913925 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.930979013 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.931039095 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.931180000 CET	49752	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.931215048 CET	443	49752	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.931277037 CET	49752	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.931580067 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.931668043 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.931718111 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.931778908 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.931792021 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.931915045 CET	49752	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.931926966 CET	443	49752	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.932045937 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.932066917 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.932959080 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.932982922 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.933027029 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.933053017 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.933069944 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.933096886 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.938338995 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.938479900 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.938529015 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.938992023 CET	49743	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:07.939002991 CET	443	49743	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:07.940370083 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.940380096 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.940443993 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.940793037 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.940839052 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.940887928 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.941001892 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:07.941010952 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:07.941163063 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:07.941180944 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:07.957226992 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.957254887 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.957267046 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.957314968 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.957340002 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.957355022 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.957377911 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.958370924 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:07.958419085 CET	443	49742	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:07.958477020 CET	49742	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.004755974 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.004791021 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.004920959 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.004951000 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.004997969 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.049918890 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.049949884 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.050054073 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.050085068 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.050127983 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.107546091 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.107680082 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.107719898 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.107767105 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.121325970 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.121356010 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.121449947 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.121460915 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.121673107 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.122514963 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.122530937 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.122611046 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.122621059 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.122663975 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.128855944 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 17:52:08.176666021 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 17:52:08.184437990 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.184458017 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.184528112 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.184549093 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.184607029 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.224390030 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.224410057 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.224450111 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.224488974 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.224514008 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.224528074 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.238954067 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.238976002 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.239062071 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.239089012 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.239132881 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.271667957 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.302278042 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.302308083 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.302402973 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.302432060 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.302475929 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.341911077 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.341923952 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.341970921 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.341989994 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.342025042 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.342051029 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.342072964 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.342087984 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.349850893 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.349884987 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.349927902 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.349941015 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.349953890 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.349977970 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.357044935 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.357068062 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.357131004 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.357161045 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.357203960 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.420433044 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.420469046 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.420582056 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.420603991 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.420654058 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.433568001 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 17:52:08.439095020 CET	443	49750	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:08.439413071 CET	49750	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:08.439439058 CET	443	49750	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:08.440443039 CET	443	49750	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:08.440524101 CET	49750	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:08.441473007 CET	49750	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:08.441526890 CET	443	49750	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:08.441641092 CET	49750	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:08.441647053 CET	443	49750	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:08.459619999 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.459661961 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.459711075 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.459739923 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.459754944 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.459775925 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.476886034 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.476919889 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.476969004 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.476989985 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.477020979 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.477036953 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.480674982 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.480696917 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.480773926 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.480786085 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.481237888 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.495615959 CET	49750	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:08.537848949 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.537884951 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.537940025 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.537965059 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.538002014 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.538012028 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.559307098 CET	443	49746	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:08.559556007 CET	49746	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:08.559604883 CET	443	49746	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:08.560502052 CET	443	49746	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:08.560569048 CET	49746	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:08.561038017 CET	49746	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:08.561101913 CET	443	49746	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:08.561315060 CET	49746	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:08.561322927 CET	443	49746	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:08.578056097 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.578090906 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.578134060 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.578160048 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.578181028 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.578201056 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.594391108 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.594413996 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.594456911 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.594468117 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.594504118 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.594517946 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.595859051 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.595884085 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.595921993 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.595927954 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.595949888 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.595969915 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.600722075 CET	443	49749	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:08.600914955 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:08.600933075 CET	443	49749	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:08.601964951 CET	443	49749	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:08.602019072 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:08.602371931 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:08.602421045 CET	443	49749	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:08.602619886 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:08.602626085 CET	443	49749	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:08.604840994 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.605019093 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.605046988 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.606077909 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.606128931 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.606177092 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.606515884 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.606575012 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.606797934 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.606812954 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.606910944 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.606918097 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.607172012 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.607496023 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.607557058 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.607661963 CET	49746	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:08.607752085 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.651336908 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.655633926 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.655659914 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:08.656770945 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.656789064 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.656835079 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.656857014 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.656872988 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.656889915 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.688401937 CET	443	49750	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:08.689713001 CET	49750	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:08.689770937 CET	443	49750	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:08.689811945 CET	49750	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:08.690407038 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:08.690443993 CET	443	49757	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:08.690516949 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:08.690717936 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:08.690731049 CET	443	49757	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:08.697937965 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.697967052 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.698036909 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.698056936 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.698107004 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.711589098 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.711615086 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.711656094 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.711678028 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.711700916 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.711741924 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.712888002 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.712905884 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.712949991 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.712970018 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.712982893 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.713064909 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.773243904 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.773267984 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.773308992 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.773336887 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.773363113 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.773379087 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.781748056 CET	443	49752	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.781958103 CET	49752	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.781976938 CET	443	49752	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.782860994 CET	443	49752	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.782916069 CET	49752	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.783282995 CET	49752	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.783344030 CET	443	49752	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.783440113 CET	49752	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.783448935 CET	443	49752	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.790786982 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.791008949 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.791054964 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.791364908 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.791726112 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.791784048 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.791884899 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.792901993 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.793076038 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.793087959 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.793956995 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.794019938 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.794337034 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.794420004 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.794497967 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.794504881 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.795201063 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.795373917 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.795401096 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.796461105 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.796528101 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.796864033 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.796928883 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.797002077 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.797014952 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.797633886 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.797821999 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.797852039 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.799118996 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.799177885 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.799516916 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.799624920 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.799647093 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.812197924 CET	443	49746	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:08.812268972 CET	443	49746	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:08.812320948 CET	49746	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:08.812768936 CET	49746	443	192.168.2.16	63.140.62.17
Nov 1, 2024 17:52:08.812788010 CET	443	49746	63.140.62.17	192.168.2.16
Nov 1, 2024 17:52:08.815069914 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.815093040 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.815140009 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.815172911 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.815193892 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.815212011 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.819261074 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.819320917 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.819339037 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.828229904 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.828258038 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.828303099 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.828332901 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.828350067 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.828385115 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.829703093 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.829720974 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.829765081 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.829792976 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.829808950 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.829862118 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.829890013 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.829936028 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.829942942 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.829992056 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.830003977 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.830029011 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.830173016 CET	49734	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:08.830185890 CET	443	49734	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.830674887 CET	49752	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.839333057 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:08.846632957 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.846637964 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.846667051 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.848666906 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.861426115 CET	443	49749	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:08.861502886 CET	443	49749	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:08.861574888 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:08.861969948 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:08.861994982 CET	443	49749	63.140.62.222	192.168.2.16
Nov 1, 2024 17:52:08.862005949 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:08.862039089 CET	49749	443	192.168.2.16	63.140.62.222
Nov 1, 2024 17:52:08.862653017 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.894651890 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.933984041 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:08.934070110 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:08.975852013 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.975930929 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:08.975960970 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:08.976035118 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.037662029 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 17:52:09.049748898 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.049777985 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.049854040 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.049901009 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.049932003 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.049938917 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.055114031 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.055150032 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.055211067 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.055218935 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.055253029 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.055263996 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.095366955 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.095391989 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.095402002 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.095446110 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.095451117 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.095484972 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.095499992 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.095504045 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.095534086 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.095566988 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.099088907 CET	49747	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.099112034 CET	443	49747	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.099606037 CET	49759	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.099648952 CET	443	49759	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.099714994 CET	49759	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.109066010 CET	49759	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.109087944 CET	443	49759	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.115911007 CET	49760	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.115962982 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.116040945 CET	49760	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.116265059 CET	49760	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.116275072 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.158627033 CET	443	49752	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.158715963 CET	443	49752	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.158859015 CET	49752	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.160000086 CET	49752	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.160016060 CET	443	49752	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.160595894 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.160669088 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.160749912 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.161304951 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.161324024 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.166209936 CET	49763	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.166249990 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.166342974 CET	49763	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.166516066 CET	49763	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.166527987 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.193531990 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.193558931 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.193638086 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.193653107 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.193680048 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.193697929 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.194278002 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.194288969 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.194329023 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.194366932 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.194391966 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.194406986 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.194437981 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.194797993 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.194813013 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.194839001 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.194868088 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.194924116 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.194936037 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.194936991 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.194993973 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.195771933 CET	49753	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.195785999 CET	443	49753	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.196224928 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.196252108 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.196382046 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.197207928 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.197220087 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.200153112 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.200176001 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.200366020 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.200594902 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.200608969 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.209624052 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.209671974 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.209866047 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.209877014 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.261679888 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.310784101 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.310810089 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.310858011 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.310890913 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.310935020 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.332496881 CET	443	49757	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:09.332917929 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:09.332933903 CET	443	49757	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:09.333981037 CET	443	49757	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:09.334042072 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:09.334520102 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:09.334583998 CET	443	49757	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:09.334805965 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:09.334814072 CET	443	49757	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:09.359396935 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.359410048 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.359467030 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.359493017 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.359492064 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.359533072 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.375438929 CET	49751	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.375478029 CET	443	49751	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.376029968 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.376076937 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.376157999 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.376624107 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.376635075 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.384007931 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.384053946 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.384150982 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.384365082 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.384388924 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.388622999 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:09.418746948 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.418775082 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.418823957 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.418838978 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.418868065 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.418886900 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.426712990 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.426738977 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.426834106 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.426862955 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.426904917 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.427436113 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.427509069 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.427516937 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.428071022 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.428117037 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.428123951 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.444056988 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.444169044 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.444176912 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.444457054 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.444508076 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.444513083 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.444540977 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.450313091 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.463526964 CET	49748	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.463553905 CET	443	49748	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.468687057 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.470885038 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.470927000 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.471059084 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.471270084 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.471287966 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.544626951 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.544648886 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.544686079 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.544718027 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.544760942 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.544775009 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.544778109 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.544821024 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.545249939 CET	49745	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.545268059 CET	443	49745	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.571485996 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.571500063 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.571521044 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.571538925 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.571554899 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.571578026 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.571590900 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.571616888 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.571624994 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.571659088 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.571672916 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.571682930 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.573719025 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.573753119 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.573777914 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.573788881 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.573822975 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.575254917 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.575732946 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.575908899 CET	443	49754	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.575969934 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.575989008 CET	49754	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.576428890 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.576455116 CET	443	49770	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.576513052 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.576842070 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.576853991 CET	443	49770	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.580389977 CET	443	49757	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:09.584259987 CET	443	49757	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:09.584476948 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:09.587119102 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:09.587140083 CET	443	49757	35.244.174.68	192.168.2.16
Nov 1, 2024 17:52:09.587151051 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:09.587202072 CET	49757	443	192.168.2.16	35.244.174.68
Nov 1, 2024 17:52:09.595645905 CET	49771	443	192.168.2.16	54.170.25.213
Nov 1, 2024 17:52:09.595705032 CET	443	49771	54.170.25.213	192.168.2.16
Nov 1, 2024 17:52:09.595766068 CET	49771	443	192.168.2.16	54.170.25.213
Nov 1, 2024 17:52:09.596050978 CET	49771	443	192.168.2.16	54.170.25.213
Nov 1, 2024 17:52:09.596065998 CET	443	49771	54.170.25.213	192.168.2.16
Nov 1, 2024 17:52:09.624188900 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.624212980 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.624231100 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.624284983 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.624313116 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.624366045 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.627079964 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.627134085 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.627182961 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.627193928 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.627204895 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.675647020 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.741202116 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.741262913 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.741314888 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.741322994 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.741365910 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.741688967 CET	49755	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.741712093 CET	443	49755	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.746151924 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.746206045 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.746287107 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.746326923 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.746365070 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.746427059 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.746520996 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.746537924 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.746661901 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:09.746671915 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:09.949278116 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.949553967 CET	49760	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.949579000 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.949884892 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.950265884 CET	49760	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.950320959 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:09.950402975 CET	49760	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:09.981748104 CET	443	49759	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.982012987 CET	49759	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.982065916 CET	443	49759	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.982409000 CET	443	49759	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.982747078 CET	49759	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.982816935 CET	443	49759	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:09.982933044 CET	49759	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:09.995326996 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.016011000 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.016258001 CET	49763	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.016287088 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.016609907 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.016969919 CET	49763	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.017018080 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.017164946 CET	49763	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.023361921 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.023555040 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.023591042 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.023794889 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.024173021 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.024195910 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.024482012 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.024544001 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.024544001 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.024868011 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.024925947 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.025113106 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.025182962 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.025254011 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.025268078 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.025365114 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.027323961 CET	443	49759	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.054290056 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.054539919 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.054563046 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.055510998 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.055591106 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.055933952 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.055986881 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.056088924 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.056094885 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.063337088 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.067344904 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.075959921 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.107753038 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.234097958 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.234390020 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.234421015 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.235424042 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.235516071 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.236099958 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.236145020 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.236308098 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.236315966 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.251624107 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 17:52:10.254548073 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.254837036 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.254854918 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.255875111 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.255934000 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.256262064 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.256308079 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.256403923 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.256412983 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.283653021 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.291640043 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.291860104 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.291870117 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.293101072 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.293169022 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.293495893 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.293570042 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.293663979 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.299634933 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.339327097 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.347628117 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.347639084 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.353447914 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.353478909 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.353492022 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.353517056 CET	49760	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.353539944 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.353559971 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.353566885 CET	49760	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.354067087 CET	49760	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.354871035 CET	49760	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.354885101 CET	443	49760	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.377631903 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.377643108 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.377685070 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.377707005 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.377728939 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.377738953 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.378134966 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.378190994 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.378222942 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.378285885 CET	49763	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.378310919 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.378326893 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.378376961 CET	49763	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.378376961 CET	49763	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.378607035 CET	49765	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.378622055 CET	443	49765	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.380393028 CET	49763	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.380404949 CET	443	49763	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.394644022 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.410460949 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.410530090 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.410554886 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.410597086 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.440442085 CET	443	49770	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.440691948 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.440701008 CET	443	49770	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.441730976 CET	443	49770	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.441787004 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.442166090 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.442213058 CET	443	49770	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.442334890 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.442342997 CET	443	49770	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.450891972 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.450905085 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.450973988 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.450977087 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.452292919 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.455338955 CET	49764	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.455354929 CET	443	49764	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.456085920 CET	443	49771	54.170.25.213	192.168.2.16
Nov 1, 2024 17:52:10.456315994 CET	49771	443	192.168.2.16	54.170.25.213
Nov 1, 2024 17:52:10.456340075 CET	443	49771	54.170.25.213	192.168.2.16
Nov 1, 2024 17:52:10.457381964 CET	443	49771	54.170.25.213	192.168.2.16
Nov 1, 2024 17:52:10.457437992 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.457489967 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.457516909 CET	49771	443	192.168.2.16	54.170.25.213
Nov 1, 2024 17:52:10.457564116 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.457741022 CET	49771	443	192.168.2.16	54.170.25.213
Nov 1, 2024 17:52:10.457803965 CET	443	49771	54.170.25.213	192.168.2.16
Nov 1, 2024 17:52:10.457990885 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.458003044 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.458436966 CET	49771	443	192.168.2.16	54.170.25.213
Nov 1, 2024 17:52:10.458446026 CET	443	49771	54.170.25.213	192.168.2.16
Nov 1, 2024 17:52:10.458822012 CET	49776	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.458874941 CET	443	49776	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.458988905 CET	49776	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.459213972 CET	49776	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.459227085 CET	443	49776	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.490636110 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.506637096 CET	49771	443	192.168.2.16	54.170.25.213
Nov 1, 2024 17:52:10.524333954 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.524344921 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.524408102 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.524449110 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.524473906 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.524488926 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.564738035 CET	443	49759	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.564827919 CET	443	49759	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.564832926 CET	49759	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.564870119 CET	49759	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.565931082 CET	49759	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.565949917 CET	443	49759	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.567975044 CET	49777	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.568002939 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.568079948 CET	49777	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.569001913 CET	49777	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.569011927 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.569595098 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:10.569643974 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:10.569731951 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:10.570158005 CET	49779	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.570180893 CET	443	49779	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.570327997 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:10.570346117 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:10.570363998 CET	49779	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.570611954 CET	49779	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.570622921 CET	443	49779	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.570637941 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.580732107 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.580781937 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.580816031 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.580816031 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.580845118 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.580862999 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.581847906 CET	49767	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.581873894 CET	443	49767	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.605918884 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.610543013 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.610572100 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.611368895 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.611705065 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.611784935 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.611936092 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:10.611951113 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.612220049 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.612292051 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.612405062 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.612436056 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.613552094 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:10.613672018 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.613718987 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:10.620992899 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.621001959 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.621042013 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.621083975 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.621100903 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.621140957 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.630738974 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.630750895 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.630773067 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.630837917 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.630867004 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.630896091 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.630917072 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.643486977 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.643604994 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.643630981 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.659341097 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.659343004 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.665637970 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.665663004 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.665683031 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:10.697664022 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.709389925 CET	443	49771	54.170.25.213	192.168.2.16
Nov 1, 2024 17:52:10.709470987 CET	443	49771	54.170.25.213	192.168.2.16
Nov 1, 2024 17:52:10.709538937 CET	49771	443	192.168.2.16	54.170.25.213
Nov 1, 2024 17:52:10.710174084 CET	49771	443	192.168.2.16	54.170.25.213
Nov 1, 2024 17:52:10.710201979 CET	443	49771	54.170.25.213	192.168.2.16
Nov 1, 2024 17:52:10.712699890 CET	49780	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:10.712738991 CET	443	49780	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:10.712810040 CET	49780	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:10.713057995 CET	49780	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:10.713068008 CET	443	49780	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:10.713624954 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.737660885 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.737673998 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.737724066 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.737741947 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.737755060 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.737781048 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.737787008 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.737819910 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.745834112 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.745848894 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.745862961 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.745891094 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.745910883 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.745942116 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.747162104 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.747170925 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.747201920 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.747216940 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.747230053 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.747262955 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.747281075 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.763612032 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.763638020 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.763725996 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.763745070 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.763755083 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.766290903 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.812903881 CET	443	49770	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.812995911 CET	443	49770	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.812998056 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.813047886 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.813921928 CET	49770	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.813941956 CET	443	49770	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.817524910 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.817584038 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.817687035 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.818021059 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.818038940 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.823024035 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.823127985 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.833017111 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.833080053 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.833100080 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.833118916 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.833133936 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.833139896 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.833158016 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.833188057 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.833190918 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.833204985 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.835290909 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.852539062 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.852581978 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.852655888 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.852675915 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.853264093 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.864085913 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.864128113 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.864173889 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.864202023 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.864217043 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.874468088 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.874484062 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.874532938 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.874540091 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.875750065 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.917633057 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.940772057 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.940783978 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.940807104 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.940853119 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.940865993 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.940887928 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.940891981 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.940928936 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.941086054 CET	49768	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:10.941106081 CET	443	49768	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:10.948832989 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.948879957 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.948905945 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.948914051 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.948944092 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.948964119 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.968585968 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.968605995 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.968672037 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.968697071 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.969146013 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.977538109 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.977567911 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.977579117 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.977598906 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.977608919 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.977617979 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.977631092 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:10.977639914 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.977664948 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:10.977680922 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:10.977685928 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:10.990083933 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.990102053 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.990164995 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:10.990190029 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:10.990643978 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.029633999 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:11.064893961 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.064943075 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.064976931 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.064987898 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.065015078 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.065032005 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.085716009 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.085738897 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.085793972 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.085815907 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.085830927 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.085858107 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.095325947 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:11.095340967 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:11.095391035 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:11.095417023 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:11.095416069 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:11.095441103 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:11.095453024 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:11.095839977 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:11.105552912 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.105576992 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.105655909 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.105663061 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.106751919 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.146274090 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:11.146367073 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:11.146385908 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:11.146401882 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:11.146446943 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:11.146701097 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:11.146714926 CET	443	49773	3.160.150.128	192.168.2.16
Nov 1, 2024 17:52:11.146724939 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:11.147948027 CET	49773	443	192.168.2.16	3.160.150.128
Nov 1, 2024 17:52:11.189312935 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.189397097 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.189416885 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.189445972 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.189461946 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.189491034 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.217797995 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.217829943 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.217926025 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.217948914 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.217961073 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.217993021 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.221591949 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.221612930 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.221654892 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.221661091 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.221682072 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.221702099 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.297781944 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.297853947 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.297892094 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.297909975 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.297930002 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.297957897 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.303677082 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.303917885 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.303967953 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.304322958 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.304737091 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.304802895 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.304915905 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.308288097 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.308368921 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.308378935 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.308608055 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.308619022 CET	443	49762	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.308630943 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.308664083 CET	49762	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.311852932 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.311903000 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.311960936 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.312170029 CET	49783	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.312218904 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.312278032 CET	49783	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.312396049 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.312406063 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.312633038 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.312640905 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.312657118 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.312686920 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.312822104 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.312835932 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.312968969 CET	49783	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.312982082 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.313112974 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.313124895 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.313250065 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.313266993 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.322462082 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.322477102 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.322541952 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.322546005 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.322592974 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.323580027 CET	49772	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.323596001 CET	443	49772	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.326227903 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.326265097 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.326337099 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.326380014 CET	443	49776	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.326613903 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.326628923 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.326806068 CET	49776	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.326833963 CET	443	49776	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.327241898 CET	443	49776	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.327665091 CET	49776	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.327733994 CET	443	49776	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.327816010 CET	49776	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.347342014 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.371340036 CET	443	49776	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.411875010 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.411946058 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.411978960 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.411997080 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.412029982 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.412045002 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.428340912 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.429562092 CET	49777	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.429598093 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.429601908 CET	443	49779	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.429850101 CET	49779	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.429867029 CET	443	49779	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.429968119 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.430229902 CET	443	49779	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.430406094 CET	49777	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.430460930 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.430521011 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.430799961 CET	49779	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.430867910 CET	443	49779	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.430995941 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.431042910 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.431166887 CET	49777	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.431262016 CET	49779	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.432101011 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.432168007 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.432507038 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.432585001 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.432646990 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.432666063 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.474668980 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.475339890 CET	443	49779	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.475382090 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.526792049 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.526850939 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.526940107 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.526971102 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.526988029 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.527554035 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.535774946 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.535835981 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.535963058 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.535963058 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.535972118 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.536417007 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.548243999 CET	443	49780	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:11.548593998 CET	49780	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:11.548619032 CET	443	49780	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:11.548994064 CET	443	49780	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:11.549388885 CET	49780	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:11.549453020 CET	443	49780	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:11.549544096 CET	49780	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:11.595336914 CET	443	49780	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:11.647603035 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.648567915 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.648602009 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.648648024 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.648674965 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.648732901 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.648750067 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.648777962 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.648787022 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.649687052 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.649755001 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.650072098 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.650141001 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.650254965 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.650265932 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.691056967 CET	443	49776	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.691140890 CET	443	49776	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.691178083 CET	49776	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.691211939 CET	49776	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.692353010 CET	49776	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.692388058 CET	443	49776	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.696950912 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.764942884 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.765109062 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.765125036 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.765285015 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.765340090 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.765346050 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.792665958 CET	443	49779	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.792766094 CET	443	49779	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.792826891 CET	49779	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.792859077 CET	49779	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.795480013 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.795511961 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.795525074 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.795619011 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.795655012 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.795674086 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.795691967 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.795697927 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.795722961 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.795731068 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.795759916 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.795782089 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.795792103 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.795815945 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.795831919 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.795831919 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.795861959 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.798418999 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.798532009 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.798558950 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.801975012 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.802079916 CET	49777	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.802113056 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.802201033 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.802253962 CET	49777	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.803169012 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.803225040 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.803248882 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.803258896 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.803375959 CET	443	49780	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:11.803436041 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.803443909 CET	443	49780	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:11.803489923 CET	49780	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:11.827686071 CET	49780	443	192.168.2.16	54.77.215.91
Nov 1, 2024 17:52:11.827712059 CET	443	49780	54.77.215.91	192.168.2.16
Nov 1, 2024 17:52:11.831559896 CET	49777	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.831572056 CET	443	49777	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.839680910 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.841358900 CET	49779	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.841384888 CET	443	49779	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.868365049 CET	49787	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.868429899 CET	443	49787	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.868511915 CET	49787	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.870341063 CET	49787	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:11.870368958 CET	443	49787	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:11.882446051 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.882472038 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.882570982 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.882599115 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.882642031 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.914339066 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.914370060 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.914448977 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.914504051 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:11.914522886 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.914547920 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:11.914639950 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.914710045 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.918836117 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.918924093 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.997608900 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.997638941 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.997769117 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:11.997797012 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:11.997843981 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.020874023 CET	443	49714	142.250.185.100	192.168.2.16
Nov 1, 2024 17:52:12.020966053 CET	443	49714	142.250.185.100	192.168.2.16
Nov 1, 2024 17:52:12.021049976 CET	49714	443	192.168.2.16	142.250.185.100
Nov 1, 2024 17:52:12.027445078 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.027478933 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.027559042 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.027596951 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.027615070 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.027640104 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.027883053 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.027934074 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.027941942 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.027972937 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.028013945 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.028209925 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.028228998 CET	443	49778	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.028251886 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.028274059 CET	49778	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.030594110 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.030623913 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.030668974 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.030708075 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.030720949 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.030746937 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.031042099 CET	49714	443	192.168.2.16	142.250.185.100
Nov 1, 2024 17:52:12.031071901 CET	443	49714	142.250.185.100	192.168.2.16
Nov 1, 2024 17:52:12.031398058 CET	49788	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.031433105 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.031488895 CET	49788	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.031770945 CET	49788	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.031789064 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.112948895 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.112979889 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.113126040 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.113154888 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.113210917 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.136234999 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.136527061 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.136555910 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.137644053 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.137715101 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.138065100 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.138142109 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.138231993 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.138242960 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.145610094 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.145704031 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.145742893 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.145793915 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.145848036 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.145916939 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.145962000 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.146635056 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.146653891 CET	443	49781	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.146661997 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.146701097 CET	49781	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.147885084 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.147923946 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.147960901 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.147994041 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.148008108 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.148030996 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.152008057 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.152430058 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.152446985 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.153467894 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.153531075 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.153872013 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.153928995 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.154021025 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.154028893 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.158180952 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.158420086 CET	49783	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.158447027 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.158792019 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.159081936 CET	49783	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.159152031 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.159229040 CET	49783	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.187642097 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.187889099 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.188194036 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.188224077 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.188586950 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.188868046 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.188929081 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.189013004 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.189027071 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.189179897 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.189188004 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.190222979 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.190287113 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.190537930 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.190598965 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.190646887 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.203330040 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.203630924 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.228054047 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.228080988 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.228187084 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.228214025 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.228259087 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.229397058 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.229413986 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.229479074 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.229500055 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.229542017 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.235343933 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.235361099 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.235646963 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.235667944 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.264821053 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.264849901 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.264950991 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.264966965 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.265001059 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.265007019 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.265021086 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.265058041 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.283672094 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.343940020 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.343971014 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.344080925 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.344118118 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.344165087 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.380950928 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.381020069 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.381115913 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.381150961 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.381175041 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.381203890 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.382149935 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.382175922 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.382246017 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.382277966 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.382317066 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.441124916 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.459794998 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.459889889 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.459928989 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.460113049 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.460136890 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.460186005 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.460217953 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.460235119 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.460259914 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.491647005 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.503861904 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.503882885 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.503973961 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.503997087 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.518065929 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.518142939 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.518157959 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.518172026 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.518203974 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.518232107 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.518963099 CET	49786	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.518978119 CET	443	49786	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.539623022 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.539652109 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.539747000 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.539786100 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.539849997 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.544245958 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.544323921 CET	49783	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.544348955 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.544369936 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.544395924 CET	49783	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.544420958 CET	49783	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.545250893 CET	49783	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.545265913 CET	443	49783	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.546618938 CET	49789	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.546662092 CET	443	49789	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.546730995 CET	49789	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.546982050 CET	49789	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.546993971 CET	443	49789	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.547672033 CET	49790	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.547725916 CET	443	49790	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.547790051 CET	49790	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.547981024 CET	49790	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.547993898 CET	443	49790	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.555665970 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.557858944 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.557915926 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.557925940 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.557935953 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.557956934 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.557976007 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.558024883 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.558038950 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.558056116 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.558063030 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.558083057 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.558094025 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.558114052 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.558121920 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.558136940 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.558159113 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.558981895 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.559034109 CET	443	49782	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.559082985 CET	49782	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.560961008 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.560967922 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.561000109 CET	49791	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.561008930 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.561036110 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.561042070 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.561043024 CET	443	49791	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.561053038 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.561079979 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.561096907 CET	49791	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.561122894 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.561625004 CET	49791	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.561640024 CET	443	49791	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.561960936 CET	49792	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.561985970 CET	443	49792	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.562036037 CET	49792	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.562284946 CET	49792	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.562295914 CET	443	49792	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.576700926 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.576739073 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.576807022 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.576836109 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.576855898 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.576880932 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.618473053 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.618488073 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.618546009 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.618607044 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.618652105 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.618669987 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.618700027 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.666711092 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 17:52:12.673073053 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.673101902 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.673223972 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.673250914 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.673299074 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.675962925 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.676004887 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.676064014 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.676098108 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.676115990 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.676137924 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.676409006 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.676465034 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.676474094 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.676491976 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.676506042 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.676538944 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.676665068 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.676683903 CET	443	49784	18.173.205.93	192.168.2.16
Nov 1, 2024 17:52:12.676692963 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.676722050 CET	49784	443	192.168.2.16	18.173.205.93
Nov 1, 2024 17:52:12.679249048 CET	49793	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.679295063 CET	443	49793	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.679368973 CET	49793	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.679575920 CET	49793	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.679590940 CET	443	49793	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.690615892 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.690666914 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.690800905 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.690828085 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.690875053 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.713009119 CET	443	49787	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.713488102 CET	49787	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.713516951 CET	443	49787	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.713902950 CET	443	49787	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.714374065 CET	49787	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.714442015 CET	443	49787	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.714550018 CET	49787	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.727725983 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.727752924 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.727878094 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.727901936 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.727951050 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.734486103 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.734559059 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.734594107 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.734635115 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.734651089 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.734674931 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.755341053 CET	443	49787	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.790163040 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.790179014 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.790319920 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.790349007 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.806292057 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.806323051 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.806435108 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.806469917 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.806529999 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.839694023 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.843166113 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.843189001 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.843276978 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.843293905 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.843343019 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.851579905 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.851660013 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.851694107 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.851735115 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.851747036 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.851772070 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.851774931 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.851807117 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.851824045 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.855439901 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.855520964 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.855530024 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.865467072 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.865480900 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.865550995 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.865550995 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.865561962 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.865581036 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.865582943 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.865606070 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.865622997 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.865644932 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.873087883 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.873373032 CET	49788	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.873404026 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.873774052 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.874125957 CET	49788	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.874200106 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.874252081 CET	49788	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.903688908 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.908658028 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.908685923 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.908775091 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.908802986 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:12.919336081 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.922113895 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.922210932 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.922249079 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.922272921 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.922287941 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.922322035 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.923645020 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.923688889 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.923732042 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.923738956 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.923769951 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.923800945 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.927213907 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.927300930 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.927331924 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.951718092 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:12.967672110 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.968542099 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.968556881 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.968631983 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.972206116 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.972285032 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:12.972296953 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:12.983683109 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 17:52:13.015692949 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.024846077 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.024862051 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.024972916 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.025026083 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.025053978 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.025068998 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.025096893 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.026635885 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.026653051 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.026704073 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.026720047 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.026734114 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.026763916 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.037929058 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.037956953 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.038079977 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.038105011 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.038150072 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.039324999 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.039345980 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.039407015 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.039422035 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.039469957 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.055221081 CET	443	49787	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.055329084 CET	49787	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.055330038 CET	443	49787	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.055377007 CET	49787	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.056231022 CET	49787	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.056248903 CET	443	49787	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.074193954 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.074341059 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.074362040 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.085053921 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.085071087 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.085150003 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.085983992 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.085995913 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.086050987 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.086067915 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.126719952 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.126728058 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.142349005 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.142378092 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.142482996 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.142509937 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.142559052 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.153434038 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.153565884 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.154743910 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.154761076 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.154833078 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.154844046 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.154885054 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.202231884 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.202266932 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.202332020 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.202382088 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.202409029 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.202409029 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.202445984 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.202481985 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.202656984 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.202723026 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.217365026 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.217397928 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.217489004 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.217514038 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.217557907 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.233413935 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.233452082 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.233505964 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.233534098 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.233547926 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.233581066 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.260119915 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.260143995 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.260238886 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.260258913 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.260308027 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.270128012 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.270159960 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.270209074 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.270226955 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.270243883 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.270463943 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.271025896 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.271121979 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.271127939 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.305161953 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.305243015 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.305264950 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.318800926 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.318849087 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.318897009 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.318927050 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.318941116 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.318958998 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.319359064 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.319416046 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.319422007 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.334722042 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.334747076 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.334816933 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.334841013 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.334891081 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.348926067 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.348963976 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.348993063 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.349000931 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.349035025 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.366658926 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.377202034 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.377222061 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.377305984 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.377331018 CET	443	49785	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.377374887 CET	49785	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.379652977 CET	443	49790	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.379920006 CET	49790	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.379947901 CET	443	49790	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.380268097 CET	443	49790	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.380599976 CET	49790	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.380650043 CET	443	49790	18.172.153.97	192.168.2.16
Nov 1, 2024 17:52:13.380759001 CET	49790	443	192.168.2.16	18.172.153.97
Nov 1, 2024 17:52:13.384682894 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.384691954 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.384748936 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.386054039 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.386063099 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.386086941 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.386121988 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.386131048 CET	443	49766	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.386148930 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.386177063 CET	49766	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.390774965 CET	443	49789	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.391005993 CET	49789	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.391014099 CET	443	49789	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.392060995 CET	443	49789	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.392121077 CET	49789	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.392427921 CET	49789	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.392501116 CET	443	49789	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.392579079 CET	49789	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.392586946 CET	443	49789	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.395524025 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.395572901 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.395612001 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.395622015 CET	443	49775	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.395642042 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.395658970 CET	49775	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.424036026 CET	443	49791	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.424269915 CET	49791	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.424278021 CET	443	49791	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.424333096 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.424360037 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.424372911 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.424417973 CET	49788	443	192.168.2.16	18.66.147.79
Nov 1, 2024 17:52:13.424444914 CET	443	49788	18.66.147.79	192.168.2.16
Nov 1, 2024 17:52:13.424458981 CET	49788	443	192.168.2.16	18.66.147.79

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 17:51:57.295155048 CET	192.168.2.16	1.1.1.1	0x8d2e	Standard query (0)	www.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:57.295305967 CET	192.168.2.16	1.1.1.1	0xa3bd	Standard query (0)	www.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:51:58.141938925 CET	192.168.2.16	1.1.1.1	0xf7f1	Standard query (0)	ownyourfuture.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:58.142096043 CET	192.168.2.16	1.1.1.1	0xf1b0	Standard query (0)	ownyourfuture.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:51:58.313189030 CET	192.168.2.16	1.1.1.1	0xf5d5	Standard query (0)	www.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:58.313333035 CET	192.168.2.16	1.1.1.1	0x834b	Standard query (0)	www.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:01.170141935 CET	192.168.2.16	1.1.1.1	0xba7d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.170249939 CET	192.168.2.16	1.1.1.1	0x77b9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:01.400494099 CET	192.168.2.16	1.1.1.1	0x7e6f	Standard query (0)	corp-at2.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.400629044 CET	192.168.2.16	1.1.1.1	0xe97c	Standard query (0)	corp-at2.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:01.404424906 CET	192.168.2.16	1.1.1.1	0x2525	Standard query (0)	corp-etm-arl.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.404670954 CET	192.168.2.16	1.1.1.1	0xf28a	Standard query (0)	corp-etm-arl.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:02.555865049 CET	192.168.2.16	1.1.1.1	0x4c41	Standard query (0)	corp-at2.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:02.556004047 CET	192.168.2.16	1.1.1.1	0xb0e6	Standard query (0)	corp-at2.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:05.034607887 CET	192.168.2.16	1.1.1.1	0x8531	Standard query (0)	constellation-static.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.034753084 CET	192.168.2.16	1.1.1.1	0x7410	Standard query (0)	constellation-static.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:05.486888885 CET	192.168.2.16	1.1.1.1	0x9182	Standard query (0)	corp-etm-arl.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.487095118 CET	192.168.2.16	1.1.1.1	0xbf52	Standard query (0)	corp-etm-arl.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:05.526757956 CET	192.168.2.16	1.1.1.1	0x3e50	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.526928902 CET	192.168.2.16	1.1.1.1	0x4472	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:06.317542076 CET	192.168.2.16	1.1.1.1	0xcd98	Standard query (0)	ownyourfuture.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.317686081 CET	192.168.2.16	1.1.1.1	0xab73	Standard query (0)	ownyourfuture.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:06.624360085 CET	192.168.2.16	1.1.1.1	0x178c	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.624505997 CET	192.168.2.16	1.1.1.1	0xee09	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:06.633250952 CET	192.168.2.16	1.1.1.1	0xed98	Standard query (0)	vanguard.demdex.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.633400917 CET	192.168.2.16	1.1.1.1	0x414a	Standard query (0)	vanguard.demdex.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:06.634746075 CET	192.168.2.16	1.1.1.1	0x8794	Standard query (0)	vanguard.d2.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.634890079 CET	192.168.2.16	1.1.1.1	0x4e70	Standard query (0)	vanguard.d2.sc.omtrdc.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:06.638916969 CET	192.168.2.16	1.1.1.1	0x2a0c	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.639120102 CET	192.168.2.16	1.1.1.1	0x5e08	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:07.719083071 CET	192.168.2.16	1.1.1.1	0x6ade	Standard query (0)	vanguard.d2.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:07.719237089 CET	192.168.2.16	1.1.1.1	0x7a77	Standard query (0)	vanguard.d2.sc.omtrdc.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:07.766784906 CET	192.168.2.16	1.1.1.1	0x5693	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:07.766993046 CET	192.168.2.16	1.1.1.1	0x52a1	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:07.797734022 CET	192.168.2.16	1.1.1.1	0x3b9f	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:07.797919035 CET	192.168.2.16	1.1.1.1	0xf4cd	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:09.587819099 CET	192.168.2.16	1.1.1.1	0x62a6	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:09.587958097 CET	192.168.2.16	1.1.1.1	0x83bd	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:18.071172953 CET	192.168.2.16	1.1.1.1	0x20a2	Standard query (0)	content.zenimpact.io	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:18.071511984 CET	192.168.2.16	1.1.1.1	0xa28a	Standard query (0)	content.zenimpact.io	65	IN (0x0001)	false
Nov 1, 2024 17:52:18.073229074 CET	192.168.2.16	1.1.1.1	0x4ac2	Standard query (0)	mdl-medallia-digital.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:18.073374033 CET	192.168.2.16	1.1.1.1	0x924c	Standard query (0)	mdl-medallia-digital.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:18.938380003 CET	192.168.2.16	1.1.1.1	0x1d95	Standard query (0)	content.zenimpact.io	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:18.938513994 CET	192.168.2.16	1.1.1.1	0x32a0	Standard query (0)	content.zenimpact.io	65	IN (0x0001)	false
Nov 1, 2024 17:52:19.546447039 CET	192.168.2.16	1.1.1.1	0xe4c3	Standard query (0)	mdl-medallia-digital.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:19.546593904 CET	192.168.2.16	1.1.1.1	0x4eda	Standard query (0)	mdl-medallia-digital.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:19.725608110 CET	192.168.2.16	1.1.1.1	0x2b1a	Standard query (0)	hub2.zenimpact.io	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:19.726115942 CET	192.168.2.16	1.1.1.1	0x2faa	Standard query (0)	hub2.zenimpact.io	65	IN (0x0001)	false
Nov 1, 2024 17:52:20.581604958 CET	192.168.2.16	1.1.1.1	0x2ae5	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:20.581737041 CET	192.168.2.16	1.1.1.1	0xc694	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:21.030560017 CET	192.168.2.16	1.1.1.1	0xb5f1	Standard query (0)	thevanguardgroup.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:21.030704021 CET	192.168.2.16	1.1.1.1	0x3143	Standard query (0)	thevanguardgroup.tt.omtrdc.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:21.365904093 CET	192.168.2.16	1.1.1.1	0x55e9	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:21.366044998 CET	192.168.2.16	1.1.1.1	0x316c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:21.379978895 CET	192.168.2.16	1.1.1.1	0xeb52	Standard query (0)	insight-api-kgw.zenimpact.io	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:21.380201101 CET	192.168.2.16	1.1.1.1	0x54f7	Standard query (0)	insight-api-kgw.zenimpact.io	65	IN (0x0001)	false
Nov 1, 2024 17:52:22.192219973 CET	192.168.2.16	1.1.1.1	0x1946	Standard query (0)	thevanguardgroup.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:22.192378044 CET	192.168.2.16	1.1.1.1	0x9102	Standard query (0)	thevanguardgroup.tt.omtrdc.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:23.283628941 CET	192.168.2.16	1.1.1.1	0x3455	Standard query (0)	insight-api-kgw.zenimpact.io	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:23.283796072 CET	192.168.2.16	1.1.1.1	0xb6ed	Standard query (0)	insight-api-kgw.zenimpact.io	65	IN (0x0001)	false
Nov 1, 2024 17:52:24.108877897 CET	192.168.2.16	1.1.1.1	0x7ec8	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:24.109000921 CET	192.168.2.16	1.1.1.1	0x597b	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:25.231856108 CET	192.168.2.16	1.1.1.1	0xc66c	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:25.231981993 CET	192.168.2.16	1.1.1.1	0x112a	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:26.205739975 CET	192.168.2.16	1.1.1.1	0x55de	Standard query (0)	resources.digital-cloud-prem.medallia.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:26.205887079 CET	192.168.2.16	1.1.1.1	0xd3fc	Standard query (0)	resources.digital-cloud-prem.medallia.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:29.373656034 CET	192.168.2.16	1.1.1.1	0x9b86	Standard query (0)	resources.digital-cloud-prem.medallia.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:29.373811960 CET	192.168.2.16	1.1.1.1	0x8135	Standard query (0)	resources.digital-cloud-prem.medallia.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:29.379194975 CET	192.168.2.16	1.1.1.1	0x4d2d	Standard query (0)	udc-neb.kampyle.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:29.379426003 CET	192.168.2.16	1.1.1.1	0x336c	Standard query (0)	udc-neb.kampyle.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:30.192615032 CET	192.168.2.16	1.1.1.1	0x695c	Standard query (0)	udc-neb.kampyle.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:30.192759991 CET	192.168.2.16	1.1.1.1	0xcceb	Standard query (0)	udc-neb.kampyle.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:37.299590111 CET	192.168.2.16	1.1.1.1	0xc3dc	Standard query (0)	logon.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:37.300015926 CET	192.168.2.16	1.1.1.1	0x1331	Standard query (0)	logon.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:38.734940052 CET	192.168.2.16	1.1.1.1	0xdc5a	Standard query (0)	corp.at2.assets.vgdynamic.info	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.735085011 CET	192.168.2.16	1.1.1.1	0xff9b	Standard query (0)	corp.at2.assets.vgdynamic.info	65	IN (0x0001)	false
Nov 1, 2024 17:52:38.736418009 CET	192.168.2.16	1.1.1.1	0xe356	Standard query (0)	ccc.vgcontent.info	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.736578941 CET	192.168.2.16	1.1.1.1	0xa1cb	Standard query (0)	ccc.vgcontent.info	65	IN (0x0001)	false
Nov 1, 2024 17:52:38.736876965 CET	192.168.2.16	1.1.1.1	0x4b8	Standard query (0)	n4v.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.737013102 CET	192.168.2.16	1.1.1.1	0x5928	Standard query (0)	n4v.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:38.738802910 CET	192.168.2.16	1.1.1.1	0x64e0	Standard query (0)	mc3-static-assets.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.738954067 CET	192.168.2.16	1.1.1.1	0xbc8e	Standard query (0)	mc3-static-assets.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:38.739351034 CET	192.168.2.16	1.1.1.1	0x8e32	Standard query (0)	oob-check.cdn.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.739459038 CET	192.168.2.16	1.1.1.1	0x99f9	Standard query (0)	oob-check.cdn.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:39.995332003 CET	192.168.2.16	1.1.1.1	0xf078	Standard query (0)	logon.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:39.995472908 CET	192.168.2.16	1.1.1.1	0x4d1d	Standard query (0)	logon.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:40.289433956 CET	192.168.2.16	1.1.1.1	0x54be	Standard query (0)	corp.at2.assets.vgdynamic.info	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.289572954 CET	192.168.2.16	1.1.1.1	0x7839	Standard query (0)	corp.at2.assets.vgdynamic.info	65	IN (0x0001)	false
Nov 1, 2024 17:52:40.420490026 CET	192.168.2.16	1.1.1.1	0xf1ca	Standard query (0)	oob-check.cdn.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.420663118 CET	192.168.2.16	1.1.1.1	0x7eeb	Standard query (0)	oob-check.cdn.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:40.521671057 CET	192.168.2.16	1.1.1.1	0x2414	Standard query (0)	mc3-static-assets.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.521841049 CET	192.168.2.16	1.1.1.1	0x7033	Standard query (0)	mc3-static-assets.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:40.740453959 CET	192.168.2.16	1.1.1.1	0x2c25	Standard query (0)	n4v.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.740629911 CET	192.168.2.16	1.1.1.1	0xad19	Standard query (0)	n4v.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:42.595324993 CET	192.168.2.16	1.1.1.1	0xebe7	Standard query (0)	corp.etm.assets.vgdynamic.info	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:42.595444918 CET	192.168.2.16	1.1.1.1	0xe4c	Standard query (0)	corp.etm.assets.vgdynamic.info	65	IN (0x0001)	false
Nov 1, 2024 17:52:44.815747976 CET	192.168.2.16	1.1.1.1	0x95cd	Standard query (0)	corp.etm.assets.vgdynamic.info	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.815906048 CET	192.168.2.16	1.1.1.1	0x76ea	Standard query (0)	corp.etm.assets.vgdynamic.info	65	IN (0x0001)	false
Nov 1, 2024 17:52:44.927683115 CET	192.168.2.16	1.1.1.1	0x4bf5	Standard query (0)	corp-pmj.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.927817106 CET	192.168.2.16	1.1.1.1	0x3b0a	Standard query (0)	corp-pmj.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:46.470455885 CET	192.168.2.16	1.1.1.1	0xafac	Standard query (0)	personal1.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:46.470613956 CET	192.168.2.16	1.1.1.1	0xabfd	Standard query (0)	personal1.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:46.643835068 CET	192.168.2.16	1.1.1.1	0xdc58	Standard query (0)	corp-pmj.web.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:46.643985033 CET	192.168.2.16	1.1.1.1	0x7724	Standard query (0)	corp-pmj.web.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:47.915853977 CET	192.168.2.16	1.1.1.1	0x6631	Standard query (0)	personal1.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:47.916074991 CET	192.168.2.16	1.1.1.1	0x4e17	Standard query (0)	personal1.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:48.274631023 CET	192.168.2.16	1.1.1.1	0x1536	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:48.274877071 CET	192.168.2.16	1.1.1.1	0x8ab9	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:49.465385914 CET	192.168.2.16	1.1.1.1	0x3c5b	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:49.465538979 CET	192.168.2.16	1.1.1.1	0x52b3	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:49.841576099 CET	192.168.2.16	1.1.1.1	0x370b	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:49.841793060 CET	192.168.2.16	1.1.1.1	0x840e	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:49.846149921 CET	192.168.2.16	1.1.1.1	0x6f2c	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:49.846446037 CET	192.168.2.16	1.1.1.1	0x3912	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Nov 1, 2024 17:52:49.854433060 CET	192.168.2.16	1.1.1.1	0xaf79	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Nov 1, 2024 17:52:49.916333914 CET	192.168.2.16	1.1.1.1	0xf9e6	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Nov 1, 2024 17:52:49.916757107 CET	192.168.2.16	1.1.1.1	0x3791	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:51.267282009 CET	192.168.2.16	1.1.1.1	0x65fa	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:51.267456055 CET	192.168.2.16	1.1.1.1	0x3865	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:51.758079052 CET	192.168.2.16	1.1.1.1	0xcbc9	Standard query (0)	12332392.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:51.758271933 CET	192.168.2.16	1.1.1.1	0x2fcc	Standard query (0)	12332392.fls.doubleclick.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:53.988297939 CET	192.168.2.16	1.1.1.1	0x25c7	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:53.988440037 CET	192.168.2.16	1.1.1.1	0x29f8	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:54.291203022 CET	192.168.2.16	1.1.1.1	0xa96c	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:54.291333914 CET	192.168.2.16	1.1.1.1	0x7d0	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:54.631753922 CET	192.168.2.16	1.1.1.1	0xf64d	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:54.631900072 CET	192.168.2.16	1.1.1.1	0x81c7	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:54.745523930 CET	192.168.2.16	1.1.1.1	0x8504	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:54.745671988 CET	192.168.2.16	1.1.1.1	0xfea5	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:55.226174116 CET	192.168.2.16	1.1.1.1	0xce84	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:55.226362944 CET	192.168.2.16	1.1.1.1	0x56b9	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:55.585011959 CET	192.168.2.16	1.1.1.1	0xe2e4	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:55.585531950 CET	192.168.2.16	1.1.1.1	0x7380	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Nov 1, 2024 17:52:55.598160982 CET	192.168.2.16	1.1.1.1	0x2f42	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Nov 1, 2024 17:52:55.799706936 CET	192.168.2.16	1.1.1.1	0xa247	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Nov 1, 2024 17:52:55.805583000 CET	192.168.2.16	1.1.1.1	0x96db	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:55.850182056 CET	192.168.2.16	1.1.1.1	0xfa9e	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:55.850334883 CET	192.168.2.16	1.1.1.1	0x1247	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Nov 1, 2024 17:52:56.031970024 CET	192.168.2.16	1.1.1.1	0xa412	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:56.032111883 CET	192.168.2.16	1.1.1.1	0xc3c6	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:56.651139975 CET	192.168.2.16	1.1.1.1	0x602b	Standard query (0)	d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:56.651278973 CET	192.168.2.16	1.1.1.1	0x536d	Standard query (0)	d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.net	65	IN (0x0001)	false
Nov 1, 2024 17:52:57.787167072 CET	192.168.2.16	1.1.1.1	0x24a9	Standard query (0)	d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:57.787317038 CET	192.168.2.16	1.1.1.1	0x166a	Standard query (0)	d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.net	65	IN (0x0001)	false
Nov 1, 2024 17:53:19.774121046 CET	192.168.2.16	1.1.1.1	0x4204	Standard query (0)	analytics-fe.digital-cloud-prem.medallia.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:19.774315119 CET	192.168.2.16	1.1.1.1	0xd960	Standard query (0)	analytics-fe.digital-cloud-prem.medallia.com	65	IN (0x0001)	false
Nov 1, 2024 17:53:21.885900974 CET	192.168.2.16	1.1.1.1	0x4809	Standard query (0)	analytics-fe.digital-cloud-prem.medallia.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:21.885976076 CET	192.168.2.16	1.1.1.1	0x6836	Standard query (0)	analytics-fe.digital-cloud-prem.medallia.com	65	IN (0x0001)	false
Nov 1, 2024 17:53:37.705593109 CET	192.168.2.16	1.1.1.1	0xe9a2	Standard query (0)	logon.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:37.705805063 CET	192.168.2.16	1.1.1.1	0x7093	Standard query (0)	logon.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:53:43.598488092 CET	192.168.2.16	1.1.1.1	0xa6a	Standard query (0)	logon.vanguard.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:43.598702908 CET	192.168.2.16	1.1.1.1	0x8680	Standard query (0)	logon.vanguard.com	65	IN (0x0001)	false
Nov 1, 2024 17:53:43.675889969 CET	192.168.2.16	1.1.1.1	0xe379	Standard query (0)	vanguard.d2.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:43.676110029 CET	192.168.2.16	1.1.1.1	0x5de3	Standard query (0)	vanguard.d2.sc.omtrdc.net	65	IN (0x0001)	false
Nov 1, 2024 17:53:44.796762943 CET	192.168.2.16	1.1.1.1	0x9b86	Standard query (0)	vanguard.d2.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:44.796919107 CET	192.168.2.16	1.1.1.1	0xd0a	Standard query (0)	vanguard.d2.sc.omtrdc.net	65	IN (0x0001)	false
Nov 1, 2024 17:53:58.719110012 CET	192.168.2.16	1.1.1.1	0x5e60	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:58.719343901 CET	192.168.2.16	1.1.1.1	0xdb0f	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 17:51:57.397197962 CET	1.1.1.1	192.168.2.16	0x8d2e	No error (0)	www.vanguard.com		192.175.213.88	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:57.397197962 CET	1.1.1.1	192.168.2.16	0x8d2e	No error (0)	www.vanguard.com		192.175.162.88	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:57.397197962 CET	1.1.1.1	192.168.2.16	0x8d2e	No error (0)	www.vanguard.com		192.175.161.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:57.397197962 CET	1.1.1.1	192.168.2.16	0x8d2e	No error (0)	www.vanguard.com		192.175.214.88	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:58.182287931 CET	1.1.1.1	192.168.2.16	0xf7f1	No error (0)	ownyourfuture.vanguard.com	pex.ecs.insp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:51:58.182287931 CET	1.1.1.1	192.168.2.16	0xf7f1	No error (0)	pex.ecs.insp.c1.vanguard.com	d1apt6cftkxnkw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:51:58.182287931 CET	1.1.1.1	192.168.2.16	0xf7f1	No error (0)	d1apt6cftkxnkw.cloudfront.net		18.66.147.79	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:58.182287931 CET	1.1.1.1	192.168.2.16	0xf7f1	No error (0)	d1apt6cftkxnkw.cloudfront.net		18.66.147.81	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:58.182287931 CET	1.1.1.1	192.168.2.16	0xf7f1	No error (0)	d1apt6cftkxnkw.cloudfront.net		18.66.147.36	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:58.182287931 CET	1.1.1.1	192.168.2.16	0xf7f1	No error (0)	d1apt6cftkxnkw.cloudfront.net		18.66.147.109	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:58.191207886 CET	1.1.1.1	192.168.2.16	0xf1b0	No error (0)	ownyourfuture.vanguard.com	pex.ecs.insp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:51:58.191207886 CET	1.1.1.1	192.168.2.16	0xf1b0	No error (0)	pex.ecs.insp.c1.vanguard.com	d1apt6cftkxnkw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:51:58.417767048 CET	1.1.1.1	192.168.2.16	0xf5d5	No error (0)	www.vanguard.com		192.175.162.88	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:58.417767048 CET	1.1.1.1	192.168.2.16	0xf5d5	No error (0)	www.vanguard.com		192.175.161.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:58.417767048 CET	1.1.1.1	192.168.2.16	0xf5d5	No error (0)	www.vanguard.com		192.175.214.88	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:51:58.417767048 CET	1.1.1.1	192.168.2.16	0xf5d5	No error (0)	www.vanguard.com		192.175.213.88	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.177539110 CET	1.1.1.1	192.168.2.16	0x77b9	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 1, 2024 17:52:01.177791119 CET	1.1.1.1	192.168.2.16	0xba7d	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.419353962 CET	1.1.1.1	192.168.2.16	0x7e6f	No error (0)	corp-at2.web.vanguard.com	dza2ku99396d4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:01.419353962 CET	1.1.1.1	192.168.2.16	0x7e6f	No error (0)	dza2ku99396d4.cloudfront.net		18.66.112.28	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.419353962 CET	1.1.1.1	192.168.2.16	0x7e6f	No error (0)	dza2ku99396d4.cloudfront.net		18.66.112.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.419353962 CET	1.1.1.1	192.168.2.16	0x7e6f	No error (0)	dza2ku99396d4.cloudfront.net		18.66.112.105	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.419353962 CET	1.1.1.1	192.168.2.16	0x7e6f	No error (0)	dza2ku99396d4.cloudfront.net		18.66.112.52	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.423803091 CET	1.1.1.1	192.168.2.16	0x2525	No error (0)	corp-etm-arl.web.vanguard.com	d32fcx43tccxeh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:01.423803091 CET	1.1.1.1	192.168.2.16	0x2525	No error (0)	d32fcx43tccxeh.cloudfront.net		3.160.150.128	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.423803091 CET	1.1.1.1	192.168.2.16	0x2525	No error (0)	d32fcx43tccxeh.cloudfront.net		3.160.150.63	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.423803091 CET	1.1.1.1	192.168.2.16	0x2525	No error (0)	d32fcx43tccxeh.cloudfront.net		3.160.150.97	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.423803091 CET	1.1.1.1	192.168.2.16	0x2525	No error (0)	d32fcx43tccxeh.cloudfront.net		3.160.150.104	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:01.424990892 CET	1.1.1.1	192.168.2.16	0xf28a	No error (0)	corp-etm-arl.web.vanguard.com	d32fcx43tccxeh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:01.428848982 CET	1.1.1.1	192.168.2.16	0xe97c	No error (0)	corp-at2.web.vanguard.com	dza2ku99396d4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:02.564241886 CET	1.1.1.1	192.168.2.16	0xb0e6	No error (0)	corp-at2.web.vanguard.com	dza2ku99396d4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:02.585647106 CET	1.1.1.1	192.168.2.16	0x4c41	No error (0)	corp-at2.web.vanguard.com	dza2ku99396d4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:02.585647106 CET	1.1.1.1	192.168.2.16	0x4c41	No error (0)	dza2ku99396d4.cloudfront.net		13.224.245.51	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:02.585647106 CET	1.1.1.1	192.168.2.16	0x4c41	No error (0)	dza2ku99396d4.cloudfront.net		13.224.245.118	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:02.585647106 CET	1.1.1.1	192.168.2.16	0x4c41	No error (0)	dza2ku99396d4.cloudfront.net		13.224.245.115	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:02.585647106 CET	1.1.1.1	192.168.2.16	0x4c41	No error (0)	dza2ku99396d4.cloudfront.net		13.224.245.71	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.105648994 CET	1.1.1.1	192.168.2.16	0x7410	No error (0)	constellation-static.web.vanguard.com	d35614irbxz68t.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:05.106266022 CET	1.1.1.1	192.168.2.16	0x8531	No error (0)	constellation-static.web.vanguard.com	d35614irbxz68t.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:05.106266022 CET	1.1.1.1	192.168.2.16	0x8531	No error (0)	d35614irbxz68t.cloudfront.net		18.173.205.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.106266022 CET	1.1.1.1	192.168.2.16	0x8531	No error (0)	d35614irbxz68t.cloudfront.net		18.173.205.119	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.106266022 CET	1.1.1.1	192.168.2.16	0x8531	No error (0)	d35614irbxz68t.cloudfront.net		18.173.205.75	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.106266022 CET	1.1.1.1	192.168.2.16	0x8531	No error (0)	d35614irbxz68t.cloudfront.net		18.173.205.59	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.500993013 CET	1.1.1.1	192.168.2.16	0x9182	No error (0)	corp-etm-arl.web.vanguard.com	d32fcx43tccxeh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:05.500993013 CET	1.1.1.1	192.168.2.16	0x9182	No error (0)	d32fcx43tccxeh.cloudfront.net		3.160.150.128	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.500993013 CET	1.1.1.1	192.168.2.16	0x9182	No error (0)	d32fcx43tccxeh.cloudfront.net		3.160.150.63	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.500993013 CET	1.1.1.1	192.168.2.16	0x9182	No error (0)	d32fcx43tccxeh.cloudfront.net		3.160.150.97	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.500993013 CET	1.1.1.1	192.168.2.16	0x9182	No error (0)	d32fcx43tccxeh.cloudfront.net		3.160.150.104	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.507967949 CET	1.1.1.1	192.168.2.16	0xbf52	No error (0)	corp-etm-arl.web.vanguard.com	d32fcx43tccxeh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.247.166.172	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.251.39.134	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.170.25.213	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.246.210.167	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.181.118	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.194.45.227	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.50.97.18	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.533518076 CET	1.1.1.1	192.168.2.16	0x3e50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.23.253	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:05.535562992 CET	1.1.1.1	192.168.2.16	0x4472	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:05.535562992 CET	1.1.1.1	192.168.2.16	0x4472	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:05.535562992 CET	1.1.1.1	192.168.2.16	0x4472	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.356885910 CET	1.1.1.1	192.168.2.16	0xab73	No error (0)	ownyourfuture.vanguard.com	pex.ecs.insp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.356885910 CET	1.1.1.1	192.168.2.16	0xab73	No error (0)	pex.ecs.insp.c1.vanguard.com	d1apt6cftkxnkw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631480932 CET	1.1.1.1	192.168.2.16	0xee09	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631480932 CET	1.1.1.1	192.168.2.16	0xee09	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631480932 CET	1.1.1.1	192.168.2.16	0xee09	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.215.91	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.53.196	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.216.198.28	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.194.45.227	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.87.126	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.60.57	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.240.80.56	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.631700993 CET	1.1.1.1	192.168.2.16	0x178c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.254.36.163	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.644108057 CET	1.1.1.1	192.168.2.16	0x8794	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.644108057 CET	1.1.1.1	192.168.2.16	0x8794	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.644108057 CET	1.1.1.1	192.168.2.16	0x8794	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.646411896 CET	1.1.1.1	192.168.2.16	0x2a0c	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.646411896 CET	1.1.1.1	192.168.2.16	0x2a0c	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.646411896 CET	1.1.1.1	192.168.2.16	0x2a0c	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.646411896 CET	1.1.1.1	192.168.2.16	0x2a0c	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.649077892 CET	1.1.1.1	192.168.2.16	0x5e08	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	vanguard.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.135.186	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.87.126	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.128.214.125	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.250.133.195	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.241.19.39	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.60.57	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.251.39.134	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.654000044 CET	1.1.1.1	192.168.2.16	0xed98	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.216.198.28	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.655622959 CET	1.1.1.1	192.168.2.16	0x414a	No error (0)	vanguard.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.655622959 CET	1.1.1.1	192.168.2.16	0x414a	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.655622959 CET	1.1.1.1	192.168.2.16	0x414a	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.789561987 CET	1.1.1.1	192.168.2.16	0xcd98	No error (0)	ownyourfuture.vanguard.com	pex.ecs.insp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.789561987 CET	1.1.1.1	192.168.2.16	0xcd98	No error (0)	pex.ecs.insp.c1.vanguard.com	d1apt6cftkxnkw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:06.789561987 CET	1.1.1.1	192.168.2.16	0xcd98	No error (0)	d1apt6cftkxnkw.cloudfront.net		18.172.153.97	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.789561987 CET	1.1.1.1	192.168.2.16	0xcd98	No error (0)	d1apt6cftkxnkw.cloudfront.net		18.172.153.127	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.789561987 CET	1.1.1.1	192.168.2.16	0xcd98	No error (0)	d1apt6cftkxnkw.cloudfront.net		18.172.153.94	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:06.789561987 CET	1.1.1.1	192.168.2.16	0xcd98	No error (0)	d1apt6cftkxnkw.cloudfront.net		18.172.153.106	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:07.728477001 CET	1.1.1.1	192.168.2.16	0x6ade	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:07.728477001 CET	1.1.1.1	192.168.2.16	0x6ade	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:07.728477001 CET	1.1.1.1	192.168.2.16	0x6ade	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:07.774063110 CET	1.1.1.1	192.168.2.16	0x5693	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:07.774063110 CET	1.1.1.1	192.168.2.16	0x5693	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:07.774063110 CET	1.1.1.1	192.168.2.16	0x5693	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:07.774063110 CET	1.1.1.1	192.168.2.16	0x5693	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:07.774713993 CET	1.1.1.1	192.168.2.16	0x52a1	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:07.804647923 CET	1.1.1.1	192.168.2.16	0x3b9f	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.170.25.213	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.23.253	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.50.97.18	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.241.19.39	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.247.166.172	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.194.45.227	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.135.186	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:09.594677925 CET	1.1.1.1	192.168.2.16	0x62a6	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.216.198.28	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:09.595063925 CET	1.1.1.1	192.168.2.16	0x83bd	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:09.595063925 CET	1.1.1.1	192.168.2.16	0x83bd	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:09.595063925 CET	1.1.1.1	192.168.2.16	0x83bd	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:18.123842955 CET	1.1.1.1	192.168.2.16	0x4ac2	No error (0)	mdl-medallia-digital.vanguard.com	mdl-medallia-digital-angular-external.ecs.us-east-1.essp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:18.123842955 CET	1.1.1.1	192.168.2.16	0x4ac2	No error (0)	mdl-medallia-digital-angular-external.ecs.us-east-1.essp.c1.vanguard.com	d299zj3g6it160.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:18.123842955 CET	1.1.1.1	192.168.2.16	0x4ac2	No error (0)	d299zj3g6it160.cloudfront.net		3.160.150.55	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:18.123842955 CET	1.1.1.1	192.168.2.16	0x4ac2	No error (0)	d299zj3g6it160.cloudfront.net		3.160.150.63	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:18.123842955 CET	1.1.1.1	192.168.2.16	0x4ac2	No error (0)	d299zj3g6it160.cloudfront.net		3.160.150.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:18.123842955 CET	1.1.1.1	192.168.2.16	0x4ac2	No error (0)	d299zj3g6it160.cloudfront.net		3.160.150.25	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:18.138887882 CET	1.1.1.1	192.168.2.16	0x924c	No error (0)	mdl-medallia-digital.vanguard.com	mdl-medallia-digital-angular-external.ecs.us-east-1.essp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:18.138887882 CET	1.1.1.1	192.168.2.16	0x924c	No error (0)	mdl-medallia-digital-angular-external.ecs.us-east-1.essp.c1.vanguard.com	d299zj3g6it160.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:18.142904997 CET	1.1.1.1	192.168.2.16	0x20a2	No error (0)	content.zenimpact.io		35.244.204.77	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:18.993346930 CET	1.1.1.1	192.168.2.16	0x1d95	No error (0)	content.zenimpact.io		35.244.204.77	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:19.554723024 CET	1.1.1.1	192.168.2.16	0xe4c3	No error (0)	mdl-medallia-digital.vanguard.com	mdl-medallia-digital-angular-external.ecs.us-east-1.essp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:19.554723024 CET	1.1.1.1	192.168.2.16	0xe4c3	No error (0)	mdl-medallia-digital-angular-external.ecs.us-east-1.essp.c1.vanguard.com	d299zj3g6it160.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:19.554723024 CET	1.1.1.1	192.168.2.16	0xe4c3	No error (0)	d299zj3g6it160.cloudfront.net		3.160.150.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:19.554723024 CET	1.1.1.1	192.168.2.16	0xe4c3	No error (0)	d299zj3g6it160.cloudfront.net		3.160.150.63	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:19.554723024 CET	1.1.1.1	192.168.2.16	0xe4c3	No error (0)	d299zj3g6it160.cloudfront.net		3.160.150.25	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:19.554723024 CET	1.1.1.1	192.168.2.16	0xe4c3	No error (0)	d299zj3g6it160.cloudfront.net		3.160.150.55	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:19.567496061 CET	1.1.1.1	192.168.2.16	0x4eda	No error (0)	mdl-medallia-digital.vanguard.com	mdl-medallia-digital-angular-external.ecs.us-east-1.essp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:19.567496061 CET	1.1.1.1	192.168.2.16	0x4eda	No error (0)	mdl-medallia-digital-angular-external.ecs.us-east-1.essp.c1.vanguard.com	d299zj3g6it160.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:19.797095060 CET	1.1.1.1	192.168.2.16	0x2b1a	No error (0)	hub2.zenimpact.io		34.160.105.74	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:20.588579893 CET	1.1.1.1	192.168.2.16	0x2ae5	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:20.588579893 CET	1.1.1.1	192.168.2.16	0x2ae5	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:20.588676929 CET	1.1.1.1	192.168.2.16	0xc694	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Nov 1, 2024 17:52:21.041230917 CET	1.1.1.1	192.168.2.16	0x3143	No error (0)	thevanguardgroup.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:21.052335024 CET	1.1.1.1	192.168.2.16	0xb5f1	No error (0)	thevanguardgroup.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:21.052335024 CET	1.1.1.1	192.168.2.16	0xb5f1	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:21.052335024 CET	1.1.1.1	192.168.2.16	0xb5f1	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:21.052335024 CET	1.1.1.1	192.168.2.16	0xb5f1	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:21.373136997 CET	1.1.1.1	192.168.2.16	0x316c	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Nov 1, 2024 17:52:21.373450994 CET	1.1.1.1	192.168.2.16	0x55e9	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:21.373450994 CET	1.1.1.1	192.168.2.16	0x55e9	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:21.429451942 CET	1.1.1.1	192.168.2.16	0xeb52	No error (0)	insight-api-kgw.zenimpact.io		35.227.196.211	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:22.202128887 CET	1.1.1.1	192.168.2.16	0x1946	No error (0)	thevanguardgroup.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:22.202128887 CET	1.1.1.1	192.168.2.16	0x1946	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:22.202128887 CET	1.1.1.1	192.168.2.16	0x1946	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:22.202128887 CET	1.1.1.1	192.168.2.16	0x1946	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:22.202337980 CET	1.1.1.1	192.168.2.16	0x9102	No error (0)	thevanguardgroup.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:23.319519997 CET	1.1.1.1	192.168.2.16	0x3455	No error (0)	insight-api-kgw.zenimpact.io		35.227.196.211	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:24.116311073 CET	1.1.1.1	192.168.2.16	0x597b	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:24.116378069 CET	1.1.1.1	192.168.2.16	0x7ec8	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:24.116378069 CET	1.1.1.1	192.168.2.16	0x7ec8	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:24.116378069 CET	1.1.1.1	192.168.2.16	0x7ec8	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:24.116378069 CET	1.1.1.1	192.168.2.16	0x7ec8	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:25.240482092 CET	1.1.1.1	192.168.2.16	0x112a	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:25.240544081 CET	1.1.1.1	192.168.2.16	0xc66c	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:25.240544081 CET	1.1.1.1	192.168.2.16	0xc66c	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:25.240544081 CET	1.1.1.1	192.168.2.16	0xc66c	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:25.240544081 CET	1.1.1.1	192.168.2.16	0xc66c	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:26.213382006 CET	1.1.1.1	192.168.2.16	0x55de	No error (0)	resources.digital-cloud-prem.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:26.213382006 CET	1.1.1.1	192.168.2.16	0x55de	No error (0)	medallia2.map.fastly.net		146.75.117.230	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:26.223849058 CET	1.1.1.1	192.168.2.16	0xd3fc	No error (0)	resources.digital-cloud-prem.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:29.386162043 CET	1.1.1.1	192.168.2.16	0x4d2d	No error (0)	udc-neb.kampyle.com	cooladata.kampyle.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:29.386162043 CET	1.1.1.1	192.168.2.16	0x4d2d	No error (0)	cooladata.kampyle.com		35.241.45.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:29.386502981 CET	1.1.1.1	192.168.2.16	0x336c	No error (0)	udc-neb.kampyle.com	cooladata.kampyle.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:29.390189886 CET	1.1.1.1	192.168.2.16	0x9b86	No error (0)	resources.digital-cloud-prem.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:29.390189886 CET	1.1.1.1	192.168.2.16	0x9b86	No error (0)	medallia2.map.fastly.net		146.75.117.230	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:29.401266098 CET	1.1.1.1	192.168.2.16	0x8135	No error (0)	resources.digital-cloud-prem.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:30.199481964 CET	1.1.1.1	192.168.2.16	0x695c	No error (0)	udc-neb.kampyle.com	cooladata.kampyle.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:30.199481964 CET	1.1.1.1	192.168.2.16	0x695c	No error (0)	cooladata.kampyle.com		35.241.45.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:30.201267958 CET	1.1.1.1	192.168.2.16	0xcceb	No error (0)	udc-neb.kampyle.com	cooladata.kampyle.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:37.339056015 CET	1.1.1.1	192.168.2.16	0x1331	No error (0)	logon.vanguard.com	logon.vanguard.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:37.349162102 CET	1.1.1.1	192.168.2.16	0xc3dc	No error (0)	logon.vanguard.com	logon.vanguard.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:38.753659010 CET	1.1.1.1	192.168.2.16	0x64e0	No error (0)	mc3-static-assets.web.vanguard.com	d22dlotb04zv6c.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:38.753659010 CET	1.1.1.1	192.168.2.16	0x64e0	No error (0)	d22dlotb04zv6c.cloudfront.net		13.225.78.16	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.753659010 CET	1.1.1.1	192.168.2.16	0x64e0	No error (0)	d22dlotb04zv6c.cloudfront.net		13.225.78.57	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.753659010 CET	1.1.1.1	192.168.2.16	0x64e0	No error (0)	d22dlotb04zv6c.cloudfront.net		13.225.78.63	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.753659010 CET	1.1.1.1	192.168.2.16	0x64e0	No error (0)	d22dlotb04zv6c.cloudfront.net		13.225.78.59	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.758330107 CET	1.1.1.1	192.168.2.16	0x4b8	No error (0)	n4v.web.vanguard.com	d1sm3ej6ro1fad.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:38.758330107 CET	1.1.1.1	192.168.2.16	0x4b8	No error (0)	d1sm3ej6ro1fad.cloudfront.net		3.161.82.25	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.758330107 CET	1.1.1.1	192.168.2.16	0x4b8	No error (0)	d1sm3ej6ro1fad.cloudfront.net		3.161.82.74	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.758330107 CET	1.1.1.1	192.168.2.16	0x4b8	No error (0)	d1sm3ej6ro1fad.cloudfront.net		3.161.82.30	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.758330107 CET	1.1.1.1	192.168.2.16	0x4b8	No error (0)	d1sm3ej6ro1fad.cloudfront.net		3.161.82.33	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.760323048 CET	1.1.1.1	192.168.2.16	0x99f9	No error (0)	oob-check.cdn.web.vanguard.com	d3guyaenypd883.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:38.760381937 CET	1.1.1.1	192.168.2.16	0x5928	No error (0)	n4v.web.vanguard.com	d1sm3ej6ro1fad.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:38.760868073 CET	1.1.1.1	192.168.2.16	0x8e32	No error (0)	oob-check.cdn.web.vanguard.com	d3guyaenypd883.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:38.760868073 CET	1.1.1.1	192.168.2.16	0x8e32	No error (0)	d3guyaenypd883.cloudfront.net		52.222.236.24	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.760868073 CET	1.1.1.1	192.168.2.16	0x8e32	No error (0)	d3guyaenypd883.cloudfront.net		52.222.236.44	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.760868073 CET	1.1.1.1	192.168.2.16	0x8e32	No error (0)	d3guyaenypd883.cloudfront.net		52.222.236.120	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.760868073 CET	1.1.1.1	192.168.2.16	0x8e32	No error (0)	d3guyaenypd883.cloudfront.net		52.222.236.51	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.766266108 CET	1.1.1.1	192.168.2.16	0xdc5a	No error (0)	corp.at2.assets.vgdynamic.info		18.245.46.68	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.766266108 CET	1.1.1.1	192.168.2.16	0xdc5a	No error (0)	corp.at2.assets.vgdynamic.info		18.245.46.39	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.766266108 CET	1.1.1.1	192.168.2.16	0xdc5a	No error (0)	corp.at2.assets.vgdynamic.info		18.245.46.80	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.766266108 CET	1.1.1.1	192.168.2.16	0xdc5a	No error (0)	corp.at2.assets.vgdynamic.info		18.245.46.47	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:38.825426102 CET	1.1.1.1	192.168.2.16	0xbc8e	No error (0)	mc3-static-assets.web.vanguard.com	d22dlotb04zv6c.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:39.006306887 CET	1.1.1.1	192.168.2.16	0xe356	No error (0)	ccc.vgcontent.info	mc3-cloudfront.retp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:39.006306887 CET	1.1.1.1	192.168.2.16	0xe356	No error (0)	mc3-cloudfront.retp.c1.vanguard.com	d29netgb4x6mup.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:39.006306887 CET	1.1.1.1	192.168.2.16	0xe356	No error (0)	d29netgb4x6mup.cloudfront.net		18.239.50.87	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:39.006306887 CET	1.1.1.1	192.168.2.16	0xe356	No error (0)	d29netgb4x6mup.cloudfront.net		18.239.50.89	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:39.006306887 CET	1.1.1.1	192.168.2.16	0xe356	No error (0)	d29netgb4x6mup.cloudfront.net		18.239.50.70	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:39.006306887 CET	1.1.1.1	192.168.2.16	0xe356	No error (0)	d29netgb4x6mup.cloudfront.net		18.239.50.24	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:39.025933981 CET	1.1.1.1	192.168.2.16	0xa1cb	No error (0)	ccc.vgcontent.info	mc3-cloudfront.retp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:39.025933981 CET	1.1.1.1	192.168.2.16	0xa1cb	No error (0)	mc3-cloudfront.retp.c1.vanguard.com	d29netgb4x6mup.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:40.040537119 CET	1.1.1.1	192.168.2.16	0xf078	No error (0)	logon.vanguard.com	logon.vanguard.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:40.056318045 CET	1.1.1.1	192.168.2.16	0x4d1d	No error (0)	logon.vanguard.com	logon.vanguard.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:40.318572998 CET	1.1.1.1	192.168.2.16	0x54be	No error (0)	corp.at2.assets.vgdynamic.info		18.245.46.39	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.318572998 CET	1.1.1.1	192.168.2.16	0x54be	No error (0)	corp.at2.assets.vgdynamic.info		18.245.46.68	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.318572998 CET	1.1.1.1	192.168.2.16	0x54be	No error (0)	corp.at2.assets.vgdynamic.info		18.245.46.47	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.318572998 CET	1.1.1.1	192.168.2.16	0x54be	No error (0)	corp.at2.assets.vgdynamic.info		18.245.46.80	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.439920902 CET	1.1.1.1	192.168.2.16	0x7eeb	No error (0)	oob-check.cdn.web.vanguard.com	d3guyaenypd883.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:40.444164991 CET	1.1.1.1	192.168.2.16	0xf1ca	No error (0)	oob-check.cdn.web.vanguard.com	d3guyaenypd883.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:40.444164991 CET	1.1.1.1	192.168.2.16	0xf1ca	No error (0)	d3guyaenypd883.cloudfront.net		52.222.236.44	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.444164991 CET	1.1.1.1	192.168.2.16	0xf1ca	No error (0)	d3guyaenypd883.cloudfront.net		52.222.236.24	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.444164991 CET	1.1.1.1	192.168.2.16	0xf1ca	No error (0)	d3guyaenypd883.cloudfront.net		52.222.236.51	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.444164991 CET	1.1.1.1	192.168.2.16	0xf1ca	No error (0)	d3guyaenypd883.cloudfront.net		52.222.236.120	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.541466951 CET	1.1.1.1	192.168.2.16	0x7033	No error (0)	mc3-static-assets.web.vanguard.com	d22dlotb04zv6c.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:40.544197083 CET	1.1.1.1	192.168.2.16	0x2414	No error (0)	mc3-static-assets.web.vanguard.com	d22dlotb04zv6c.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:40.544197083 CET	1.1.1.1	192.168.2.16	0x2414	No error (0)	d22dlotb04zv6c.cloudfront.net		13.225.78.59	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.544197083 CET	1.1.1.1	192.168.2.16	0x2414	No error (0)	d22dlotb04zv6c.cloudfront.net		13.225.78.57	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.544197083 CET	1.1.1.1	192.168.2.16	0x2414	No error (0)	d22dlotb04zv6c.cloudfront.net		13.225.78.16	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.544197083 CET	1.1.1.1	192.168.2.16	0x2414	No error (0)	d22dlotb04zv6c.cloudfront.net		13.225.78.63	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.751482964 CET	1.1.1.1	192.168.2.16	0x2c25	No error (0)	n4v.web.vanguard.com	d1sm3ej6ro1fad.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:40.751482964 CET	1.1.1.1	192.168.2.16	0x2c25	No error (0)	d1sm3ej6ro1fad.cloudfront.net		18.239.36.40	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.751482964 CET	1.1.1.1	192.168.2.16	0x2c25	No error (0)	d1sm3ej6ro1fad.cloudfront.net		18.239.36.6	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.751482964 CET	1.1.1.1	192.168.2.16	0x2c25	No error (0)	d1sm3ej6ro1fad.cloudfront.net		18.239.36.60	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.751482964 CET	1.1.1.1	192.168.2.16	0x2c25	No error (0)	d1sm3ej6ro1fad.cloudfront.net		18.239.36.50	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:40.753736973 CET	1.1.1.1	192.168.2.16	0xad19	No error (0)	n4v.web.vanguard.com	d1sm3ej6ro1fad.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:42.605763912 CET	1.1.1.1	192.168.2.16	0xebe7	No error (0)	corp.etm.assets.vgdynamic.info		18.239.83.89	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:42.605763912 CET	1.1.1.1	192.168.2.16	0xebe7	No error (0)	corp.etm.assets.vgdynamic.info		18.239.83.74	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:42.605763912 CET	1.1.1.1	192.168.2.16	0xebe7	No error (0)	corp.etm.assets.vgdynamic.info		18.239.83.69	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:42.605763912 CET	1.1.1.1	192.168.2.16	0xebe7	No error (0)	corp.etm.assets.vgdynamic.info		18.239.83.66	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.836663008 CET	1.1.1.1	192.168.2.16	0x95cd	No error (0)	corp.etm.assets.vgdynamic.info		13.32.27.10	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.836663008 CET	1.1.1.1	192.168.2.16	0x95cd	No error (0)	corp.etm.assets.vgdynamic.info		13.32.27.15	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.836663008 CET	1.1.1.1	192.168.2.16	0x95cd	No error (0)	corp.etm.assets.vgdynamic.info		13.32.27.105	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.836663008 CET	1.1.1.1	192.168.2.16	0x95cd	No error (0)	corp.etm.assets.vgdynamic.info		13.32.27.125	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.941159964 CET	1.1.1.1	192.168.2.16	0x4bf5	No error (0)	corp-pmj.web.vanguard.com	d1mqvp9ngntjny.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:44.941159964 CET	1.1.1.1	192.168.2.16	0x4bf5	No error (0)	d1mqvp9ngntjny.cloudfront.net		18.245.60.15	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.941159964 CET	1.1.1.1	192.168.2.16	0x4bf5	No error (0)	d1mqvp9ngntjny.cloudfront.net		18.245.60.65	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.941159964 CET	1.1.1.1	192.168.2.16	0x4bf5	No error (0)	d1mqvp9ngntjny.cloudfront.net		18.245.60.32	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.941159964 CET	1.1.1.1	192.168.2.16	0x4bf5	No error (0)	d1mqvp9ngntjny.cloudfront.net		18.245.60.118	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:44.955533981 CET	1.1.1.1	192.168.2.16	0x3b0a	No error (0)	corp-pmj.web.vanguard.com	d1mqvp9ngntjny.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:46.494849920 CET	1.1.1.1	192.168.2.16	0xabfd	No error (0)	personal1.vanguard.com	personal1.ecs.retp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:46.494849920 CET	1.1.1.1	192.168.2.16	0xabfd	No error (0)	personal1.ecs.retp.c1.vanguard.com	d3480ohge1xe4o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:46.506500006 CET	1.1.1.1	192.168.2.16	0xafac	No error (0)	personal1.vanguard.com	personal1.ecs.retp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:46.506500006 CET	1.1.1.1	192.168.2.16	0xafac	No error (0)	personal1.ecs.retp.c1.vanguard.com	d3480ohge1xe4o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:46.506500006 CET	1.1.1.1	192.168.2.16	0xafac	No error (0)	d3480ohge1xe4o.cloudfront.net		13.32.121.59	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:46.506500006 CET	1.1.1.1	192.168.2.16	0xafac	No error (0)	d3480ohge1xe4o.cloudfront.net		13.32.121.94	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:46.506500006 CET	1.1.1.1	192.168.2.16	0xafac	No error (0)	d3480ohge1xe4o.cloudfront.net		13.32.121.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:46.506500006 CET	1.1.1.1	192.168.2.16	0xafac	No error (0)	d3480ohge1xe4o.cloudfront.net		13.32.121.79	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:46.665657043 CET	1.1.1.1	192.168.2.16	0x7724	No error (0)	corp-pmj.web.vanguard.com	d1mqvp9ngntjny.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:46.678725004 CET	1.1.1.1	192.168.2.16	0xdc58	No error (0)	corp-pmj.web.vanguard.com	d1mqvp9ngntjny.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:46.678725004 CET	1.1.1.1	192.168.2.16	0xdc58	No error (0)	d1mqvp9ngntjny.cloudfront.net		18.165.227.22	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:46.678725004 CET	1.1.1.1	192.168.2.16	0xdc58	No error (0)	d1mqvp9ngntjny.cloudfront.net		18.165.227.37	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:46.678725004 CET	1.1.1.1	192.168.2.16	0xdc58	No error (0)	d1mqvp9ngntjny.cloudfront.net		18.165.227.85	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:46.678725004 CET	1.1.1.1	192.168.2.16	0xdc58	No error (0)	d1mqvp9ngntjny.cloudfront.net		18.165.227.8	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:47.948951006 CET	1.1.1.1	192.168.2.16	0x4e17	No error (0)	personal1.vanguard.com	personal1.ecs.retp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:47.948951006 CET	1.1.1.1	192.168.2.16	0x4e17	No error (0)	personal1.ecs.retp.c1.vanguard.com	d3480ohge1xe4o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:47.971503019 CET	1.1.1.1	192.168.2.16	0x6631	No error (0)	personal1.vanguard.com	personal1.ecs.retp.c1.vanguard.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:47.971503019 CET	1.1.1.1	192.168.2.16	0x6631	No error (0)	personal1.ecs.retp.c1.vanguard.com	d3480ohge1xe4o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:47.971503019 CET	1.1.1.1	192.168.2.16	0x6631	No error (0)	d3480ohge1xe4o.cloudfront.net		13.227.219.103	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:47.971503019 CET	1.1.1.1	192.168.2.16	0x6631	No error (0)	d3480ohge1xe4o.cloudfront.net		13.227.219.24	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:47.971503019 CET	1.1.1.1	192.168.2.16	0x6631	No error (0)	d3480ohge1xe4o.cloudfront.net		13.227.219.11	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:47.971503019 CET	1.1.1.1	192.168.2.16	0x6631	No error (0)	d3480ohge1xe4o.cloudfront.net		13.227.219.13	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:48.282522917 CET	1.1.1.1	192.168.2.16	0x1536	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:48.282522917 CET	1.1.1.1	192.168.2.16	0x1536	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:48.282603025 CET	1.1.1.1	192.168.2.16	0x8ab9	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Nov 1, 2024 17:52:49.472198963 CET	1.1.1.1	192.168.2.16	0x3c5b	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:49.472198963 CET	1.1.1.1	192.168.2.16	0x3c5b	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:49.472865105 CET	1.1.1.1	192.168.2.16	0x52b3	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Nov 1, 2024 17:52:49.848891973 CET	1.1.1.1	192.168.2.16	0x370b	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:49.853363037 CET	1.1.1.1	192.168.2.16	0x6f2c	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:49.923897028 CET	1.1.1.1	192.168.2.16	0x3791	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:51.274904013 CET	1.1.1.1	192.168.2.16	0x65fa	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:51.768347979 CET	1.1.1.1	192.168.2.16	0xcbc9	No error (0)	12332392.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:51.768347979 CET	1.1.1.1	192.168.2.16	0xcbc9	No error (0)	dart.l.doubleclick.net		142.250.184.230	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:51.770009995 CET	1.1.1.1	192.168.2.16	0x2fcc	No error (0)	12332392.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:52:53.996021032 CET	1.1.1.1	192.168.2.16	0x25c7	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:54.297781944 CET	1.1.1.1	192.168.2.16	0xa96c	No error (0)	h64.online-metrix.net		192.225.158.1	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:54.638977051 CET	1.1.1.1	192.168.2.16	0xf64d	No error (0)	adservice.google.com		142.250.186.162	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:54.639938116 CET	1.1.1.1	192.168.2.16	0x81c7	No error (0)	adservice.google.com			65	IN (0x0001)	false
Nov 1, 2024 17:52:54.752747059 CET	1.1.1.1	192.168.2.16	0xfea5	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Nov 1, 2024 17:52:54.752787113 CET	1.1.1.1	192.168.2.16	0x8504	No error (0)	ad.doubleclick.net		172.217.16.198	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:55.233566999 CET	1.1.1.1	192.168.2.16	0xce84	No error (0)	h64.online-metrix.net		192.225.158.1	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:55.596426964 CET	1.1.1.1	192.168.2.16	0xe2e4	No error (0)	eu-aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:55.814971924 CET	1.1.1.1	192.168.2.16	0x96db	No error (0)	eu-aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:55.857244015 CET	1.1.1.1	192.168.2.16	0xfa9e	No error (0)	adservice.google.com		142.250.186.66	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:55.857563972 CET	1.1.1.1	192.168.2.16	0x1247	No error (0)	adservice.google.com			65	IN (0x0001)	false
Nov 1, 2024 17:52:56.038741112 CET	1.1.1.1	192.168.2.16	0xa412	No error (0)	ad.doubleclick.net		142.250.181.230	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:56.039036036 CET	1.1.1.1	192.168.2.16	0xc3c6	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Nov 1, 2024 17:52:56.667376995 CET	1.1.1.1	192.168.2.16	0x602b	No error (0)	d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:52:57.803760052 CET	1.1.1.1	192.168.2.16	0x24a9	No error (0)	d23ew8his4jrwdyhk3u2nhihsl2dx5bcdbezpcm60e8398a274b75d1dam1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:19.801924944 CET	1.1.1.1	192.168.2.16	0x4204	No error (0)	analytics-fe.digital-cloud-prem.medallia.com	digital.lb.sc4.medallia.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:53:19.801924944 CET	1.1.1.1	192.168.2.16	0x4204	No error (0)	digital.lb.sc4.medallia.com		199.102.178.60	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:19.802006960 CET	1.1.1.1	192.168.2.16	0xd960	No error (0)	analytics-fe.digital-cloud-prem.medallia.com	digital.lb.sc4.medallia.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:53:21.909837961 CET	1.1.1.1	192.168.2.16	0x6836	No error (0)	analytics-fe.digital-cloud-prem.medallia.com	digital.lb.sc4.medallia.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:53:21.913111925 CET	1.1.1.1	192.168.2.16	0x4809	No error (0)	analytics-fe.digital-cloud-prem.medallia.com	digital.lb.sc4.medallia.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:53:21.913111925 CET	1.1.1.1	192.168.2.16	0x4809	No error (0)	digital.lb.sc4.medallia.com		199.102.178.60	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:37.751231909 CET	1.1.1.1	192.168.2.16	0xe9a2	No error (0)	logon.vanguard.com	logon.vanguard.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:53:37.804717064 CET	1.1.1.1	192.168.2.16	0x7093	No error (0)	logon.vanguard.com	logon.vanguard.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:53:43.622587919 CET	1.1.1.1	192.168.2.16	0x8680	No error (0)	logon.vanguard.com	logon.vanguard.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:53:43.645318031 CET	1.1.1.1	192.168.2.16	0xa6a	No error (0)	logon.vanguard.com	logon.vanguard.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 17:53:43.683131933 CET	1.1.1.1	192.168.2.16	0xe379	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:43.683131933 CET	1.1.1.1	192.168.2.16	0xe379	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:43.683131933 CET	1.1.1.1	192.168.2.16	0xe379	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:44.806022882 CET	1.1.1.1	192.168.2.16	0x9b86	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:44.806022882 CET	1.1.1.1	192.168.2.16	0x9b86	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:44.806022882 CET	1.1.1.1	192.168.2.16	0x9b86	No error (0)	vanguard.d2.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Nov 1, 2024 17:53:59.023540974 CET	1.1.1.1	192.168.2.16	0x5e60	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49704	192.175.213.88	80	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 17:51:57.404969931 CET	446	OUT	GET /retirementplans HTTP/1.1 Host: www.vanguard.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 1, 2024 17:51:58.074419022 CET	939	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:51:57 GMT Server: Apache Set-Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; Path=/; Domain=.vanguard.com Set-Cookie: TLTUID=9B89012098711098B0DDD47FCE30B589; Path=/; Domain=.vanguard.com; Expires=Fri, 01-Nov-2034 16:51:57 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000;includeSubDomains X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 06 Jul 2021 18:11:02 GMT ETag: "15f-5c67858381980-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 275 Keep-Alive: timeout=65 Connection: Keep-Alive Set-Cookie: HNWPRD=C22; Path=/; Domain=.vanguard.com Data Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 90 41 6f 82 40 10 85 ef fe 8a e9 5e 3c c1 68 bc 94 0a 24 0a 34 98 68 a5 66 69 eb 91 c8 2a 24 b0 4b 97 41 f0 df d7 55 9b f4 d0 d3 cc 4b e6 7b ef 65 46 23 f7 29 dc 06 7c 9f 44 50 50 5d 41 92 2e d7 ab 00 98 85 f8 39 0b 10 43 1e c2 57 cc 37 6b 98 da 13 e0 3a 93 6d 49 a5 92 59 85 18 bd 31 60 05 51 f3 82 d8 f7 bd dd cf 6c a5 4f c8 77 38 18 af a9 81 1f ab 45 7f 48 3b a7 9c f9 ee 2d 6f a8 2b d9 7a ff b8 4c 1d c7 b9 c3 e6 54 64 b9 01 a8 b1 c4 77 57 9e 3d 16 28 49 42 92 c5 2f 8d 60 70 b8 2b 8f 91 18 08 0d 34 87 43 91 e9 56 90 97 f2 57 eb 99 a1 ef 6e 22 be 80 98 f3 c4 8a de d3 d5 87 c7 76 e2 a8 45 5b 30 08 7e f1 c9 1c d2 dd da 1b 9b a4 f6 da 47 f5 f2 a2 3a 7d ec a8 d3 c2 3e 67 f2 d4 65 3a b7 0f aa c6 4a 9d 4a 39 be 76 c3 38 5a 84 be bb dc 86 fb ab 78 0c f3 31 1f 46 3f b9 f9 86 25 5f 01 00 00 Data Ascii: mAo@^<h$4hfi*$KAUK{eF#)\|DPP]A.9CW7k:mIY1`QlOw8EH;-o+zLTdwW=(IB/`p+4CVWn"vE[0~G:}>ge:JJ9v8Zx1F?%_
Nov 1, 2024 17:51:58.144748926 CET	493	OUT	GET /favicon.ico HTTP/1.1 Host: www.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.vanguard.com/retirementplans Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
Nov 1, 2024 17:51:58.309540033 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:51:58 GMT Server: Apache Strict-Transport-Security: max-age=63072000;includeSubDomains X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 29 Oct 2019 19:49:06 GMT ETag: "e36-59611e8afd080-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2142 Keep-Alive: timeout=65 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 56 69 54 54 47 16 fe 0a 68 71 8b 22 fb 22 88 1a 97 68 dc b7 18 f7 05 88 31 76 34 44 34 e2 12 64 d0 c4 68 62 3a 13 93 d6 2c 66 42 9c 55 c0 49 1c 67 82 1a 47 c6 65 f2 90 60 c8 6a 88 1b cd 2b 68 a0 11 04 54 44 51 8c 51 bb 85 80 34 bd bd d7 fd e6 3e d4 93 33 e0 af 9c 99 7f b9 e7 d4 a9 ba ef de ba cb 57 f5 ee 2d 80 c1 0b 7e 7e 68 a7 17 34 c0 60 9a a3 a3 ef f2 87 bb 02 69 f4 6d 28 ad 55 15 f5 33 43 d7 76 d9 4c 86 07 92 a2 28 48 9c 5f 8b ec 83 16 e2 0a 70 ee ac 15 13 07 96 e1 f5 75 f5 30 9b 1d 30 e4 37 23 a2 9b 11 99 1f de c2 dc b1 35 18 16 68 c2 8b 2b 6b 31 6f 76 15 ac 6d 12 be f9 e2 36 1a 2e db d1 13 1c e5 46 2b e2 63 ab b1 3a be 16 a3 22 8c 38 f8 89 19 9f 1f b1 a0 7f ef 12 6c 4c aa c3 f4 91 67 11 00 23 9c 2e 09 2d 3f c9 f8 f1 9a 0d 3e 28 82 76 46 35 ba e1 34 ae df b2 61 44 78 39 4e 7e db 04 c5 e3 42 a8 a6 18 4b e3 2e 60 95 f6 02 86 f8 99 30 71 68 19 24 8f 1b 89 0b 6b 49 df 88 dc 43 b7 21 ec 37 93 8d d3 68 68 70 a0 d1 62 c3 ad 9b 6d e8 82 42 d8 6d 32 aa 2a 5b b1 30 a6 0a [TRUNCATED] Data Ascii: ViTTGhq""h1v4D4dhb:,fBUIgGe`j+hTDQQ4>3W-~~h4`im(U3CvL(H_pu007#5h+k1ovm6.F+c:"8lLg#.-?>(vF54aDx9N~BK.`0qh$kIC!7hhpbmBm2[0c-WWE"Cewp[@Cx(_(P=d7 _4uWGU=Z+ChUV~+)7bJ?jXL{Ul[pcGal{<2}<3-IhUD?{tvyzoP@.z",!AdU[P-<y_85ys^Xc~`Dw{1?>ZK_C>Sho^Zk0jHw^YqBCHTbQjG^1T"~Z>v_}-V^ g9U*(tbiMxoMj M2bDs \|t7U#eF;
Nov 1, 2024 17:51:58.309662104 CET	1236	IN	Data Raw: 5c e8 a7 29 c0 c6 e4 1a 84 a0 82 6a 7c 31 a2 50 46 f5 d2 81 41 ec 04 c6 04 88 b0 2a 4e 84 b2 53 54 97 15 d8 94 26 4c e9 77 06 4e aa 87 53 06 94 a0 aa c6 41 fa c7 31 21 b2 1c bb d3 6e a3 07 ed 2d ae b4 43 71 2a 68 a4 18 03 7c 4f a0 c5 a5 60 e3 ea Data Ascii: \)j\|1PFANST&LwNSA1!n-Cqh\|O`+p)6vJaUb`zes$HI`NB}H})B0`T!xW\|hR0Q\|(@\akkIxKWGu\g}%d;aQ @K'aac#{
Nov 1, 2024 17:51:58.309673071 CET	79	IN	Data Raw: 73 c1 ca d8 39 bd 78 c9 cc 45 c1 7c 91 89 bb 05 ae fd bd 99 b0 61 7c af 96 8b f5 ba 0b 17 85 cf cc 9c 8f 11 74 d9 8c eb 4b 75 fa e9 9c e5 d6 88 a9 e2 55 9d d8 6a 10 d8 79 51 2f de 49 e3 3c e3 17 3d ce fe 87 f4 1f 74 20 48 fe 36 0e 00 00 Data Ascii: s9xE\|a\|tKuUjyQ/I<=t H6
Nov 1, 2024 17:52:43.314686060 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49711	192.175.162.88	80	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 17:51:58.423556089 CET	382	OUT	GET /favicon.ico HTTP/1.1 Host: www.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
Nov 1, 2024 17:51:59.320128918 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:51:59 GMT Server: Apache Strict-Transport-Security: max-age=63072000;includeSubDomains X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 29 Oct 2019 19:49:06 GMT ETag: "e36-59611e8afd080-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2142 Keep-Alive: timeout=65 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 56 69 54 54 47 16 fe 0a 68 71 8b 22 fb 22 88 1a 97 68 dc b7 18 f7 05 88 31 76 34 44 34 e2 12 64 d0 c4 68 62 3a 13 93 d6 2c 66 42 9c 55 c0 49 1c 67 82 1a 47 c6 65 f2 90 60 c8 6a 88 1b cd 2b 68 a0 11 04 54 44 51 8c 51 bb 85 80 34 bd bd d7 fd e6 3e d4 93 33 e0 af 9c 99 7f b9 e7 d4 a9 ba ef de ba cb 57 f5 ee 2d 80 c1 0b 7e 7e 68 a7 17 34 c0 60 9a a3 a3 ef f2 87 bb 02 69 f4 6d 28 ad 55 15 f5 33 43 d7 76 d9 4c 86 07 92 a2 28 48 9c 5f 8b ec 83 16 e2 0a 70 ee ac 15 13 07 96 e1 f5 75 f5 30 9b 1d 30 e4 37 23 a2 9b 11 99 1f de c2 dc b1 35 18 16 68 c2 8b 2b 6b 31 6f 76 15 ac 6d 12 be f9 e2 36 1a 2e db d1 13 1c e5 46 2b e2 63 ab b1 3a be 16 a3 22 8c 38 f8 89 19 9f 1f b1 a0 7f ef 12 6c 4c aa c3 f4 91 67 11 00 23 9c 2e 09 2d 3f c9 f8 f1 9a 0d 3e 28 82 76 46 35 ba e1 34 ae df b2 61 44 78 39 4e 7e db 04 c5 e3 42 a8 a6 18 4b e3 2e 60 95 f6 02 86 f8 99 30 71 68 19 24 8f 1b 89 0b 6b 49 df 88 dc 43 b7 21 ec 37 93 8d d3 68 68 70 a0 d1 62 c3 ad 9b 6d e8 82 42 d8 6d 32 aa 2a 5b b1 30 a6 0a [TRUNCATED] Data Ascii: ViTTGhq""h1v4D4dhb:,fBUIgGe`j+hTDQQ4>3W-~~h4`im(U3CvL(H_pu007#5h+k1ovm6.F+c:"8lLg#.-?>(vF54aDx9N~BK.`0qh$kIC!7hhpbmBm2[0c-WWE"Cewp[@Cx(_(P=d7 _4uWGU=Z+ChUV~+)7bJ?jXL{Ul[pcGal{<2}<3-IhUD?{tvyzoP@.z",!AdU[P-<y_85ys^Xc~`Dw{1?>ZK_C>Sho^Zk0jHw^YqBCHTbQjG^1T"~Z>v_}-V^ g9U*(tbiMxoMj M2bDs \|t7U#eF;
Nov 1, 2024 17:51:59.320189953 CET	1236	IN	Data Raw: 5c e8 a7 29 c0 c6 e4 1a 84 a0 82 6a 7c 31 a2 50 46 f5 d2 81 41 ec 04 c6 04 88 b0 2a 4e 84 b2 53 54 97 15 d8 94 26 4c e9 77 06 4e aa 87 53 06 94 a0 aa c6 41 fa c7 31 21 b2 1c bb d3 6e a3 07 ed 2d ae b4 43 71 2a 68 a4 18 03 7c 4f a0 c5 a5 60 e3 ea Data Ascii: \)j\|1PFANST&LwNSA1!n-Cqh\|O`+p)6vJaUb`zes$HI`NB}H})B0`T!xW\|hR0Q\|(@\akkIxKWGu\g}%d;aQ @K'aac#{
Nov 1, 2024 17:51:59.320199966 CET	79	IN	Data Raw: 73 c1 ca d8 39 bd 78 c9 cc 45 c1 7c 91 89 bb 05 ae fd bd 99 b0 61 7c af 96 8b f5 ba 0b 17 85 cf cc 9c 8f 11 74 d9 8c eb 4b 75 fa e9 9c e5 d6 88 a9 e2 55 9d d8 6a 10 d8 79 51 2f de 49 e3 3c e3 17 3d ce fe 87 f4 1f 74 20 48 fe 36 0e 00 00 Data Ascii: s9xE\|a\|tKuUjyQ/I<=t H6
Nov 1, 2024 17:51:59.320341110 CET	79	IN	Data Raw: 73 c1 ca d8 39 bd 78 c9 cc 45 c1 7c 91 89 bb 05 ae fd bd 99 b0 61 7c af 96 8b f5 ba 0b 17 85 cf cc 9c 8f 11 74 d9 8c eb 4b 75 fa e9 9c e5 d6 88 a9 e2 55 9d d8 6a 10 d8 79 51 2f de 49 e3 3c e3 17 3d ce fe 87 f4 1f 74 20 48 fe 36 0e 00 00 Data Ascii: s9xE\|a\|tKuUjyQ/I<=t H6
Nov 1, 2024 17:52:44.320715904 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49705	192.175.213.88	80	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 17:52:42.406711102 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49710	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:51:59 UTC	797	OUT	GET /login HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://www.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
2024-11-01 16:51:59 UTC	763	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=utf-8 Content-Length: 140 Connection: close Date: Fri, 01 Nov 2024 16:51:59 GMT Location: https://ownyourfuture.vanguard.com/home/publogin Server: Set-Cookie: ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; expires=Fri, 01 Nov 2024 16:52:29 GMT; path=/ Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept,Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f7aba4a0337c5f98c4703e2b10f1940a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: Iv3Kw76hsK6285Dbx-gU2IbndVKFdMd9lwqPugnCGEbPfdeGv-mkqw==
2024-11-01 16:51:59 UTC	140	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 77 6e 79 6f 75 72 66 75 74 75 72 65 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 68 6f 6d 65 2f 70 75 62 6c 6f 67 69 6e 22 3e 68 74 74 70 73 3a 2f 2f 6f 77 6e 79 6f 75 72 66 75 74 75 72 65 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 68 6f 6d 65 2f 70 75 62 6c 6f 67 69 6e 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="https://ownyourfuture.vanguard.com/home/publogin">https://ownyourfuture.vanguard.com/home/publogin</a></p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49709	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:51:59 UTC	926	OUT	GET /home/publogin HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://www.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:51:59 UTC	479	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html Content-Length: 138 Connection: close Date: Fri, 01 Nov 2024 16:51:59 GMT Location: https://ownyourfuture.vanguard.com/en/home/publogin Server: Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 ba67e20db38657ee5cb05d05b3da9d70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: iO40d3bGIWmigRpGseekVMOX-DBb31vDn6sqEhI7WJT-si8IJplMCA==
2024-11-01 16:51:59 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 20 20 20 20 20 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center> </center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49713	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:00 UTC	929	OUT	GET /en/home/publogin HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://www.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:01 UTC	4114	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 53285 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:01 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 816b7f4e336674d9d7828ef4700482e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: nb8WPiGCPRwV_TP4o01Pd3R30TTkwyPr8EfqVV0OyBLnKT4cI2leWg== Age: 4829
2024-11-01 16:52:01 UTC	12270	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 65 6d 70 6c 61 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 73 78 2d 61 72 74 69 63 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 68 6f 6d 65 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 Data Ascii: <!DOCTYPE HTML><html lang="en"> <head> <meta charset="UTF-8"/> <meta name="template" content="psx-article"/> <meta name="viewport" content="width=device-width, initial-scale=1"/> <title>home</title>
2024-11-01 16:52:01 UTC	16243	IN	Data Raw: 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 38 37 2c 31 36 2e 31 31 61 2e 32 34 35 2e 32 34 35 2c 30 2c 30 2c 30 2d 2e 32 33 37 2e 32 35 35 41 2e 32 35 34 2e 32 35 34 2c 30 2c 30 2c 30 2c 31 32 2c 31 36 2e 36 31 68 2e 30 30 39 61 2e 32 34 36 2e 32 34 36 2c 30 2c 30 2c 30 2c 2e 32 33 37 2d 2e 32 35 35 41 2e 32 35 33 2e 32 35 33 2c 30 2c 30 2c 30 2c 31 32 2c 31 36 2e 31 31 22 3e 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 2c 31 36 2e 31 31 68 2d 2e 30 30 39 22 3e 3c 2f 70 61 74 68 3e 0a 3c 2f 73 79 6d 62 6f 6c 3e 0a 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 65 72 72 6f 72 2d 66 69 6c 6c 2d 6d 65 64 69 75 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 0a 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 65 72 72 6f 72 2d 73 Data Ascii: <path d="M11.987,16.11a.245.245,0,0,0-.237.255A.254.254,0,0,0,12,16.61h.009a.246.246,0,0,0,.237-.255A.253.253,0,0,0,12,16.11"></path><path d="M12,16.11h-.009"></path></symbol><symbol id="error-fill-medium" viewBox="0 0 24 24"><use xlink:href="#error-s
2024-11-01 16:52:01 UTC	16384	IN	Data Raw: 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 2e 34 2c 30 2c 30 2c 31 2e 34 2c 30 2c 30 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 32 2e 39 34 32 61 2e 37 35 2e 37 35 2c 30 2c 30 2c 30 2d 2e 37 35 2d 2e 37 35 48 37 2e 35 36 32 61 2e 32 35 2e 32 35 2c 30 2c 30 2c 31 2d 2e 32 34 35 2d 2e 32 2c 32 2e 33 38 31 2c 32 2e 33 38 31 2c 30 2c 30 2c 30 2d 34 2e 36 37 35 2c 30 2c 2e 32 35 31 2e 32 35 31 2c 30 2c 30 2c 31 2d 2e 32 34 35 2e 32 48 2e 37 35 61 2e 37 35 2e 37 35 2c 30 2c 30 2c 30 2c 30 2c 31 2e 35 48 31 61 2e 32 35 2e 32 35 2c 30 2c 30 2c 31 2c 2e 32 35 2e 32 35 76 34 2e 35 61 31 2e 35 2c 31 2e 35 2c 30 2c 30 2c 30 2c 31 2e 35 2c 31 2e 35 68 34 2e 35 61 31 2e 35 2c 31 2e 35 2c 30 2c 30 2c 30 2c 31 2e 35 2d 31 2e 35 76 2d 34 2e 35 41 2e 32 35 Data Ascii: ansform="matrix(1.4,0,0,1.4,0,0)"><path d="M10,2.942a.75.75,0,0,0-.75-.75H7.562a.25.25,0,0,1-.245-.2,2.381,2.381,0,0,0-4.675,0,.251.251,0,0,1-.245.2H.75a.75.75,0,0,0,0,1.5H1a.25.25,0,0,1,.25.25v4.5a1.5,1.5,0,0,0,1.5,1.5h4.5a1.5,1.5,0,0,0,1.5-1.5v-4.5A.25
2024-11-01 16:52:01 UTC	8388	IN	Data Raw: 74 2d 2d 31 31 20 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6d 70 2d 72 69 63 68 74 65 78 74 20 76 67 2d 74 65 78 74 20 20 73 70 2d 74 6f 70 2d 73 6d 20 73 70 2d 62 6f 74 2d 73 6d 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6d 70 2d 74 65 78 74 5f 5f 70 61 72 61 67 72 61 70 68 20 62 6f 64 79 2d 74 65 78 74 2d 6d 65 64 69 75 6d 20 72 65 67 75 6c 61 72 2d 73 74 79 6c 65 20 20 74 65 78 74 2d 63 6f 6c 6f 72 2d 69 6e 6b 2d 38 30 30 22 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 65 72 73 6f 6e 61 6c 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 64 66 2f 76 6d 63 5f 73 6f 66 63 2e 70 64 66 22 20 63 6c 61 73 73 3d 22 63 Data Ascii: t--11 aem-GridColumn--offset--default--1"><div class="cmp-richtext vg-text sp-top-sm sp-bot-sm"> <div class="cmp-text__paragraph body-text-medium regular-style text-color-ink-800"><p><a href="https://personal.vanguard.com/pdf/vmc_sofc.pdf" class="c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49717	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:02 UTC	903	OUT	GET /etc.clientlibs/vanguard-core-components/clientlibs/clientlib-base.min.ACSHASH1235395ee3249cf0f9725a3f8309380e.css HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:02 UTC	4191	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 304269 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:02 GMT ETag: "4a48d-61ea48048fa00" Last-Modified: Thu, 01 Aug 2024 19:48:56 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8b360b28aeb67c1982fcc466a05eef02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: nhGXOruGhJHwKYewGFdK1rtGBF0CL9oyF-xt3Dm-ApXZuEiVN6TE1w== Age: 235274
2024-11-01 16:52:02 UTC	12193	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 63 6d 70 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 3a 30 7d 0a 2e 63 6d 70 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 0a 2e 63 6d 70 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 70 61 6e 65 6c 2d 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 2e 63 6d 70 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 70 61 6e 65 6c 2d 2d 65 78 70 61 6e 64 65 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 0a 2e 63 6d 70 2d 74 61 62 73 5f 5f 74 61 62 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 70 61 Data Ascii: @charset "UTF-8";.cmp-accordion__header{margin:0}.cmp-accordion__button{display:block;width:100%;text-align:left}.cmp-accordion__panel--hidden{display:none}.cmp-accordion__panel--expanded{display:block}.cmp-tabs__tablist{display:flex;flex-wrap:wrap;pa
2024-11-01 16:52:02 UTC	8215	IN	Data Raw: 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 32 2e 35 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 38 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 32 35 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 38 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 33 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 33 37 2e 35 25 7d 0a 2e 61 65 Data Ascii: Column--default--1{float:left;clear:none;width:12.5%}.aem-Grid.aem-Grid--8>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;width:25%}.aem-Grid.aem-Grid--8>.aem-GridColumn.aem-GridColumn--default--3{float:left;clear:none;width:37.5%}.ae
2024-11-01 16:52:03 UTC	8028	IN	Data Raw: 64 65 66 61 75 6c 74 2d 2d 34 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 32 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 35 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 32 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 36 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a Data Ascii: default--4{float:left;clear:none;width:33.33333333%}.aem-Grid.aem-Grid--12>.aem-GridColumn.aem-GridColumn--default--5{float:left;clear:none;width:41.66666667%}.aem-Grid.aem-Grid--12>.aem-GridColumn.aem-GridColumn--default--6{float:left;clear:none;width:
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 37 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 34 2e 32 38 35 37 31 34 32 39 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 37 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 38 Data Ascii: .aem-GridColumn--offset--default--0{margin-left:0}.aem-Grid.aem-Grid--default--7>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:14.28571429%}.aem-Grid.aem-Grid--default--7>.aem-GridColumn.aem-GridColumn--offset--default--2{margin-left:28
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d Data Ascii: .aem-Grid.aem-Grid--6>.aem-GridColumn.aem-GridColumn--offset--phone--1{margin-left:16.66666667%}.aem-Grid.aem-Grid--6>.aem-GridColumn.aem-GridColumn--offset--phone--2{margin-left:33.33333333%}.aem-Grid.aem-Grid--6>.aem-GridColumn.aem-GridColumn--offset-
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c Data Ascii: }.aem-Grid.aem-Grid--phone--6>.aem-GridColumn.aem-GridColumn--offset--phone--0{margin-left:0}.aem-Grid.aem-Grid--phone--6>.aem-GridColumn.aem-GridColumn--offset--phone--1{margin-left:16.66666667%}.aem-Grid.aem-Grid--phone--6>.aem-GridColumn.aem-GridCol
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 74 61 62 6c 65 74 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 74 61 62 6c 65 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 74 61 62 6c 65 74 2d 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 30 25 7d 0a 2e 61 65 6d 2d 47 72 Data Ascii: -5>.aem-GridColumn.aem-GridColumn--offset--tablet--1{margin-left:20%}.aem-Grid.aem-Grid--5>.aem-GridColumn.aem-GridColumn--offset--tablet--2{margin-left:40%}.aem-Grid.aem-Grid--5>.aem-GridColumn.aem-GridColumn--offset--tablet--3{margin-left:60%}.aem-Gr
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 65 6d 2d 47 72 69 64 2d 2d 74 61 62 6c 65 74 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 74 61 62 6c 65 74 2d 2d 35 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 74 61 62 6c 65 74 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 74 61 62 6c 65 74 2d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 74 61 62 6c 65 74 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 Data Ascii: em-Grid--tablet--5>.aem-GridColumn.aem-GridColumn--tablet--5{float:left;clear:none;width:100%}.aem-Grid.aem-Grid--tablet--5>.aem-GridColumn.aem-GridColumn--offset--tablet--0{margin-left:0}.aem-Grid.aem-Grid--tablet--5>.aem-GridColumn.aem-GridColumn--off
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 67 2d 69 63 6f 6e 20 73 76 67 20 75 73 65 7b 66 69 6c 6c 3a 23 30 34 30 35 30 35 7d 0a 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 62 6f 78 20 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 6c 65 61 64 69 6e 67 2d 69 63 6f 6e 20 73 76 67 20 75 73 65 7b 66 69 6c 6c 3a 23 30 34 30 35 30 35 7d 0a 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 6c 61 62 65 6c 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 31 31 37 36 34 37 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 0a 2e 63 31 31 6e 2d 62 75 74 74 6f 6e Data Ascii: g-icon svg use{fill:#040505}.c11n-button:focus-visible .c11n-button__box .c11n-button__leading-icon svg use{fill:#040505}.c11n-button__label{padding:0;margin:0;justify-content:center;white-space:nowrap;line-height:1.41176471;font-size:1rem}.c11n-button
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 6d 20 23 30 66 36 32 63 35 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2e 31 32 35 72 65 6d 7d 0a 2e 63 31 31 6e 2d 2d 66 6f 63 75 73 2d 6f 76 65 72 72 69 64 64 65 6e 20 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 7d 0a 40 73 75 70 70 6f 72 74 73 20 6e 6f 74 20 73 65 6c 65 63 74 6f 72 28 2a 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 30 34 30 35 30 35 7d 0a 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 2e 63 31 31 6e 2d 62 75 74 74 6f Data Ascii: m #0f62c5;outline-offset:.125rem}.c11n--focus-overridden .c11n-button:focus::after{display:none !important}}@supports not selector(*:focus-visible){.c11n-button:focus .c11n-button__box{background-color:#fff;color:#040505}.c11n-button:focus .c11n-butto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49715	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:02 UTC	897	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-base.min.ACSHASH6df78a87ceef59434ba7a52da51db948.css HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:02 UTC	4191	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 196892 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:02 GMT ETag: "3011c-5d5d9ceff2340" Last-Modified: Tue, 18 Jan 2022 11:45:41 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f7aba4a0337c5f98c4703e2b10f1940a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: _XLeE0jgqjeMxCKSsHQZBwmeyhUmbND5a9wFMGPlCXmYVJjeVTVoww== Age: 235274
2024-11-01 16:52:02 UTC	4029	IN	Data Raw: 2e 61 65 6d 2d 47 72 69 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 3a 3a 62 65 66 6f 72 65 2c 2e 61 65 6d 2d 47 72 69 64 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 20 22 7d 0a 2e 61 65 6d 2d 47 72 69 64 3a 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 0a 2e 61 65 6d 2d 47 72 69 64 2d 6e 65 77 43 6f 6d 70 6f 6e 65 6e 74 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 72 67 69 6e 3a 30 7d 0a 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 0a 2e 61 65 6d 2d 47 72 69 64 53 68 6f 77 48 69 64 64 65 6e 3e 2e 61 65 6d 2d 47 72 69 64 3e 2e 61 65 6d Data Ascii: .aem-Grid{display:block;width:100%}.aem-Grid::before,.aem-Grid::after{display:table;content:" "}.aem-Grid::after{clear:both}.aem-Grid-newComponent{clear:both;margin:0}.aem-GridColumn{box-sizing:border-box;clear:both}.aem-GridShowHidden>.aem-Grid>.aem
2024-11-01 16:52:02 UTC	16384	IN	Data Raw: 65 6d 2d 47 72 69 64 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 35 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 36 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 Data Ascii: em-Grid--6>.aem-GridColumn.aem-GridColumn--default--5{float:left;clear:none;width:83.33333333%}.aem-Grid.aem-Grid--6>.aem-GridColumn.aem-GridColumn--default--6{float:left;clear:none;width:100%}.aem-Grid.aem-Grid--6>.aem-GridColumn.aem-GridColumn--offset
2024-11-01 16:52:02 UTC	16379	IN	Data Raw: 2d 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 0a 2e Data Ascii: --5{margin-left:100%}.aem-Grid.aem-Grid--default--6>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:16.66666667%}.aem-Grid.aem-Grid--default--6>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;width:33.33333333%}.
2024-11-01 16:52:02 UTC	8356	IN	Data Raw: 61 65 6d 2d 47 72 69 64 2d 2d 34 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 78 73 2d 2d 34 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 34 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 78 73 2d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 34 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 78 73 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 0a 2e 61 65 Data Ascii: aem-Grid--4>.aem-GridColumn.aem-GridColumn--xs--4{float:left;clear:none;width:100%}.aem-Grid.aem-Grid--4>.aem-GridColumn.aem-GridColumn--offset--xs--0{margin-left:0}.aem-Grid.aem-Grid--4>.aem-GridColumn.aem-GridColumn--offset--xs--1{margin-left:25%}.ae
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 30 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 78 73 2d 2d 31 30 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 30 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 78 73 2d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 30 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 78 73 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 Data Ascii: id.aem-Grid--10>.aem-GridColumn.aem-GridColumn--xs--10{float:left;clear:none;width:100%}.aem-Grid.aem-Grid--10>.aem-GridColumn.aem-GridColumn--offset--xs--0{margin-left:0}.aem-Grid.aem-Grid--10>.aem-GridColumn.aem-GridColumn--offset--xs--1{margin-left:1
2024-11-01 16:52:03 UTC	8028	IN	Data Raw: 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 78 73 2d 2d 31 30 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 78 73 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 78 73 2d 2d 31 30 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 78 73 2d 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 78 73 2d 2d 31 30 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 78 73 2d 2d 34 7b 6d 61 Data Ascii: .aem-Grid.aem-Grid--xs--10>.aem-GridColumn.aem-GridColumn--offset--xs--2{margin-left:20%}.aem-Grid.aem-Grid--xs--10>.aem-GridColumn.aem-GridColumn--offset--xs--3{margin-left:30%}.aem-Grid.aem-Grid--xs--10>.aem-GridColumn.aem-GridColumn--offset--xs--4{ma
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 34 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 73 6d 2d 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 73 6d 2d 2d 31 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 32 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 73 6d 2d 2d 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b Data Ascii: rid.aem-Grid--4>.aem-GridColumn.aem-GridColumn--offset--sm--4{margin-left:100%}.aem-Grid.aem-Grid--5>.aem-GridColumn.aem-GridColumn--sm--1{float:left;clear:none;width:20%}.aem-Grid.aem-Grid--5>.aem-GridColumn.aem-GridColumn--sm--2{float:left;clear:none;
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 73 6d 2d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 73 6d 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 73 6d 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 73 6d 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 73 6d 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 73 6d 2d 2d 35 3e 2e 61 65 6d 2d Data Ascii: .aem-GridColumn--offset--sm--0{margin-left:0}.aem-Grid.aem-Grid--sm--5>.aem-GridColumn.aem-GridColumn--offset--sm--1{margin-left:20%}.aem-Grid.aem-Grid--sm--5>.aem-GridColumn.aem-GridColumn--offset--sm--2{margin-left:40%}.aem-Grid.aem-Grid--sm--5>.aem-
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 38 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6d 64 2d 2d 35 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 6d 64 2d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d Data Ascii: t;clear:none;width:80%}.aem-Grid.aem-Grid--5>.aem-GridColumn.aem-GridColumn--md--5{float:left;clear:none;width:100%}.aem-Grid.aem-Grid--5>.aem-GridColumn.aem-GridColumn--offset--md--0{margin-left:0}.aem-Grid.aem-Grid--5>.aem-GridColumn.aem-GridColumn--
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 6d 64 2d 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 6d 64 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6d 64 2d 2d 31 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 6d 64 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6d 64 2d 2d 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 Data Ascii: .aem-GridColumn.aem-GridColumn--offset--md--5{margin-left:100%}.aem-Grid.aem-Grid--md--6>.aem-GridColumn.aem-GridColumn--md--1{float:left;clear:none;width:16.66666667%}.aem-Grid.aem-Grid--md--6>.aem-GridColumn.aem-GridColumn--md--2{float:left;clear:none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49716	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:02 UTC	907	OUT	GET /etc.clientlibs/iig-transformation/components/dwcharts/clientlibs/site.min.ACSHASH53f049f22e99afd3786d80801a989555.css HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:02 UTC	4185	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 128 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:02 GMT ETag: "80-617907fbbaf80" Last-Modified: Fri, 03 May 2024 18:00:46 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ba67e20db38657ee5cb05d05b3da9d70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: KsMDqx0ks9zHbdih9F3OzYWh74fMlVuGdRKtXJoHWE1WPyPSpbA9oA== Age: 235270
2024-11-01 16:52:02 UTC	128	IN	Data Raw: 40 69 6d 70 6f 72 74 20 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 73 74 72 75 63 74 75 72 65 2f 70 61 67 65 2f 63 6c 69 65 6e 74 6c 69 62 2f 6c 65 73 73 2f 68 65 6c 70 65 72 2d 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 73 2e 6c 65 73 73 22 3b 2e 63 6d 70 2d 64 77 63 68 61 72 74 73 7b 26 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 32 39 36 70 78 7d 0a 7d Data Ascii: @import "../../../../../structure/page/clientlib/less/helper-customizations.less";.cmp-dwcharts{&__container{max-width:1296px}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49718	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:02 UTC	905	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-dependencies.min.ACSHASHc212796be6047e2b0404bf46c943585c.css HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:02 UTC	4189	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 21354 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:02 GMT ETag: "536a-5e119a196cd40" Last-Modified: Fri, 10 Jun 2022 15:31:25 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 32db37931b5639dc27ebaba3ad4f3d2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: oZS06QRRaSuzYPxarF5mYApU5v2-wtuk_RjBWfMJ-Rno3e6HA5jgwg== Age: 235273
2024-11-01 16:52:02 UTC	12195	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:r
2024-11-01 16:52:02 UTC	9159	IN	Data Raw: 20 74 62 6f 64 79 20 74 72 2e 6f 64 64 3e 2e 73 6f 72 74 69 6e 67 5f 31 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 6f 72 64 65 72 2d 63 6f 6c 75 6d 6e 2e 73 74 72 69 70 65 20 74 62 6f 64 79 20 74 72 2e 6f 64 64 3e 2e 73 6f 72 74 69 6e 67 5f 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 31 66 31 66 31 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 64 69 73 70 6c 61 79 20 74 62 6f 64 79 20 74 72 2e 6f 64 64 3e 2e 73 6f 72 74 69 6e 67 5f 32 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 6f 72 64 65 72 2d 63 6f 6c 75 6d 6e 2e 73 74 72 69 70 65 20 74 62 6f 64 79 20 74 72 2e 6f 64 64 3e 2e 73 6f 72 74 69 6e 67 5f 32 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 33 66 33 66 33 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 Data Ascii: tbody tr.odd>.sorting_1,table.dataTable.order-column.stripe tbody tr.odd>.sorting_1{background-color:#f1f1f1}table.dataTable.display tbody tr.odd>.sorting_2,table.dataTable.order-column.stripe tbody tr.odd>.sorting_2{background-color:#f3f3f3}table.dataTa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49719	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:02 UTC	897	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.css HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:02 UTC	4191	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 404290 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:02 GMT ETag: "62b42-625b558008000" Last-Modified: Wed, 30 Oct 2024 17:50:56 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 18c9dea802c00b7c060142aad49f7288.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: 8Et_YFkVlGYl_ZqwWkE8x9Bysi8pB4JT2HQKWIg67H1nfwde07hHVg== Age: 169202
2024-11-01 16:52:02 UTC	15	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 Data Ascii: @import url(htt
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 70 73 3a 2f 2f 63 6f 6e 73 74 65 6c 6c 61 74 69 6f 6e 2d 73 74 61 74 69 63 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 76 30 2f 66 6f 6e 74 73 2f 63 6f 6e 73 74 65 6c 6c 61 74 69 6f 6e 2d 66 6f 6e 74 73 2e 63 73 73 29 3b 2e 63 68 61 72 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 63 68 61 72 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 68 61 72 74 5f 69 6d 67 7b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: ps://constellation-static.web.vanguard.com/v0/fonts/constellation-fonts.css);.chart-container{position:relative;margin:auto;height:100%;width:100%;background:#fff;display:flex;align-items:center;justify-content:center}.chart-container .chart_img{position:
2024-11-01 16:52:03 UTC	8949	IN	Data Raw: 74 72 61 73 74 3a 6e 6f 6e 65 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 6c 69 70 2d 63 61 72 64 2d 66 6c 69 70 70 65 64 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 66 6c 69 70 2d 63 61 72 64 2d 66 6c 69 70 70 65 64 3e 2e 66 6c 69 70 2d 63 61 72 64 2d 66 72 6f 6e 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 59 28 31 38 30 64 65 67 29 20 74 72 61 6e 73 6c 61 74 65 28 31 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 59 28 31 38 30 64 65 67 29 20 74 72 61 6e 73 6c 61 74 65 28 31 30 30 25 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 73 74 Data Ascii: trast:none),screen and (-ms-high-contrast:active){.flip-card-flipped{-webkit-transform:none;transform:none}.flip-card-flipped>.flip-card-front{-webkit-transform:rotateY(180deg) translate(100%);transform:rotateY(180deg) translate(100%);-webkit-transform-st
2024-11-01 16:52:03 UTC	3088	IN	Data Raw: 65 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 64 72 6f 70 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 6d 70 2d 61 64 76 69 63 65 2d 63 61 6c 63 75 6c 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 31 30 30 25 3b 67 61 70 3a 32 2e 35 72 65 6d 3b 63 6f 6c 6f 72 3a 23 30 34 30 35 30 35 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 39 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 63 6d 70 2d 61 64 76 69 63 65 2d 63 61 6c 63 75 6c 61 74 6f 72 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 34 36 25 20 35 34 25 3b 67 61 70 3a 31 2e 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 Data Ascii: e-accordion__dropdown{display:block}.cmp-advice-calculator{display:grid;grid-template-columns:100%;gap:2.5rem;color:#040505}@media screen and (min-width:769px) and (max-width:1024px){.cmp-advice-calculator{grid-template-columns:46% 54%;gap:1.5rem}}@media
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 69 67 68 74 3a 2e 32 35 72 65 6d 3b 77 69 64 74 68 3a 2e 38 37 35 72 65 6d 3b 68 65 69 67 68 74 3a 2e 38 37 35 72 65 6d 3b 62 6f 74 74 6f 6d 3a 2d 2e 31 38 37 35 72 65 6d 7d 2e 63 6d 70 2d 61 64 76 69 63 65 2d 63 61 6c 63 75 6c 61 74 6f 72 5f 5f 65 72 72 6f 72 2c 2e 63 6d 70 2d 61 64 76 69 63 65 2d 63 61 6c 63 75 6c 61 74 6f 72 5f 5f 69 6e 66 6f 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c Data Ascii: ight:.25rem;width:.875rem;height:.875rem;bottom:-.1875rem}.cmp-advice-calculator__error,.cmp-advice-calculator__info{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;fl
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 76 68 20 2d 20 35 39 70 78 29 3b 7a 2d 69 6e 64 65 78 3a 39 39 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 29 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 31 70 78 29 7b 2e 63 6d 70 2d 65 78 70 65 72 69 65 6e 63 65 66 72 61 67 6d 65 6e 74 2d 2d 70 73 78 2d 68 65 61 64 65 72 20 2e 63 6d 70 2d 61 64 76 69 63 65 2d 68 65 61 64 65 72 5f 5f 76 69 72 74 6e 61 76 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 63 6d 70 2d 65 78 70 65 72 69 65 6e 63 65 66 72 61 67 6d 65 6e 74 2d 2d 70 73 78 2d 68 65 61 64 65 72 20 2e 63 6d 70 2d 61 64 76 69 63 65 Data Ascii: height:calc(100vh - 59px);z-index:99;position:absolute;left:0;background-color:rgba(0,0,0,.4)}@media screen and (min-width:991px){.cmp-experiencefragment--psx-header .cmp-advice-header__virtnav{display:none}}.cmp-experiencefragment--psx-header .cmp-advice
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 39 30 25 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 33 70 78 7d 2e 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 2d 62 61 6e 6e 65 72 5f 5f 61 63 74 69 6f 6e 2d 6c 69 6e 6b 20 61 2c 2e 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 2d 62 61 6e 6e 65 72 5f 5f 64 65 73 63 72 69 70 74 69 6f 6e 20 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 61 72 6b 20 50 72 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 30 7d 2e 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 2d 62 61 6e 6e 65 72 5f 5f 61 63 74 69 6f 6e 2d 6c 69 6e 6b 20 61 7b 66 6f Data Ascii: ont-size:17px;line-height:24px;max-width:90%;padding-bottom:20px;padding-left:53px}.announcement-banner__action-link a,.announcement-banner__description p{font-family:Mark Pro;font-size:17px;line-height:24px;margin:0}.announcement-banner__action-link a{fo
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 73 2f 69 6d 61 67 65 73 2f 67 72 69 64 2d 76 69 65 77 2e 73 76 67 29 20 35 30 25 20 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 6d 6f 72 65 2d 69 6e 73 69 67 68 74 73 20 2e 67 72 69 64 2d 76 69 65 77 2d 69 6e 61 63 74 69 76 65 7b 77 69 64 74 68 3a 31 2e 35 72 65 6d 3b 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 7d 7d 2e 6d 6f 72 65 2d 69 6e 73 69 67 68 74 73 20 2e 6c 69 73 74 2d 76 69 65 77 7b 77 69 64 74 68 3a 32 72 65 6d 3b 68 65 69 67 68 74 3a 32 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 69 69 67 2d 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e Data Ascii: s/images/grid-view.svg) 50% no-repeat;border:none}@media screen and (max-width:767px){.more-insights .grid-view-inactive{width:1.5rem;height:1.5rem}}.more-insights .list-view{width:2rem;height:2rem;background:url(../../../etc.clientlibs/iig-transformation
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 34 29 7b 77 69 64 74 68 3a 32 31 2e 34 37 25 7d 40 6d 65 64 69 61 20 28 68 6f 76 65 72 3a 68 6f 76 65 72 29 7b 2e 69 6e 73 69 67 68 74 73 2d 72 65 73 65 61 72 63 68 2d 6c 69 62 72 61 72 79 2d 6c 69 73 74 5f 5f 74 61 62 6c 65 20 74 72 20 74 64 3a 68 6f 76 65 72 20 61 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 73 6f 6c 69 64 20 23 30 34 30 35 30 35 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 7d 2e 69 6e 73 69 67 68 74 73 2d 72 65 73 65 61 72 63 68 2d 6c 69 62 72 61 72 79 2d 6c 69 73 74 20 2e 63 68 69 6c 64 2d 72 6f 77 2d 69 6e 73 69 67 68 74 73 20 74 64 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 61 72 6b 20 50 72 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: 4){width:21.47%}@media (hover:hover){.insights-research-library-list__table tr td:hover a{border-bottom:solid #040505;cursor:pointer}}.insights-research-library-list .child-row-insights td{font-family:Mark Pro;font-size:14px;line-height:20px;background-co
2024-11-01 16:52:03 UTC	8949	IN	Data Raw: 3a 32 30 70 78 3b 74 6f 70 3a 31 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 23 74 65 6d 70 6c 61 74 65 2d 65 78 70 65 72 74 2d 73 65 63 74 69 6f 6e 20 2e 63 6d 70 2d 6d 6f 64 61 6c 20 2e 63 6d 70 2d 6d 6f 64 61 6c 2d 2d 67 72 69 64 20 2e 63 6d 70 2d 6d 6f 64 61 6c 2d 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 33 38 25 21 69 6d 70 6f 72 74 61 6e 74 7d 23 74 65 6d 70 6c 61 74 65 2d 65 78 70 65 72 74 2d 73 65 63 74 69 6f 6e 20 2e 63 6d 70 2d 6d 6f 64 61 6c 20 2e 63 6d 70 2d 6d 6f 64 61 6c 2d 2d 67 72 69 64 20 2e 63 6d 70 2d 6d 6f 64 61 6c 2d 2d 62 6f 64 79 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 33 38 70 78 20 36 32 70 78 7d 23 74 65 6d 70 6c 61 74 65 2d 65 78 70 65 72 74 2d 73 65 63 74 69 6f 6e 20 2e Data Ascii: :20px;top:10px}}@media (min-width:992px){#template-expert-section .cmp-modal .cmp-modal--grid .cmp-modal--container{width:38%!important}#template-expert-section .cmp-modal .cmp-modal--grid .cmp-modal--body{padding:10px 38px 62px}#template-expert-section .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49721	3.160.150.128	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:02 UTC	705	OUT	GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/launch-fa9ce42154c5.min.js HTTP/1.1 Host: corp-etm-arl.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
2024-11-01 16:52:02 UTC	861	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 675724 Connection: close Date: Fri, 01 Nov 2024 14:26:09 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 30 Oct 2024 13:39:04 GMT ETag: "c745b717bdfb1633027b8b2eb0197d39" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 x-amz-version-id: pXjYtjfrOqtsZZmS6HKeiCFYTg8ywEXp Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f59e52adbf3a58a76dec03547cb4b34c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Ga7Dxkp1BNwimrkEyD5TjeBa1SRguhNX1p3CMqqViucr9Mhhfc_eeA== Age: 8754 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:02 UTC	16384	IN	Data Raw: 2f 2f 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 60 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 36 61 62 61 63 37 35 2f 65 64 34 37 33 62 34 65 64 63 61 61 2f 6c 61 75 6e 63 68 2d 66 61 39 63 65 34 32 31 35 34 63 35 2e 6a 73 60 2e 0a 77 69 6e 64 6f 77 2e 5f 73 61 74 65 6c 6c 69 74 65 3d 77 69 6e 64 6f 77 2e 5f 73 61 74 65 6c 6c 69 74 65 7c 7c 7b 7d 2c 77 69 6e 64 6f 77 2e 5f 73 61 74 65 6c 6c 69 74 65 2e 63 6f 6e 74 61 69 6e 65 72 3d 7b 62 75 69 6c 64 49 6e 66 6f 3a 7b 6d 69 6e 69 66 69 65 64 3a 21 30 2c 62 75 69 6c 64 44 61 74 65 3a 22 32 30 32 34 2d 30 39 2d 32 34 54 31 38 3a 33 37 3a Data Ascii: // For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/launch-fa9ce42154c5.js`.window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-09-24T18:37:
2024-11-01 16:52:02 UTC	16384	IN	Data Raw: 72 6f 3a 21 31 7d 7d 2c 6e 61 76 69 67 61 74 69 6f 6e 5f 70 61 67 65 4e 61 6d 65 3a 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 22 22 2c 66 6f 72 63 65 4c 6f 77 65 72 43 61 73 65 3a 21 30 2c 73 74 6f 72 61 67 65 44 75 72 61 74 69 6f 6e 3a 22 70 61 67 65 76 69 65 77 22 2c 6d 6f 64 75 6c 65 50 61 74 68 3a 22 64 61 74 61 2d 6c 61 79 65 72 2d 6d 61 6e 61 67 65 72 2d 73 65 61 72 63 68 2d 64 69 73 63 6f 76 65 72 79 2f 73 72 63 2f 6c 69 62 2f 64 61 74 61 5f 65 6c 65 6d 65 6e 74 73 2f 63 6f 6e 74 65 78 74 5f 61 77 61 72 65 5f 64 61 74 61 5f 65 6c 65 6d 65 6e 74 2e 6a 73 22 2c 73 65 74 74 69 6e 67 73 3a 7b 73 75 62 73 63 72 69 70 74 69 6f 6e 3a 6e 75 6c 6c 2c 64 61 74 61 4c 61 79 65 72 50 61 74 68 3a 22 6e 61 76 69 67 61 74 69 6f 6e 50 6f 70 75 70 2e 70 61 67 65 4e Data Ascii: ro:!1}},navigation_pageName:{defaultValue:"",forceLowerCase:!0,storageDuration:"pageview",modulePath:"data-layer-manager-search-discovery/src/lib/data_elements/context_aware_data_element.js",settings:{subscription:null,dataLayerPath:"navigationPopup.pageN
2024-11-01 16:52:02 UTC	16384	IN	Data Raw: 76 61 6c 69 64 61 74 69 6f 6e 53 63 68 65 6d 61 3a 7b 7d 7d 2c 7b 6b 65 79 3a 22 39 38 61 66 34 66 37 62 2d 66 64 31 39 2d 34 64 32 64 2d 38 62 35 36 2d 33 64 30 35 35 38 39 63 31 32 63 33 22 2c 65 76 65 6e 74 4e 61 6d 65 3a 22 70 61 67 65 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 64 22 2c 72 65 73 65 74 42 65 66 6f 72 65 3a 21 31 2c 76 61 6c 69 64 61 74 69 6f 6e 53 63 68 65 6d 61 3a 7b 7d 7d 2c 7b 0a 6b 65 79 3a 22 61 33 36 33 37 35 36 34 2d 61 66 63 39 2d 34 65 65 33 2d 62 31 61 36 2d 30 64 65 66 65 37 30 37 33 61 64 61 22 2c 65 76 65 6e 74 4e 61 6d 65 3a 22 69 6e 74 65 72 6e 61 6c 53 65 61 72 63 68 22 2c 72 65 73 65 74 42 65 66 6f 72 65 3a 21 31 2c 76 61 6c 69 64 61 74 69 6f 6e 53 63 68 65 6d 61 3a 7b 7d 7d 2c 7b 6b 65 79 3a 22 34 65 38 31 62 65 36 30 2d 34 Data Ascii: validationSchema:{}},{key:"98af4f7b-fd19-4d2d-8b56-3d05589c12c3",eventName:"pageLoadCompleted",resetBefore:!1,validationSchema:{}},{key:"a3637564-afc9-4ee3-b1a6-0defe7073ada",eventName:"internalSearch",resetBefore:!1,validationSchema:{}},{key:"4e81be60-4
2024-11-01 16:52:02 UTC	16384	IN	Data Raw: 74 75 73 2c 64 61 74 61 3a 7b 7d 7d 29 29 7d 29 29 7d 7d 29 29 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 61 2e 63 6f 70 79 28 74 29 3b 64 65 6c 65 74 65 20 72 2e 5f 5f 6d 65 74 61 3b 76 61 72 20 69 3d 6e 2e 70 61 72 61 6d 73 2e 6b 65 79 7c 7c 6e 2e 64 61 74 61 50 61 74 68 2e 73 70 6c 69 74 28 22 2f 22 29 2e 70 6f 70 28 29 3b 72 65 74 75 72 6e 7b 65 72 72 6f 72 3a 74 2e 65 76 65 6e 74 2b 22 20 3e 20 22 2b 69 2b 22 20 3e 20 22 2b 6e 2e 6d 65 73 73 61 67 65 2e 72 65 70 6c 61 63 65 28 2f 3a 2f 67 2c 22 20 3e 22 29 2c 70 61 72 61 6d 73 3a 7b 6b 65 79 3a 69 2c 65 76 65 6e 74 3a 74 2e 65 76 65 6e 74 2c 63 6f 64 65 3a 6e 2e 63 6f 64 65 2c 64 61 74 61 50 61 74 68 3a 6e 2e 64 61 74 61 50 61 74 68 2c 73 63 68 65 6d 61 50 61 74 68 Data Ascii: tus,data:{}}))}))}}))},m=function(e,t,n){var r=a.copy(t);delete r.__meta;var i=n.params.key\|\|n.dataPath.split("/").pop();return{error:t.event+" > "+i+" > "+n.message.replace(/:/g," >"),params:{key:i,event:t.event,code:n.code,dataPath:n.dataPath,schemaPath
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 74 69 6f 6e 45 72 72 6f 72 73 5b 6f 5d 5b 63 5d 3d 74 68 69 73 2e 65 72 72 6f 72 73 2e 73 6c 69 63 65 28 73 29 3a 6e 75 6c 6c 21 3d 3d 75 26 26 28 65 5b 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 73 4b 65 79 5d 5b 75 5d 3d 74 68 69 73 2e 65 72 72 6f 72 73 2e 73 6c 69 63 65 28 73 29 29 2c 74 68 69 73 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 6d 29 7d 2c 0a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 46 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 2e 66 6f 72 6d 61 74 7c 7c 21 74 68 69 73 2e 66 6f 72 6d 61 74 56 61 6c 69 64 61 74 6f 72 73 5b 74 2e 66 6f 72 6d 61 74 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 74 68 69 73 2e 66 6f 72 6d Data Ascii: tionErrors[o][c]=this.errors.slice(s):null!==u&&(e[this.validationErrorsKey][u]=this.errors.slice(s)),this.handleError(m)},g.prototype.validateFormat=function(e,t){if("string"!=typeof t.format\|\|!this.formatValidators[t.format])return null;var n=this.form
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 65 2e 65 76 65 6e 74 7d 2c 69 2e 61 64 64 43 6f 6d 70 75 74 65 64 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 2e 5f 5f 6d 65 74 61 3d 74 2e 5f 5f 6d 65 74 61 7c 7c 7b 7d 2c 74 2e 5f 5f 6d 65 74 61 2e 63 6f 6d 70 75 74 65 64 53 74 61 74 65 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 5f 5f 6d 65 74 61 2c 22 63 6f 6d 70 75 74 65 64 53 74 61 74 65 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 5f 63 6f 6d 70 75 74 65 64 53 74 61 74 65 41 74 45 76 65 6e 74 28 74 29 7d 7d 29 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 69 7d 7d 7d 7d 2c 22 61 61 2d 70 72 6f 64 75 63 74 2d 73 74 72 69 6e 67 2d 73 Data Ascii: e.event},i.addComputedState=function(e,t){t.__meta=t.__meta\|\|{},t.__meta.computedState\|\|Object.defineProperty(t.__meta,"computedState",{configurable:!1,enumerable:!1,get:function(){return e._computedStateAtEvent(t)}})},e.exports=i}}}},"aa-product-string-s
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 76 61 72 20 72 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2e 6c 65 6e 67 74 68 2d 31 0a 3b 69 66 28 72 26 26 21 2f 5e 5b 30 2d 39 2e 5d 2b 24 2f 2e 74 65 73 74 28 72 29 29 7b 61 3d 32 3c 61 3f 61 3a 32 3b 76 61 72 20 69 3d 72 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 69 66 28 30 3c 3d 69 29 7b 66 6f 72 28 3b 30 3c 3d 69 26 26 31 3c 61 3b 29 69 3d 72 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 2c 69 2d 31 29 2c 61 2d 2d 3b 69 3d 30 3c 69 3f 72 2e 73 75 62 73 74 72 69 6e 67 28 69 29 3a 72 7d 7d Data Ascii: tion(e,t,n){if("string"==typeof e){var r=window.location.hostname,a=window.location.hostname.split(".").length-1;if(r&&!/^[0-9.]+$/.test(r)){a=2<a?a:2;var i=r.lastIndexOf(".");if(0<=i){for(;0<=i&&1<a;)i=r.lastIndexOf(".",i-1),a--;i=0<i?r.substring(i):r}}
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 2e 73 65 74 54 69 6d 65 28 63 2e 67 65 74 54 69 6d 65 28 29 2b 6f 2a 73 29 2c 63 6f 6f 6b 69 65 57 72 69 74 65 28 69 2c 61 2c 30 3d 3d 3d 6f 3f 30 3a 73 29 2c 61 29 3a 22 22 7d 65 2e 65 78 70 6f 72 74 73 2e 67 65 74 56 61 6c 4f 6e 63 65 3d 74 7d 7d 2c 22 63 6f 6d 6d 6f 6e 2d 61 6e 61 6c 79 74 69 63 73 2d 70 6c 75 67 69 6e 73 2f 73 72 63 2f 6c 69 62 2f 70 6c 75 67 69 6e 73 2f 67 65 74 56 69 73 69 74 44 75 72 61 74 69 6f 6e 2e 6a 73 22 3a 7b 73 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 26 26 22 2d 76 22 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 72 65 74 75 72 6e 7b 70 6c 75 67 69 6e 3a 22 67 65 74 56 69 73 69 74 44 75 72 61 74 69 6f 6e 22 2c 76 65 72 73 69 6f 6e 3a Data Ascii: .setTime(c.getTime()+o*s),cookieWrite(i,a,0===o?0:s),a):""}e.exports.getValOnce=t}},"common-analytics-plugins/src/lib/plugins/getVisitDuration.js":{script:function(e){function t(){if(arguments&&"-v"===arguments[0])return{plugin:"getVisitDuration",version:
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 3a 21 31 2c 73 65 72 76 65 72 44 6f 6d 61 69 6e 3a 22 74 68 65 76 61 6e 67 75 61 72 64 67 72 6f 75 70 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 75 72 6c 53 69 7a 65 4c 69 6d 69 74 3a 32 30 34 38 2c 76 69 65 77 73 45 6e 61 62 6c 65 64 3a 21 30 2c 6f 70 74 6f 75 74 45 6e 61 62 6c 65 64 3a 21 31 2c 0a 67 6c 6f 62 61 6c 4d 62 6f 78 4e 61 6d 65 3a 22 74 61 72 67 65 74 2d 67 6c 6f 62 61 6c 2d 6d 62 6f 78 22 2c 62 6f 64 79 48 69 64 64 65 6e 53 74 79 6c 65 3a 22 62 6f 64 79 20 7b 6f 70 61 63 69 74 79 3a 20 30 7d 22 2c 70 61 67 65 4c 6f 61 64 45 6e 61 62 6c 65 64 3a 21 30 2c 61 6e 61 6c 79 74 69 63 73 4c 6f 67 67 69 6e 67 3a 22 73 65 72 76 65 72 5f 73 69 64 65 22 2c 64 65 76 69 63 65 49 64 4c 69 66 65 74 69 6d 65 3a 36 33 32 34 34 38 65 35 2c 62 6f 64 79 48 Data Ascii: :!1,serverDomain:"thevanguardgroup.tt.omtrdc.net",urlSizeLimit:2048,viewsEnabled:!0,optoutEnabled:!1,globalMboxName:"target-global-mbox",bodyHiddenStyle:"body {opacity: 0}",pageLoadEnabled:!0,analyticsLogging:"server_side",deviceIdLifetime:632448e5,bodyH
2024-11-01 16:52:03 UTC	16384	IN	Data Raw: 74 2e 69 6e 64 65 78 4f 66 28 73 76 29 29 72 65 74 75 72 6e 20 7a 67 28 74 29 3b 76 61 72 20 6e 3d 47 74 28 74 29 3b 72 65 74 75 72 6e 20 48 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 73 65 6c 2c 72 3d 74 2e 65 71 3b 72 65 74 75 72 6e 20 65 3d 65 2e 66 69 6e 64 28 6e 29 2c 52 28 72 29 26 26 28 65 3d 65 2e 65 71 28 72 29 29 2c 65 7d 29 2c 7a 67 28 78 67 29 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 59 74 28 65 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 72 65 74 75 72 6e 20 7a 67 28 22 3c 22 2b 24 66 2b 22 2f 3e 22 29 2e 61 70 70 65 6e 64 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 24 74 28 65 29 7b 72 65 74 75 72 6e 20 7a 67 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: t.indexOf(sv))return zg(t);var n=Gt(t);return H((function(e,t){var n=t.sel,r=t.eq;return e=e.find(n),R(r)&&(e=e.eq(r)),e}),zg(xg),n)}function Yt(e){return zt(e).length>0}function Jt(e){return zg("<"+$f+"/>").append(e)}function $t(e){return zg(e)}function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49720	18.66.112.28	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:02 UTC	669	OUT	GET /antiflicker_v1/antiflicker.min.js HTTP/1.1 Host: corp-at2.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
2024-11-01 16:52:02 UTC	816	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 668 Connection: close Date: Fri, 01 Nov 2024 14:26:09 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 19 Sep 2024 14:13:56 GMT ETag: "b9868befb789ddd4672b36decdd1a4ad" x-amz-server-side-encryption: AES256 x-amz-version-id: 1GXNTm9bVlsIYb96pv7qN3NpRgzn7WEB Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 5c14dc328191a14142654d833f772c6c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Fz0LwyZLhm_sZpC_CMENTWlsapF6khA7m0NkVpYCIRxQN_7kAibs5Q== Age: 8754 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:02 UTC	668	IN	Data Raw: 2f 2a 70 72 65 68 69 64 69 6e 67 20 73 6e 69 70 70 65 74 20 66 6f 72 20 41 64 6f 62 65 20 54 61 72 67 65 74 20 61 6e 64 20 41 4a 4f 20 77 69 74 68 20 61 73 79 6e 63 68 72 6f 6e 6f 75 73 20 4c 61 75 6e 63 68 20 64 65 70 6c 6f 79 6d 65 6e 74 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 65 2c 20 61 2c 20 6e 2c 20 74 29 20 7b 20 76 61 72 20 69 20 3d 20 65 2e 68 65 61 64 3b 20 69 66 20 28 69 29 20 7b 20 69 66 20 28 61 29 20 72 65 74 75 72 6e 3b 20 76 61 72 20 6f 20 3d 20 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 20 6f 2e 69 64 20 3d 20 22 61 6c 6c 6f 79 2d 70 72 65 68 69 64 69 6e 67 22 3b 20 6f 2e 69 6e 6e 65 72 54 65 78 74 20 3d 20 6e 20 2b 20 27 7b 20 6f 70 61 63 69 74 79 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 20 7d 27 3b 20 69 2e Data Ascii: /prehiding snippet for Adobe Target and AJO with asynchronous Launch deployment/!function(e, a, n, t) { var i = e.head; if (i) { if (a) return; var o = e.createElement("style"); o.id = "alloy-prehiding"; o.innerText = n + '{ opacity: 0 !important }'; i.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49722	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:02 UTC	906	OUT	GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-dependencies.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:03 UTC	4159	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 0 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:02 GMT ETag: "0-5facfbb0e3cc0" Last-Modified: Wed, 03 May 2023 20:16:27 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 0c371064bf157d89e4b3520c0b29474c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: hxx9AK_bIwGJxlKTtxE25yZdjb9xWbyhlIsT9kBuMQqhU1JaMFN90A== Age: 235273

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:02 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-01 16:52:02 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=86020 Date: Fri, 01 Nov 2024 16:52:02 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49724	13.224.245.51	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:03 UTC	484	OUT	GET /antiflicker_v1/antiflicker.min.js HTTP/1.1 Host: corp-at2.web.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
2024-11-01 16:52:03 UTC	812	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 668 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Thu, 19 Sep 2024 14:13:56 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 1GXNTm9bVlsIYb96pv7qN3NpRgzn7WEB Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 16:52:04 GMT ETag: "b9868befb789ddd4672b36decdd1a4ad" X-Cache: RefreshHit from cloudfront Via: 1.1 6301016ccf61750ec7dd668279788376.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OjfJbqYJi3CFsdBaXj3JWggzwzysG9kCIGBdu3d1ONsu7U3cvit1Eg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:03 UTC	668	IN	Data Raw: 2f 2a 70 72 65 68 69 64 69 6e 67 20 73 6e 69 70 70 65 74 20 66 6f 72 20 41 64 6f 62 65 20 54 61 72 67 65 74 20 61 6e 64 20 41 4a 4f 20 77 69 74 68 20 61 73 79 6e 63 68 72 6f 6e 6f 75 73 20 4c 61 75 6e 63 68 20 64 65 70 6c 6f 79 6d 65 6e 74 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 65 2c 20 61 2c 20 6e 2c 20 74 29 20 7b 20 76 61 72 20 69 20 3d 20 65 2e 68 65 61 64 3b 20 69 66 20 28 69 29 20 7b 20 69 66 20 28 61 29 20 72 65 74 75 72 6e 3b 20 76 61 72 20 6f 20 3d 20 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 20 6f 2e 69 64 20 3d 20 22 61 6c 6c 6f 79 2d 70 72 65 68 69 64 69 6e 67 22 3b 20 6f 2e 69 6e 6e 65 72 54 65 78 74 20 3d 20 6e 20 2b 20 27 7b 20 6f 70 61 63 69 74 79 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 20 7d 27 3b 20 69 2e Data Ascii: /prehiding snippet for Adobe Target and AJO with asynchronous Launch deployment/!function(e, a, n, t) { var i = e.head; if (i) { if (a) return; var o = e.createElement("style"); o.id = "alloy-prehiding"; o.innerText = n + '{ opacity: 0 !important }'; i.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49725	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:03 UTC	898	OUT	GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-site.min.ACSHASHab1e694af2e688e019466c9b3d4048e3.css HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:04 UTC	4190	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 182946 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:03 GMT ETag: "2caa2-625c95640b780" Last-Modified: Thu, 31 Oct 2024 17:42:06 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5b21c56dde1a436b4b6766d2406627d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: HWi7xykmWTFuc1cL861oSb6RL8bzoUWf8Hj6RPHqhBO5jAXJJVjskQ== Age: 83152
2024-11-01 16:52:04 UTC	12194	IN	Data Raw: 40 69 6d 70 6f 72 74 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 74 65 6c 6c 61 74 69 6f 6e 2d 73 74 61 74 69 63 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 76 31 2f 66 6f 6e 74 73 2f 63 6f 6e 73 74 65 6c 6c 61 74 69 6f 6e 2d 66 6f 6e 74 73 2e 63 73 73 22 3b 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 2a 2c 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 62 75 74 74 6f 6e 2c 64 64 2c 64 69 76 2c 64 6c 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 65 61 Data Ascii: @import"https://constellation-static.web.vanguard.com/v1/fonts/constellation-fonts.css";html{box-sizing:border-box;-webkit-text-size-adjust:100%},:before,*:after{box-sizing:inherit}blockquote,body,button,dd,div,dl,figcaption,figure,h1,h2,h3,h4,h5,h6,hea
2024-11-01 16:52:04 UTC	192	IN	Data Raw: 2e 38 37 35 72 65 6d 7d 2e 63 31 31 6e 2d 74 65 78 74 2d 34 78 6c 2d 64 69 73 70 6c 61 79 2d 2d 63 72 6f 70 3a 61 66 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 2e 37 35 72 65 6d 7d 2e 63 31 31 6e 2d 74 65 78 74 2d 34 78 6c 2d 2d 63 72 6f 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 46 20 4d 61 72 6b 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 35 36 32 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 32 32 38 Data Ascii: .875rem}.c11n-text-4xl-display--crop:after{margin-top:-.75rem}.c11n-text-4xl--crop{font-family:FF Mark,Arial,sans-serif;font-weight:400;font-style:normal;font-size:3.5625rem;line-height:1.1228
2024-11-01 16:52:04 UTC	16051	IN	Data Raw: 30 37 30 31 37 35 7d 2e 63 31 31 6e 2d 74 65 78 74 2d 34 78 6c 2d 2d 63 72 6f 70 3a 62 65 66 6f 72 65 2c 2e 63 31 31 6e 2d 74 65 78 74 2d 34 78 6c 2d 2d 63 72 6f 70 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 30 7d 2e 63 31 31 6e 2d 74 65 78 74 2d 34 78 6c 2d 2d 63 72 6f 70 3a 62 65 66 6f 72 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 2e 30 33 31 32 35 72 65 6d 7d 2e 63 31 31 6e 2d 74 65 78 74 2d 34 78 6c 2d 2d 63 72 6f 70 3a 61 66 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 2e 34 36 30 39 33 37 35 72 65 6d 7d 2e 63 31 31 6e 2d 74 65 78 74 2d 33 78 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 46 20 4d 61 72 6b 2c 41 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: 070175}.c11n-text-4xl--crop:before,.c11n-text-4xl--crop:after{content:"";display:block;height:0;width:0}.c11n-text-4xl--crop:before{margin-bottom:-1.03125rem}.c11n-text-4xl--crop:after{margin-top:-.4609375rem}.c11n-text-3xl{font-family:FF Mark,Arial,sans-
2024-11-01 16:52:04 UTC	16384	IN	Data Raw: 65 6d 7d 2e 63 31 31 6e 2d 73 70 61 63 65 2d 69 6e 73 65 74 2d 32 5f 35 78 7b 70 61 64 64 69 6e 67 3a 31 2e 32 35 72 65 6d 7d 2e 63 31 31 6e 2d 73 70 61 63 65 2d 73 74 61 63 6b 2d 32 5f 35 78 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 2c 2e 63 31 31 6e 2d 73 70 61 63 65 2d 73 74 61 63 6b 2d 32 5f 35 78 3a 6c 61 73 74 2d 63 68 69 6c 64 2e 63 31 31 6e 2d 73 70 61 63 65 2d 2d 66 6f 72 63 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 7d 2e 63 31 31 6e 2d 73 70 61 63 65 2d 69 6e 6c 69 6e 65 2d 72 69 67 68 74 2d 32 5f 35 78 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 2c 2e 63 31 31 6e 2d 73 70 61 63 65 2d 69 6e 6c 69 6e 65 2d 72 69 67 68 74 2d 32 5f 35 78 3a 6c 61 73 74 2d 63 68 69 6c 64 2e 63 31 31 6e 2d 73 70 61 63 65 2d Data Ascii: em}.c11n-space-inset-2_5x{padding:1.25rem}.c11n-space-stack-2_5x:not(:last-child),.c11n-space-stack-2_5x:last-child.c11n-space--force{margin-bottom:1.25rem}.c11n-space-inline-right-2_5x:not(:last-child),.c11n-space-inline-right-2_5x:last-child.c11n-space-
2024-11-01 16:52:04 UTC	16384	IN	Data Raw: 72 67 65 72 2e 61 65 6d 76 63 2d 65 6d 61 69 6c 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 6d 76 63 2d 64 6f 77 6e 6c 6f 61 64 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 6d 76 63 2d 64 6f 63 75 6d 65 6e 74 2d 70 64 66 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 6d 76 63 2d 64 6f 63 75 6d 65 6e 74 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 6d 76 63 2d 64 61 74 65 2d 70 69 63 6b 65 72 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 6d 76 63 2d 63 68 65 63 6b 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e Data Ascii: rger.aemvc-email-medium, .aemvc-icon--larger.aemvc-download-medium, .aemvc-icon--larger.aemvc-document-pdf-medium, .aemvc-icon--larger.aemvc-document-medium, .aemvc-icon--larger.aemvc-date-picker-medium, .aemvc-icon--larger.aemvc-check-medium, .aemvc-icon
2024-11-01 16:52:04 UTC	16384	IN	Data Raw: 65 6e 74 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 6d 76 63 2d 64 6f 63 75 6d 65 6e 74 2d 70 64 66 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 6d 76 63 2d 64 6f 77 6e 6c 6f 61 64 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 6d 76 63 2d 65 6d 61 69 6c 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 6d 76 63 2d 65 72 72 6f 72 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 6d 76 63 2d 66 65 65 64 62 61 63 6b 2d 64 69 73 6c 69 6b 65 2d 6d 65 64 69 75 6d 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 6c 61 72 67 65 72 2e 61 65 Data Ascii: ent-medium, .aemvc-icon--larger.aemvc-document-pdf-medium, .aemvc-icon--larger.aemvc-download-medium, .aemvc-icon--larger.aemvc-email-medium, .aemvc-icon--larger.aemvc-error-medium, .aemvc-icon--larger.aemvc-feedback-dislike-medium, .aemvc-icon--larger.ae
2024-11-01 16:52:04 UTC	16384	IN	Data Raw: 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6f 6c 75 6d 6e 2d 67 61 70 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 2d 6d 6f 7a 2d 63 6f 6c 75 6d 6e 2d 67 61 70 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6c 75 6d 6e 2d 67 61 70 3a 20 32 34 70 78 3b 0a 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 31 32 2c 20 31 66 72 29 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 33 37 35 70 78 29 20 7b 0a 20 20 2e 61 65 6d 76 63 2d 76 31 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 61 65 6d 76 63 2d 76 31 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 Data Ascii: container { margin: 0 auto; display: grid; -webkit-column-gap: 24px; -moz-column-gap: 24px; column-gap: 24px; grid-template-columns: repeat(12, 1fr);}@media (min-width: 375px) { .aemvc-v1-container .aemvc-v1-inner-container {
2024-11-01 16:52:04 UTC	16384	IN	Data Raw: 30 35 30 35 3b 0a 7d 0a 2e 61 65 6d 76 63 2d 76 31 2d 68 65 61 64 65 72 2d 62 6f 72 64 65 72 20 61 3a 66 6f 63 75 73 2c 0a 2e 61 65 6d 76 63 2d 76 31 2d 68 65 61 64 65 72 2d 62 6f 72 64 65 72 20 61 3a 6c 69 6e 6b 3a 66 6f 63 75 73 20 7b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 33 70 78 20 73 6f 6c 69 64 20 23 30 66 36 32 63 35 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 66 36 32 63 35 3b 0a 7d 0a 2e 61 65 6d 76 63 2d 76 31 2d 68 65 61 64 65 72 2d 62 6f 72 64 65 72 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 61 65 6d 76 63 2d 76 31 2d 68 65 61 64 65 72 2d 62 6f 72 64 65 72 20 68 32 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 Data Ascii: 0505;}.aemvc-v1-header-border a:focus,.aemvc-v1-header-border a:link:focus { outline: 3px solid #0f62c5; color: #0f62c5;}.aemvc-v1-header-border p { font-size: 17px; line-height: 24px; margin: 0;}.aemvc-v1-header-border h2 { font-size:
2024-11-01 16:52:04 UTC	16384	IN	Data Raw: 70 61 75 73 65 2d 73 6d 61 6c 6c 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 73 6d 61 6c 6c 65 72 2e 61 65 6d 76 63 2d 70 6c 61 79 2d 73 6d 61 6c 6c 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 73 6d 61 6c 6c 65 72 2e 61 65 6d 76 63 2d 70 6c 75 73 2d 73 6d 61 6c 6c 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 73 6d 61 6c 6c 65 72 2e 61 65 6d 76 63 2d 70 6f 70 2d 77 69 6e 64 6f 77 2d 73 6d 61 6c 6c 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 73 6d 61 6c 6c 65 72 2e 61 65 6d 76 63 2d 70 72 69 6e 74 2d 73 6d 61 6c 6c 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 73 6d 61 6c 6c 65 72 2e 61 65 6d 76 63 2d 72 65 66 72 65 73 68 2d 73 6d 61 6c 6c 2c 20 2e 61 65 6d 76 63 2d 69 63 6f 6e 2d 2d 73 6d 61 6c 6c 65 72 2e 61 65 6d 76 63 2d 72 65 6d 6f 76 65 2d 73 6d 61 Data Ascii: pause-small, .aemvc-icon--smaller.aemvc-play-small, .aemvc-icon--smaller.aemvc-plus-small, .aemvc-icon--smaller.aemvc-pop-window-small, .aemvc-icon--smaller.aemvc-print-small, .aemvc-icon--smaller.aemvc-refresh-small, .aemvc-icon--smaller.aemvc-remove-sma
2024-11-01 16:52:05 UTC	16384	IN	Data Raw: 75 74 74 6f 6e 5f 5f 6c 61 62 65 6c 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 46 46 20 4d 61 72 6b 22 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 37 35 72 65 6d 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 2e 61 65 6d 76 63 2d 76 31 2d 62 75 74 74 6f 6e 20 2e 61 65 6d 76 63 2d 76 31 2d 62 75 74 74 6f 6e 5f 5f 74 72 61 69 6c 69 6e 67 2d 69 63 6f 6e 2c 0a 2e 61 65 6d 76 63 2d 76 31 2d 62 75 74 74 6f 6e 20 2e 61 65 6d 76 63 2d 76 31 2d 62 75 74 74 6f 6e 5f 5f 6c 65 61 64 69 6e 67 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c Data Ascii: utton__label { font-family: "FF Mark", Arial, sans-serif; font-weight: 700; font-style: normal; font-size: 0.875rem; line-height: 20px;}.aemvc-v1-button .aemvc-v1-button__trailing-icon,.aemvc-v1-button .aemvc-v1-button__leading-icon { displ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49726	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:03 UTC	898	OUT	GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-base.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:04 UTC	4159	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 0 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:04 GMT ETag: "0-5facfbb0e3cc0" Last-Modified: Wed, 03 May 2023 20:16:27 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 cfa647edefc0769e715b9781478b0626.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: ahVd4WHMH92U7AG_MSbviCliGIu8KVN4HrYHOM3qSHmiARp2BPulbg== Age: 235275

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-01 16:52:04 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=86076 Date: Fri, 01 Nov 2024 16:52:03 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-01 16:52:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49728	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:03 UTC	947	OUT	GET /structure/page/clientlib/less/helper-customizations.less HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/components/dwcharts/clientlibs/site.min.ACSHASH53f049f22e99afd3786d80801a989555.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:04 UTC	723	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 14296 Connection: close Date: Fri, 01 Nov 2024 16:52:04 GMT ETag: W/"37d8-GLRObbURA5KHP9v9pCIGGw" Server: Set-Cookie: ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; expires=Fri, 01 Nov 2024 16:52:34 GMT; path=/ Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 da78abc509aafffb42eec33ca2dc60d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: u784KnnVTHdfqAY_94dgxgesGkjAXLTmPEpp9FmlXxrTM7Jf_gl0Xg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49729	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:04 UTC	890	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-dependencies.min.ACSHASHd45b9e1af27f3e2e822f5adaf58a1ef1.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:24\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735307\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:05 UTC	4205	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 226822 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:05 GMT ETag: "37606-5e119a196cd40" Last-Modified: Fri, 10 Jun 2022 15:31:25 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 dd4531988f4862a3b186f9d3356a6a74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: JKCu47zWl4RMScfbgaW_HvhlmUrN3ROsJIIaS5DMKjtUOniI7cHvsQ== Age: 235270
2024-11-01 16:52:05 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-11-01 16:52:05 UTC	12365	IN	Data Raw: 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 Data Ascii: ! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery r
2024-11-01 16:52:05 UTC	4014	IN	Data Raw: 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 Data Ascii: .compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p&
2024-11-01 16:52:05 UTC	12370	IN	Data Raw: 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d Data Ascii: (o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a=
2024-11-01 16:52:05 UTC	16384	IN	Data Raw: 28 74 2c 73 2c 6e 29 29 29 73 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 6e 3c 3d 6c 26 26 6c 2d 2d 7d 29 2c 74 68 69 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 2d 31 3c 53 2e 69 6e 41 72 72 61 79 28 65 2c 73 29 3a 30 3c 73 2e 6c 65 6e 67 74 68 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 26 26 28 73 3d 5b 5d 29 2c 74 68 69 73 7d 2c 64 69 73 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3d 75 3d 5b 5d 2c 73 3d 74 3d 22 22 2c 74 68 69 73 7d 2c 64 69 73 61 62 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 73 7d 2c 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3d 75 3d 5b 5d 2c 74 7c 7c 69 7c 7c 28 73 3d 74 3d 22 22 Data Ascii: (t,s,n)))s.splice(n,1),n<=l&&l--}),this},has:function(e){return e?-1<S.inArray(e,s):0<s.length},empty:function(){return s&&(s=[]),this},disable:function(){return a=u=[],s=t="",this},disabled:function(){return!s},lock:function(){return a=u=[],t\|\|i\|\|(s=t=""
2024-11-01 16:52:05 UTC	16384	IN	Data Raw: 65 2e 74 69 6d 65 53 74 61 6d 70 7c 7c 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 5b 53 2e 65 78 70 61 6e 64 6f 5d 3d 21 30 7d 2c 53 2e 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 53 2e 45 76 65 6e 74 2c 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3a 45 65 2c 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3a 45 65 2c 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3a 45 65 2c 69 73 53 69 6d 75 6c 61 74 65 64 3a 21 31 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3b 74 68 69 73 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 43 65 2c Data Ascii: e.timeStamp\|\|Date.now(),this[S.expando]=!0},S.Event.prototype={constructor:S.Event,isDefaultPrevented:Ee,isPropagationStopped:Ee,isImmediatePropagationStopped:Ee,isSimulated:!1,preventDefault:function(){var e=this.originalEvent;this.isDefaultPrevented=Ce,
2024-11-01 16:52:06 UTC	16384	IN	Data Raw: 66 69 72 65 28 29 7d 29 7d 29 29 2c 74 29 69 66 28 69 3d 74 5b 72 5d 2c 6f 74 2e 74 65 73 74 28 69 29 29 7b 69 66 28 64 65 6c 65 74 65 20 74 5b 72 5d 2c 6f 3d 6f 7c 7c 22 74 6f 67 67 6c 65 22 3d 3d 3d 69 2c 69 3d 3d 3d 28 67 3f 22 68 69 64 65 22 3a 22 73 68 6f 77 22 29 29 7b 69 66 28 22 73 68 6f 77 22 21 3d 3d 69 7c 7c 21 76 7c 7c 76 6f 69 64 20 30 3d 3d 3d 76 5b 72 5d 29 63 6f 6e 74 69 6e 75 65 3b 67 3d 21 30 7d 64 5b 72 5d 3d 76 26 26 76 5b 72 5d 7c 7c 53 2e 73 74 79 6c 65 28 65 2c 72 29 7d 69 66 28 28 75 3d 21 53 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 74 29 29 7c 7c 21 53 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 29 29 66 6f 72 28 72 20 69 6e 20 66 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 6e 2e 6f 76 65 72 66 6c 6f 77 3d 5b Data Ascii: fire()})})),t)if(i=t[r],ot.test(i)){if(delete t[r],o=o\|\|"toggle"===i,i===(g?"hide":"show")){if("show"!==i\|\|!v\|\|void 0===v[r])continue;g=!0}d[r]=v&&v[r]\|\|S.style(e,r)}if((u=!S.isEmptyObject(t))\|\|!S.isEmptyObject(d))for(r in f&&1===e.nodeType&&(n.overflow=[
2024-11-01 16:52:06 UTC	16384	IN	Data Raw: 22 21 3d 3d 76 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 3f 22 2c 20 22 2b 49 74 2b 22 3b 20 71 3d 30 2e 30 31 22 3a 22 22 29 3a 76 2e 61 63 63 65 70 74 73 5b 22 2a 22 5d 29 2c 76 2e 68 65 61 64 65 72 73 29 54 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 69 2c 76 2e 68 65 61 64 65 72 73 5b 69 5d 29 3b 69 66 28 76 2e 62 65 66 6f 72 65 53 65 6e 64 26 26 28 21 31 3d 3d 3d 76 2e 62 65 66 6f 72 65 53 65 6e 64 2e 63 61 6c 6c 28 79 2c 54 2c 76 29 7c 7c 68 29 29 72 65 74 75 72 6e 20 54 2e 61 62 6f 72 74 28 29 3b 69 66 28 75 3d 22 61 62 6f 72 74 22 2c 62 2e 61 64 64 28 76 2e 63 6f 6d 70 6c 65 74 65 29 2c 54 2e 64 6f 6e 65 28 76 2e 73 75 63 63 65 73 73 29 2c 54 2e 66 61 69 6c 28 76 2e 65 72 72 6f 72 29 2c 63 3d 42 74 28 4d 74 2c 76 2c 74 2c 54 29 29 7b 69 66 Data Ascii: "!==v.dataTypes[0]?", "+It+"; q=0.01":""):v.accepts["*"]),v.headers)T.setRequestHeader(i,v.headers[i]);if(v.beforeSend&&(!1===v.beforeSend.call(y,T,v)\|\|h))return T.abort();if(u="abort",b.add(v.complete),T.done(v.success),T.fail(v.error),c=Bt(Mt,v,t,T)){if
2024-11-01 16:52:06 UTC	16384	IN	Data Raw: 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 24 73 74 61 67 65 2e 63 68 69 6c 64 72 65 6e 28 22 3a 65 71 28 22 2b 69 2e 6a 6f 69 6e 28 22 29 2c 20 3a 65 71 28 22 29 2b 22 29 22 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 24 73 74 61 67 65 2e 63 68 69 6c 64 72 65 6e 28 22 2e 63 65 6e 74 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 65 6e 74 65 72 22 29 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 63 65 6e 74 65 72 26 26 74 68 69 73 2e 24 73 74 61 67 65 2e 63 68 69 6c 64 72 65 6e 28 29 2e 65 71 28 74 68 69 73 2e 63 75 72 72 65 6e 74 28 29 29 2e 61 64 64 43 6c 61 73 73 28 22 63 65 6e 74 65 72 22 29 7d 7d 5d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 69 61 6c 69 7a 65 53 74 61 67 65 3d 66 75 6e Data Ascii: ass("active"),this.$stage.children(":eq("+i.join("), :eq(")+")").addClass("active"),this.$stage.children(".center").removeClass("center"),this.settings.center&&this.$stage.children().eq(this.current()).addClass("center")}}],e.prototype.initializeStage=fun
2024-11-01 16:52:06 UTC	16384	IN	Data Raw: 3a 6e 75 6c 6c 7d 3b 72 65 74 75 72 6e 20 61 3d 61 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 7c 7c 61 7c 7c 62 2e 65 76 65 6e 74 2c 61 3d 61 2e 74 6f 75 63 68 65 73 26 26 61 2e 74 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 3f 61 2e 74 6f 75 63 68 65 73 5b 30 5d 3a 61 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 26 26 61 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 3f 61 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 5b 30 5d 3a 61 2c 61 2e 70 61 67 65 58 3f 28 63 2e 78 3d 61 2e 70 61 67 65 58 2c 63 2e 79 3d 61 2e 70 61 67 65 59 29 3a 28 63 2e 78 3d 61 2e 63 6c 69 65 6e 74 58 2c 63 2e 79 3d 61 2e 63 6c 69 65 6e 74 59 29 2c 63 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4e 75 6d 65 72 69 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 Data Ascii: :null};return a=a.originalEvent\|\|a\|\|b.event,a=a.touches&&a.touches.length?a.touches[0]:a.changedTouches&&a.changedTouches.length?a.changedTouches[0]:a,a.pageX?(c.x=a.pageX,c.y=a.pageY):(c.x=a.clientX,c.y=a.clientY),c},e.prototype.isNumeric=function(a){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49730	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:05 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BrpooOR7Z7hUysF&MD=6ABtmDwg HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-01 16:52:05 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 5e4fd4c8-efaf-4a73-b3d4-3194bcf8571f MS-RequestId: f6ab161d-a881-4243-88e8-025be89df62f MS-CV: YyPebntTFUeYKfsM.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 01 Nov 2024 16:52:04 GMT Connection: close Content-Length: 24490
2024-11-01 16:52:05 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-01 16:52:05 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49731	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:05 UTC	896	OUT	GET /content/dam/inst/retirement-plans/learn/Vanguard%20logo.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:06 UTC	4242	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 7111 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="Vanguard logo.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:06 GMT ETag: "1bc7-5fb2f9ddb8f80" Last-Modified: Mon, 08 May 2023 14:40:14 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a962efd99fafcdb81ca24e0e8140a67c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: R9MFMl8eakSKXMzZoaWPHOeFU-WmEJKD224ZfgEw9g3jeUEIshOnCw== Age: 235271
2024-11-01 16:52:06 UTC	7111	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 31 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 31 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 38 2e 35 37 31 33 20 35 2e 33 38 31 33 33 48 36 31 2e 33 32 39 31 4c 36 31 2e 33 32 39 32 20 31 33 2e 32 39 31 33 43 36 31 2e 33 33 32 34 20 31 33 2e 35 31 34 39 20 36 31 2e 34 30 38 31 20 31 34 2e 39 36 37 34 20 36 32 2e 38 33 36 20 31 34 2e 39 35 32 36 4c 36 32 2e 38 35 33 34 20 31 34 2e 39 35 30 31 43 36 33 2e 30 Data Ascii: <svg width="111" height="24" viewBox="0 0 111 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M48.5713 5.38133H61.3291L61.3292 13.2913C61.3324 13.5149 61.4081 14.9674 62.836 14.9526L62.8534 14.9501C63.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49732	18.173.205.93	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:05 UTC	694	OUT	GET /v0/fonts/constellation-fonts.css HTTP/1.1 Host: constellation-static.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
2024-11-01 16:52:06 UTC	591	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 413 Connection: close Date: Thu, 31 Oct 2024 23:27:57 GMT Last-Modified: Sat, 05 Oct 2024 00:10:56 GMT ETag: "b60bf0a1f8a241936c988d1fa2f6ac42" x-amz-server-side-encryption: AES256 x-amz-version-id: o7nIAzgJe3XwHHp2HIB.M5mx7gUwTloe Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 24df21f8156a0df29febdf6c3e09e32c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oGgcx4zV-aVZGJN_QD-xZO0i0Sl9Rs4Gwz32cE8kS4l-edrP_EK7Hw== Age: 62650 Vary: Origin
2024-11-01 16:52:06 UTC	413	IN	Data Raw: 2f 2a 0d 0a 54 68 69 73 20 43 53 53 20 72 65 73 6f 75 72 63 65 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6c 69 6e 6b 73 20 74 6f 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 76 61 6c 75 61 62 6c 65 20 63 6f 70 79 72 69 67 68 74 65 64 0d 0a 70 72 6f 70 65 72 74 79 20 6f 66 20 4d 6f 6e 6f 74 79 70 65 20 49 6d 61 67 69 6e 67 20 61 6e 64 2f 6f 72 20 69 74 73 20 73 75 70 70 6c 69 65 72 73 2e 20 59 6f 75 20 6d 61 79 20 6e 6f 74 20 61 74 74 65 6d 70 74 20 74 6f 20 63 6f 70 79 2c 20 69 6e 73 74 61 6c 6c 2c 0d 0a 72 65 64 69 73 74 72 69 62 75 74 65 2c 20 63 6f 6e 76 65 72 74 2c 20 6d 6f 64 69 66 79 20 6f 72 20 72 65 76 65 72 73 65 20 65 6e 67 69 6e 65 65 72 20 74 68 69 73 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 2e 20 50 6c Data Ascii: /*This CSS resource incorporates links to font software which is the valuable copyrightedproperty of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,redistribute, convert, modify or reverse engineer this font software. Pl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49733	18.173.205.93	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:06 UTC	694	OUT	GET /v1/fonts/constellation-fonts.css HTTP/1.1 Host: constellation-static.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
2024-11-01 16:52:06 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 413 Connection: close Date: Fri, 01 Nov 2024 16:52:07 GMT Last-Modified: Sat, 05 Oct 2024 00:10:56 GMT ETag: "b60bf0a1f8a241936c988d1fa2f6ac42" x-amz-server-side-encryption: AES256 x-amz-version-id: aBe5Df_z7VmUhr3KJXwoLvVzbS41INqH Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e240913a5e90e18bd637baa6899f2280.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wwercRxbD8ISet28GoXr49-i2wmFroYwafy7M_9Tn-jeDGbQ7nyYvA== Vary: Origin
2024-11-01 16:52:06 UTC	413	IN	Data Raw: 2f 2a 0d 0a 54 68 69 73 20 43 53 53 20 72 65 73 6f 75 72 63 65 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6c 69 6e 6b 73 20 74 6f 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 76 61 6c 75 61 62 6c 65 20 63 6f 70 79 72 69 67 68 74 65 64 0d 0a 70 72 6f 70 65 72 74 79 20 6f 66 20 4d 6f 6e 6f 74 79 70 65 20 49 6d 61 67 69 6e 67 20 61 6e 64 2f 6f 72 20 69 74 73 20 73 75 70 70 6c 69 65 72 73 2e 20 59 6f 75 20 6d 61 79 20 6e 6f 74 20 61 74 74 65 6d 70 74 20 74 6f 20 63 6f 70 79 2c 20 69 6e 73 74 61 6c 6c 2c 0d 0a 72 65 64 69 73 74 72 69 62 75 74 65 2c 20 63 6f 6e 76 65 72 74 2c 20 6d 6f 64 69 66 79 20 6f 72 20 72 65 76 65 72 73 65 20 65 6e 67 69 6e 65 65 72 20 74 68 69 73 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 2e 20 50 6c Data Ascii: /*This CSS resource incorporates links to font software which is the valuable copyrightedproperty of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,redistribute, convert, modify or reverse engineer this font software. Pl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49734	3.160.150.128	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:06 UTC	520	OUT	GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/launch-fa9ce42154c5.min.js HTTP/1.1 Host: corp-etm-arl.web.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22
2024-11-01 16:52:06 UTC	861	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 675724 Connection: close Date: Fri, 01 Nov 2024 14:26:09 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 30 Oct 2024 13:39:04 GMT ETag: "c745b717bdfb1633027b8b2eb0197d39" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 x-amz-version-id: pXjYtjfrOqtsZZmS6HKeiCFYTg8ywEXp Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8bd22c4e977189bdb5963957ff8477de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: UOVcQKbE1zabEa2gLTDZTUuPgAlbNnICm1okglw9-igGFrenXZxlnA== Age: 8758 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:06 UTC	15523	IN	Data Raw: 2f 2f 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 60 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 36 61 62 61 63 37 35 2f 65 64 34 37 33 62 34 65 64 63 61 61 2f 6c 61 75 6e 63 68 2d 66 61 39 63 65 34 32 31 35 34 63 35 2e 6a 73 60 2e 0a 77 69 6e 64 6f 77 2e 5f 73 61 74 65 6c 6c 69 74 65 3d 77 69 6e 64 6f 77 2e 5f 73 61 74 65 6c 6c 69 74 65 7c 7c 7b 7d 2c 77 69 6e 64 6f 77 2e 5f 73 61 74 65 6c 6c 69 74 65 2e 63 6f 6e 74 61 69 6e 65 72 3d 7b 62 75 69 6c 64 49 6e 66 6f 3a 7b 6d 69 6e 69 66 69 65 64 3a 21 30 2c 62 75 69 6c 64 44 61 74 65 3a 22 32 30 32 34 2d 30 39 2d 32 34 54 31 38 3a 33 37 3a Data Ascii: // For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/launch-fa9ce42154c5.js`.window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-09-24T18:37:
2024-11-01 16:52:06 UTC	16384	IN	Data Raw: 2d 72 2e 67 65 74 55 54 43 44 61 79 28 29 2b 37 29 25 37 2b 37 2a 28 74 2d 31 29 3b 72 65 74 75 72 6e 20 72 2e 73 65 74 55 54 43 44 61 74 65 28 31 2b 61 29 2c 72 7d 2c 61 3d 6e 65 77 20 44 61 74 65 28 72 28 30 2c 32 2c 74 29 29 2c 69 3d 6e 65 77 20 44 61 74 65 28 72 28 30 2c 31 2c 6e 29 29 3b 72 65 74 75 72 6e 20 61 2e 73 65 74 55 54 43 48 6f 75 72 73 28 36 29 2c 61 2e 73 65 74 55 54 43 4d 69 6e 75 74 65 73 28 35 39 29 2c 61 2e 73 65 74 55 54 43 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 39 39 39 29 2c 69 2e 73 65 74 55 54 43 48 6f 75 72 73 28 36 29 2c 69 2e 73 65 74 55 54 43 4d 69 6e 75 74 65 73 28 35 39 29 2c 69 2e 73 65 74 55 54 43 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 39 39 39 29 2c 65 2e 67 65 74 54 69 6d 65 28 29 3e 61 2e 67 65 74 54 69 6d 65 28 29 26 Data Ascii: -r.getUTCDay()+7)%7+7*(t-1);return r.setUTCDate(1+a),r},a=new Date(r(0,2,t)),i=new Date(r(0,1,n));return a.setUTCHours(6),a.setUTCMinutes(59),a.setUTCMilliseconds(999),i.setUTCHours(6),i.setUTCMinutes(59),i.setUTCMilliseconds(999),e.getTime()>a.getTime()&
2024-11-01 16:52:06 UTC	16384	IN	Data Raw: 61 2e 5f 73 64 69 54 6f 6f 6c 6b 69 74 2e 72 65 61 63 74 6f 72 2e 71 75 65 72 79 53 74 72 69 6e 67 7c 7c 28 61 2e 5f 73 64 69 54 6f 6f 6c 6b 69 74 2e 72 65 61 63 74 6f 72 2e 71 75 65 72 79 53 74 72 69 6e 67 3d 6e 28 22 40 61 64 6f 62 65 2f 72 65 61 63 74 6f 72 2d 71 75 65 72 79 2d 73 74 72 69 6e 67 22 29 2c 72 2e 6c 6f 67 67 65 72 2e 64 65 62 75 67 28 22 5f 73 64 69 54 6f 6f 6c 6b 69 74 2e 72 65 61 63 74 6f 72 2e 71 75 65 72 79 53 74 72 69 6e 67 20 69 6e 73 74 61 6c 6c 65 64 20 66 72 6f 6d 20 40 61 64 6f 62 65 2f 72 65 61 63 74 6f 72 2d 71 75 65 72 79 2d 73 74 72 69 6e 67 2e 22 29 29 29 2c 73 2e 75 74 69 6c 4c 6f 61 64 53 63 72 69 70 74 26 26 28 61 2e 5f 73 64 69 54 6f 6f 6c 6b 69 74 3d 61 2e 5f 73 64 69 54 6f 6f 6c 6b 69 74 7c 7c 7b 7d 2c 61 2e 5f 73 64 Data Ascii: a._sdiToolkit.reactor.queryString\|\|(a._sdiToolkit.reactor.queryString=n("@adobe/reactor-query-string"),r.logger.debug("_sdiToolkit.reactor.queryString installed from @adobe/reactor-query-string."))),s.utilLoadScript&&(a._sdiToolkit=a._sdiToolkit\|\|{},a._sd
2024-11-01 16:52:06 UTC	16384	IN	Data Raw: 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 61 3d 66 28 65 2c 74 2e 65 76 65 6e 74 2c 6e 29 2c 69 3d 21 61 26 26 64 28 65 2e 61 70 6f 6c 6c 6f 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 49 64 2c 65 2e 61 70 6f 6c 6c 6f 2e 70 72 6f 70 65 72 74 79 49 64 2c 65 2e 61 70 6f 6c 6c 6f 2e 62 75 69 6c 64 49 64 2c 74 2e 65 76 65 6e 74 29 3b 69 66 28 61 29 74 2e 5f 5f 6d 65 74 61 2e 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 2e 73 63 68 65 6d 61 50 72 6f 76 69 64 65 72 3d 22 44 4c 4d 20 73 65 74 74 69 6e 67 73 22 2c 72 28 7b 73 74 61 74 75 73 3a 33 30 34 2c 64 61 74 61 3a 61 7d 29 3b 65 6c 73 65 20 69 66 28 69 29 74 2e 5f 5f 6d 65 74 61 2e 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 Data Ascii: e,t,n){return new Promise((function(r){var a=f(e,t.event,n),i=!a&&d(e.apollo.organizationId,e.apollo.propertyId,e.apollo.buildId,t.event);if(a)t.__meta.validationResult.schemaProvider="DLM settings",r({status:304,data:a});else if(i)t.__meta.validationResu
2024-11-01 16:52:06 UTC	16384	IN	Data Raw: 73 4b 65 79 2c 7b 76 61 6c 75 65 3a 5b 5d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 28 74 29 7b 65 5b 74 68 69 73 2e 76 61 6c 69 64 61 74 65 64 53 63 68 65 6d 61 73 4b 65 79 5d 3d 5b 5d 2c 65 5b 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 73 4b 65 79 5d 3d 5b 5d 7d 75 3d 65 5b 74 68 69 73 2e 76 61 6c 69 64 61 74 65 64 53 63 68 65 6d 61 73 4b 65 79 5d 2e 6c 65 6e 67 74 68 2c 65 5b 74 68 69 73 2e 76 61 6c 69 64 61 74 65 64 53 63 68 65 6d 61 73 4b 65 79 5d 5b 75 5d 3d 74 2c 65 5b 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 73 4b 65 79 5d 5b 75 5d 3d 5b 5d 7d 7d 76 61 72 20 70 3d 74 68 69 73 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 2c 6d 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 42 61 73 69 63 28 Data Ascii: sKey,{value:[],configurable:!0})}catch(t){e[this.validatedSchemasKey]=[],e[this.validationErrorsKey]=[]}u=e[this.validatedSchemasKey].length,e[this.validatedSchemasKey][u]=t,e[this.validationErrorsKey][u]=[]}}var p=this.errors.length,m=this.validateBasic(
2024-11-01 16:52:07 UTC	16384	IN	Data Raw: 6b 73 20 2d 20 63 61 6c 6c 62 61 63 6b 20 66 75 6e 63 74 69 6f 6e 20 64 69 64 20 6e 6f 74 20 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 22 2c 6e 29 2c 69 3d 61 2e 63 6f 70 79 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 65 2e 6c 6f 67 67 65 72 2e 65 72 72 6f 72 28 22 70 72 6f 63 65 73 73 45 76 65 6e 74 43 61 6c 6c 62 61 63 6b 73 20 66 61 69 6c 65 64 2e 20 65 72 72 6f 72 3a 22 2c 74 29 7d 76 61 72 20 6f 3d 61 2e 63 6f 70 79 28 69 29 3b 69 66 28 64 65 6c 65 74 65 20 6f 2e 5f 5f 6d 65 74 61 2c 65 2e 64 65 62 75 67 29 7b 76 61 72 20 73 3d 7b 63 61 6c 6c 62 61 63 6b 3a 7b 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 3a 6e 2e 66 75 6e 63 2e 6e 61 6d 65 2c 65 78 65 63 75 74 69 6f 6e 4f 72 64 65 72 3a 6e 2e 65 78 65 63 75 74 69 6f 6e 4f 72 64 65 72 2c 65 76 65 6e 74 4d 61 74 63 Data Ascii: ks - callback function did not return event.",n),i=a.copy(t))}catch(t){e.logger.error("processEventCallbacks failed. error:",t)}var o=a.copy(i);if(delete o.__meta,e.debug){var s={callback:{functionName:n.func.name,executionOrder:n.executionOrder,eventMatc
2024-11-01 16:52:07 UTC	16384	IN	Data Raw: 57 72 69 74 65 28 65 2c 69 2b 22 2d 52 65 70 65 61 74 22 2c 6e 29 2c 22 52 65 70 65 61 74 22 29 7d 65 2e 65 78 70 6f 72 74 73 2e 67 65 74 4e 65 77 52 65 70 65 61 74 3d 74 7d 7d 2c 22 63 6f 6d 6d 6f 6e 2d 61 6e 61 6c 79 74 69 63 73 2d 70 6c 75 67 69 6e 73 2f 73 72 63 2f 6c 69 62 2f 70 6c 75 67 69 6e 73 2f 67 65 74 50 61 67 65 4c 6f 61 64 54 69 6d 65 2e 6a 73 22 3a 7b 73 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 3b 69 66 28 30 3c 65 2e 6c 6f 61 64 45 76 65 6e 74 45 6e 64 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 77 69 6e 64 6f 77 2e 70 69 29 2c 22 22 3d 3d 3d 77 69 6e 64 6f 77 2e 63 6f 6f Data Ascii: Write(e,i+"-Repeat",n),"Repeat")}e.exports.getNewRepeat=t}},"common-analytics-plugins/src/lib/plugins/getPageLoadTime.js":{script:function(e){function t(){function e(){var e=performance.timing;if(0<e.loadEventEnd&&(clearInterval(window.pi),""===window.coo
2024-11-01 16:52:07 UTC	1301	IN	Data Raw: 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 72 26 26 21 2f 5e 5b 30 2d 39 2e 5d 2b 24 2f 2e 74 65 73 74 28 72 29 29 7b 61 3d 32 3c 61 3f 61 3a 32 3b 76 61 72 20 69 3d 72 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 69 66 28 30 3c 3d 69 29 7b 66 6f 72 28 3b 30 3c 3d 69 26 26 31 3c 61 3b 29 69 3d 72 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 2c 69 2d 31 29 2c 61 2d 2d 3b 69 3d 30 3c 69 3f 72 2e 73 75 62 73 74 72 69 6e 67 28 69 29 3a 72 7d 7d 69 66 28 67 3d 69 2c 74 3d 76 6f 69 64 20 30 21 3d 3d 74 3f 22 22 2b 74 3a 22 22 2c 6e 7c 7c 22 22 3d 3d 3d 74 29 69 66 28 22 22 3d 3d 3d 74 26 26 28 6e 3d 2d 36 30 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: w.location.hostname.split(".").length-1;if(r&&!/^[0-9.]+$/.test(r)){a=2<a?a:2;var i=r.lastIndexOf(".");if(0<=i){for(;0<=i&&1<a;)i=r.lastIndexOf(".",i-1),a--;i=0<i?r.substring(i):r}}if(g=i,t=void 0!==t?""+t:"",n\|\|""===t)if(""===t&&(n=-60),"number"==typeof
2024-11-01 16:52:07 UTC	16384	IN	Data Raw: 74 69 6f 6e 3d 22 32 2e 31 2e 31 22 29 2c 77 69 6e 64 6f 77 2e 63 6f 6f 6b 69 65 57 72 69 74 65 3d 77 69 6e 64 6f 77 2e 63 6f 6f 6b 69 65 57 72 69 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 76 61 72 20 72 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 72 26 26 21 2f 5e 5b 30 2d 39 2e 5d 2b 24 2f 2e 74 65 73 74 28 72 29 29 7b 61 3d 32 3c 61 3f 61 3a 32 3b 76 61 72 20 69 3d 72 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 69 66 28 30 3c 3d 69 29 7b 66 6f 72 28 3b 30 3c 3d 69 26 26 31 3c Data Ascii: tion="2.1.1"),window.cookieWrite=window.cookieWrite\|\|function(e,t,n){if("string"==typeof e){var r=window.location.hostname,a=window.location.hostname.split(".").length-1;if(r&&!/^[0-9.]+$/.test(r)){a=2<a?a:2;var i=r.lastIndexOf(".");if(0<=i){for(;0<=i&&1<
2024-11-01 16:52:07 UTC	16384	IN	Data Raw: 6f 72 73 50 6f 6c 6c 69 6e 67 54 69 6d 65 6f 75 74 3a 35 65 33 2c 64 65 66 61 75 6c 74 43 6f 6e 74 65 6e 74 48 69 64 64 65 6e 53 74 79 6c 65 3a 22 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 22 2c 64 65 66 61 75 6c 74 43 6f 6e 74 65 6e 74 56 69 73 69 62 6c 65 53 74 79 6c 65 3a 22 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 22 2c 6f 76 65 72 72 69 64 65 4d 62 6f 78 45 64 67 65 53 65 72 76 65 72 54 69 6d 65 6f 75 74 3a 31 38 36 65 34 2c 73 75 70 70 6c 65 6d 65 6e 74 61 6c 44 61 74 61 49 64 50 61 72 61 6d 54 69 6d 65 6f 75 74 3a 33 30 7d 7d 2c 6d 6f 64 75 6c 65 73 3a 7b 22 61 64 6f 62 65 2d 74 61 72 67 65 74 2d 76 32 2f 6c 69 62 2f 74 72 69 67 67 65 72 56 69 65 77 2e 6a 73 22 3a 7b 6e 61 6d 65 3a 22 74 72 69 67 67 65 72 2d 76 69 Data Ascii: orsPollingTimeout:5e3,defaultContentHiddenStyle:"visibility: hidden;",defaultContentVisibleStyle:"visibility: visible;",overrideMboxEdgeServerTimeout:186e4,supplementalDataIdParamTimeout:30}},modules:{"adobe-target-v2/lib/triggerView.js":{name:"trigger-vi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49735	54.247.166.172	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:06 UTC	739	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=92CA3704532954400A490D44%40AdobeOrg&d_nsid=0&ts=1730479924247 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:06 UTC	831	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:06 GMT Content-Type: application/json;charset=utf-8 Content-Length: 374 Connection: close X-TID: +fwsPGS7Qn0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://ownyourfuture.vanguard.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-2-v067-0c186334c.edge-irl1.demdex.com 3 ms set-cookie: demdex=84871277735491192852519433086877446357; Max-Age=15552000; Expires=Wed, 30 Apr 2025 16:52:06 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-11-01 16:52:06 UTC	374	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 38 36 35 39 31 36 38 31 30 36 31 36 35 34 30 32 33 32 36 33 33 39 32 36 33 32 34 32 32 35 38 31 31 34 34 38 38 36 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 36 30 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 69 64 73 79 6e 63 2e 72 Data Ascii: {"d_mid":"86591681061654023263392632422581144886","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"60","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//idsync.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49736	18.173.205.93	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:07 UTC	813	OUT	GET /v0/fonts/ff-mark.css HTTP/1.1 Host: constellation-static.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constellation-static.web.vanguard.com/v0/fonts/constellation-fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CvVersion%7C5.5.0
2024-11-01 16:52:07 UTC	615	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3166 Connection: close Date: Thu, 31 Oct 2024 23:29:46 GMT Last-Modified: Sat, 05 Oct 2024 00:10:56 GMT ETag: "1d7663621f17f435bd2fb323c2db9004" x-amz-server-side-encryption: AES256 x-amz-version-id: _4_3XAmePXtXq22EKT3HyK0pPUGA1jaD Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5f2b92535eb1297cf75fcc5a4a4e50cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 30JZc7-ydBFa0iZ1XMrdulEbYqnFIc9fR8y-ooGPPebz4Ayxu-Wx6w== Age: 62542 Vary: Origin
2024-11-01 16:52:07 UTC	3166	IN	Data Raw: 2f 2a 0d 0a 54 68 69 73 20 43 53 53 20 72 65 73 6f 75 72 63 65 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6c 69 6e 6b 73 20 74 6f 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 76 61 6c 75 61 62 6c 65 20 63 6f 70 79 72 69 67 68 74 65 64 0d 0a 70 72 6f 70 65 72 74 79 20 6f 66 20 4d 6f 6e 6f 74 79 70 65 20 49 6d 61 67 69 6e 67 20 61 6e 64 2f 6f 72 20 69 74 73 20 73 75 70 70 6c 69 65 72 73 2e 20 59 6f 75 20 6d 61 79 20 6e 6f 74 20 61 74 74 65 6d 70 74 20 74 6f 20 63 6f 70 79 2c 20 69 6e 73 74 61 6c 6c 2c 0d 0a 72 65 64 69 73 74 72 69 62 75 74 65 2c 20 63 6f 6e 76 65 72 74 2c 20 6d 6f 64 69 66 79 20 6f 72 20 72 65 76 65 72 73 65 20 65 6e 67 69 6e 65 65 72 20 74 68 69 73 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 2e 20 50 6c Data Ascii: /*This CSS resource incorporates links to font software which is the valuable copyrightedproperty of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,redistribute, convert, modify or reverse engineer this font software. Pl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49737	18.173.205.93	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:07 UTC	815	OUT	GET /v0/fonts/thorndale.css HTTP/1.1 Host: constellation-static.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constellation-static.web.vanguard.com/v0/fonts/constellation-fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CvVersion%7C5.5.0
2024-11-01 16:52:07 UTC	591	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 717 Connection: close Date: Thu, 31 Oct 2024 23:29:46 GMT Last-Modified: Sat, 05 Oct 2024 00:10:56 GMT ETag: "141c5b976ab322c879b7eac70c69c93f" x-amz-server-side-encryption: AES256 x-amz-version-id: 5g9RT3V.2mhqr265u74CYxDw.wTcDJzO Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 392cb865edfd76152c5ac655614b2f60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Am4G735q4pz3Jm9XfFFcWA280d9q-RdocYGQKpkyPKsboOc43Bzqrw== Age: 62542 Vary: Origin
2024-11-01 16:52:07 UTC	717	IN	Data Raw: 2f 2a 0d 0a 54 68 69 73 20 43 53 53 20 72 65 73 6f 75 72 63 65 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6c 69 6e 6b 73 20 74 6f 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 76 61 6c 75 61 62 6c 65 20 63 6f 70 79 72 69 67 68 74 65 64 0d 0a 70 72 6f 70 65 72 74 79 20 6f 66 20 4d 6f 6e 6f 74 79 70 65 20 49 6d 61 67 69 6e 67 20 61 6e 64 2f 6f 72 20 69 74 73 20 73 75 70 70 6c 69 65 72 73 2e 20 59 6f 75 20 6d 61 79 20 6e 6f 74 20 61 74 74 65 6d 70 74 20 74 6f 20 63 6f 70 79 2c 20 69 6e 73 74 61 6c 6c 2c 0d 0a 72 65 64 69 73 74 72 69 62 75 74 65 2c 20 63 6f 6e 76 65 72 74 2c 20 6d 6f 64 69 66 79 20 6f 72 20 72 65 76 65 72 73 65 20 65 6e 67 69 6e 65 65 72 20 74 68 69 73 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 2e 20 50 6c Data Ascii: /*This CSS resource incorporates links to font software which is the valuable copyrightedproperty of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,redistribute, convert, modify or reverse engineer this font software. Pl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49739	63.140.62.17	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:07 UTC	763	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=92CA3704532954400A490D44%40AdobeOrg&mid=86591681061654023263392632422581144886&ts=1730479925355 HTTP/1.1 Host: vanguard.d2.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:07 UTC	451	IN	HTTP/1.1 200 OK access-control-allow-origin: https://ownyourfuture.vanguard.com access-control-allow-credentials: true date: Fri, 01 Nov 2024 16:52:07 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-11-01 16:52:07 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49738	54.77.215.91	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:07 UTC	519	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=92CA3704532954400A490D44%40AdobeOrg&d_nsid=0&ts=1730479924247 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=84871277735491192852519433086877446357
2024-11-01 16:52:07 UTC	713	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:07 GMT Content-Type: application/json;charset=utf-8 Content-Length: 374 Connection: close X-TID: qbfRYoWLQig= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-2-v067-06aea4bb5.edge-irl1.demdex.com 14 ms set-cookie: demdex=84871277735491192852519433086877446357; Max-Age=15552000; Expires=Wed, 30 Apr 2025 16:52:07 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-11-01 16:52:07 UTC	374	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 38 36 35 39 31 36 38 31 30 36 31 36 35 34 30 32 33 32 36 33 33 39 32 36 33 32 34 32 32 35 38 31 31 34 34 38 38 36 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 36 30 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 69 64 73 79 6e 63 2e 72 Data Ascii: {"d_mid":"86591681061654023263392632422581144886","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"60","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//idsync.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49740	63.140.62.222	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:07 UTC	843	OUT	POST /ee/v1/identity/acquire?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=ec87e85d-3543-4778-94e2-4109803d2c16 HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive Content-Length: 236 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=84871277735491192852519433086877446357
2024-11-01 16:52:07 UTC	236	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 7d 2c 22 74 61 72 67 65 74 22 3a 7b 22 6d 69 67 72 61 74 69 6f 6e 22 3a 74 72 75 65 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 78 64 6d 22 3a 7b 22 69 64 65 6e 74 69 74 79 4d 61 70 22 3a 7b 22 45 43 49 44 22 3a 5b 7b 22 69 64 22 3a 22 38 36 35 39 31 36 38 31 30 36 31 36 35 34 30 32 33 32 36 33 33 39 32 36 33 32 34 32 32 35 38 31 31 34 34 38 38 36 22 7d 5d 7d 7d 7d Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"configOverrides":{},"target":{"migration":true},"state":{"domain":"vanguard.com","cookiesEnabled":true}},"xdm":{"identityMap":{"ECID":[{"id":"86591681061654023263392632422581144886"}]}}}
2024-11-01 16:52:07 UTC	808	IN	HTTP/1.1 200 OK x-request-id: ec87e85d-3543-4778-94e2-4109803d2c16 vary: Origin access-control-allow-origin: https://ownyourfuture.vanguard.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Fri, 01 Nov 2024 16:52:07 GMT x-konductor: 24.10.123:a83471aca x-adobe-edge: IRL1;6 server: jag set-cookie: demdex=84871277735491192852519433086877446357; Max-Age=15552000; Domain=demdex.net; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-11-01 16:52:07 UTC	743	IN	Data Raw: 32 64 62 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 63 38 37 65 38 35 64 2d 33 35 34 33 2d 34 37 37 38 2d 39 34 65 32 2d 34 31 30 39 38 30 33 64 32 63 31 36 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 38 36 35 39 31 36 38 31 30 36 31 36 35 34 30 32 33 32 36 33 33 39 32 36 33 32 34 32 32 35 38 31 31 34 34 38 38 36 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 37 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 2db{"requestId":"ec87e85d-3543-4778-94e2-4109803d2c16","handle":[{"payload":[{"id":"86591681061654023263392632422581144886","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"37","ttlSeconds":1800},{"scope":"AA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49741	54.229.135.186	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:07 UTC	766	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: vanguard.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=84871277735491192852519433086877446357
2024-11-01 16:52:07 UTC	607	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:07 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: 3bTyInNhRWI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Wed, 16 Oct 2024 09:35:25 GMT DCS: dcs-prod-irl1-2-v067-0ff57471f.edge-irl1.demdex.com 0 ms
2024-11-01 16:52:07 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49742	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:07 UTC	721	OUT	GET /content/dam/inst/retirement-plans/learn/Vanguard%20logo.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CvVersion%7C5.5.0
2024-11-01 16:52:07 UTC	4242	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 7111 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="Vanguard logo.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:07 GMT ETag: "1bc7-5fb2f9ddb8f80" Last-Modified: Mon, 08 May 2023 14:40:14 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5f04c72fff50c404cfacc5f6c4a9c156.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: 16rmBGhtAIx9HR6_f2AxwYNgfxAoCS6XHACs_gA6tkYOi6WL3HL4sQ== Age: 235278
2024-11-01 16:52:07 UTC	7111	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 31 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 31 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 38 2e 35 37 31 33 20 35 2e 33 38 31 33 33 48 36 31 2e 33 32 39 31 4c 36 31 2e 33 32 39 32 20 31 33 2e 32 39 31 33 43 36 31 2e 33 33 32 34 20 31 33 2e 35 31 34 39 20 36 31 2e 34 30 38 31 20 31 34 2e 39 36 37 34 20 36 32 2e 38 33 36 20 31 34 2e 39 35 32 36 4c 36 32 2e 38 35 33 34 20 31 34 2e 39 35 30 31 43 36 33 2e 30 Data Ascii: <svg width="111" height="24" viewBox="0 0 111 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M48.5713 5.38133H61.3291L61.3292 13.2913C61.3324 13.5149 61.4081 14.9674 62.836 14.9526L62.8534 14.9501C63.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49744	18.173.205.93	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:07 UTC	1037	OUT	GET /v1/fonts/ff-mark.css HTTP/1.1 Host: constellation-static.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constellation-static.web.vanguard.com/v1/fonts/constellation-fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487125s%7CNONE%7CvVersion%7C5.5.0
2024-11-01 16:52:07 UTC	592	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3166 Connection: close Date: Thu, 31 Oct 2024 23:29:45 GMT Last-Modified: Sat, 05 Oct 2024 00:10:56 GMT ETag: "1d7663621f17f435bd2fb323c2db9004" x-amz-server-side-encryption: AES256 x-amz-version-id: savX8cueMBaI0G7ifD2UmFdIpPlrQWYp Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 1270eda8f49e8826b43258fcc9ef44d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: jFJCsxlq0YL4O5WE-iLdn4Tfc_16munT4G-3_3qPrzqVRG7Z8On1JA== Age: 62543 Vary: Origin
2024-11-01 16:52:07 UTC	3166	IN	Data Raw: 2f 2a 0d 0a 54 68 69 73 20 43 53 53 20 72 65 73 6f 75 72 63 65 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6c 69 6e 6b 73 20 74 6f 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 76 61 6c 75 61 62 6c 65 20 63 6f 70 79 72 69 67 68 74 65 64 0d 0a 70 72 6f 70 65 72 74 79 20 6f 66 20 4d 6f 6e 6f 74 79 70 65 20 49 6d 61 67 69 6e 67 20 61 6e 64 2f 6f 72 20 69 74 73 20 73 75 70 70 6c 69 65 72 73 2e 20 59 6f 75 20 6d 61 79 20 6e 6f 74 20 61 74 74 65 6d 70 74 20 74 6f 20 63 6f 70 79 2c 20 69 6e 73 74 61 6c 6c 2c 0d 0a 72 65 64 69 73 74 72 69 62 75 74 65 2c 20 63 6f 6e 76 65 72 74 2c 20 6d 6f 64 69 66 79 20 6f 72 20 72 65 76 65 72 73 65 20 65 6e 67 69 6e 65 65 72 20 74 68 69 73 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 2e 20 50 6c Data Ascii: /*This CSS resource incorporates links to font software which is the valuable copyrightedproperty of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,redistribute, convert, modify or reverse engineer this font software. Pl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49743	18.173.205.93	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:07 UTC	1039	OUT	GET /v1/fonts/thorndale.css HTTP/1.1 Host: constellation-static.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constellation-static.web.vanguard.com/v1/fonts/constellation-fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487125s%7CNONE%7CvVersion%7C5.5.0
2024-11-01 16:52:07 UTC	591	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 717 Connection: close Date: Thu, 31 Oct 2024 23:29:45 GMT Last-Modified: Sat, 05 Oct 2024 00:10:56 GMT ETag: "141c5b976ab322c879b7eac70c69c93f" x-amz-server-side-encryption: AES256 x-amz-version-id: ZJMyLnTTndhlgUrowMWuDqLoM99AchNM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 b4c8f37704271e217979234a38712c42.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2B0kmknIKRL2VP4MpbWVsgYSVe0-qjgF558kzrvAridRmUPlVXZnUA== Age: 62543 Vary: Origin
2024-11-01 16:52:07 UTC	717	IN	Data Raw: 2f 2a 0d 0a 54 68 69 73 20 43 53 53 20 72 65 73 6f 75 72 63 65 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6c 69 6e 6b 73 20 74 6f 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 76 61 6c 75 61 62 6c 65 20 63 6f 70 79 72 69 67 68 74 65 64 0d 0a 70 72 6f 70 65 72 74 79 20 6f 66 20 4d 6f 6e 6f 74 79 70 65 20 49 6d 61 67 69 6e 67 20 61 6e 64 2f 6f 72 20 69 74 73 20 73 75 70 70 6c 69 65 72 73 2e 20 59 6f 75 20 6d 61 79 20 6e 6f 74 20 61 74 74 65 6d 70 74 20 74 6f 20 63 6f 70 79 2c 20 69 6e 73 74 61 6c 6c 2c 0d 0a 72 65 64 69 73 74 72 69 62 75 74 65 2c 20 63 6f 6e 76 65 72 74 2c 20 6d 6f 64 69 66 79 20 6f 72 20 72 65 76 65 72 73 65 20 65 6e 67 69 6e 65 65 72 20 74 68 69 73 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 2e 20 50 6c Data Ascii: /*This CSS resource incorporates links to font software which is the valuable copyrightedproperty of Monotype Imaging and/or its suppliers. You may not attempt to copy, install,redistribute, convert, modify or reverse engineer this font software. Pl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49745	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:07 UTC	1000	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-dependencies.min.ACSHASHd45b9e1af27f3e2e822f5adaf58a1ef1.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487125s%7CNONE%7CvVersion%7C5.5.0
2024-11-01 16:52:08 UTC	4205	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 226822 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:07 GMT ETag: "37606-5e119a196cd40" Last-Modified: Fri, 10 Jun 2022 15:31:25 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b481802150ed76eaa37311e413a69c2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: FVO2VkMFYRTncfz1drR3iXicvawfL4OuOtJ5eVCzOLAC9duDTrN3cw== Age: 235279
2024-11-01 16:52:08 UTC	12371	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-11-01 16:52:08 UTC	16379	IN	Data Raw: 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c Data Ascii: areDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p&&y(p,
2024-11-01 16:52:08 UTC	16384	IN	Data Raw: 28 74 2c 73 2c 6e 29 29 29 73 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 6e 3c 3d 6c 26 26 6c 2d 2d 7d 29 2c 74 68 69 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 2d 31 3c 53 2e 69 6e 41 72 72 61 79 28 65 2c 73 29 3a 30 3c 73 2e 6c 65 6e 67 74 68 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 26 26 28 73 3d 5b 5d 29 2c 74 68 69 73 7d 2c 64 69 73 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3d 75 3d 5b 5d 2c 73 3d 74 3d 22 22 2c 74 68 69 73 7d 2c 64 69 73 61 62 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 73 7d 2c 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3d 75 3d 5b 5d 2c 74 7c 7c 69 7c 7c 28 73 3d 74 3d 22 22 Data Ascii: (t,s,n)))s.splice(n,1),n<=l&&l--}),this},has:function(e){return e?-1<S.inArray(e,s):0<s.length},empty:function(){return s&&(s=[]),this},disable:function(){return a=u=[],s=t="",this},disabled:function(){return!s},lock:function(){return a=u=[],t\|\|i\|\|(s=t=""
2024-11-01 16:52:08 UTC	16384	IN	Data Raw: 65 2e 74 69 6d 65 53 74 61 6d 70 7c 7c 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 5b 53 2e 65 78 70 61 6e 64 6f 5d 3d 21 30 7d 2c 53 2e 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 53 2e 45 76 65 6e 74 2c 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3a 45 65 2c 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3a 45 65 2c 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3a 45 65 2c 69 73 53 69 6d 75 6c 61 74 65 64 3a 21 31 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3b 74 68 69 73 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 43 65 2c Data Ascii: e.timeStamp\|\|Date.now(),this[S.expando]=!0},S.Event.prototype={constructor:S.Event,isDefaultPrevented:Ee,isPropagationStopped:Ee,isImmediatePropagationStopped:Ee,isSimulated:!1,preventDefault:function(){var e=this.originalEvent;this.isDefaultPrevented=Ce,
2024-11-01 16:52:08 UTC	16384	IN	Data Raw: 66 69 72 65 28 29 7d 29 7d 29 29 2c 74 29 69 66 28 69 3d 74 5b 72 5d 2c 6f 74 2e 74 65 73 74 28 69 29 29 7b 69 66 28 64 65 6c 65 74 65 20 74 5b 72 5d 2c 6f 3d 6f 7c 7c 22 74 6f 67 67 6c 65 22 3d 3d 3d 69 2c 69 3d 3d 3d 28 67 3f 22 68 69 64 65 22 3a 22 73 68 6f 77 22 29 29 7b 69 66 28 22 73 68 6f 77 22 21 3d 3d 69 7c 7c 21 76 7c 7c 76 6f 69 64 20 30 3d 3d 3d 76 5b 72 5d 29 63 6f 6e 74 69 6e 75 65 3b 67 3d 21 30 7d 64 5b 72 5d 3d 76 26 26 76 5b 72 5d 7c 7c 53 2e 73 74 79 6c 65 28 65 2c 72 29 7d 69 66 28 28 75 3d 21 53 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 74 29 29 7c 7c 21 53 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 29 29 66 6f 72 28 72 20 69 6e 20 66 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 6e 2e 6f 76 65 72 66 6c 6f 77 3d 5b Data Ascii: fire()})})),t)if(i=t[r],ot.test(i)){if(delete t[r],o=o\|\|"toggle"===i,i===(g?"hide":"show")){if("show"!==i\|\|!v\|\|void 0===v[r])continue;g=!0}d[r]=v&&v[r]\|\|S.style(e,r)}if((u=!S.isEmptyObject(t))\|\|!S.isEmptyObject(d))for(r in f&&1===e.nodeType&&(n.overflow=[
2024-11-01 16:52:08 UTC	16384	IN	Data Raw: 22 21 3d 3d 76 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 3f 22 2c 20 22 2b 49 74 2b 22 3b 20 71 3d 30 2e 30 31 22 3a 22 22 29 3a 76 2e 61 63 63 65 70 74 73 5b 22 2a 22 5d 29 2c 76 2e 68 65 61 64 65 72 73 29 54 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 69 2c 76 2e 68 65 61 64 65 72 73 5b 69 5d 29 3b 69 66 28 76 2e 62 65 66 6f 72 65 53 65 6e 64 26 26 28 21 31 3d 3d 3d 76 2e 62 65 66 6f 72 65 53 65 6e 64 2e 63 61 6c 6c 28 79 2c 54 2c 76 29 7c 7c 68 29 29 72 65 74 75 72 6e 20 54 2e 61 62 6f 72 74 28 29 3b 69 66 28 75 3d 22 61 62 6f 72 74 22 2c 62 2e 61 64 64 28 76 2e 63 6f 6d 70 6c 65 74 65 29 2c 54 2e 64 6f 6e 65 28 76 2e 73 75 63 63 65 73 73 29 2c 54 2e 66 61 69 6c 28 76 2e 65 72 72 6f 72 29 2c 63 3d 42 74 28 4d 74 2c 76 2c 74 2c 54 29 29 7b 69 66 Data Ascii: "!==v.dataTypes[0]?", "+It+"; q=0.01":""):v.accepts["*"]),v.headers)T.setRequestHeader(i,v.headers[i]);if(v.beforeSend&&(!1===v.beforeSend.call(y,T,v)\|\|h))return T.abort();if(u="abort",b.add(v.complete),T.done(v.success),T.fail(v.error),c=Bt(Mt,v,t,T)){if
2024-11-01 16:52:08 UTC	8949	IN	Data Raw: 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 24 73 74 61 67 65 2e 63 68 69 6c 64 72 65 6e 28 22 3a 65 71 28 22 2b 69 2e 6a 6f 69 6e 28 22 29 2c 20 3a 65 71 28 22 29 2b 22 29 22 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 24 73 74 61 67 65 2e 63 68 69 6c 64 72 65 6e 28 22 2e 63 65 6e 74 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 65 6e 74 65 72 22 29 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 63 65 6e 74 65 72 26 26 74 68 69 73 2e 24 73 74 61 67 65 2e 63 68 69 6c 64 72 65 6e 28 29 2e 65 71 28 74 68 69 73 2e 63 75 72 72 65 6e 74 28 29 29 2e 61 64 64 43 6c 61 73 73 28 22 63 65 6e 74 65 72 22 29 7d 7d 5d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 69 61 6c 69 7a 65 53 74 61 67 65 3d 66 75 6e Data Ascii: ass("active"),this.$stage.children(":eq("+i.join("), :eq(")+")").addClass("active"),this.$stage.children(".center").removeClass("center"),this.settings.center&&this.$stage.children().eq(this.current()).addClass("center")}}],e.prototype.initializeStage=fun
2024-11-01 16:52:08 UTC	7435	IN	Data Raw: 73 65 74 74 69 6e 67 73 2c 66 3d 74 68 69 73 2e 5f 63 6f 6f 72 64 69 6e 61 74 65 73 2e 6c 65 6e 67 74 68 3b 69 66 28 65 2e 6c 6f 6f 70 29 66 3d 74 68 69 73 2e 5f 63 6c 6f 6e 65 73 2e 6c 65 6e 67 74 68 2f 32 2b 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 65 6c 73 65 20 69 66 28 65 2e 61 75 74 6f 57 69 64 74 68 7c 7c 65 2e 6d 65 72 67 65 29 7b 69 66 28 62 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 63 3d 74 68 69 73 2e 5f 69 74 65 6d 73 5b 2d 2d 62 5d 2e 77 69 64 74 68 28 29 2c 64 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 77 69 64 74 68 28 29 3b 62 2d 2d 26 26 21 28 28 63 2b 3d 74 68 69 73 2e 5f 69 74 65 6d 73 5b 62 5d 2e 77 69 64 74 68 28 29 2b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6d 61 72 67 69 6e 29 Data Ascii: settings,f=this._coordinates.length;if(e.loop)f=this._clones.length/2+this._items.length-1;else if(e.autoWidth\|\|e.merge){if(b=this._items.length)for(c=this._items[--b].width(),d=this.$element.width();b--&&!((c+=this._items[b].width()+this.settings.margin)
2024-11-01 16:52:09 UTC	16384	IN	Data Raw: 3a 6e 75 6c 6c 7d 3b 72 65 74 75 72 6e 20 61 3d 61 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 7c 7c 61 7c 7c 62 2e 65 76 65 6e 74 2c 61 3d 61 2e 74 6f 75 63 68 65 73 26 26 61 2e 74 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 3f 61 2e 74 6f 75 63 68 65 73 5b 30 5d 3a 61 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 26 26 61 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 3f 61 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 5b 30 5d 3a 61 2c 61 2e 70 61 67 65 58 3f 28 63 2e 78 3d 61 2e 70 61 67 65 58 2c 63 2e 79 3d 61 2e 70 61 67 65 59 29 3a 28 63 2e 78 3d 61 2e 63 6c 69 65 6e 74 58 2c 63 2e 79 3d 61 2e 63 6c 69 65 6e 74 59 29 2c 63 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4e 75 6d 65 72 69 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 Data Ascii: :null};return a=a.originalEvent\|\|a\|\|b.event,a=a.touches&&a.touches.length?a.touches[0]:a.changedTouches&&a.changedTouches.length?a.changedTouches[0]:a,a.pageX?(c.x=a.pageX,c.y=a.pageY):(c.x=a.clientX,c.y=a.clientY),c},e.prototype.isNumeric=function(a){ret
2024-11-01 16:52:09 UTC	16384	IN	Data Raw: 64 6f 74 22 2c 64 6f 74 73 43 6c 61 73 73 3a 22 6f 77 6c 2d 64 6f 74 73 22 2c 64 6f 74 73 3a 21 30 2c 64 6f 74 73 45 61 63 68 3a 21 31 2c 64 6f 74 73 44 61 74 61 3a 21 31 2c 64 6f 74 73 53 70 65 65 64 3a 21 31 2c 64 6f 74 73 43 6f 6e 74 61 69 6e 65 72 3a 21 31 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 2c 63 3d 74 68 69 73 2e 5f 63 6f 72 65 2e 73 65 74 74 69 6e 67 73 3b 74 68 69 73 2e 5f 63 6f 6e 74 72 6f 6c 73 2e 24 72 65 6c 61 74 69 76 65 3d 28 63 2e 6e 61 76 43 6f 6e 74 61 69 6e 65 72 3f 61 28 63 2e 6e 61 76 43 6f 6e 74 61 69 6e 65 72 29 3a 61 28 22 3c 64 69 76 3e 22 29 2e 61 64 64 43 6c 61 73 73 28 63 2e 6e 61 76 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 29 2e 61 70 70 65 Data Ascii: dot",dotsClass:"owl-dots",dots:!0,dotsEach:!1,dotsData:!1,dotsSpeed:!1,dotsContainer:!1},e.prototype.initialize=function(){var b,c=this._core.settings;this._controls.$relative=(c.navContainer?a(c.navContainer):a("<div>").addClass(c.navContainerClass).appe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49750	35.244.174.68	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:08 UTC	640	OUT	GET /365868.gif?partner_uid=84871277735491192852519433086877446357 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://vanguard.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:08 UTC	736	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomODQ4NzEyNzc3MzU0OTExOTI4NTI1MTk0MzMwODY4Nzc0NDYzNTcQABoNCLiOlLkGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=f8QiZyII1FffZtL5MFxjC4pxgX4MklUEDbVyDivP1Fk=; Path=/; Domain=rlcdn.com; Expires=Sat, 01 Nov 2025 16:52:08 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 31 Dec 2024 16:52:08 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 01 Nov 2024 16:52:08 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49746	63.140.62.17	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:08 UTC	488	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=92CA3704532954400A490D44%40AdobeOrg&mid=86591681061654023263392632422581144886&ts=1730479925355 HTTP/1.1 Host: vanguard.d2.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:08 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 01 Nov 2024 16:52:08 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-11-01 16:52:08 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49749	63.140.62.222	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:08 UTC	512	OUT	GET /ee/v1/identity/acquire?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=ec87e85d-3543-4778-94e2-4109803d2c16 HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=84871277735491192852519433086877446357
2024-11-01 16:52:08 UTC	435	IN	HTTP/1.1 404 Not Found x-request-id: ec87e85d-3543-4778-94e2-4109803d2c16 vary: Origin date: Fri, 01 Nov 2024 16:52:07 GMT x-konductor: 24.10.123:a83471aca x-adobe-edge: IRL1;6 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49747	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:08 UTC	1430	OUT	GET /content/dam/inst/retirement-plans/learn/banners/ib2_hero_banner.png HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:09 UTC	4186	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10420 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:08 GMT ETag: "28b4-6231d5330e140" Last-Modified: Fri, 27 Sep 2024 17:38:37 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 013a54c6b9caf01f403c247789c7256c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: y0d4s729kLGla_M5EoScvoQsXPljZ4--GqAlmwBfnExbfUwdRU3v_w== Age: 235275
2024-11-01 16:52:09 UTC	10420	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 01 8a 08 06 00 00 00 ed e9 5c 9a 00 00 05 fd 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR\iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49748	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:08 UTC	1420	OUT	GET /content/dam/inst/retirement-plans/public-home/PH_1920.png HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:08 UTC	4186	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 59213 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:08 GMT ETag: "e74d-6128ec1012e40" Last-Modified: Fri, 01 Mar 2024 00:49:53 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 32db37931b5639dc27ebaba3ad4f3d2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: lpyRE62izXOBVcFl_VhQ4IpedodT0c2i8QFemPum7ZTluK2qLlm7Cg== Age: 235273
2024-11-01 16:52:08 UTC	20	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 2a Data Ascii: PNGIHDR*
2024-11-01 16:52:09 UTC	16379	IN	Data Raw: 00 00 04 59 08 06 00 00 00 54 8f 58 64 00 00 06 0f 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 Data Ascii: YTXdiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/2
2024-11-01 16:52:09 UTC	12042	IN	Data Raw: 1e 3e 3e 6b 07 d5 48 81 45 3c cf 78 be 11 50 94 db 3c bd b9 14 4a c4 eb a2 8a 02 80 46 b6 a4 aa dd e1 b2 e5 cb 13 00 40 bd 12 54 00 40 8e 45 95 40 cc ae f8 e6 7d ab f6 68 07 d5 08 81 45 b9 82 22 9e 67 3c df b2 49 53 26 a7 e5 ff 6f 7b f6 ba a8 a2 00 a0 91 4d 6d 6b db a3 aa a2 a7 a7 27 01 00 d4 23 41 05 00 d4 81 72 3b a8 08 2c 62 a3 be ac 1c 58 c4 86 fe dd 55 9b f9 f5 2a 86 64 df bf e9 b8 4a 8b a7 72 05 45 88 e7 1d 6d 9e be f8 37 5f cb 5e 0f 00 60 cf aa 8a 6f ae 58 91 00 00 ea 51 63 36 b9 06 80 3a 15 1b f4 b1 51 ff fd 87 d7 a7 6f df d3 91 fe 69 65 47 f6 f1 d8 d0 8f 23 06 4c 4f 7d fb 2f d2 e5 33 76 a7 d3 5b 5f 4e f5 22 aa 27 56 3f 7a 5c 16 bc 94 07 64 97 45 40 b1 e0 23 8b b4 78 02 80 bd 88 aa 8a d1 63 c6 a4 1d db b6 a5 55 ab 56 a5 45 0b 17 a6 26 15 87 00 40 Data Ascii: >>kHE<xP<JF@T@E@}hE"g<IS&o{Mmk'#Ar;,bXU*dJrEm7_^`oXQc6:QoieG#LO}/3v[_N"'V?z\dE@#xcUVE&@
2024-11-01 16:52:09 UTC	16384	IN	Data Raw: 4f 7b 0b 2f 76 b7 36 6a 77 85 dd 47 be a9 33 bc 28 84 16 af 6d de f3 ff eb c8 b7 bc 25 56 16 fe dc 3f fb f1 4f 0b bf 38 a8 30 a9 97 a2 58 9e 5d 3c 30 a7 ef a5 80 e8 92 18 1c 0b 63 5b bc fc f2 cb f1 8f ff d0 11 56 00 c0 c1 12 54 00 00 00 90 f9 e0 bb db 0b 87 fc 03 b2 c9 82 a7 96 2f cf c2 8a 4a b3 b7 b5 51 29 bc 48 93 17 9b 0a 01 46 d1 0b af e4 b2 db a2 df a4 47 3b f6 fa df 4d 41 45 5a ff f4 e2 ea d5 31 61 e2 c4 a0 32 14 7b 29 8a 3e 52 38 28 57 9e dd 7f ce ca 0d 8a f5 f9 f6 78 28 da 62 79 e1 f3 c4 0f 16 fe 73 bc ff 92 8b 03 00 0e 86 a0 02 00 00 80 cc dc 42 50 71 cb bf 0e c8 4a b5 9f 7a ea a9 98 36 75 6a bf 4f 55 ec cb de 3a 2f 52 70 91 4d 60 fc f9 cf d9 db f6 a6 7c 72 e3 d7 4b 97 c6 84 8b 1d bc 56 8a 34 49 a1 3c bb b2 a4 6e 90 df e6 77 64 7d 15 3f 58 b8 30 Data Ascii: O{/v6jwG3(m%V?O80X]<0c[VT/JQ)HFG;MAEZ1a2{)>R8(Wx(bysBPqJz6ujOU:/RpM`\|rKV4I<nwd}?X0
2024-11-01 16:52:09 UTC	8949	IN	Data Raw: ac 1a f9 76 62 5d 21 7c 59 f2 fa a6 58 fa fa e6 dd 76 4e 24 63 06 0c cc f6 fe a7 83 60 6b 51 a8 54 e9 b9 b9 70 ec 5b e3 5f 37 bd 1a df de b4 21 0b de 52 60 71 e9 da e7 b3 e7 af 75 50 ec 6a ed 8e ed d9 aa b0 44 37 05 00 fd 49 50 01 00 00 d1 b1 ea e9 aa cb 2e 8f 3f 3c b5 3c 7b 9c 8a b2 67 9d 75 56 5d ae 7a da 93 a3 de fa d6 78 79 ed ba ac 58 7b 51 7e 5b 9c 96 1b 10 c3 aa b0 58 3b ed f2 4f 07 73 cf 6d df 96 05 14 bb 0b 26 92 34 39 71 42 e1 e0 4e 38 41 b5 b9 a8 e9 b0 38 ed 90 c6 ac f0 3d ad 81 4a 8a eb a0 94 6d 53 6e f1 e6 e6 d2 f5 85 8d d6 84 01 d0 7f 04 15 00 54 a5 f5 91 0f 2a 8b bf 13 aa d9 cf 7e f2 d3 b8 fe 93 57 97 56 3d 8d 1a 35 2a ce 9e 35 ab ae 57 3d ed c9 5f 1c 7b 6c 3c fa ab 5f 95 8a b5 3f 52 05 c5 da 2d ed 3b 0a 07 b6 7f ce 02 8a 3d 4d 4c 24 a9 10 Data Ascii: vb]!\|YXvN$c`kQTp[_7!R`quPjD7IP.?<<{guV]zxyX{Q~[X;Osm&49qBN8A8=JmSnT~WV=55W=_{l<_?R-;=ML$
2024-11-01 16:52:09 UTC	5439	IN	Data Raw: 10 54 00 00 00 50 f5 d2 fa a7 f1 9d eb 70 8a 2b 72 a0 16 2c 89 ed a5 12 ed ab e7 cd 0b 00 a8 45 82 0a 00 00 00 6a 42 71 25 4e 3a d4 2d 5f 95 03 d5 6c 69 be e3 b9 3c a2 a9 49 89 36 00 35 4b 50 01 00 00 40 4d 28 3f c4 5d 91 17 54 50 fd 52 e0 56 0c dd fe 4a 89 36 00 35 4c 50 01 00 00 40 4d b0 fe 89 5a b3 a4 ac 6f c5 da 27 00 6a 99 a0 02 00 00 80 9a 61 fd 13 b5 62 7d b4 97 02 b7 f3 0b cf 6b d3 14 00 d4 32 41 05 00 00 00 35 c3 fa 27 6a c5 c2 fc f6 d2 b5 69 0a 00 6a 9d a0 02 00 00 80 9a 51 be fe 69 65 b4 07 54 a3 34 0d f4 b8 69 0a 00 ea 88 a0 02 00 00 80 9a 72 c6 cc 99 d9 7d 3a ec 4d 2b a0 a0 da dc 9d df 5a ba 36 4d 01 40 3d 10 54 00 00 00 50 53 8a 41 45 b2 a4 6c 7d 0e 54 83 25 b1 bd 14 b0 cd 9d 33 c7 34 05 00 75 41 50 01 00 00 40 4d 49 eb 9f 9a 9a 9a b2 6b eb Data Ascii: TPp+r,EjBq%N:-_li<I65KP@M(?]TPRVJ65LP@MZo'jab}k2A5'jijQieT4ir}:M+Z6M@=TPSAEl}T%34uAP@MIk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49752	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:08 UTC	1546	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/vector-down.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:09 UTC	4214	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 325 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:08 GMT ETag: "145-5fbd3213efa80" Last-Modified: Tue, 16 May 2023 17:44:58 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 cfa647edefc0769e715b9781478b0626.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: pXLoqEZiEsnb8hfmpUntiOz8TEV3jp4VGWkvKsa6IjTQgzlPZVyNCg== Age: 62466
2024-11-01 16:52:09 UTC	325	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 32 37 30 35 30 38 20 30 2e 38 31 33 34 37 37 4c 35 2e 38 33 33 30 31 20 37 2e 30 39 39 39 38 43 35 2e 38 38 30 34 36 20 37 2e 31 35 33 36 32 20 35 2e 39 34 38 36 34 20 37 2e 31 38 34 33 33 20 36 2e 30 32 30 32 36 20 37 2e 31 38 34 33 33 43 36 2e 30 39 31 38 38 20 37 2e 31 38 34 33 33 20 36 2e 31 36 30 30 36 20 37 2e 31 35 33 36 32 20 36 2e 32 30 37 35 31 20 37 2e 30 39 39 39 38 4c 31 31 2e 37 37 30 35 20 30 2e 38 31 33 34 37 37 22 20 73 74 72 Data Ascii: <svg width="12" height="8" viewBox="0 0 12 8" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.270508 0.813477L5.83301 7.09998C5.88046 7.15362 5.94864 7.18433 6.02026 7.18433C6.09188 7.18433 6.16006 7.15362 6.20751 7.09998L11.7705 0.813477" str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49755	3.160.150.128	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:08 UTC	1278	OUT	GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/EXcdd48fe7cd4640a1bbab483674626e32-libraryCode_source.min.js HTTP/1.1 Host: corp-etm-arl.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:09 UTC	831	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 39448 Connection: close Date: Fri, 01 Nov 2024 16:52:10 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 30 Oct 2024 13:39:04 GMT ETag: "940296c3996a3445db4e39cd11d793df" x-amz-server-side-encryption: AES256 x-amz-version-id: 88trTccbS_HhJtdeb2d7CybHABxhgHMa Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d8006f736d3dc32a20a91813f2f50fa2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: R9GRvWB7Z3U8gLEvu1lwsHNkwHr79sroP3cpLDvt0vxmKnTKkfo-oQ== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:09 UTC	15553	IN	Data Raw: 2f 2f 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 60 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 36 61 62 61 63 37 35 2f 65 64 34 37 33 62 34 65 64 63 61 61 2f 32 33 38 62 64 32 39 38 31 30 64 30 2f 45 58 63 64 64 34 38 66 65 37 63 64 34 36 34 30 61 31 62 62 61 62 34 38 33 36 37 34 36 32 36 65 33 32 2d 6c 69 62 72 61 72 79 43 6f 64 65 5f 73 6f 75 72 63 65 2e 6a 73 60 2e 0a 66 75 6e 63 74 69 6f 6e 20 41 70 70 4d 65 61 73 75 72 65 6d 65 6e 74 5f 4d 6f 64 75 6c 65 5f 49 6e 74 65 67 72 61 74 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 2e 73 3d 65 3b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 Data Ascii: // For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/EXcdd48fe7cd4640a1bbab483674626e32-libraryCode_source.js`.function AppMeasurement_Module_Integrate(e){var t=this;t.s=e;var n=window
2024-11-01 16:52:09 UTC	1325	IN	Data Raw: 2e 73 70 6c 69 74 28 22 2c 22 29 2c 66 3d 31 29 3a 74 2e 6c 69 6e 6b 49 6e 74 65 72 6e 61 6c 46 69 6c 74 65 72 73 26 26 28 69 3d 74 2e 6c 69 6e 6b 49 6e 74 65 72 6e 61 6c 46 69 6c 74 65 72 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 70 6c 69 74 28 22 2c 22 29 29 2c 69 29 29 29 7b 66 6f 72 28 72 3d 30 3b 72 3c 69 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 75 3d 69 5b 72 5d 2c 30 3c 3d 6c 2e 69 6e 64 65 78 4f 66 28 75 29 26 26 28 70 3d 31 29 3b 70 3f 66 26 26 28 63 3d 22 65 22 29 3a 66 7c 7c 28 63 3d 22 65 22 29 7d 7d 74 2e 6c 69 6e 6b 4f 62 6a 65 63 74 3d 6f 2c 74 2e 6c 69 6e 6b 55 52 4c 3d 73 2c 74 2e 6c 69 6e 6b 54 79 70 65 3d 63 2c 28 74 2e 74 72 61 63 6b 43 6c 69 63 6b 4d 61 70 7c 7c 74 2e 74 72 61 63 6b 49 6e 6c 69 6e 65 53 74 61 74 73 29 26 26 28 74 Data Ascii: .split(","),f=1):t.linkInternalFilters&&(i=t.linkInternalFilters.toLowerCase().split(",")),i))){for(r=0;r<i.length;r++)u=i[r],0<=l.indexOf(u)&&(p=1);p?f&&(c="e"):f\|\|(c="e")}}t.linkObject=o,t.linkURL=s,t.linkType=c,(t.trackClickMap\|\|t.trackInlineStats)&&(t
2024-11-01 16:52:09 UTC	9592	IN	Data Raw: 3d 3d 69 5b 63 5d 26 26 28 6c 26 26 28 74 2e 65 2b 3d 22 26 75 3d 22 2b 74 2e 65 73 63 61 70 65 28 73 29 2b 28 22 26 22 21 3d 6f 2e 63 68 61 72 41 74 28 30 29 3f 22 26 22 3a 22 22 29 2b 6f 2b 22 26 75 3d 30 22 29 2c 6e 5b 6f 5d 2e 73 70 6c 69 63 65 28 72 2c 31 29 2c 61 3d 31 29 3b 69 66 28 65 7c 7c 28 61 3d 31 29 2c 61 29 7b 66 6f 72 28 6f 20 69 6e 20 6c 3d 22 22 2c 72 3d 32 2c 21 65 26 26 74 2e 65 26 26 28 6c 3d 74 2e 65 73 63 61 70 65 28 69 2e 6a 6f 69 6e 28 22 2c 22 29 29 2b 22 3d 22 2b 74 2e 65 73 63 61 70 65 28 74 2e 65 29 2c 72 3d 31 29 2c 6e 29 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 6f 5d 26 26 30 3c 72 26 26 30 3c 6e 5b 6f 5d 2e 6c 65 6e 67 74 68 26 26 28 6c 2b 3d 28 6c 3f 22 26 22 3a 22 22 29 2b 74 2e 65 73 63 61 70 65 28 6e 5b 6f Data Ascii: ==i[c]&&(l&&(t.e+="&u="+t.escape(s)+("&"!=o.charAt(0)?"&":"")+o+"&u=0"),n[o].splice(r,1),a=1);if(e\|\|(a=1),a){for(o in l="",r=2,!e&&t.e&&(l=t.escape(i.join(","))+"="+t.escape(t.e),r=1),n)!Object.prototype[o]&&0<r&&0<n[o].length&&(l+=(l?"&":"")+t.escape(n[o
2024-11-01 16:52:09 UTC	12978	IN	Data Raw: 7b 76 61 72 20 65 2c 6e 3b 66 6f 72 28 65 3d 30 3b 65 3c 74 2e 67 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 28 22 70 72 6f 70 22 3d 3d 28 6e 3d 74 2e 67 5b 65 5d 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 34 29 7c 7c 22 65 56 61 72 22 3d 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 34 29 7c 7c 22 68 69 65 72 22 3d 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 34 29 7c 7c 22 6c 69 73 74 22 3d 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 34 29 7c 7c 22 63 68 61 6e 6e 65 6c 22 3d 3d 6e 7c 7c 22 65 76 65 6e 74 73 22 3d 3d 6e 7c 7c 22 65 76 65 6e 74 4c 69 73 74 22 3d 3d 6e 7c 7c 22 70 72 6f 64 75 63 74 73 22 3d 3d 6e 7c 7c 22 70 72 6f 64 75 63 74 4c 69 73 74 22 3d 3d 6e 7c 7c 22 70 75 72 63 68 61 73 65 49 44 22 3d 3d 6e 7c 7c 22 74 72 61 6e 73 61 63 74 69 6f 6e 49 44 Data Ascii: {var e,n;for(e=0;e<t.g.length;e++)("prop"==(n=t.g[e]).substring(0,4)\|\|"eVar"==n.substring(0,4)\|\|"hier"==n.substring(0,4)\|\|"list"==n.substring(0,4)\|\|"channel"==n\|\|"events"==n\|\|"eventList"==n\|\|"products"==n\|\|"productList"==n\|\|"purchaseID"==n\|\|"transactionID

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49754	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:08 UTC	1379	OUT	GET /en/home/publogin HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:09 UTC	4114	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 53285 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:09 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 19dbc4cbbe0be3dca8e57283a83b57c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: nqhucUopVN2nttdbGtVU2YDhM5Mr8V1q_OISBz45wqcFpUtuVyHsZw== Age: 4846
2024-11-01 16:52:09 UTC	12270	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 65 6d 70 6c 61 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 73 78 2d 61 72 74 69 63 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 68 6f 6d 65 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 Data Ascii: <!DOCTYPE HTML><html lang="en"> <head> <meta charset="UTF-8"/> <meta name="template" content="psx-article"/> <meta name="viewport" content="width=device-width, initial-scale=1"/> <title>home</title>
2024-11-01 16:52:09 UTC	187	IN	Data Raw: 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 38 37 2c 31 36 2e 31 31 61 2e 32 34 35 2e 32 34 35 2c 30 2c 30 2c 30 2d 2e 32 33 37 2e 32 35 35 41 2e 32 35 34 2e 32 35 34 2c 30 2c 30 2c 30 2c 31 32 2c 31 36 2e 36 31 68 2e 30 30 39 61 2e 32 34 36 2e 32 34 36 2c 30 2c 30 2c 30 2c 2e 32 33 37 2d 2e 32 35 35 41 2e 32 35 33 2e 32 35 33 2c 30 2c 30 2c 30 2c 31 32 2c 31 36 2e 31 31 22 3e 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 2c 31 36 2e 31 31 68 2d 2e 30 30 39 22 3e 3c 2f 70 61 74 68 3e 0a 3c 2f 73 79 6d 62 6f 6c 3e 0a 3c 73 79 6d 62 6f 6c 20 69 Data Ascii: <path d="M11.987,16.11a.245.245,0,0,0-.237.255A.254.254,0,0,0,12,16.61h.009a.246.246,0,0,0,.237-.255A.253.253,0,0,0,12,16.11"></path><path d="M12,16.11h-.009"></path></symbol><symbol i
2024-11-01 16:52:09 UTC	8949	IN	Data Raw: 64 3d 22 65 72 72 6f 72 2d 66 69 6c 6c 2d 6d 65 64 69 75 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 0a 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 65 72 72 6f 72 2d 73 6d 61 6c 6c 22 3e 3c 2f 75 73 65 3e 0a 3c 2f 73 79 6d 62 6f 6c 3e 0a 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 66 61 73 74 2d 66 6f 72 77 61 72 64 2d 73 6d 61 6c 6c 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 34 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 32 37 38 2c 35 2e 36 2c 38 2e 36 33 35 2c 32 2e 32 38 32 41 31 2e 35 30 37 2c 31 2e 35 30 37 2c 30 2c 30 2c 30 2c 36 2e 32 35 2c 33 2e 35 30 37 56 35 2e 30 34 33 4c 32 2e 33 38 35 2c 32 2e 32 38 32 41 31 2e 35 30 37 2c 31 2e 35 30 37 2c 30 2c 30 2c 30 2c 30 2c 33 2e 35 30 37 76 36 2e 39 38 36 Data Ascii: d="error-fill-medium" viewBox="0 0 24 24"><use xlink:href="#error-small"></use></symbol><symbol id="fast-forward-small" viewBox="0 0 14 14"><path d="M13.278,5.6,8.635,2.282A1.507,1.507,0,0,0,6.25,3.507V5.043L2.385,2.282A1.507,1.507,0,0,0,0,3.507v6.986

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49753	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:08 UTC	1254	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/home-icon.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0
2024-11-01 16:52:09 UTC	4215	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2349 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:09 GMT ETag: "92d-5fbd3213efa80" Last-Modified: Tue, 16 May 2023 17:44:58 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a5a8e743f28968822c126102a78bb7c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: tezOOwpiUDyNgQkqHG5Osnv862eaEF1lXFkifMSXfx7g6m-IjuhKUA== Age: 62468
2024-11-01 16:52:09 UTC	2349	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 31 38 32 34 5f 32 37 32 34 32 29 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 32 2e 36 31 36 20 37 2e 39 32 35 37 31 43 31 32 2e 37 33 37 39 20 37 2e 39 37 35 34 37 20 31 32 2e 38 36 38 33 20 38 2e 30 30 30 37 20 31 32 2e 39 39 39 39 20 37 2e 39 39 39 39 34 43 31 33 2e 31 33 31 35 20 Data Ascii: <svg width="14" height="14" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_1824_27242)"><path fill-rule="evenodd" clip-rule="evenodd" d="M12.616 7.92571C12.7379 7.97547 12.8683 8.0007 12.9999 7.99994C13.1315

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49751	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:08 UTC	1219	OUT	GET /content/dam/inst/retirement-plans/learn/icons/globe.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0
2024-11-01 16:52:09 UTC	4233	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1568 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="globe.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:09 GMT ETag: "620-5fb2f9a851180" Last-Modified: Mon, 08 May 2023 14:39:18 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 da392114e7046bd9720a70f40c796f62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: lF4f40Ftt8BKo8SlykPUjNcIFZnCKMqD9uzM4amCtuWvQtp-_-ESVw== Age: 235282
2024-11-01 16:52:09 UTC	1568	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 30 35 39 5f 32 38 30 35 34 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 36 36 36 36 20 37 2e 39 36 30 37 37 43 31 35 2e 36 36 37 31 20 38 2e 39 37 30 39 20 31 35 2e 34 36 38 37 20 39 2e 39 37 31 32 34 20 31 35 2e 30 38 32 36 20 31 30 2e 39 30 34 37 43 31 34 2e 36 39 36 35 20 31 31 2e 38 33 38 31 20 31 34 2e 31 33 30 34 20 31 32 2e 36 38 36 34 20 31 33 2e 34 31 36 35 20 31 33 2e 34 30 31 43 Data Ascii: <svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_2059_28054)"><path d="M15.6666 7.96077C15.6671 8.9709 15.4687 9.97124 15.0826 10.9047C14.6965 11.8381 14.1304 12.6864 13.4165 13.401C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49757	35.244.174.68	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:09 UTC	763	OUT	GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomODQ4NzEyNzc3MzU0OTExOTI4NTI1MTk0MzMwODY4Nzc0NDYzNTcQABoNCLiOlLkGEgUI6AcQAEIASgA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://vanguard.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=f8QiZyII1FffZtL5MFxjC4pxgX4MklUEDbVyDivP1Fk=; pxrc=CAA=
2024-11-01 16:52:09 UTC	745	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://dpm.demdex.net/ibs:dpid=477&dpuuid=238ec78f6251143997b79a6ad381607f29226e68dea55bbe2cf5d3418c8078f3b0da87c991749652 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=56iW/6/lSMzfZtL5MFxjC4pxgX4MklUEDbVyDivP1Fk=; Path=/; Domain=rlcdn.com; Expires=Sat, 01 Nov 2025 16:52:09 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLmOlLkGEgUI6AcQABIGCPHrARAA; Path=/; Domain=rlcdn.com; Expires=Tue, 31 Dec 2024 16:52:09 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 01 Nov 2024 16:52:09 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49760	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:09 UTC	1167	OUT	GET /content/dam/inst/retirement-plans/learn/banners/ib2_hero_banner.png HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	4186	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10420 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:10 GMT ETag: "28b4-6231d5330e140" Last-Modified: Fri, 27 Sep 2024 17:38:37 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 b5451ddffd7def7e4bf1c43f965bcbda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: OPEEv5HruRmTjVgZSb4KlUKuxDQ1sIy8am7cWFLN8FrOBp8_2V6erw== Age: 235282
2024-11-01 16:52:10 UTC	10420	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 01 8a 08 06 00 00 00 ed e9 5c 9a 00 00 05 fd 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR\iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49759	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:09 UTC	1419	OUT	GET /etc.clientlibs/iig-transformation/components/dwcharts/clientlibs/site.min.ACSHASH0c4b1c61e4ed0e14f079763904b4349b.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	4200	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 815 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:10 GMT ETag: "32f-61aa2076ef400" Last-Modified: Tue, 11 Jun 2024 19:11:12 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b47ba5841a54cf2d19fc521c78e94514.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: nSeRqcvNcf-2dFxLi7E_LMT18dlBE7ML6KUPDRO0kE9A0GbioJ2v5g== Age: 235283
2024-11-01 16:52:10 UTC	815	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 2f 2f 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 64 6a 75 73 74 20 69 66 72 61 6d 65 20 68 65 69 67 68 74 20 74 6f 20 65 6e 73 75 72 65 20 63 68 61 72 74 20 69 73 6e 27 74 20 63 75 74 6f 66 66 20 6f 6e 20 6d 6f 62 69 6c 65 2c 0a 20 20 20 20 2f 2f 20 64 6f 65 73 6e 27 74 20 68 61 76 65 20 73 63 72 6f 6c 6c 62 61 72 73 2c 20 61 6e 64 20 64 6f 65 73 6e 27 74 20 68 61 76 65 20 74 6f 6f 20 6d 75 63 68 20 77 68 69 74 65 73 70 61 63 65 20 75 6e 64 65 72 6e 65 61 74 68 20 6f 6e 20 64 65 73 6b 74 6f 70 0a 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 65 73 73 61 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: (function () { "use strict"; // dynamically adjust iframe height to ensure chart isn't cutoff on mobile, // doesn't have scrollbars, and doesn't have too much whitespace underneath on desktop window.addEventListener('message', function(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49763	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	1192	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/vector-down.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	4214	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 325 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:10 GMT ETag: "145-5fbd3213efa80" Last-Modified: Tue, 16 May 2023 17:44:58 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4aaf4116b04a91c2bdea1c5937b0ec2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: ZLtmOVzZ9Y513noIVHPyUYXlRdxAqM3w47fL0erk2l8G2-cVxk6TJA== Age: 62468
2024-11-01 16:52:10 UTC	325	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 32 37 30 35 30 38 20 30 2e 38 31 33 34 37 37 4c 35 2e 38 33 33 30 31 20 37 2e 30 39 39 39 38 43 35 2e 38 38 30 34 36 20 37 2e 31 35 33 36 32 20 35 2e 39 34 38 36 34 20 37 2e 31 38 34 33 33 20 36 2e 30 32 30 32 36 20 37 2e 31 38 34 33 33 43 36 2e 30 39 31 38 38 20 37 2e 31 38 34 33 33 20 36 2e 31 36 30 30 36 20 37 2e 31 35 33 36 32 20 36 2e 32 30 37 35 31 20 37 2e 30 39 39 39 38 4c 31 31 2e 37 37 30 35 20 30 2e 38 31 33 34 37 37 22 20 73 74 72 Data Ascii: <svg width="12" height="8" viewBox="0 0 12 8" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.270508 0.813477L5.83301 7.09998C5.88046 7.15362 5.94864 7.18433 6.02026 7.18433C6.09188 7.18433 6.16006 7.15362 6.20751 7.09998L11.7705 0.813477" str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49765	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	1190	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/home-icon.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	4215	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2349 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:10 GMT ETag: "92d-5fbd3213efa80" Last-Modified: Tue, 16 May 2023 17:44:58 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5cd71a2ac63eabf2336afda85c353f66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: pNUA097ZY1Q8HGLLOZC1NaWF-AN3K_wzHqPMnvC6XjZfhXy7UxkJGQ== Age: 62458
2024-11-01 16:52:10 UTC	2349	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 31 38 32 34 5f 32 37 32 34 32 29 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 32 2e 36 31 36 20 37 2e 39 32 35 37 31 43 31 32 2e 37 33 37 39 20 37 2e 39 37 35 34 37 20 31 32 2e 38 36 38 33 20 38 2e 30 30 30 37 20 31 32 2e 39 39 39 39 20 37 2e 39 39 39 39 34 43 31 33 2e 31 33 31 35 20 Data Ascii: <svg width="14" height="14" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_1824_27242)"><path fill-rule="evenodd" clip-rule="evenodd" d="M12.616 7.92571C12.7379 7.97547 12.8683 8.0007 12.9999 7.99994C13.1315

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49762	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	1409	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASH19c0971c237b914197972e901db2f496.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	4205	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 207738 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:10 GMT ETag: "32b7a-625b557f13dc0" Last-Modified: Wed, 30 Oct 2024 17:50:55 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 544049d1dc4d534822b40b9f9c7529da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: oV0QJsoED_K_yh1PwJMqAqPLkts3CTK8Ky6HrhzPojG8AH2o6UAXjA== Age: 169250
2024-11-01 16:52:10 UTC	1	IN	Data Raw: 21 Data Ascii: !
2024-11-01 16:52:10 UTC	12370	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 69 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 65 2c 69 2e 63 3d 74 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 69 2e 72 3d 66 75 6e 63 Data Ascii: function(e){var t={};function i(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=func
2024-11-01 16:52:10 UTC	16056	IN	Data Raw: 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 75 6c 6c 7d 2c 61 6c 6c 6f 77 43 75 73 74 6f 6d 69 7a 65 64 42 75 69 6c 74 49 6e 45 6c 65 6d 65 6e 74 73 3a 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 21 31 7d 7d 29 29 2c 71 65 3d 6e 75 6c 6c 2c 4e 65 3d 6e 75 6c 6c 2c 49 65 3d 21 30 2c 44 65 3d 21 30 2c 4d 65 3d 21 31 2c 4f 65 3d 21 30 2c 50 65 3d 21 31 2c 42 65 3d 21 31 2c 52 65 3d 21 31 2c 48 65 3d 21 31 2c 46 65 3d 21 31 2c 6a 65 3d 21 31 2c 56 65 3d 21 31 2c 55 65 3d 21 30 2c 7a 65 3d 21 31 2c 57 65 3d 22 75 73 65 72 2d 63 6f 6e 74 65 6e 74 2d 22 2c 4a 65 3d 21 30 Data Ascii: able:!0,configurable:!1,enumerable:!0,value:null},allowCustomizedBuiltInElements:{writable:!0,configurable:!1,enumerable:!0,value:!1}})),qe=null,Ne=null,Ie=!0,De=!0,Me=!1,Oe=!0,Pe=!1,Be=!1,Re=!1,He=!1,Fe=!1,je=!1,Ve=!1,Ue=!0,ze=!1,We="user-content-",Je=!0
2024-11-01 16:52:10 UTC	8351	IN	Data Raw: 68 2d 31 29 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 76 61 72 20 69 3d 31 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 5b 69 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 6c 2e 70 75 73 68 28 6e 65 77 20 6d 28 65 2c 74 29 29 2c 31 21 3d 3d 6c 2e 6c 65 6e 67 74 68 7c 7c 64 7c 7c 73 28 70 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 72 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 75 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 68 69 73 2e 61 72 72 61 79 29 7d 2c 72 2e 74 69 74 6c 65 3d 22 62 72 6f 77 73 65 72 22 2c 72 2e 62 72 6f 77 73 65 72 3d 21 30 2c 72 2e 65 6e 76 3d 7b 7d 2c 72 2e 61 72 67 76 3d 5b 5d 2c 72 2e 76 65 72 73 69 6f 6e 3d 22 22 2c 72 2e 76 65 72 73 69 6f Data Ascii: h-1);if(arguments.length>1)for(var i=1;i<arguments.length;i++)t[i-1]=arguments[i];l.push(new m(e,t)),1!==l.length\|\|d\|\|s(p)},m.prototype.run=function(){this.fun.apply(null,this.array)},r.title="browser",r.browser=!0,r.env={},r.argv=[],r.version="",r.versio
2024-11-01 16:52:10 UTC	16384	IN	Data Raw: 69 73 74 2e 61 64 64 28 22 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 76 69 72 74 4e 61 76 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 63 6c 6f 73 65 49 63 6f 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 69 64 64 65 6e 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 68 69 64 64 65 6e 22 2c 74 68 69 73 2e 76 69 72 74 4e 61 76 2e 73 74 79 6c 65 2e 74 6f 70 3d 74 68 69 73 2e 63 61 6c 63 54 6f 70 28 29 2b 22 70 78 22 29 3a 28 74 68 69 73 2e 6d 65 6e 75 49 63 6f 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 76 69 72 74 4e 61 76 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 69 Data Ascii: ist.add("hidden"),this.virtNav.classList.remove("hidden"),this.closeIcon.classList.remove("hidden"),document.body.style.overflowY="hidden",this.virtNav.style.top=this.calcTop()+"px"):(this.menuIcon.classList.remove("hidden"),this.virtNav.classList.add("hi
2024-11-01 16:52:10 UTC	16384	IN	Data Raw: 63 6b 3d 79 2c 28 72 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 63 6c 65 61 72 46 69 6c 74 65 72 42 74 6e 22 29 29 2e 6f 6e 63 6c 69 63 6b 3d 45 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 73 65 65 46 69 6c 74 65 72 42 74 6e 22 29 2e 6f 6e 63 6c 69 63 6b 3d 53 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 64 76 69 63 65 41 72 74 69 63 6c 65 73 22 29 3f 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 64 76 69 63 65 41 72 74 69 63 6c 65 73 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 3a 22 22 2c 74 3d 65 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 65 Data Ascii: ck=y,(r=document.querySelector("#clearFilterBtn")).onclick=E,document.querySelector("#seeFilterBtn").onclick=S,function(){const e=document.getElementById("adviceArticles")?document.getElementById("adviceArticles").getAttribute("value"):"",t=e?JSON.parse(e
2024-11-01 16:52:10 UTC	16384	IN	Data Raw: 74 20 69 3d 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 6e 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2b 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 2d 35 30 2c 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 2c 61 3d 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 75 6c 20 61 5b 68 72 65 66 3d 22 23 24 7b 72 7d 22 5d 60 29 2c 6f 3d 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 61 5b 64 61 74 61 2d 69 64 3d 22 24 7b 72 7d 22 60 29 3b 69 66 28 74 3e 6e 26 26 74 3c 3d 6e 2b 69 29 7b 69 66 28 61 26 26 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 2c 6f 29 7b 63 6f 6e 73 Data Ascii: t i=e.offsetHeight,n=e.getBoundingClientRect().top+window.pageYOffset-50,r=e.getAttribute("id"),a=this.component.querySelector(`ul a[href="#${r}"]`),o=this.component.querySelector(`a[data-id="${r}"`);if(t>n&&t<=n+i){if(a&&a.classList.add("active"),o){cons
2024-11-01 16:52:10 UTC	16384	IN	Data Raw: 2e 69 69 67 2d 74 69 74 6c 65 3a 66 69 72 73 74 22 29 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 2c 22 2d 22 2b 74 2b 22 70 78 22 29 7d 7d 29 29 2c 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 22 29 2e 6d 61 74 63 68 65 73 26 26 24 28 22 23 61 64 76 69 63 65 2d 69 69 67 2d 74 61 62 22 29 2e 70 61 72 65 6e 74 28 29 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 6e 65 67 61 74 69 76 65 4d 61 72 67 69 6e 22 29 26 26 28 24 28 74 68 69 73 29 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 2c 22 30 70 78 22 29 2c 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 69 69 67 2d 74 69 74 6c 65 3a 66 69 72 73 74 22 29 2e 63 73 73 28 22 Data Ascii: .iig-title:first").css("margin-top","-"+t+"px")}})),window.matchMedia("(max-width: 767px)").matches&&$("#advice-iig-tab").parent().each((function(){$(this).hasClass("negativeMargin")&&($(this).css("margin-top","0px"),$(this).find(".iig-title:first").css("
2024-11-01 16:52:10 UTC	16384	IN	Data Raw: 74 73 2d 72 65 73 65 61 72 63 68 2d 6c 69 62 72 61 72 79 2d 67 72 69 64 5f 5f 63 61 72 64 2d 6c 69 6e 6b 2d 69 6d 67 22 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 74 22 2c 6f 7c 7c 22 41 72 74 69 63 6c 65 20 49 6d 61 67 65 20 22 2b 74 29 2c 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 69 6e 73 69 67 68 74 73 2d 72 65 73 65 61 72 63 68 2d 6c 69 62 72 61 72 79 2d 67 72 69 64 5f 5f 63 61 72 64 2d 6c 69 6e 6b 2d 74 69 74 6c 65 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6f 2c 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 69 6e 73 69 67 68 74 73 2d 72 65 73 65 61 72 63 68 2d 6c 69 62 72 61 72 79 2d 67 72 69 64 5f 5f 63 61 72 64 2d 6c 69 6e 6b 2d 68 6f 76 65 72 74 65 78 74 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 73 2c 72 26 26 69 2e 70 75 Data Ascii: ts-research-library-grid__card-link-img").setAttribute("alt",o\|\|"Article Image "+t),r.querySelector(".insights-research-library-grid__card-link-title").innerHTML=o,r.querySelector(".insights-research-library-grid__card-link-hovertext").innerHTML=s,r&&i.pu
2024-11-01 16:52:10 UTC	16384	IN	Data Raw: 61 2e 73 61 6e 69 74 69 7a 65 28 24 28 22 2e 74 68 72 65 65 2d 63 61 72 64 5f 5f 6d 6f 64 61 6c 5f 63 6f 6e 74 65 6e 74 22 29 2e 68 74 6d 6c 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 6d 6f 64 61 6c 5f 6c 65 66 74 5f 63 6f 6e 74 65 6e 74 22 29 2e 68 74 6d 6c 28 29 2b 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 6d 6f 64 61 6c 5f 72 69 67 68 74 5f 63 6f 6e 74 65 6e 74 22 29 2e 68 74 6d 6c 28 29 29 29 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 24 28 22 2e 63 6c 6f 73 65 2d 6d 6f 64 61 6c 22 29 3b 24 28 74 29 2e 66 6f 63 75 73 28 29 2c 24 28 74 29 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 Data Ascii: a.sanitize($(".three-card__modal_content").html(encodeURIComponent($(this).find(".modal_left_content").html()+$(this).find(".modal_right_content").html()))),setTimeout(()=>{const t=$(".close-modal");$(t).focus(),$(t).on("keydown",(function(t){t.preventDef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49764	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	1418	OUT	GET /etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.ACSHASH0a6aff292f5cc42142779cde92054524.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	4201	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 1271 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:10 GMT ETag: "4f7-607ecc3dd4b00" Last-Modified: Tue, 17 Oct 2023 17:22:20 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 32db37931b5639dc27ebaba3ad4f3d2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: -94zedRisR8InBm_Xyc0R-G3twO3R9asAS_-rXY4D9GgSqy-3VuRGw== Age: 235282
2024-11-01 16:52:10 UTC	1271	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 43 51 3d 77 69 6e 64 6f 77 2e 43 51 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 3d 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 75 74 69 6c 73 3d 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 75 74 69 6c 73 3d 7b 72 65 6d 6f 76 Data Ascii: (function(){window.CQ=window.CQ\|\|{};window.CQ.CoreComponents=window.CQ.CoreComponents\|\|{};window.CQ.CoreComponents.container=window.CQ.CoreComponents.container\|\|{};window.CQ.CoreComponents.container.utils={};window.CQ.CoreComponents.container.utils={remov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49767	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	1155	OUT	GET /content/dam/inst/retirement-plans/learn/icons/globe.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	4233	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1568 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="globe.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:10 GMT ETag: "620-5fb2f9a851180" Last-Modified: Mon, 08 May 2023 14:39:18 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 df7b13362a8ac70c19bf591aee90d86e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: tLPnTNXFamLH2DtAGHnLr9sO3vCxWVwelsunJkqdrbYR75P5vWQg-A== Age: 235275
2024-11-01 16:52:10 UTC	1568	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 30 35 39 5f 32 38 30 35 34 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 36 36 36 36 20 37 2e 39 36 30 37 37 43 31 35 2e 36 36 37 31 20 38 2e 39 37 30 39 20 31 35 2e 34 36 38 37 20 39 2e 39 37 31 32 34 20 31 35 2e 30 38 32 36 20 31 30 2e 39 30 34 37 43 31 34 2e 36 39 36 35 20 31 31 2e 38 33 38 31 20 31 34 2e 31 33 30 34 20 31 32 2e 36 38 36 34 20 31 33 2e 34 31 36 35 20 31 33 2e 34 30 31 43 Data Ascii: <svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_2059_28054)"><path d="M15.6666 7.96077C15.6671 8.9709 15.4687 9.97124 15.0826 10.9047C14.6965 11.8381 14.1304 12.6864 13.4165 13.401C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49766	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	1415	OUT	GET /etc.clientlibs/vanguard-core-components/clientlibs/clientlib-base.min.ACSHASH8c2ff07b7a77f8d850a1ff64ef8817c6.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	4205	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 614152 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:10 GMT ETag: "95f08-61c5b9921e140" Last-Modified: Wed, 03 Jul 2024 17:59:57 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a962efd99fafcdb81ca24e0e8140a67c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: m1-Wl2M5kWLkWN9qSi2BWP4UqVhs9rG34Y7KVnszydCJtIaNNOKZNg== Age: 235283
2024-11-01 16:52:10 UTC	12179	IN	Data Raw: 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: /* Copyright 2019 Google LLC SPDX-License-Identifier: BSD-3-Clause Copyright 2017 Google LLC SPDX-License-Identifier: BSD-3-Clause Copyright 2021 Google LLC SPDX-License-Identifier: BSD-3-Clause **************************************************
2024-11-01 16:52:10 UTC	16243	IN	Data Raw: 7b 73 68 6f 77 6e 49 74 65 6d 73 3a 5b 4a 5d 7d 2c 4a 3d 7b 63 6f 6d 70 6f 6e 65 6e 74 3a 7b 7d 7d 2c 4a 2e 63 6f 6d 70 6f 6e 65 6e 74 5b 53 5d 3d 7b 73 68 6f 77 6e 49 74 65 6d 73 3a 76 6f 69 64 20 30 7d 2c 6b 2e 70 75 73 68 28 4a 29 2c 6b 2e 70 75 73 68 28 51 29 29 7d 76 61 72 20 55 3d 74 68 69 73 3b 6e 26 26 6e 2e 65 6c 65 6d 65 6e 74 26 26 72 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 6e 29 7b 6e 3d 6e 2e 64 61 74 61 73 65 74 3b 76 61 72 20 72 3d 5b 5d 2c 42 3d 22 74 61 62 73 22 3b 42 3d 42 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 42 2e 73 6c 69 63 65 28 31 29 3b 42 3d 5b 22 69 73 22 2c 22 68 6f 6f 6b 22 2b 42 5d 3b 66 6f 72 28 76 61 72 20 45 20 69 6e 20 6e 29 69 66 28 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: {shownItems:[J]},J={component:{}},J.component[S]={shownItems:void 0},k.push(J),k.push(Q))}var U=this;n&&n.element&&r(n)}function m(n){n=n.dataset;var r=[],B="tabs";B=B.charAt(0).toUpperCase()+B.slice(1);B=["is","hook"+B];for(var E in n)if(n.hasOwnProperty
2024-11-01 16:52:11 UTC	16384	IN	Data Raw: 74 65 64 22 2c 21 31 29 2c 4e 61 5b 4a 61 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 22 2d 31 22 29 29 3b 65 6c 73 65 20 7a 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6d 70 2d 63 61 72 6f 75 73 65 6c 5f 5f 69 74 65 6d 2d 2d 61 63 74 69 76 65 22 29 2c 4e 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6d 70 2d 63 61 72 6f 75 73 65 6c 5f 5f 69 6e 64 69 63 61 74 6f 72 2d 2d 61 63 74 69 76 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 29 7b 72 65 74 75 72 6e 20 78 61 2e 5f 61 63 74 69 76 65 3d 3d 3d 78 61 2e 5f 65 6c 65 6d 65 6e 74 73 2e 69 74 65 6d 2e 6c 65 6e 67 74 68 2d 31 3f 30 3a 78 61 2e 5f 61 63 74 69 76 65 2b 31 7d 66 75 6e 63 74 69 6f 6e 20 63 61 28 7a 61 2c 4e 61 29 7b 69 66 28 21 28 30 3e 7a 61 Data Ascii: ted",!1),Na[Ja].setAttribute("tabindex","-1"));else za.classList.add("cmp-carousel__item--active"),Na.classList.add("cmp-carousel__indicator--active")}function pa(){return xa._active===xa._elements.item.length-1?0:xa._active+1}function ca(za,Na){if(!(0>za
2024-11-01 16:52:11 UTC	16384	IN	Data Raw: 42 5b 45 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 2c 42 5b 45 2d 31 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6d 70 2d 73 65 61 72 63 68 5f 5f 69 74 65 6d 2d 2d 69 73 2d 66 6f 63 75 73 65 64 22 29 2c 42 5b 45 2d 31 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 29 2c 72 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 73 2e 72 65 73 75 6c 74 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 64 2e 69 74 65 6d 2e 66 6f 63 75 73 65 64 29 29 72 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 73 2e 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 2d 72 2e 6f 66 66 73 65 74 54 6f 70 2c 30 3c 72 26 26 28 74 68 69 73 2e 5f Data Ascii: B[E].setAttribute("aria-selected","false"),B[E-1].classList.add("cmp-search__item--is-focused"),B[E-1].setAttribute("aria-selected","true")),r=this._elements.results.querySelector(d.item.focused))r=this._elements.results.scrollTop-r.offsetTop,0<r&&(this._
2024-11-01 16:52:11 UTC	16384	IN	Data Raw: 43 61 2c 4b 61 3d 28 43 61 3d 76 61 5b 74 61 5d 29 5b 30 5d 2c 68 62 3d 71 61 5b 4b 61 5d 2c 43 62 3d 43 61 5b 31 5d 3b 69 66 28 43 61 5b 32 5d 29 7b 69 66 28 68 62 3d 3d 3d 50 61 26 26 21 28 4b 61 20 69 6e 20 71 61 29 29 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 69 66 28 43 61 3d 6e 65 77 20 4c 2c 76 6f 69 64 20 30 21 3d 3d 50 61 7c 7c 21 7a 61 28 43 62 2c 68 62 2c 33 2c 76 6f 69 64 20 30 2c 43 61 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 62 61 2c 57 29 7d 7d 28 77 29 3a 42 61 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 77 29 7b 69 66 28 21 5a 63 28 77 29 29 72 65 74 75 72 6e 20 24 64 28 77 29 3b 0a 76 61 72 20 4b 2c 57 3d 5b 5d 3b 66 6f 72 28 4b 20 69 6e 20 4f 62 6a 65 63 74 28 77 29 29 4b 62 2e 63 61 6c 6c 28 77 2c 4b 29 26 26 Data Ascii: Ca,Ka=(Ca=va[ta])[0],hb=qa[Ka],Cb=Ca[1];if(Ca[2]){if(hb===Pa&&!(Ka in qa))return!1}else if(Ca=new L,void 0!==Pa\|\|!za(Cb,hb,3,void 0,Ca))return!1}return!0}(ba,W)}}(w):Ba(w)}function Ja(w){if(!Zc(w))return $d(w);var K,W=[];for(K in Object(w))Kb.call(w,K)&&
2024-11-01 16:52:11 UTC	16384	IN	Data Raw: 64 41 72 72 61 79 3d 42 62 3b 4f 2e 6c 61 73 74 3d 61 65 3b 4f 2e 73 74 75 62 41 72 72 61 79 3d 70 62 3b 4f 2e 73 74 75 62 46 61 6c 73 65 3d 47 62 3b 4f 2e 74 6f 46 69 6e 69 74 65 3d 46 61 3b 4f 2e 74 6f 49 6e 74 65 67 65 72 3d 64 62 3b 4f 2e 74 6f 4e 75 6d 62 65 72 3d 50 62 3b 4f 2e 74 6f 53 74 72 69 6e 67 3d 74 62 3b 0a 4f 2e 56 45 52 53 49 4f 4e 3d 22 34 2e 31 37 2e 35 22 3b 41 62 26 26 28 28 41 62 2e 65 78 70 6f 72 74 73 3d 4f 29 2e 5f 3d 4f 2c 49 62 2e 5f 3d 4f 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 75 6e 64 65 66 69 Data Ascii: dArray=Bb;O.last=ae;O.stubArray=pb;O.stubFalse=Gb;O.toFinite=Fa;O.toInteger=db;O.toNumber=Pb;O.toString=tb;O.VERSION="4.17.5";Ab&&((Ab.exports=O)._=O,Ib._=O)}).call(this)}).call(this,"undefined"!=typeof global?global:"undefined"!=typeof self?self:"undefi
2024-11-01 16:52:11 UTC	16384	IN	Data Raw: 74 72 75 63 74 6f 72 2f 69 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 7c 7c 22 5b 6f 62 6a 65 63 74 20 53 61 66 61 72 69 52 65 6d 6f 74 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 5d 22 3d 3d 3d 28 21 77 69 6e 64 6f 77 2e 73 61 66 61 72 69 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 61 66 61 72 69 26 26 77 69 6e 64 6f 77 2e 73 61 66 61 72 69 2e 70 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 68 69 64 65 42 61 6e 6e 65 72 53 68 6f 77 56 69 64 65 6f 28 65 2c 6d 2c 70 2c 68 2c 67 2c 6b 29 7b 68 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 30 2e 34 30 22 3b 70 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 31 22 3b 69 4f 53 28 29 7c Data Ascii: tructor/i.test(window.HTMLElement)\|\|"[object SafariRemoteNotification]"===(!window.safari\|\|"undefined"!==typeof safari&&window.safari.pushNotification).toString();function hideBannerShowVideo(e,m,p,h,g,k){h.style.opacity="0.40";p.style.opacity="1";iOS()\|
2024-11-01 16:52:11 UTC	16384	IN	Data Raw: 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 0a 43 63 29 3a 72 62 29 7d 46 61 3d 24 63 2b 28 5a 5b 64 62 5d 7c 7c 22 5c 78 33 63 3f 5c 78 33 65 22 29 2b 28 32 3d 3d 3d 66 61 3f 22 5c 78 33 63 2f 73 76 67 5c 78 33 65 22 3a 22 22 29 3b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 5a 29 7c 7c 21 5a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 61 77 22 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 20 74 65 6d 70 6c 61 74 65 20 73 74 72 69 6e 67 73 20 61 72 72 61 79 22 29 3b 46 61 3d 5b 76 6f 69 64 20 30 21 3d 3d 75 61 3f 75 61 2e 63 72 65 61 74 65 48 54 4d 4c 28 46 61 29 3a 46 61 2c 50 62 5d 3b 76 61 72 20 5b 51 63 2c 67 62 5d 3d 46 61 3b 69 66 28 74 68 69 73 2e 65 6c 3d 68 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 51 Data Ascii: .push(void 0),Cc):rb)}Fa=$c+(Z[db]\|\|"\x3c?\x3e")+(2===fa?"\x3c/svg\x3e":"");if(!Array.isArray(Z)\|\|!Z.hasOwnProperty("raw"))throw Error("invalid template strings array");Fa=[void 0!==ua?ua.createHTML(Fa):Fa,Pb];var [Qc,gb]=Fa;if(this.el=hd.createElement(Q
2024-11-01 16:52:11 UTC	16384	IN	Data Raw: 7c 5b 5d 3b 74 68 69 73 2e 6d 61 73 6b 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 3b 66 3d 74 68 69 73 2e 67 6c 6f 62 61 6c 44 61 74 61 2e 64 65 66 73 3b 76 61 72 20 74 3d 74 68 69 73 2e 6d 61 73 6b 73 50 72 6f 70 65 72 74 69 65 73 3f 74 68 69 73 2e 6d 61 73 6b 73 50 72 6f 70 65 72 74 69 65 73 2e 6c 65 6e 67 74 68 3a 30 3b 74 68 69 73 2e 76 69 65 77 44 61 74 61 3d 67 62 28 74 29 3b 74 68 69 73 2e 73 6f 6c 69 64 50 61 74 68 3d 22 22 3b 76 61 72 20 71 2c 75 2c 43 2c 48 2c 47 2c 44 3d 74 68 69 73 2e 6d 61 73 6b 73 50 72 6f 70 65 72 74 69 65 73 2c 50 3d 30 2c 41 3d 5b 5d 2c 76 3d 4b 61 28 29 2c 79 3d 22 63 6c 69 70 50 61 74 68 22 2c 7a 3d 22 63 6c 69 70 2d 70 61 74 68 22 3b 66 6f 72 28 62 3d 30 3b 62 3c 74 3b 62 2b 3d 31 29 69 66 28 28 22 61 22 21 3d 3d 44 5b 62 5d Data Ascii: \|[];this.maskElement=null;f=this.globalData.defs;var t=this.masksProperties?this.masksProperties.length:0;this.viewData=gb(t);this.solidPath="";var q,u,C,H,G,D=this.masksProperties,P=0,A=[],v=Ka(),y="clipPath",z="clip-path";for(b=0;b<t;b+=1)if(("a"!==D[b]
2024-11-01 16:52:11 UTC	8949	IN	Data Raw: 3d 31 3b 74 68 69 73 2e 5f 63 62 73 5b 62 5d 2e 6c 65 6e 67 74 68 7c 7c 28 74 68 69 73 2e 5f 63 62 73 5b 62 5d 3d 6e 75 6c 6c 29 7d 7d 65 6c 73 65 20 74 68 69 73 2e 5f 63 62 73 5b 62 5d 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 58 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 66 29 7b 76 61 72 20 74 2c 0a 71 3d 5b 5d 3b 73 77 69 74 63 68 28 63 29 7b 63 61 73 65 20 22 69 6e 74 31 36 22 3a 63 61 73 65 20 22 75 69 6e 74 38 63 22 3a 63 3d 31 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 63 3d 31 2e 31 7d 66 6f 72 28 74 3d 30 3b 74 3c 66 3b 74 2b 3d 31 29 71 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 71 7d 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 Data Ascii: =1;this._cbs[b].length\|\|(this._cbs[b]=null)}}else this._cbs[b]=null}};var Xa=function(){function b(c,f){var t,q=[];switch(c){case "int16":case "uint8c":c=1;break;default:c=1.1}for(t=0;t<f;t+=1)q.push(c);return q}return"function"==typeof Uint8ClampedArray

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49768	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	1157	OUT	GET /content/dam/inst/retirement-plans/public-home/PH_1920.png HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	4186	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 59213 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:10 GMT ETag: "e74d-6128ec1012e40" Last-Modified: Fri, 01 Mar 2024 00:49:53 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 6d5e3d9ab9ac8268b8796ccae45ff34e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: n8n7jfqQPkt-i1BLJcGm6T2rDKWzGRe7tZAnyU3el_OgoyfSDD4cLA== Age: 235281
2024-11-01 16:52:10 UTC	4034	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 2a 00 00 04 59 08 06 00 00 00 54 8f 58 64 00 00 06 0f 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR*YTXdiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://
2024-11-01 16:52:10 UTC	8949	IN	Data Raw: 24 a8 00 00 00 20 57 c6 8e 39 35 9d d0 dc 92 ad bb ba ba 12 00 00 c5 26 a8 00 00 00 20 77 4e ed 9f 53 a1 f5 13 00 40 f1 09 2a 00 00 00 c8 9d e9 6d d3 b2 73 77 77 b7 81 da 00 00 05 27 a8 00 00 00 20 77 aa 07 6a 6b ff 04 00 50 6c 82 0a 00 00 00 72 67 d2 c4 33 2b eb cd 82 0a 00 80 42 13 54 00 00 00 90 3b 51 51 51 1e a8 6d 4e 05 00 40 b1 09 2a 00 00 00 c8 a5 b3 26 fe 46 76 d6 fa 09 00 a0 d8 46 26 00 ea de d6 6d db d2 da 75 df 4d 00 00 45 54 1e a8 dd d4 d4 94 80 62 5b 79 df bd a9 a5 b9 f9 a0 bf 7e 46 db ef a4 b1 63 c6 24 00 ea 9b a0 02 a0 00 22 a4 f8 e3 25 4b 12 00 40 51 45 fb a7 99 33 67 26 a0 d8 ae ba f6 da 43 fa fa af dd fc a5 b4 60 de bc 04 40 7d d3 fa 09 00 00 80 dc 5b 6f 4e 05 00 40 61 a9 a8 00 28 98 5b 6e b9 25 8d 1b 3b 36 01 00 14 c1 07 ff e0 0f d2 ce Data Ascii: $ W95& wNS@msww' wjkPlrg3+BT;QQQmN@&FvF&muMETb[y~Fc$"%K@QE3g&C`@}[oN@a([n%;6
2024-11-01 16:52:10 UTC	11449	IN	Data Raw: a3 3c 50 3b 86 69 47 55 c5 29 27 be 92 c8 b7 68 f9 74 fb da be 7b 31 16 2f 5e 9c 66 cc 98 91 c8 8f 68 fd b4 60 c1 82 2c 3c 1a 18 20 ed da b5 2b ed dc b9 33 6d dc b8 31 6d d9 b2 25 3d f2 c8 23 95 cf 45 70 11 47 73 4b 73 36 98 76 c9 35 57 a7 d1 63 c6 24 80 7a 11 ff ef ba 6d d9 d7 b2 75 b4 7f 9a 59 b5 b1 ce 91 2b b7 7f 2a 07 41 17 cf 9f 9f 00 80 fa 21 a8 00 80 fd 78 5b eb a8 ca 7a 87 a0 a2 2e 54 b7 7c fa b3 25 4b 12 f9 12 ad 9f 6e bd e5 96 83 fa da 08 2d d6 ae 5d 9b 56 ae 5c 99 d6 3e f0 40 da ba 75 6b da bd 6b 77 ba ab fd ce ec 98 3b ff 22 81 05 50 37 ca 43 b5 23 74 8d f6 44 5d 5d 5d 69 fc f8 f1 89 c1 13 37 27 ac 5a b5 2a 7b 6d 23 b0 28 cf ad 00 00 f2 4f eb 27 00 d8 8f 49 ef 99 52 59 3f de 7d 74 22 df a2 9a a2 dc f2 69 e9 d2 a5 5a 3e d5 b9 08 35 e6 cc 99 93 Data Ascii: <P;iGU)'ht{1/^fh`,< +3m1m%=#EpGsKs6v5Wc$zmuY+A!x[z.T\|%Kn-]V\>@ukkw;"P7C#tD]]]i7'Z{m#(O'IRY?}t"iZ>5
2024-11-01 16:52:10 UTC	4337	IN	Data Raw: 8a b0 e2 da cf 7d 36 9d 3e 71 62 ba f9 86 1b d3 8e 6d db b2 70 62 f3 e6 cd d9 11 4e 1b 37 2e 8d 2b 1d d1 9e 68 28 ab 1e e2 f7 fe 83 0f 7e 30 ad 7b f0 c1 f4 e8 a3 8f a6 22 8b 2a 8a ab 4a 21 85 2a 0a 00 06 8b a0 02 00 00 00 a8 6b 73 e7 cf cb 8e bb da ef 48 f7 df 77 5f 5a 7d ef 3f 56 3e f7 a3 2d 5b b2 23 44 58 d1 3a 6a 54 3a ed b4 d3 86 ac fa a1 6d da b4 74 72 e9 f7 ae 45 1b aa a1 16 61 4c 54 51 98 45 01 c0 60 13 54 00 00 00 00 85 50 0e 2c 76 ef da 9d ee bf f7 de f4 d0 ba 07 4b e7 fb 52 ef ee dd d9 e7 bb bb bb b3 23 42 84 d8 74 2f 07 17 83 5d 6d 31 61 c2 84 ec f7 8c 56 54 9b bb ba 52 bd 8b d7 66 fe fc f9 e9 e2 d2 d1 e8 83 c3 01 18 1a 82 0a 00 00 00 a0 50 9a 5b 9a 2b a1 45 78 68 dd ba 74 57 fb 9d 59 70 11 ed a1 42 54 3b 54 b7 88 8a 0a 8b 08 17 4e eb 6f 13 75 Data Ascii: }6>qbmpbN7.+h(~0{"J!ksHw_Z}?V>-[#DX:jT:mtrEaLTQE`TP,vKR#Bt/]m1aVTRfP[+ExhtWYpBT;TNou
2024-11-01 16:52:10 UTC	16384	IN	Data Raw: e9 2b ff 10 c3 87 0f 0f 00 38 10 0d 01 00 00 00 9d d2 54 c5 09 6f c9 67 d7 69 aa 62 77 87 fa d5 28 05 11 47 1d 75 54 4c 9f 3e 3d 66 ce 9c b9 c7 9f 93 a4 d5 4f f4 bf d4 4b 71 ef d7 ef c8 ae 53 2f c5 47 f5 52 54 94 62 5f 45 92 fa 2a d2 0a 28 00 38 50 82 0a 00 00 00 ba f8 d2 dc 8e 2e 87 34 55 f1 c8 23 8f 44 bd 18 35 6a 54 76 ff f4 53 cb 83 fe 97 7a 29 5a 3a 83 b2 b4 f2 49 2f 45 e5 49 7d 15 53 a2 63 15 d7 bf 3d f0 40 fc de c7 0e 00 07 48 50 01 00 00 40 17 ef 3e 3e 9f dd 92 e7 5f 78 21 eb 79 a8 07 43 06 77 bc 3a 7c 53 73 73 d0 bf be 7d fb 1d a5 5e 8a 33 63 60 9c 96 b3 b9 ba 52 5d 52 b6 8e eb 9b 77 dd 15 00 70 20 04 15 00 00 00 bc 41 ea aa 28 5a f6 d8 63 51 0f 4a ab 9f 74 54 f4 ab 6c e5 d3 37 76 ae 7c d2 4b 51 d9 d2 0a a8 34 f1 92 3c ff fc f3 f1 6f 0f fc 28 00 Data Ascii: +8Togibw(GuTL>=fOKqS/GRTb_E*(8P.4U#D5jTvSz)Z:I/EI}Sc=@HP@>>_x!yCw:\|Sss}^3c`R]Rwp A(ZcQJtTl7v\|KQ4<o(
2024-11-01 16:52:10 UTC	14060	IN	Data Raw: 1d 3e 7a 54 a9 58 7b 49 b4 c5 8c 2a 28 d6 6e 6c 18 10 8b 37 ef 2c 8b 2d 4a c1 44 3a 98 4b 53 13 a9 0c 5b 21 36 b5 28 85 6e e9 96 d6 41 dd b7 f9 d5 2e 81 45 7a fc 89 11 6f ce 3e 06 a8 3f 4f 6e dd 52 78 2e b4 65 d7 29 b8 02 80 fe 24 a8 00 00 a0 2e a5 55 4f d7 7f f2 9a 78 74 e9 23 d9 e3 b4 ea e9 f4 77 bf 3b 8e 2a 1c c2 b3 77 e5 c5 da 77 e7 b7 c5 17 aa a0 58 fb 84 42 08 91 a6 29 b2 60 62 f0 b0 38 66 f0 10 c1 04 75 65 77 eb a0 9e dd b6 35 2b df 4e 1f 0b e9 a0 5a 60 51 5f 7e da ba b1 74 ad 9f 02 80 fe 26 a8 00 a0 6a 9c 36 f3 f4 18 bb cb ae f8 1f 7e f7 fb d1 b2 69 53 4c 8a 86 78 7b 85 bf a2 b7 d6 3c 14 6d d9 ea 97 a3 0b 07 96 33 de 33 b3 cb 8f a5 c2 5d a8 64 29 9c b8 ea b2 b9 56 3d 1d a0 f2 62 ed f5 d1 1e f7 17 c2 8a f7 e5 06 47 25 bb 65 94 ae 11 28 ae 83 4a a1 Data Ascii: >zTX{I(nl7,-JD:KS[!6(nA.Ezo>?OnRx.e)$.UOxt#w;wwXB)`b8fuew5+NZ`Q_~t&j6~iSLx{<m33]d)V=bG%e(J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49770	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	1409	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-base.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	4173	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 0 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:10 GMT ETag: "0-5cf85317674c0" Last-Modified: Fri, 29 Oct 2021 22:17:31 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 32db37931b5639dc27ebaba3ad4f3d2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: xgPqO3UXBpwbeEfW4TYdoJoM4qn8MCsp19OeiHUBGs1igzLXvKH0lQ== Age: 235282

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49771	54.170.25.213	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	758	OUT	GET /ibs:dpid=477&dpuuid=238ec78f6251143997b79a6ad381607f29226e68dea55bbe2cf5d3418c8078f3b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://vanguard.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=84871277735491192852519433086877446357; dextp=60-1-1730479926517
2024-11-01 16:52:10 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:10 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: HNs1x5efRKI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v067-019e7c767.edge-irl1.demdex.com 2 ms set-cookie: dpm=84871277735491192852519433086877446357; Max-Age=15552000; Expires=Wed, 30 Apr 2025 16:52:10 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=84871277735491192852519433086877446357; Max-Age=15552000; Expires=Wed, 30 Apr 2025 16:52:10 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-11-01 16:52:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49772	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	1418	OUT	GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-dependencies.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:11 UTC	4173	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 0 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:11 GMT ETag: "0-5facfbb0e3cc0" Last-Modified: Wed, 03 May 2023 20:16:27 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 02cd8164e89a1598d410a9198582d47c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: 0FLgf07Fh4uFnJgqmgAASOPCL3Lqu4NOzm58GpDDIiLzGVsm-sXnMA== Age: 235270

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49773	3.160.150.128	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:10 UTC	1093	OUT	GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/EXcdd48fe7cd4640a1bbab483674626e32-libraryCode_source.min.js HTTP/1.1 Host: corp-etm-arl.web.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:10 UTC	838	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 39448 Connection: close Date: Fri, 01 Nov 2024 16:52:10 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 30 Oct 2024 13:39:04 GMT ETag: "940296c3996a3445db4e39cd11d793df" x-amz-server-side-encryption: AES256 x-amz-version-id: 88trTccbS_HhJtdeb2d7CybHABxhgHMa Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7115bbde016dc7107bc64db76ba40c56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: F_cIm2U73zkMXAQ8OHEtOXPDDo_4mX_qv2iZMrvVJN2ndegnnu-CJw== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:10 UTC	15546	IN	Data Raw: 2f 2f 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 60 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 36 61 62 61 63 37 35 2f 65 64 34 37 33 62 34 65 64 63 61 61 2f 32 33 38 62 64 32 39 38 31 30 64 30 2f 45 58 63 64 64 34 38 66 65 37 63 64 34 36 34 30 61 31 62 62 61 62 34 38 33 36 37 34 36 32 36 65 33 32 2d 6c 69 62 72 61 72 79 43 6f 64 65 5f 73 6f 75 72 63 65 2e 6a 73 60 2e 0a 66 75 6e 63 74 69 6f 6e 20 41 70 70 4d 65 61 73 75 72 65 6d 65 6e 74 5f 4d 6f 64 75 6c 65 5f 49 6e 74 65 67 72 61 74 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 2e 73 3d 65 3b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 Data Ascii: // For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/EXcdd48fe7cd4640a1bbab483674626e32-libraryCode_source.js`.function AppMeasurement_Module_Integrate(e){var t=this;t.s=e;var n=window
2024-11-01 16:52:10 UTC	444	IN	Data Raw: 72 43 61 73 65 28 29 2e 73 70 6c 69 74 28 22 2c 22 29 2c 66 3d 31 29 3a 74 2e 6c 69 6e 6b 49 6e 74 65 72 6e 61 6c 46 69 6c 74 65 72 73 26 26 28 69 3d 74 2e 6c 69 6e 6b 49 6e 74 65 72 6e 61 6c 46 69 6c 74 65 72 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 70 6c 69 74 28 22 2c 22 29 29 2c 69 29 29 29 7b 66 6f 72 28 72 3d 30 3b 72 3c 69 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 75 3d 69 5b 72 5d 2c 30 3c 3d 6c 2e 69 6e 64 65 78 4f 66 28 75 29 26 26 28 70 3d 31 29 3b 70 3f 66 26 26 28 63 3d 22 65 22 29 3a 66 7c 7c 28 63 3d 22 65 22 29 7d 7d 74 2e 6c 69 6e 6b 4f 62 6a 65 63 74 3d 6f 2c 74 2e 6c 69 6e 6b 55 52 4c 3d 73 2c 74 2e 6c 69 6e 6b 54 79 70 65 3d 63 2c 28 74 2e 74 72 61 63 6b 43 6c 69 63 6b 4d 61 70 7c 7c 74 2e 74 72 61 63 6b 49 6e 6c 69 6e 65 53 74 61 Data Ascii: rCase().split(","),f=1):t.linkInternalFilters&&(i=t.linkInternalFilters.toLowerCase().split(",")),i))){for(r=0;r<i.length;r++)u=i[r],0<=l.indexOf(u)&&(p=1);p?f&&(c="e"):f\|\|(c="e")}}t.linkObject=o,t.linkURL=s,t.linkType=c,(t.trackClickMap\|\|t.trackInlineSta
2024-11-01 16:52:11 UTC	16384	IN	Data Raw: 29 2b 22 26 6f 69 64 3d 22 2b 74 2e 65 73 63 61 70 65 28 61 2e 69 64 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 30 30 29 29 2b 28 61 2e 74 79 70 65 3f 22 26 6f 69 64 74 3d 22 2b 61 2e 74 79 70 65 3a 22 22 29 2b 22 26 6f 74 3d 22 2b 65 2b 28 6f 3f 22 26 6f 69 3d 22 2b 6f 3a 22 22 29 29 29 29 7d 2c 74 2e 56 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 6d 61 2c 6e 3d 74 2e 6c 69 6e 6b 54 79 70 65 2c 61 3d 74 2e 6c 69 6e 6b 55 52 4c 2c 69 3d 74 2e 6c 69 6e 6b 4e 61 6d 65 3b 69 66 28 6e 26 26 28 61 7c 7c 69 29 26 26 28 22 64 22 21 3d 28 6e 3d 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 22 65 22 21 3d 6e 26 26 28 6e 3d 22 6f 22 29 2c 74 2e 70 65 3d 22 6c 6e 6b 5f 22 2b 6e 2c 74 2e 70 65 76 31 3d 61 3f 74 2e 65 73 63 61 70 65 28 61 29 Data Ascii: )+"&oid="+t.escape(a.id.substring(0,100))+(a.type?"&oidt="+a.type:"")+"&ot="+e+(o?"&oi="+o:""))))},t.Vb=function(){var e=t.ma,n=t.linkType,a=t.linkURL,i=t.linkName;if(n&&(a\|\|i)&&("d"!=(n=n.toLowerCase())&&"e"!=n&&(n="o"),t.pe="lnk_"+n,t.pev1=a?t.escape(a)
2024-11-01 16:52:11 UTC	7074	IN	Data Raw: 3b 74 72 79 7b 6e 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 74 2e 6e 61 28 29 2c 6e 2e 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 2c 74 2e 4e 3d 74 2e 41 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 2c 74 2e 5a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 2e 74 72 61 63 6b 4f 66 66 6c 69 6e 65 29 66 6f 72 28 28 21 74 2e 6f 66 66 6c 69 6e 65 4c 69 6d 69 74 7c 7c 30 3e 3d 74 2e 6f 66 66 6c 69 6e 65 4c 69 6d 69 74 29 26 26 28 74 2e 6f 66 66 6c 69 6e 65 4c 69 6d 69 74 3d 31 30 29 3b 74 2e 69 2e 6c 65 6e 67 74 68 3e 74 2e 6f 66 66 6c 69 6e 65 4c 69 6d 69 74 3b 29 74 2e 4e 61 28 29 7d 2c 74 2e 66 6f 72 63 65 4f 66 66 6c 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6f 61 3d 21 30 7d 2c 74 2e 66 6f 72 63 65 4f 6e 6c Data Ascii: ;try{n.localStorage.setItem(t.na(),n.JSON.stringify(e)),t.N=t.A()}catch(e){}}},t.Za=function(){if(t.trackOffline)for((!t.offlineLimit\|\|0>=t.offlineLimit)&&(t.offlineLimit=10);t.i.length>t.offlineLimit;)t.Na()},t.forceOffline=function(){t.oa=!0},t.forceOnl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49775	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:11 UTC	1410	OUT	GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-site.min.ACSHASH0b524cdef39893463854517c5d39ca98.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:11 UTC	4206	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 3402139 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:11 GMT ETag: "33e99b-625c95640b780" Last-Modified: Thu, 31 Oct 2024 17:42:06 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6b25d4ce9efa3f2699980e1915129606.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: C6j8BdXaW_cyxotUHw27g2cd6D8QpgXnNA4xKt8mEI27zbLOyG-uhg== Age: 83355
2024-11-01 16:52:11 UTC	12178	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 70 3d 7b 7d 2c 62 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6e 3d 62 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 62 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 70 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 74 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 74 2e 6d 3d 70 2c 65 3d 5b 5d 2c 74 2e 4f 3d 28 6e 2c 72 2c 61 2c 6f 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 69 3d 31 2f 30 3b 66 6f 72 28 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 Data Ascii: (()=>{"use strict";var e,p={},b={};function t(e){var n=b[e];if(void 0!==n)return n.exports;var r=b[e]={id:e,loaded:!1,exports:{}};return p[e].call(r.exports,r,r.exports,t),r.loaded=!0,r.exports}t.m=p,e=[],t.O=(n,r,a,o)=>{if(!r){var i=1/0;for(f=0;f<e.lengt
2024-11-01 16:52:11 UTC	9136	IN	Data Raw: 29 7b 76 61 72 20 77 2c 61 65 3d 43 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 6a 3d 61 65 5b 53 65 5d 2c 73 65 3d 43 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 3b 6a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 73 65 29 26 26 28 6a 3d 6a 5b 73 65 5d 2c 28 77 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 49 65 2c 7b 62 75 62 62 6c 65 73 3a 21 30 7d 29 29 2e 61 74 74 72 4e 61 6d 65 3d 6a 2e 6e 61 6d 65 2c 77 2e 70 72 65 76 56 61 6c 75 65 3d 6a 2e 76 61 6c 75 65 7c 7c 6e 75 6c 6c 2c 77 2e 6e 65 77 56 61 6c 75 65 3d 6a 2e 76 61 6c 75 65 3d 61 65 5b 73 65 5d 7c 7c 6e 75 6c 6c 2c 6e 75 6c 6c 3d 3d 77 2e 70 72 65 76 56 61 6c 75 65 3f 77 5b 4b 65 5d 3d 77 2e 61 74 74 72 43 68 61 6e 67 65 3d 30 3a 77 2e 4d 4f 44 49 46 49 43 41 54 49 4f 4e 3d 77 2e 61 74 74 Data Ascii: ){var w,ae=C.currentTarget,j=ae[Se],se=C.propertyName;j.hasOwnProperty(se)&&(j=j[se],(w=new CustomEvent(Ie,{bubbles:!0})).attrName=j.name,w.prevValue=j.value\|\|null,w.newValue=j.value=ae[se]\|\|null,null==w.prevValue?w[Ke]=w.attrChange=0:w.MODIFICATION=w.att
2024-11-01 16:52:11 UTC	7435	IN	Data Raw: 61 6e 63 65 6c 54 61 73 6b 5a 53 3d 6f 26 26 28 6f 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 6f 3a 74 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 5a 53 29 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 44 6c 67 74 3d 6f 26 26 28 6f 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 74 3a 74 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 44 6c 67 74 29 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 43 75 72 72 5a 6f 6e 65 3d 6f 26 26 28 6f 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 74 68 69 73 2e 7a 6f 6e 65 3a 74 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 43 75 72 72 5a 6f 6e 65 29 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 5a 53 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 44 6c 67 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 44 6c 67 74 4f 77 6e 65 72 3d Data Ascii: ancelTaskZS=o&&(o.onCancelTask?o:t._cancelTaskZS),this._cancelTaskDlgt=o&&(o.onCancelTask?t:t._cancelTaskDlgt),this._cancelTaskCurrZone=o&&(o.onCancelTask?this.zone:t._cancelTaskCurrZone),this._hasTaskZS=null,this._hasTaskDlgt=null,this._hasTaskDlgtOwner=
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: 72 65 73 70 6f 6e 73 65 42 6c 6f 62 22 3d 3d 3d 69 7c 7c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 5b 6c 5d 3f 6c 65 5b 65 5d 2e 70 72 6f 74 6f 74 79 70 65 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 6b 65 5d 5b 6c 5d 2e 61 70 70 6c 79 28 74 68 69 73 5b 6b 65 5d 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3a 76 65 28 6c 65 5b 65 5d 2e 70 72 6f 74 6f 74 79 70 65 2c 6c 2c 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 28 74 68 69 73 5b 6b 65 5d 5b 6c 5d 3d 65 74 28 68 2c 65 2b 22 2e 22 2b 6c 29 2c 62 65 28 74 68 69 73 5b 6b 65 5d 5b 6c 5d 2c 68 29 29 3a 74 68 69 73 5b 6b 65 5d 5b 6c 5d 3d 68 7d 2c 67 65 74 3a Data Ascii: responseBlob"===i\|\|function(l){"function"==typeof c[l]?le[e].prototype[l]=function(){return this[ke][l].apply(this[ke],arguments)}:ve(le[e].prototype,l,{set:function(h){"function"==typeof h?(this[ke][l]=et(h,e+"."+l),be(this[ke][l],h)):this[ke][l]=h},get:
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: 2c 72 2c 63 2c 22 49 6d 6d 65 64 69 61 74 65 22 29 7d 29 2c 5a 6f 6e 65 2e 5f 5f 6c 6f 61 64 5f 70 61 74 63 68 28 22 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 2c 65 3d 3e 7b 44 65 28 65 2c 22 72 65 71 75 65 73 74 22 2c 22 63 61 6e 63 65 6c 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 29 2c 44 65 28 65 2c 22 6d 6f 7a 52 65 71 75 65 73 74 22 2c 22 6d 6f 7a 43 61 6e 63 65 6c 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 29 2c 44 65 28 65 2c 22 77 65 62 6b 69 74 52 65 71 75 65 73 74 22 2c 22 77 65 62 6b 69 74 43 61 6e 63 65 6c 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 29 7d 29 2c 5a 6f 6e 65 2e 5f 5f 6c 6f 61 64 5f 70 61 74 63 68 28 22 62 6c 6f 63 6b 69 6e 67 22 2c 28 65 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 Data Ascii: ,r,c,"Immediate")}),Zone.__load_patch("requestAnimationFrame",e=>{De(e,"request","cancel","AnimationFrame"),De(e,"mozRequest","mozCancel","AnimationFrame"),De(e,"webkitRequest","webkitCancel","AnimationFrame")}),Zone.__load_patch("blocking",(e,r)=>{const
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 74 72 79 7b 66 6f 72 28 65 3d 66 6f 28 74 29 3b 21 28 6f 3d 79 69 65 6c 64 20 65 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 69 66 28 6e 2e 6e 65 78 74 28 6f 2e 76 61 6c 75 65 29 2c 6e 2e 63 6c 6f 73 65 64 29 72 65 74 75 72 6e 7d 63 61 74 63 68 28 73 29 7b 61 3d 7b 65 72 72 6f 72 3a 73 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 6f 26 26 21 6f 2e 64 6f 6e 65 26 26 28 72 3d 65 2e 72 65 74 75 72 6e 29 26 26 28 79 69 65 6c 64 20 72 2e 63 61 6c 6c 28 65 29 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 61 2e 65 72 72 6f 72 7d 7d 6e 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 29 7d 29 28 74 2c 6e 29 2e 63 61 74 63 68 28 65 3d 3e 6e 2e 65 72 72 6f 72 28 65 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 Data Ascii: oid 0,function*(){try{for(e=fo(t);!(o=yield e.next()).done;)if(n.next(o.value),n.closed)return}catch(s){a={error:s}}finally{try{o&&!o.done&&(r=e.return)&&(yield r.call(e))}finally{if(a)throw a.error}}n.complete()})})(t,n).catch(e=>n.error(e))})}function q
2024-11-01 16:52:12 UTC	4014	IN	Data Raw: 70 74 69 6f 6e 61 6c 7c 7c 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 3b 6c 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 31 28 74 2c 6e 2c 65 2c 6f 29 7b 69 66 28 65 26 74 6e 2e 4f 70 74 69 6f 6e 61 6c 26 26 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 6e 75 6c 6c 29 2c 21 28 65 26 28 74 6e 2e 53 65 6c 66 7c 74 6e 2e 48 6f 73 74 29 29 29 7b 63 6f 6e 73 74 20 61 3d 74 5b 4d 73 5d 2c 72 3d 41 61 28 76 6f 69 64 20 30 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 3f 61 2e 67 65 74 28 6e 2c 6f 2c 65 26 74 6e 2e 4f 70 74 69 6f 6e 61 6c 29 3a 4d 6f 28 6e 2c 6f 2c 65 26 74 6e 2e 4f 70 74 69 6f 6e 61 6c 29 7d 66 69 6e 61 6c 6c 79 7b 41 61 28 72 29 7d 7d 72 65 74 75 72 6e 20 4b 31 28 6f 2c 30 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 31 28 74 2c 6e 2c 65 2c Data Ascii: ptional\|\|void 0!==t)return t;ls()}function Z1(t,n,e,o){if(e&tn.Optional&&void 0===o&&(o=null),!(e&(tn.Self\|tn.Host))){const a=t[Ms],r=Aa(void 0);try{return a?a.get(n,o,e&tn.Optional):Mo(n,o,e&tn.Optional)}finally{Aa(r)}}return K1(o,0,e)}function J1(t,n,e,
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: 65 74 20 6d 75 6c 74 69 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 60 49 6e 6a 65 63 74 69 6f 6e 54 6f 6b 65 6e 20 24 7b 74 68 69 73 2e 5f 64 65 73 63 7d 60 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 6c 28 74 2c 6e 29 7b 74 2e 66 6f 72 45 61 63 68 28 65 3d 3e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 43 6c 28 65 2c 6e 29 3a 6e 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 4d 28 74 2c 6e 2c 65 29 7b 6e 3e 3d 74 2e 6c 65 6e 67 74 68 3f 74 2e 70 75 73 68 28 65 29 3a 74 2e 73 70 6c 69 63 65 28 6e 2c 30 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 78 67 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3e 3d 74 2e 6c 65 6e 67 74 68 2d 31 3f 74 2e 70 6f 70 28 29 3a 74 2e 73 70 6c 69 63 65 28 6e 2c 31 29 5b 30 5d 7d 66 75 Data Ascii: et multi(){return this}toString(){return`InjectionToken ${this._desc}`}}function Cl(t,n){t.forEach(e=>Array.isArray(e)?Cl(e,n):n(e))}function oM(t,n,e){n>=t.length?t.push(e):t.splice(n,0,e)}function xg(t,n){return n>=t.length-1?t.pop():t.splice(n,1)[0]}fu
2024-11-01 16:52:12 UTC	8949	IN	Data Raw: 74 6f 72 79 3d 28 29 3d 3e 68 73 28 61 2e 6d 75 6c 74 69 29 2c 74 68 69 73 2e 72 65 63 6f 72 64 73 2e 73 65 74 28 65 2c 61 29 29 2c 65 3d 6e 2c 61 2e 6d 75 6c 74 69 2e 70 75 73 68 28 6e 29 7d 74 68 69 73 2e 72 65 63 6f 72 64 73 2e 73 65 74 28 65 2c 6f 29 7d 68 79 64 72 61 74 65 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 3d 3d 3d 48 67 26 26 28 65 2e 76 61 6c 75 65 3d 42 33 2c 65 2e 76 61 6c 75 65 3d 65 2e 66 61 63 74 6f 72 79 28 29 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 76 61 6c 75 65 26 26 65 2e 76 61 6c 75 65 26 26 66 75 6e 63 74 69 6f 6e 20 55 33 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: tory=()=>hs(a.multi),this.records.set(e,a)),e=n,a.multi.push(n)}this.records.set(e,o)}hydrate(n,e){return e.value===Hg&&(e.value=B3,e.value=e.factory()),"object"==typeof e.value&&e.value&&function U3(t){return null!==t&&"object"==typeof t&&"function"==typ
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: 26 26 66 75 6e 63 74 69 6f 6e 20 59 35 28 74 2c 6e 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 73 34 28 74 2c 6e 5b 65 5d 29 7d 28 6e 2c 64 29 3b 63 6f 6e 73 74 20 76 3d 74 2e 76 69 65 77 51 75 65 72 79 3b 69 66 28 6e 75 6c 6c 21 3d 3d 76 26 26 56 66 28 32 2c 76 2c 6f 29 2c 73 29 7b 63 6f 6e 73 74 20 45 3d 74 2e 76 69 65 77 43 68 65 63 6b 48 6f 6f 6b 73 3b 6e 75 6c 6c 21 3d 3d 45 26 26 73 65 28 6e 2c 45 29 7d 65 6c 73 65 7b 63 6f 6e 73 74 20 45 3d 74 2e 76 69 65 77 48 6f 6f 6b 73 3b 6e 75 6c 6c 21 3d 3d 45 26 26 77 65 28 6e 2c 45 2c 32 29 2c 46 65 28 6e 2c 32 29 7d 21 30 3d 3d 3d 74 2e 66 69 72 73 74 55 70 64 61 74 65 50 61 73 73 26 26 28 74 2e 66 69 72 73 74 55 70 64 61 74 65 50 61 73 73 3d 21 31 29 2c 6e 5b 43 Data Ascii: &&function Y5(t,n){for(let e=0;e<n.length;e++)s4(t,n[e])}(n,d);const v=t.viewQuery;if(null!==v&&Vf(2,v,o),s){const E=t.viewCheckHooks;null!==E&&se(n,E)}else{const E=t.viewHooks;null!==E&&we(n,E,2),Fe(n,2)}!0===t.firstUpdatePass&&(t.firstUpdatePass=!1),n[C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49776	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:11 UTC	1215	OUT	GET /etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.ACSHASH0a6aff292f5cc42142779cde92054524.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:11 UTC	4201	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 1271 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:11 GMT ETag: "4f7-607ecc3dd4b00" Last-Modified: Tue, 17 Oct 2023 17:22:20 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b0e9d8f8b32a56e2c7dd6fb83988fcce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: QExK4ow65IofRnULagJjbE7VRW_1Sz-x9fA98Gi8YY35oEn6vFYZ8g== Age: 235283
2024-11-01 16:52:11 UTC	1271	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 43 51 3d 77 69 6e 64 6f 77 2e 43 51 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 3d 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 75 74 69 6c 73 3d 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 75 74 69 6c 73 3d 7b 72 65 6d 6f 76 Data Ascii: (function(){window.CQ=window.CQ\|\|{};window.CQ.CoreComponents=window.CQ.CoreComponents\|\|{};window.CQ.CoreComponents.container=window.CQ.CoreComponents.container\|\|{};window.CQ.CoreComponents.container.utils={};window.CQ.CoreComponents.container.utils={remov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49777	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:11 UTC	1410	OUT	GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-base.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:11 UTC	4173	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 0 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:11 GMT ETag: "0-5facfbb0e3cc0" Last-Modified: Wed, 03 May 2023 20:16:27 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 d81b69368e6f8be2907e338480e58682.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: b2FdXQB7VreQp53tQcAi45T39nrGQfFsE4f5ihLMtZfVYe5klRmaHA== Age: 235284

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49779	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:11 UTC	1216	OUT	GET /etc.clientlibs/iig-transformation/components/dwcharts/clientlibs/site.min.ACSHASH0c4b1c61e4ed0e14f079763904b4349b.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:11 UTC	4200	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 815 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:11 GMT ETag: "32f-61aa2076ef400" Last-Modified: Tue, 11 Jun 2024 19:11:12 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6911ef0af5d3e71b980895e415d48bc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: m_HmNapoq3_XPBDGFAFgoYx6INZdSjDNgxLPZtH7k1G-l8e3PCqOOA== Age: 235283
2024-11-01 16:52:11 UTC	815	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 2f 2f 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 64 6a 75 73 74 20 69 66 72 61 6d 65 20 68 65 69 67 68 74 20 74 6f 20 65 6e 73 75 72 65 20 63 68 61 72 74 20 69 73 6e 27 74 20 63 75 74 6f 66 66 20 6f 6e 20 6d 6f 62 69 6c 65 2c 0a 20 20 20 20 2f 2f 20 64 6f 65 73 6e 27 74 20 68 61 76 65 20 73 63 72 6f 6c 6c 62 61 72 73 2c 20 61 6e 64 20 64 6f 65 73 6e 27 74 20 68 61 76 65 20 74 6f 6f 20 6d 75 63 68 20 77 68 69 74 65 73 70 61 63 65 20 75 6e 64 65 72 6e 65 61 74 68 20 6f 6e 20 64 65 73 6b 74 6f 70 0a 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 65 73 73 61 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: (function () { "use strict"; // dynamically adjust iframe height to ensure chart isn't cutoff on mobile, // doesn't have scrollbars, and doesn't have too much whitespace underneath on desktop window.addEventListener('message', function(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49778	18.173.205.93	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:11 UTC	667	OUT	GET /v1/fonts/31b07b3f-1c2f-4320-90e5-bc52e0ed0b65.woff2 HTTP/1.1 Host: constellation-static.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ownyourfuture.vanguard.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://constellation-static.web.vanguard.com/v1/fonts/ff-mark.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:11 UTC	800	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 49940 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Content-Length, Content-Type, Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Sat, 05 Oct 2024 00:10:56 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: wA680Iujj4s9ZLTO37Yok3vYRtMHjkRK Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 06:26:56 GMT ETag: "eeab248b9bff52e652ae342dae8ffe59" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 741fa80e957b47e88235a1fa44ab4ea4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lKEX6Gf9hnvgRt4pjyRWNa2kK9EJeaO8Tur-C_DcP2pa7UYxjNROVw== Age: 37516
2024-11-01 16:52:11 UTC	15584	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c3 14 00 0d 00 00 00 02 b3 ac 00 00 c2 ba 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 58 1b 83 b3 3c 1c df 18 06 60 00 92 02 0a 85 d2 2c 84 b8 3e 01 36 02 24 03 9f 76 0b 9f 7c 00 04 20 05 a9 01 07 20 5b dc 55 92 d7 01 b8 17 d5 03 00 c0 9a bf 87 45 a4 68 f5 b0 8e c8 49 ab 07 e0 ff ff ff ff ff 3f 2f 21 e0 b8 b6 ed 55 15 00 40 f0 a3 9f fc ec 17 bf fa cd ef fe e0 8f fe e4 cf fe e2 af fe e6 ef fe e1 9f fe e5 df fe e3 bf fe e7 ff fe 3a 70 70 fd c3 b4 6c c7 f5 7c 43 3d 7c f7 f9 d5 7d 66 ed 18 bc d9 10 5f 79 20 31 06 3c a7 7d 93 99 a0 f5 2a ad 57 f4 d7 f3 dd 15 3c 48 cf 50 a1 a5 52 70 95 62 fe 7f dc f4 6f f2 62 64 7c 48 4d 90 8a c7 da 13 98 59 c0 2b c6 56 cf 9c 89 1a df 8c a9 db 77 61 26 7e df ff 54 Data Ascii: wOF2X<`,>6$v\| [UEhI?/!U@:ppl\|C=\|}f_y 1<}*W<HPRpbobd\|HMY+Vwa&~T
2024-11-01 16:52:11 UTC	16384	IN	Data Raw: 32 9f a5 5a 1d 6e 54 7b d8 11 b6 4f 47 c2 4e e9 42 d8 35 dd 0e 7b a8 e7 61 6f f5 39 ec 67 f9 9f db 52 71 a7 74 3b 15 e2 4e af 70 77 94 72 ba f3 a9 b0 bb 98 ca b8 2b aa ba bb 8e 1a b9 5b a8 9d bb 8b 7a b9 07 68 98 7b 8c 26 b9 67 68 9e 7b c9 9e 09 ee f5 ee 2d ee 5d 68 bb 0f b8 8f 41 67 dc 97 74 c3 7d 57 8f dd 2f f5 de fd f5 82 64 0f da 1e 9b c7 80 5c 9e d4 0a f3 64 52 56 4f 6e 15 f0 14 51 09 4f 39 55 f6 d4 6c d5 f3 34 41 db d3 ca d3 01 ea e6 e9 a3 41 9e 11 1a e7 99 a2 59 9e 05 5a e6 59 ad 8d 9e 6d da e3 39 a4 13 9e 73 ba e2 49 d2 7d cf 53 bd f6 7c 2c 7f f7 fc a9 78 e9 f5 97 dd 1b a4 b4 5e 8f 22 bd d9 15 ed 8d 51 ac b7 d4 be 71 de aa de 78 6f 03 24 de 66 a0 0d 9d e8 a1 7e de 21 1a e5 9d a0 69 de 39 5a e4 5d a1 b5 de c4 ce 1d de 7d de 23 de 53 b1 cf b9 80 0d Data Ascii: 2ZnT{OGNB5{ao9gRqt;Npwr+[zh{&gh{-]hAgt}W/d\dRVOnQO9Ul4AAYZYm9sI}S\|,x^"Qqxo$f~!i9Z]}#S
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: 16 c1 b5 b2 fc 6c 80 48 6f 93 a4 5a 41 6a 08 9e 0e 13 cd ac 1b 5e 67 33 c5 b3 61 b5 38 25 27 b5 0b 5d 8b 13 72 18 c0 df 83 63 e1 e8 8b 4c 53 84 76 74 6c 0b db 22 38 40 16 3f f1 e4 c0 62 1b 0d 02 8a fd f4 72 53 de 1a 50 fa e7 0e d9 ef 9c ab 32 20 d9 6b 9b 2b fe 91 02 2d b4 65 0b 36 bb 7a a4 a2 8e 6d 9c 05 af 13 b6 05 89 30 58 42 80 2b 2d e6 27 0b fe 44 36 fe f6 9b ae 98 6b ae cd 2e ac ff fc bb 4e c0 7b c4 00 e1 e3 26 86 95 72 90 29 dc d6 a1 20 f2 e1 c8 ba 0a 03 d8 85 48 28 b3 f3 6b 57 1b 3b c1 48 23 13 17 a5 e1 71 53 1a f2 e9 7f aa 8c 0d 7d 58 25 0b 86 7c d7 4e a4 11 37 5c 59 62 63 dc d5 1a f5 0e 9d 55 23 46 5e 94 5b 82 d1 42 8b e4 d1 3b f0 71 16 91 fa 38 ff 2e d5 6c 65 b7 34 da b1 a2 74 95 b1 70 ab 03 55 c1 56 f0 b5 68 91 36 b1 f3 03 6f 9a 8c e6 5c 30 79 Data Ascii: lHoZAj^g3a8%']rcLSvtl"8@?brSP2 k+-e6zm0XB+-'D6k.N{&r) H(kW;H#qS}X%\|N7\YbcU#F^[B;q8.le4tpUVh6o\0y
2024-11-01 16:52:12 UTC	1588	IN	Data Raw: 17 be 15 2f 3c fd dd 0b db e2 45 7c fc 92 13 2f e1 d7 97 9e 88 97 9f fa ed e5 e7 c4 2b 30 af fc bd e9 ab 10 af 3d ff f0 95 ff 36 79 1d ed 9e 02 de 7f 7b 0e 7a 6a e6 ae 78 1a ef be 7d 87 9e 99 19 c5 b3 30 6f 3f f9 24 cf e1 e3 b7 ff dd 8e fd a4 ae 69 33 d1 6a b1 3c b2 b1 5a ac 96 74 2e 86 98 a7 5e e8 54 c7 8d 0b 0d 9d 0a d6 d0 a6 f7 24 fe 24 89 54 92 e8 28 95 39 c7 7a 40 37 16 47 e8 b2 34 83 67 3d 8d 55 72 ce fd ae 3c 59 08 ba 85 b5 7e af 8b 26 17 03 1d 33 47 17 3f d7 b6 99 1b e3 ec ed 91 4b c4 94 95 2b e9 b4 1c 1e 6b d2 fd 4e 48 a5 71 29 8b 4a 45 2e 50 6e 85 ae 99 2b 86 2e 72 96 90 89 43 45 57 15 b4 ba 50 d7 ce ca 85 6b ea 78 a2 52 7e 3e 9a 15 cd ec 02 c5 dc 8a d2 a3 41 5d aa 9c cd 2e 86 64 28 88 29 e7 51 10 5f 02 6d be dc 93 1c 82 24 1a 63 a0 9d 28 ad 4a Data Ascii: /<E\|/+0=6y{zjx}0o?$i3j<Zt.^T$$T(9z@7G4g=Ur<Y~&3G?K+kNHq)JE.Pn+.rCEWPkxR~>A].d()Q_m$c(J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49780	54.77.215.91	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:11 UTC	563	OUT	GET /ibs:dpid=477&dpuuid=238ec78f6251143997b79a6ad381607f29226e68dea55bbe2cf5d3418c8078f3b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=84871277735491192852519433086877446357; dextp=60-1-1730479926517; dpm=84871277735491192852519433086877446357
2024-11-01 16:52:11 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:11 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: YSfsNCf0Sx0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v067-007596d29.edge-irl1.demdex.com 3 ms set-cookie: dpm=84871277735491192852519433086877446357; Max-Age=15552000; Expires=Wed, 30 Apr 2025 16:52:11 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=84871277735491192852519433086877446357; Max-Age=15552000; Expires=Wed, 30 Apr 2025 16:52:11 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-11-01 16:52:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49781	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:11 UTC	1206	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-base.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:12 UTC	4173	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 0 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:11 GMT ETag: "0-5cf85317674c0" Last-Modified: Fri, 29 Oct 2021 22:17:31 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 0d83778457fb41198419fd5b267a3308.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: NbcAWPh69vs929h-3mZTpeKUZ_lzgn1teOyPiS1yoRGTXrV7RDM2Hg== Age: 235283

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49785	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:12 UTC	1206	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASH19c0971c237b914197972e901db2f496.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:12 UTC	4205	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 207738 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:12 GMT ETag: "32b7a-625b557f13dc0" Last-Modified: Wed, 30 Oct 2024 17:50:55 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b481802150ed76eaa37311e413a69c2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: MvrEklDwZx1tD6NZHOwTOMCmRkd8TX7bGRrg-oGTVfzXWL2hYsqsng== Age: 169252
2024-11-01 16:52:12 UTC	4015	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 69 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 65 2c 69 2e 63 3d 74 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 69 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function i(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=fun
2024-11-01 16:52:12 UTC	8949	IN	Data Raw: 61 72 20 49 3d 75 28 5b 22 61 22 2c 22 61 62 62 72 22 2c 22 61 63 72 6f 6e 79 6d 22 2c 22 61 64 64 72 65 73 73 22 2c 22 61 72 65 61 22 2c 22 61 72 74 69 63 6c 65 22 2c 22 61 73 69 64 65 22 2c 22 61 75 64 69 6f 22 2c 22 62 22 2c 22 62 64 69 22 2c 22 62 64 6f 22 2c 22 62 69 67 22 2c 22 62 6c 69 6e 6b 22 2c 22 62 6c 6f 63 6b 71 75 6f 74 65 22 2c 22 62 6f 64 79 22 2c 22 62 72 22 2c 22 62 75 74 74 6f 6e 22 2c 22 63 61 6e 76 61 73 22 2c 22 63 61 70 74 69 6f 6e 22 2c 22 63 65 6e 74 65 72 22 2c 22 63 69 74 65 22 2c 22 63 6f 64 65 22 2c 22 63 6f 6c 22 2c 22 63 6f 6c 67 72 6f 75 70 22 2c 22 63 6f 6e 74 65 6e 74 22 2c 22 64 61 74 61 22 2c 22 64 61 74 61 6c 69 73 74 22 2c 22 64 64 22 2c 22 64 65 63 6f 72 61 74 6f 72 22 2c 22 64 65 6c 22 2c 22 64 65 74 61 69 6c 73 22 Data Ascii: ar I=u(["a","abbr","acronym","address","area","article","aside","audio","b","bdi","bdo","big","blink","blockquote","body","br","button","canvas","caption","center","cite","code","col","colgroup","content","data","datalist","dd","decorator","del","details"
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: 2c 22 63 6c 61 73 73 22 2c 22 66 6f 72 22 2c 22 69 64 22 2c 22 6c 61 62 65 6c 22 2c 22 6e 61 6d 65 22 2c 22 70 61 74 74 65 72 6e 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 72 6f 6c 65 22 2c 22 73 75 6d 6d 61 72 79 22 2c 22 74 69 74 6c 65 22 2c 22 76 61 6c 75 65 22 2c 22 73 74 79 6c 65 22 2c 22 78 6d 6c 6e 73 22 5d 29 2c 69 74 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 38 2f 4d 61 74 68 2f 4d 61 74 68 4d 4c 22 2c 6e 74 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 72 74 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 2c 61 74 3d 72 74 2c 6f 74 3d 21 31 2c 73 74 3d 6e 75 6c 6c 2c 63 74 3d 41 28 7b 7d 2c 5b 69 74 2c 6e 74 2c 72 74 5d 2c Data Ascii: ,"class","for","id","label","name","pattern","placeholder","role","summary","title","value","style","xmlns"]),it="http://www.w3.org/1998/Math/MathML",nt="http://www.w3.org/2000/svg",rt="http://www.w3.org/1999/xhtml",at=rt,ot=!1,st=null,ct=A({},[it,nt,rt],
2024-11-01 16:52:12 UTC	3416	IN	Data Raw: 65 4e 75 6d 62 65 72 2c 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 3a 74 68 69 73 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 2c 73 74 61 63 6b 3a 74 68 69 73 2e 73 74 61 63 6b 2c 63 6f 6e 66 69 67 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2c 63 6f 64 65 3a 74 68 69 73 2e 63 6f 64 65 2c 73 74 61 74 75 73 3a 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 26 26 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 3f 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 3a 6e 75 6c 6c 7d 7d 2c 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 73 69 6c 65 6e 74 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 66 6f 72 63 65 64 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 63 6c 61 72 69 66 79 54 Data Ascii: eNumber,columnNumber:this.columnNumber,stack:this.stack,config:this.config,code:this.code,status:this.response&&this.response.status?this.response.status:null}},e}},function(e,t,i){"use strict";e.exports={silentJSONParsing:!0,forcedJSONParsing:!0,clarifyT
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: 43 72 65 64 65 6e 74 69 61 6c 73 3a 73 2c 61 64 61 70 74 65 72 3a 73 2c 72 65 73 70 6f 6e 73 65 54 79 70 65 3a 73 2c 78 73 72 66 43 6f 6f 6b 69 65 4e 61 6d 65 3a 73 2c 78 73 72 66 48 65 61 64 65 72 4e 61 6d 65 3a 73 2c 6f 6e 55 70 6c 6f 61 64 50 72 6f 67 72 65 73 73 3a 73 2c 6f 6e 44 6f 77 6e 6c 6f 61 64 50 72 6f 67 72 65 73 73 3a 73 2c 64 65 63 6f 6d 70 72 65 73 73 3a 73 2c 6d 61 78 43 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 3a 73 2c 6d 61 78 42 6f 64 79 4c 65 6e 67 74 68 3a 73 2c 74 72 61 6e 73 70 6f 72 74 3a 73 2c 68 74 74 70 41 67 65 6e 74 3a 73 2c 68 74 74 70 73 41 67 65 6e 74 3a 73 2c 63 61 6e 63 65 6c 54 6f 6b 65 6e 3a 73 2c 73 6f 63 6b 65 74 50 61 74 68 3a 73 2c 72 65 73 70 6f 6e 73 65 45 6e 63 6f 64 69 6e 67 3a 73 2c 76 61 6c 69 64 61 74 65 53 74 61 Data Ascii: Credentials:s,adapter:s,responseType:s,xsrfCookieName:s,xsrfHeaderName:s,onUploadProgress:s,onDownloadProgress:s,decompress:s,maxContentLength:s,maxBodyLength:s,transport:s,httpAgent:s,httpsAgent:s,cancelToken:s,socketPath:s,responseEncoding:s,validateSta
2024-11-01 16:52:13 UTC	16384	IN	Data Raw: 3e 27 2b 65 5b 6e 5d 2e 74 6f 70 69 63 73 5b 30 5d 2b 22 3c 2f 73 70 61 6e 3e 22 2c 65 5b 6e 5d 2e 74 6f 70 69 63 73 2e 73 6c 69 63 65 28 30 2c 31 29 29 2c 65 5b 6e 5d 26 26 65 5b 6e 5d 2e 74 6f 70 69 63 73 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 6c 65 74 20 69 3d 31 3b 69 3c 65 5b 6e 5d 2e 74 6f 70 69 63 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 2b 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 43 6c 61 73 73 20 63 6d 70 2d 74 65 61 73 65 72 5f 5f 73 75 62 74 61 67 20 74 65 61 73 65 72 2d 27 2b 6e 2b 27 2d 73 75 62 63 61 74 65 67 6f 72 79 22 20 74 69 74 6c 65 3d 22 27 2b 65 5b 6e 5d 2e 74 6f 70 69 63 73 5b 69 5d 2b 27 22 3e 27 2b 65 5b 6e 5d 2e 74 6f 70 69 63 73 5b 69 5d 2b 22 3c 2f 73 70 61 6e 3e 22 3b 65 5b 6e 5d 2e 74 6f 70 69 63 73 Data Ascii: >'+e[n].topics[0]+"</span>",e[n].topics.slice(0,1)),e[n]&&e[n].topics.length>1)for(let i=1;i<e[n].topics.length;i++)t+='<span class="hiddenClass cmp-teaser__subtag teaser-'+n+'-subcategory" title="'+e[n].topics[i]+'">'+e[n].topics[i]+"</span>";e[n].topics
2024-11-01 16:52:13 UTC	16384	IN	Data Raw: 64 42 72 6f 77 73 65 72 45 6e 76 28 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 2f 28 6d 73 69 65 7c 74 72 69 64 65 6e 74 29 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 6e 3d 65 3b 72 65 74 75 72 6e 20 74 26 26 28 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 6e 29 2c 6e 3d 69 2e 68 72 65 66 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 6e 29 2c 7b 68 72 65 66 3a 69 2e 68 72 65 66 2c 70 72 6f 74 6f 63 6f 6c 3a 69 2e 70 72 6f 74 6f 63 6f 6c 3f 69 2e 70 72 6f 74 6f 63 6f 6c 2e 72 65 70 6c 61 63 65 28 2f 3a 24 Data Ascii: dBrowserEnv()?function(){var e,t=/(msie\|trident)/i.test(navigator.userAgent),i=document.createElement("a");function r(e){var n=e;return t&&(i.setAttribute("href",n),n=i.href),i.setAttribute("href",n),{href:i.href,protocol:i.protocol?i.protocol.replace(/:$
2024-11-01 16:52:13 UTC	16384	IN	Data Raw: 3a 7b 73 65 6c 66 3a 22 2e 63 6d 70 2d 61 64 76 69 63 65 2d 63 61 6c 63 75 6c 61 74 6f 72 5f 5f 72 65 73 75 6c 74 22 2c 61 64 76 69 73 6f 72 43 6f 73 74 3a 22 2e 63 6d 70 2d 61 64 76 69 63 65 2d 63 61 6c 63 75 6c 61 74 6f 72 5f 5f 72 65 73 75 6c 74 2d 43 61 6c 63 2d 2d 72 65 73 5f 63 6f 73 74 22 2c 69 6e 64 75 73 74 72 79 41 76 67 43 6f 73 74 3a 22 2e 63 6d 70 2d 61 64 76 69 63 65 2d 63 61 6c 63 75 6c 61 74 6f 72 5f 5f 72 65 73 75 6c 74 2d 49 41 76 67 2d 2d 72 65 73 5f 63 6f 73 74 22 2c 73 61 76 69 6e 67 3a 22 2e 63 6d 70 2d 61 64 76 69 63 65 2d 63 61 6c 63 75 6c 61 74 6f 72 5f 5f 72 65 73 75 6c 74 2d 73 61 76 69 6e 67 2d 2d 73 61 76 65 64 22 7d 7d 7d 29 3b 63 6c 61 73 73 20 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 63 6f 6d 70 6f Data Ascii: :{self:".cmp-advice-calculator__result",advisorCost:".cmp-advice-calculator__result-Calc--res_cost",industryAvgCost:".cmp-advice-calculator__result-IAvg--res_cost",saving:".cmp-advice-calculator__result-saving--saved"}}});class r{constructor(e){this.compo
2024-11-01 16:52:13 UTC	16384	IN	Data Raw: 61 3a 6e 2c 70 61 67 69 6e 67 3a 21 31 2c 73 65 61 72 63 68 69 6e 67 3a 21 31 2c 69 6e 66 6f 3a 21 31 2c 61 75 74 6f 57 69 64 74 68 3a 21 30 2c 64 65 73 74 72 6f 79 3a 21 30 2c 63 6f 6c 75 6d 6e 73 3a 74 2c 6f 72 64 65 72 3a 5b 5b 30 2c 22 64 65 73 63 22 5d 5d 2c 69 6e 69 74 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 24 28 22 2e 6d 6f 72 65 2d 69 6e 73 69 67 68 74 73 2d 6c 69 73 74 5f 5f 74 61 62 6c 65 22 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 24 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 3e 24 28 64 6f 63 75 6d 65 6e 74 29 2e 68 65 69 67 68 74 28 Data Ascii: a:n,paging:!1,searching:!1,info:!1,autoWidth:!0,destroy:!0,columns:t,order:[[0,"desc"]],initComplete:function(e,t){$(window).scroll((function(){if($(".more-insights-list__table").is(":visible")&&$(window).scrollTop()+$(window).height()>$(document).height(
2024-11-01 16:52:13 UTC	16384	IN	Data Raw: 22 2b 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 2b 22 26 77 69 64 74 68 3d 22 2b 74 2b 22 26 68 65 69 67 68 74 3d 22 2b 69 2b 22 26 70 6c 61 79 65 72 46 6f 72 6d 3d 4c 56 50 50 6c 61 79 65 72 26 65 6d 62 65 64 4d 6f 64 65 3d 68 74 6d 6c 26 68 74 6d 6c 50 6c 61 79 65 72 46 69 6c 65 6e 61 6d 65 3d 6c 69 6d 65 6c 69 67 68 74 6a 73 2d 70 6c 61 79 65 72 2e 6a 73 22 2c 6f 3d 27 3c 69 66 72 61 6d 65 20 69 64 20 3d 22 65 78 70 65 72 74 5f 63 61 72 64 5f 76 69 64 65 6f 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2b 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2b 27 22 20 63 6c 61 73 73 3d 22 76 69 64 65 6f 5f 69 66 72 61 6d 65 22 20 73 72 63 3d 22 27 2b 61 2b 27 22 3e 3c 2f 69 66 Data Ascii: "+decodeURIComponent(n)+"&width="+t+"&height="+i+"&playerForm=LVPPlayer&embedMode=html&htmlPlayerFilename=limelightjs-player.js",o='<iframe id ="expert_card_video" scrolling="no" aria-label="'+decodeURIComponent(r)+'" class="video_iframe" src="'+a+'"></if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49786	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:12 UTC	1215	OUT	GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-dependencies.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:12 UTC	4173	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 0 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:12 GMT ETag: "0-5facfbb0e3cc0" Last-Modified: Wed, 03 May 2023 20:16:27 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 b481802150ed76eaa37311e413a69c2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: jSUdvndpl4w-z1JjVdUTKFcmQFXeROwIu07YyjJ4td9nz2nCAWG6ow== Age: 235279

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49783	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:12 UTC	1409	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-fpid.min.ACSHASHc29c4e6fef4a1eebacb63c6e38026ad6.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:12 UTC	4199	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 121 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:12 GMT ETag: "79-625b557f13dc0" Last-Modified: Wed, 30 Oct 2024 17:50:55 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 02cd8164e89a1598d410a9198582d47c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: 8kdCD_h2q0fAU7PzYxxmaZ_9pxMhzBscVhKUxZNwuXaVJEFuuBTz1g== Age: 169250
2024-11-01 16:52:12 UTC	121	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 61 6a 61 78 28 7b 6d 65 74 68 6f 64 3a 22 47 45 54 22 2c 75 72 6c 3a 22 2f 61 70 69 2f 69 6e 73 74 69 74 75 74 69 6f 6e 61 6c 2f 66 70 69 64 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 22 3a 22 6e 6f 2d 73 74 6f 72 65 22 7d 7d 29 7d 29 3b Data Ascii: $(document).ready(function(){$.ajax({method:"GET",url:"/api/institutional/fpid",headers:{"Cache-Control":"no-store"}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49782	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:12 UTC	1414	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-analytics.min.ACSHASHc715d927abe49d752760fce7dc779b20.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:12 UTC	4201	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 3111 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:12 GMT ETag: "c27-617907fbbaf80" Last-Modified: Fri, 03 May 2024 18:00:46 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 816b7f4e336674d9d7828ef4700482e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: H8MhXivl_OxrRVzp_IR-Zh-fDLtGWTmCLO3RhoIkgDtVNEHTICVIEw== Age: 235283
2024-11-01 16:52:12 UTC	3111	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 6f 63 61 74 69 6f 6e 20 3d 20 24 28 22 23 63 6f 75 6e 74 72 79 63 6f 64 65 56 61 6c 75 65 22 29 2e 76 61 6c 28 29 2b 22 3a 22 2b 24 28 22 23 6c 61 6e 67 75 61 67 65 63 6f 64 65 56 61 6c 75 65 22 29 2e 76 61 6c 28 29 0a 20 20 20 20 20 20 20 20 09 09 09 20 20 20 2b 22 3a 22 2b 24 28 22 23 73 69 74 65 69 64 65 6e 74 69 66 69 65 72 56 61 6c 75 65 22 29 2e 76 61 6c 28 29 2b 22 3a 22 2b 24 28 22 23 70 6c 61 74 66 6f 72 6d 56 61 6c 75 65 22 29 2e 76 61 6c 28 29 2b 22 3a 22 2b 0a 20 20 20 20 20 20 20 20 20 20 20 20 09 09 Data Ascii: (function($) { "use strict"; $(document).ready(function() { var location = $("#countrycodeValue").val()+":"+$("#languagecodeValue").val() +":"+$("#siteidentifierValue").val()+":"+$("#platformValue").val()+":"+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49784	18.173.205.93	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:12 UTC	667	OUT	GET /v1/fonts/30274a56-042d-447a-aff9-6da0dae01586.woff2 HTTP/1.1 Host: constellation-static.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ownyourfuture.vanguard.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://constellation-static.web.vanguard.com/v1/fonts/ff-mark.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:12 UTC	777	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 56116 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Content-Length, Content-Type, Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Sat, 05 Oct 2024 00:10:56 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: GYZKe27hw10XlmbX3HwvfVJs63wK5co0 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 07:24:25 GMT ETag: "33184e45d95bb74dd4c272f0c6ecfbef" X-Cache: Hit from cloudfront Via: 1.1 f41688bac877227b82b3347b2428d266.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ta4sPnpredbsk8FpV86FwPMjvnzI0hE_G1-ZdqqYsFFqFKVtqDAHQg== Age: 35699
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 db 34 00 0d 00 00 00 02 b8 64 00 00 da db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 82 3e 1b 83 91 4c 1c f4 2c 06 60 00 93 30 0a 85 d9 00 84 b6 5f 01 36 02 24 03 a0 4a 0b a0 50 00 04 20 05 b7 06 07 20 5b 0e 56 92 d4 01 a8 1a 36 0e 00 00 57 f3 b0 c8 80 49 ab ed e1 4b 44 4e 5a 3d 00 ff ff ff ff ff 27 25 04 3c 66 db 0e 40 55 55 05 3f fa c9 cf 7e f1 ab df fc ee 0f 7f fa cb df fc dd 3f fc d3 bf fc db 7f fc d7 ff fc df 7f 09 0c 8e 09 fc 87 69 d9 8e eb f1 fa fc 86 47 f8 bf ec 4f 92 3b ba b5 66 bb 24 5a 0f 76 fd 85 07 12 51 80 e6 2c 97 50 4a e5 d0 22 d6 de 54 df 44 7c 2e cc 04 2f 5f 26 b1 e7 71 ce 7b fd 0d 29 69 80 20 81 8e 55 92 0f 99 69 27 ae de 99 58 31 09 fc c3 d3 55 fe bd af 16 1d f4 12 33 13 aa Data Ascii: wOF24d>L,`0_6$JP [V6WIKDNZ='%<f@UU?~?iGO;f$ZvQ,PJ"TD\|./_&q{)i Ui'X1U3
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: c5 80 5c 09 c8 f5 72 8b dc 05 c8 03 f2 98 3c 03 c8 4b f2 86 bc 07 c8 27 f2 95 7c 07 c8 2f f2 97 74 01 71 4a 9c 47 9c 5f 5c 70 5c 24 00 62 4f 00 90 1a 0c 80 d8 13 75 00 88 3d 01 40 6a 30 00 62 4f 74 25 40 ec 09 de 2d ae ba 52 c3 c7 d3 23 f6 cd 35 5b e1 92 cd dd ba 2f 04 0c 94 11 63 8d 73 c0 aa d7 2e 8d 0a 1a 7b be 65 cc b6 f8 1b f0 e4 f7 f1 38 e3 c2 8c 90 1b 3e c8 75 d8 6e c7 7f e6 b1 20 c6 ec 03 c6 ec 06 ae d1 68 76 d4 1a fb b0 cc 77 f3 0f 95 71 e1 0f 87 2f f8 e8 6a 1c d7 d7 b1 0f 2e cb bb b6 32 a4 6d 88 31 ac fc 2c 61 b5 4e 23 d8 8a ab 95 c0 f9 86 90 49 d8 0a 9b f0 37 a5 48 4f 6b 39 9d cb 86 4a bd ce 97 0d 78 b1 0d fc 7f ad f7 0a c3 55 ef 30 88 f1 8b 75 ae e4 f0 99 10 9d e9 6a e4 71 27 3b e0 fb dc ac 77 0f f0 57 42 cb 5f 85 2c 68 5c e6 be 7a e6 3e 7b 8f Data Ascii: \r<K'\|/tqJG_\p\$bOu=@j0bOt%@-R#5[/cs.{e8>un hvwq/j.2m1,aN#I7HOk9JxU0ujq';wWB_,h\z>{
2024-11-01 16:52:12 UTC	16384	IN	Data Raw: 5c 53 84 6d a1 c1 bf 73 10 b1 bf 2e b7 f4 8d 30 d8 eb f5 eb d5 d1 f8 6b 75 35 26 50 33 9d db 08 5a 6c fb e4 65 69 68 31 2a 0a 4d 3f dc d9 ea 1b 24 63 98 b9 b3 c0 2e c5 c2 b6 e2 80 ed 6c b3 25 de 1a 40 e8 f2 c1 85 5f 1b da 1c 94 2e 5f a6 2e 0e 9b 7c ff ec f8 09 56 d6 d0 8b fe c0 ef b9 40 3b b1 56 b7 b5 bd 6b 65 34 43 6e 27 d6 7f cd 09 9d 66 ed 70 05 2f db 3e ff 41 ac f5 86 6e 6f c5 0d 57 86 67 13 9e d1 cb a6 25 7f 9a 75 e0 d9 99 89 ad 8e 62 35 db b9 87 d2 d1 95 1d 8a 30 43 64 ab 53 de c0 f4 36 41 ad 09 b0 b1 9c ed 00 6b 1e b3 ac 50 38 a5 09 22 d7 14 e1 78 4f bf dc 33 de f3 1d cf f2 f8 ca eb ee ca df 6d f7 2a 65 fd 3c e1 d8 82 bd fb 69 d2 b6 5e e5 37 b2 2d 5a 72 0b ce 6a 21 1c 7b 0b cf 99 5a 7f b0 a3 fd cf 6d cf 59 9d a2 4c c6 a9 f1 3c c4 e1 18 ab 53 ea 25 Data Ascii: \Sms.0ku5&P3Zleih1M?$c.l%@_._.\|V@;Vke4Cn'fp/>AnoWg%ub50CdS6AkP8"xO3me<i^7-Zrj!{ZmYL<S%
2024-11-01 16:52:12 UTC	6964	IN	Data Raw: e4 e5 cd 53 58 cc 97 0a 55 f4 24 1a 43 aa ca dc 59 47 e1 9d 1c bd 39 8a 14 99 25 e5 5e 42 0e ec 24 d7 c2 e7 44 ff e6 ee 4b f7 d1 d4 41 43 13 e7 c4 f4 b9 63 7c 34 0e 01 bf b9 4f a8 da 0b 2a 1a 6b 70 18 db 53 96 f3 3c c1 91 bf f6 6f 3f 69 ba b3 f9 e5 cb 2d 2f ef 3f 7e 59 ef 7f 42 5a bf cc 7a db 8d 9f fa df 3f 27 87 a2 22 35 4d 58 71 d2 98 f7 4d 7e 7b 21 25 3f 80 70 f8 d0 fe b7 d2 ed 88 ff dc 96 d2 26 ca aa 28 35 4e b1 de ec 4e 55 90 12 49 74 73 dd b1 6e 22 7e 87 00 50 56 d2 1e 4f c4 9c 64 41 89 6c bd b9 bd 7e b3 6b d7 79 fb c1 fa fe 23 f3 23 b5 87 9c ec b3 cf 7b 35 b9 3d 6a 36 08 33 7d 53 74 fd 9b e2 3f 9f 5f cf b7 be 78 fd c2 70 f9 85 ea 2b 11 62 40 54 58 4b e4 8a 0c 61 6f b8 79 dd ec 72 94 30 15 d9 10 1d 85 6c 14 aa cc e8 f0 ea 08 f1 f4 ef 11 b2 74 2e 57 Data Ascii: SXU$CYG9%^B$DKACc\|4O*kpS<o?i-/?~YBZz?'"5MXqM~{!%?p&(5NNUItsn"~PVOdAl~ky##{5=j63}St?_xp+b@TXKaoyr0lt.W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49787	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:12 UTC	1207	OUT	GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-base.min.ACSHASHd41d8cd98f00b204e9800998ecf8427e.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:13 UTC	4173	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 0 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:12 GMT ETag: "0-5facfbb0e3cc0" Last-Modified: Wed, 03 May 2023 20:16:27 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 1ebee81f497eb06c92039c3b1faacc38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: or9wXZFh1OQ5ssNtSn2IXAoEBtw1XrwrIi_km5SfQdAhkoBQWqzMsg== Age: 235276

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49788	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:12 UTC	1401	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/zenapse/dist/zen_init.min.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:13 UTC	4225	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6476 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:13 GMT ETag: "194c-6230a7d0e53c0" Last-Modified: Thu, 26 Sep 2024 19:10:15 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8b360b28aeb67c1982fcc466a05eef02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: aJnl1fugcI08CjC374de5mCAYmrCEu2wWWxpxg-kmaIVf-QCiDdVug== Age: 62446
2024-11-01 16:52:13 UTC	6476	IN	Data Raw: 28 28 29 3d 3e 7b 69 66 28 77 69 6e 64 6f 77 2e 5a 65 6e 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5a 65 6e 61 70 73 65 20 73 63 72 69 70 74 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 2e 20 4e 6f 74 20 6c 6f 61 64 69 6e 67 20 61 67 61 69 6e 2e 22 29 2c 21 31 3b 77 69 6e 64 6f 77 2e 5a 65 6e 3d 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 68 74 6d 6c 22 29 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 31 7d 2c 6e 3d 28 29 3d 3e 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 31 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2c 74 3d 28 65 2c 74 29 3d 3e 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 69 2c 61 29 3d 3e 7b 6c 65 74 20 6f 3d 74 3f 22 3f 76 65 72 3d 22 Data Ascii: (()=>{if(window.Zen)return console.warn("Zenapse script already loaded. Not loading again."),!1;window.Zen=(()=>{const e=()=>{document.querySelector("html").style.opacity=1},n=()=>Math.floor(1e10*Math.random()),t=(e,t)=>new Promise((i,a)=>{let o=t?"?ver="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49790	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:13 UTC	1206	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-fpid.min.ACSHASHc29c4e6fef4a1eebacb63c6e38026ad6.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:13 UTC	4199	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 121 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:13 GMT ETag: "79-625b557f13dc0" Last-Modified: Wed, 30 Oct 2024 17:50:55 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5b66c49d121e11542e2a99a7bf794c2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: gCBbhDBjwpAMn9UYFZS3a-Ga9fa1ksGh22cYc5cyNF7TCCVDlcbYVA== Age: 169242
2024-11-01 16:52:13 UTC	121	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 61 6a 61 78 28 7b 6d 65 74 68 6f 64 3a 22 47 45 54 22 2c 75 72 6c 3a 22 2f 61 70 69 2f 69 6e 73 74 69 74 75 74 69 6f 6e 61 6c 2f 66 70 69 64 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 22 3a 22 6e 6f 2d 73 74 6f 72 65 22 7d 7d 29 7d 29 3b Data Ascii: $(document).ready(function(){$.ajax({method:"GET",url:"/api/institutional/fpid",headers:{"Cache-Control":"no-store"}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49789	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:13 UTC	1431	OUT	GET /content/dam/inst/retirement-plans/digital-advisor/icons/facebook.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:13 UTC	4236	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1484 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="facebook.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:13 GMT ETag: "5cc-5e88f5cd53fc0" Last-Modified: Tue, 13 Sep 2022 13:55:19 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 18c9dea802c00b7c060142aad49f7288.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: gayv5Th6Yo0KrUFn4MKAs27EV-aX_A63B1NNEJP36qeCrKALqzcroQ== Age: 235284
2024-11-01 16:52:13 UTC	1484	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 36 34 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 64 (101010) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49791	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:13 UTC	1430	OUT	GET /content/dam/inst/retirement-plans/digital-advisor/icons/twitter.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:13 UTC	4235	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2492 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="twitter.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:13 GMT ETag: "9bc-5e88f5ce48200" Last-Modified: Tue, 13 Sep 2022 13:55:20 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6b25d4ce9efa3f2699980e1915129606.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: rt2kKhQoz7dvqK7HmHW35ctMGm_oiFXfQp5ve99ScvgwqfTxczk-8g== Age: 235284
2024-11-01 16:52:13 UTC	2492	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 36 34 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 64 (101010) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49792	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:13 UTC	1211	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-analytics.min.ACSHASHc715d927abe49d752760fce7dc779b20.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:13 UTC	4201	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 3111 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:13 GMT ETag: "c27-617907fbbaf80" Last-Modified: Fri, 03 May 2024 18:00:46 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0a817a6f6857cf3eedfb0006771e08f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: uoZWGJeC0stpN3Dwpme0MdGpPHeitHF5ftJ36SychuVLO8pOTuArww== Age: 235286
2024-11-01 16:52:13 UTC	3111	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 6f 63 61 74 69 6f 6e 20 3d 20 24 28 22 23 63 6f 75 6e 74 72 79 63 6f 64 65 56 61 6c 75 65 22 29 2e 76 61 6c 28 29 2b 22 3a 22 2b 24 28 22 23 6c 61 6e 67 75 61 67 65 63 6f 64 65 56 61 6c 75 65 22 29 2e 76 61 6c 28 29 0a 20 20 20 20 20 20 20 20 09 09 09 20 20 20 2b 22 3a 22 2b 24 28 22 23 73 69 74 65 69 64 65 6e 74 69 66 69 65 72 56 61 6c 75 65 22 29 2e 76 61 6c 28 29 2b 22 3a 22 2b 24 28 22 23 70 6c 61 74 66 6f 72 6d 56 61 6c 75 65 22 29 2e 76 61 6c 28 29 2b 22 3a 22 2b 0a 20 20 20 20 20 20 20 20 20 20 20 20 09 09 Data Ascii: (function($) { "use strict"; $(document).ready(function() { var location = $("#countrycodeValue").val()+":"+$("#languagecodeValue").val() +":"+$("#siteidentifierValue").val()+":"+$("#platformValue").val()+":"+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49793	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:13 UTC	1415	OUT	GET /content/dam/inst/retirement-plans/learn/Linkedin.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:14 UTC	4236	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2212 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="Linkedin.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:13 GMT ETag: "8a4-5ebdd52dbf580" Last-Modified: Tue, 25 Oct 2022 15:11:34 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7efdfc8e9ebc26758933b0151e22707e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: yR34yklEZL_aM3uecWGwNAJBSnz8r8TomSyOKYyowRS5Fy2vs2hJNA== Age: 235284
2024-11-01 16:52:14 UTC	2212	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e f0 9f 90 b7 49 63 6f 6e 73 2f 44 65 73 6b 74 6f 70 2f 53 6f 63 69 61 6c 2f 4c 69 6e 6b 65 64 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 48 65 61 64 65 72 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Icons/Desktop/Social/Linkedin</title> <g id="Header-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49795	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:14 UTC	1198	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/zenapse/dist/zen_init.min.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:14 UTC	4225	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6476 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:14 GMT ETag: "194c-6230a7d0e53c0" Last-Modified: Thu, 26 Sep 2024 19:10:15 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5150f5498db22842b8e5f639ceaf9506.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: QvjWJITJCdup4vwJZwgjnScOHqI3o3VCLJ_vXLHpL115TXxwUXdN-g== Age: 62466
2024-11-01 16:52:14 UTC	6476	IN	Data Raw: 28 28 29 3d 3e 7b 69 66 28 77 69 6e 64 6f 77 2e 5a 65 6e 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5a 65 6e 61 70 73 65 20 73 63 72 69 70 74 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 2e 20 4e 6f 74 20 6c 6f 61 64 69 6e 67 20 61 67 61 69 6e 2e 22 29 2c 21 31 3b 77 69 6e 64 6f 77 2e 5a 65 6e 3d 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 68 74 6d 6c 22 29 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 31 7d 2c 6e 3d 28 29 3d 3e 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 31 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2c 74 3d 28 65 2c 74 29 3d 3e 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 69 2c 61 29 3d 3e 7b 6c 65 74 20 6f 3d 74 3f 22 3f 76 65 72 3d 22 Data Ascii: (()=>{if(window.Zen)return console.warn("Zenapse script already loaded. Not loading again."),!1;window.Zen=(()=>{const e=()=>{document.querySelector("html").style.opacity=1},n=()=>Math.floor(1e10*Math.random()),t=(e,t)=>new Promise((i,a)=>{let o=t?"?ver="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49796	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:14 UTC	1432	OUT	GET /content/dam/inst/retirement-plans/digital-advisor/icons/instagram.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:14 UTC	4238	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 5238 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="instagram.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:14 GMT ETag: "1476-5e88f5ce48200" Last-Modified: Tue, 13 Sep 2022 13:55:20 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 19dbc4cbbe0be3dca8e57283a83b57c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: DO_h9Aycw823nxLL1toXfepns_p24QwblC4gOexSskka0j5so15dSA== Age: 235286
2024-11-01 16:52:14 UTC	5238	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 36 34 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 64 (101010) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49798	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:14 UTC	1212	OUT	GET /etc.clientlibs/vanguard-core-components/clientlibs/clientlib-base.min.ACSHASH8c2ff07b7a77f8d850a1ff64ef8817c6.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:14 UTC	4205	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 614152 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:14 GMT ETag: "95f08-61c5b9921e140" Last-Modified: Wed, 03 Jul 2024 17:59:57 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6911ef0af5d3e71b980895e415d48bc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: nqAMVttGVRvz4-nyft15r2yYGMrt8ri7MfPCDfTIkwsMxN5dJ9zRqg== Age: 235287
2024-11-01 16:52:14 UTC	11839	IN	Data Raw: 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: /* Copyright 2019 Google LLC SPDX-License-Identifier: BSD-3-Clause Copyright 2017 Google LLC SPDX-License-Identifier: BSD-3-Clause Copyright 2021 Google LLC SPDX-License-Identifier: BSD-3-Clause **************************************************
2024-11-01 16:52:14 UTC	16384	IN	Data Raw: 7c 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 4c 3d 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 59 7c 7c 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 3b 55 2e 5f 65 6c 65 6d 65 6e 74 73 2e 74 61 62 5b 4a 5d 2e 66 6f 63 75 73 28 29 3b 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 51 2c 4c 29 3b 67 26 26 28 4a 3d 70 28 55 2e 5f 65 6c 65 6d 65 6e 74 73 2e 74 61 62 70 61 6e 65 6c 5b 4a 5d 29 2c 53 3d 70 28 55 2e 5f 65 6c 65 6d 65 6e 74 73 2e 74 61 62 70 61 6e 65 6c 5b 53 5d 29 2c 6b 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 22 63 6d 70 3a 73 68 6f 77 22 2c 65 76 65 6e 74 49 6e 66 6f 3a 7b 70 61 74 68 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2e 22 2b 0a 4a 7d 7d 29 2c 6b 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 22 63 6d 70 3a 68 69 64 65 22 2c 65 76 65 Data Ascii: \|window.pageXOffset,L=window.scrollY\|\|window.pageYOffset;U._elements.tab[J].focus();window.scrollTo(Q,L);g&&(J=p(U._elements.tabpanel[J]),S=p(U._elements.tabpanel[S]),k.push({event:"cmp:show",eventInfo:{path:"component."+J}}),k.push({event:"cmp:hide",eve
2024-11-01 16:52:14 UTC	199	IN	Data Raw: 61 62 69 6e 64 65 78 22 2c 0a 22 30 22 29 29 3a 28 7a 61 5b 4a 61 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 63 6d 70 2d 63 61 72 6f 75 73 65 6c 5f 5f 69 74 65 6d 2d 2d 61 63 74 69 76 65 22 29 2c 7a 61 5b 4a 61 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 21 30 29 2c 4e 61 5b 4a 61 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 63 6d 70 2d 63 61 72 6f 75 73 65 6c 5f 5f 69 6e 64 69 63 61 74 6f 72 2d 2d 61 63 74 69 76 65 22 29 2c 4e 61 5b 4a 61 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 Data Ascii: abindex","0")):(za[Ja].classList.remove("cmp-carousel__item--active"),za[Ja].setAttribute("aria-hidden",!0),Na[Ja].classList.remove("cmp-carousel__indicator--active"),Na[Ja].setAttribute("aria-selec
2024-11-01 16:52:14 UTC	8949	IN	Data Raw: 74 65 64 22 2c 21 31 29 2c 4e 61 5b 4a 61 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 22 2d 31 22 29 29 3b 65 6c 73 65 20 7a 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6d 70 2d 63 61 72 6f 75 73 65 6c 5f 5f 69 74 65 6d 2d 2d 61 63 74 69 76 65 22 29 2c 4e 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6d 70 2d 63 61 72 6f 75 73 65 6c 5f 5f 69 6e 64 69 63 61 74 6f 72 2d 2d 61 63 74 69 76 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 29 7b 72 65 74 75 72 6e 20 78 61 2e 5f 61 63 74 69 76 65 3d 3d 3d 78 61 2e 5f 65 6c 65 6d 65 6e 74 73 2e 69 74 65 6d 2e 6c 65 6e 67 74 68 2d 31 3f 30 3a 78 61 2e 5f 61 63 74 69 76 65 2b 31 7d 66 75 6e 63 74 69 6f 6e 20 63 61 28 7a 61 2c 4e 61 29 7b 69 66 28 21 28 30 3e 7a 61 Data Ascii: ted",!1),Na[Ja].setAttribute("tabindex","-1"));else za.classList.add("cmp-carousel__item--active"),Na.classList.add("cmp-carousel__indicator--active")}function pa(){return xa._active===xa._elements.item.length-1?0:xa._active+1}function ca(za,Na){if(!(0>za
2024-11-01 16:52:14 UTC	7435	IN	Data Raw: 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 61 74 61 2d 63 6d 70 2d 68 6f 6f 6b 2d 69 6d 61 67 65 5d 22 29 3b 66 6f 72 28 76 61 72 20 6b 61 3d 30 3b 6b 61 3c 6a 61 2e 6c 65 6e 67 74 68 3b 6b 61 2b 2b 29 7b 76 61 72 20 70 61 3d 6a 61 5b 6b 61 5d 2c 63 61 3d 22 69 6d 61 67 65 22 3b 63 61 3d 63 61 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 63 61 2e 73 6c 69 63 65 28 31 29 3b 4c 2e 5f 65 6c 65 6d 65 6e 74 73 5b 70 61 2e 64 61 74 61 73 65 74 5b 22 63 6d 70 48 6f 6f 6b 22 2b 63 61 5d 5d 3d 70 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 6a 61 29 7b 4c 2e 5f 70 72 6f 70 65 72 74 69 65 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6b 61 20 69 6e 20 6b 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f Data Ascii: querySelectorAll("[data-cmp-hook-image]");for(var ka=0;ka<ja.length;ka++){var pa=ja[ka],ca="image";ca=ca.charAt(0).toUpperCase()+ca.slice(1);L._elements[pa.dataset["cmpHook"+ca]]=pa}}function J(ja){L._properties={};for(var ka in k)if(Object.prototype.hasO
2024-11-01 16:52:15 UTC	16384	IN	Data Raw: 42 5b 45 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 2c 42 5b 45 2d 31 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6d 70 2d 73 65 61 72 63 68 5f 5f 69 74 65 6d 2d 2d 69 73 2d 66 6f 63 75 73 65 64 22 29 2c 42 5b 45 2d 31 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 29 2c 72 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 73 2e 72 65 73 75 6c 74 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 64 2e 69 74 65 6d 2e 66 6f 63 75 73 65 64 29 29 72 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 73 2e 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 2d 72 2e 6f 66 66 73 65 74 54 6f 70 2c 30 3c 72 26 26 28 74 68 69 73 2e 5f Data Ascii: B[E].setAttribute("aria-selected","false"),B[E-1].classList.add("cmp-search__item--is-focused"),B[E-1].setAttribute("aria-selected","true")),r=this._elements.results.querySelector(d.item.focused))r=this._elements.results.scrollTop-r.offsetTop,0<r&&(this._
2024-11-01 16:52:15 UTC	16384	IN	Data Raw: 43 61 2c 4b 61 3d 28 43 61 3d 76 61 5b 74 61 5d 29 5b 30 5d 2c 68 62 3d 71 61 5b 4b 61 5d 2c 43 62 3d 43 61 5b 31 5d 3b 69 66 28 43 61 5b 32 5d 29 7b 69 66 28 68 62 3d 3d 3d 50 61 26 26 21 28 4b 61 20 69 6e 20 71 61 29 29 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 69 66 28 43 61 3d 6e 65 77 20 4c 2c 76 6f 69 64 20 30 21 3d 3d 50 61 7c 7c 21 7a 61 28 43 62 2c 68 62 2c 33 2c 76 6f 69 64 20 30 2c 43 61 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 62 61 2c 57 29 7d 7d 28 77 29 3a 42 61 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 77 29 7b 69 66 28 21 5a 63 28 77 29 29 72 65 74 75 72 6e 20 24 64 28 77 29 3b 0a 76 61 72 20 4b 2c 57 3d 5b 5d 3b 66 6f 72 28 4b 20 69 6e 20 4f 62 6a 65 63 74 28 77 29 29 4b 62 2e 63 61 6c 6c 28 77 2c 4b 29 26 26 Data Ascii: Ca,Ka=(Ca=va[ta])[0],hb=qa[Ka],Cb=Ca[1];if(Ca[2]){if(hb===Pa&&!(Ka in qa))return!1}else if(Ca=new L,void 0!==Pa\|\|!za(Cb,hb,3,void 0,Ca))return!1}return!0}(ba,W)}}(w):Ba(w)}function Ja(w){if(!Zc(w))return $d(w);var K,W=[];for(K in Object(w))Kb.call(w,K)&&
2024-11-01 16:52:15 UTC	16384	IN	Data Raw: 64 41 72 72 61 79 3d 42 62 3b 4f 2e 6c 61 73 74 3d 61 65 3b 4f 2e 73 74 75 62 41 72 72 61 79 3d 70 62 3b 4f 2e 73 74 75 62 46 61 6c 73 65 3d 47 62 3b 4f 2e 74 6f 46 69 6e 69 74 65 3d 46 61 3b 4f 2e 74 6f 49 6e 74 65 67 65 72 3d 64 62 3b 4f 2e 74 6f 4e 75 6d 62 65 72 3d 50 62 3b 4f 2e 74 6f 53 74 72 69 6e 67 3d 74 62 3b 0a 4f 2e 56 45 52 53 49 4f 4e 3d 22 34 2e 31 37 2e 35 22 3b 41 62 26 26 28 28 41 62 2e 65 78 70 6f 72 74 73 3d 4f 29 2e 5f 3d 4f 2c 49 62 2e 5f 3d 4f 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 75 6e 64 65 66 69 Data Ascii: dArray=Bb;O.last=ae;O.stubArray=pb;O.stubFalse=Gb;O.toFinite=Fa;O.toInteger=db;O.toNumber=Pb;O.toString=tb;O.VERSION="4.17.5";Ab&&((Ab.exports=O)._=O,Ib._=O)}).call(this)}).call(this,"undefined"!=typeof global?global:"undefined"!=typeof self?self:"undefi
2024-11-01 16:52:15 UTC	16384	IN	Data Raw: 74 72 75 63 74 6f 72 2f 69 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 7c 7c 22 5b 6f 62 6a 65 63 74 20 53 61 66 61 72 69 52 65 6d 6f 74 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 5d 22 3d 3d 3d 28 21 77 69 6e 64 6f 77 2e 73 61 66 61 72 69 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 61 66 61 72 69 26 26 77 69 6e 64 6f 77 2e 73 61 66 61 72 69 2e 70 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 68 69 64 65 42 61 6e 6e 65 72 53 68 6f 77 56 69 64 65 6f 28 65 2c 6d 2c 70 2c 68 2c 67 2c 6b 29 7b 68 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 30 2e 34 30 22 3b 70 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 31 22 3b 69 4f 53 28 29 7c Data Ascii: tructor/i.test(window.HTMLElement)\|\|"[object SafariRemoteNotification]"===(!window.safari\|\|"undefined"!==typeof safari&&window.safari.pushNotification).toString();function hideBannerShowVideo(e,m,p,h,g,k){h.style.opacity="0.40";p.style.opacity="1";iOS()\|
2024-11-01 16:52:15 UTC	16384	IN	Data Raw: 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 0a 43 63 29 3a 72 62 29 7d 46 61 3d 24 63 2b 28 5a 5b 64 62 5d 7c 7c 22 5c 78 33 63 3f 5c 78 33 65 22 29 2b 28 32 3d 3d 3d 66 61 3f 22 5c 78 33 63 2f 73 76 67 5c 78 33 65 22 3a 22 22 29 3b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 5a 29 7c 7c 21 5a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 61 77 22 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 20 74 65 6d 70 6c 61 74 65 20 73 74 72 69 6e 67 73 20 61 72 72 61 79 22 29 3b 46 61 3d 5b 76 6f 69 64 20 30 21 3d 3d 75 61 3f 75 61 2e 63 72 65 61 74 65 48 54 4d 4c 28 46 61 29 3a 46 61 2c 50 62 5d 3b 76 61 72 20 5b 51 63 2c 67 62 5d 3d 46 61 3b 69 66 28 74 68 69 73 2e 65 6c 3d 68 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 51 Data Ascii: .push(void 0),Cc):rb)}Fa=$c+(Z[db]\|\|"\x3c?\x3e")+(2===fa?"\x3c/svg\x3e":"");if(!Array.isArray(Z)\|\|!Z.hasOwnProperty("raw"))throw Error("invalid template strings array");Fa=[void 0!==ua?ua.createHTML(Fa):Fa,Pb];var [Qc,gb]=Fa;if(this.el=hd.createElement(Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49797	18.173.205.93	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:14 UTC	667	OUT	GET /v1/fonts/dc1646ea-4041-4648-9540-0bd7cbd10dc1.woff2 HTTP/1.1 Host: constellation-static.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ownyourfuture.vanguard.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://constellation-static.web.vanguard.com/v1/fonts/ff-mark.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:14 UTC	777	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 50864 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Content-Length, Content-Type, Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Sat, 05 Oct 2024 00:10:56 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: U1vP_8EGzchczoFbMysT001HQsEK3_0c Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 07:24:25 GMT ETag: "88d12a6792bdfb469435ad303c8b8d0d" X-Cache: Hit from cloudfront Via: 1.1 ee047aee7532c119ede08bf41f5f0762.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: tQryENU7rxkCmjmEqS13RXbyrnKTvjLg10aiq5QcdAbpc6-0kaeUKw== Age: 34147
2024-11-01 16:52:14 UTC	15607	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c6 b0 00 0d 00 00 00 02 e0 84 00 00 c6 57 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 58 1b 84 8e 06 1c df 1c 06 60 00 92 0a 0a 85 d1 30 84 a6 25 01 36 02 24 03 9f 7e 0b a0 04 00 04 20 05 a8 6f 07 20 5b 0f 7a 92 95 01 10 d8 38 00 00 54 ef c3 2a 52 b4 7a 58 46 d4 b4 1e 80 ff ff ff ff ff cf 4a 08 38 ae 6d 7b 55 55 00 10 fc e8 27 3f fb c5 af 7e f3 bb 3f fc e9 2f fe ea 6f fe ee 1f fe e9 5f fe ed 3f fe eb 7f fe ef 2f 03 63 77 40 2c db 71 3d df 56 d0 9a 75 cf ec 5d 2e b0 7b 77 88 1e c9 ef c6 2b 4f dc 89 98 11 75 5e 8c 27 6a bc 3a 71 e2 4e d4 78 23 a2 cf c7 14 38 fd e7 7f cb 42 2e 78 c5 d4 be 74 5d 1c af 38 55 18 7b 63 87 6e 4b a6 c7 4d 3f 33 0a 9e bc 24 2f f2 5e 12 66 4c 9c 63 5c 47 99 51 f9 34 50 Data Ascii: wOF2WX`0%6$~ o [z8T*RzXFJ8m{UU'?~?/o_?/cw@,q=Vu].{w+Ou^'j:qNx#8B.xt]8U{cnKM?3$/^fLc\GQ4P
2024-11-01 16:52:14 UTC	16384	IN	Data Raw: 04 26 64 42 a8 6b 22 26 82 ac 89 9b 38 1a 1b c7 38 b0 8d 67 3c d8 fc a3 c8 26 9b 6c b2 c9 23 8f 12 94 20 8f 12 e4 8a 80 fd 1c a5 c8 a7 94 f0 79 49 a5 07 a6 a7 e9 89 34 3b a9 01 ae 19 6a 86 0a 13 f2 28 a0 80 02 0a 28 a0 60 60 00 35 03 35 9a 75 98 ab 42 f5 90 44 70 3b c0 ab f9 3b bf e1 0a 16 90 e0 58 ae e7 5d 5c c5 07 f9 3c 67 b3 f1 e2 ba a7 3a b7 04 4b 4d f9 20 37 6a 9c 1e 76 9e 1f 8f dd 63 49 83 7c b2 b5 dc c8 72 2e e3 4f 7c 8d bf 72 23 da ab ee 6b 0b b7 70 29 16 2c b7 98 0b f7 1c 3e c8 13 5c c7 45 fc 97 af f3 0f ee e6 02 24 cb f8 43 cb d9 b6 25 9c 8b e5 dc c0 a7 f9 26 af e3 c5 7c 8c bf f3 13 ae 67 79 77 23 fc ed 61 f8 31 ef e7 59 3e c9 55 2d 70 39 3f f6 b7 eb 87 7f c3 02 d2 88 6a 2f ad 39 97 4e 6d 77 77 c5 30 cb 5d c5 e6 53 ed 5b ce f7 47 e6 a0 e2 4e de Data Ascii: &dBk"&88g<&l# yI4;j((``55uBDp;;X]\<g:KM 7jvcI\|r.O\|r#kp),>\E$C%&\|gyw#a1Y>U-p9?j/9Nmww0]S[GN
2024-11-01 16:52:14 UTC	16384	IN	Data Raw: 52 5c c4 ce 75 53 00 9b 91 43 13 21 0c fb 85 a1 28 ed 79 85 83 50 a6 2c a0 39 9a ce b7 98 93 3e 04 4c 74 a8 56 47 4e 46 93 55 12 3c a8 dd 0c a1 30 f1 3b e9 c6 10 83 7a ab 07 73 79 05 05 81 59 1f 5f 9a 62 47 d3 5c 48 48 77 03 db 89 a3 5d 05 d9 e0 36 03 40 f2 8d b0 2b 72 bd d6 bd c0 f6 34 72 8d 3b 33 46 5f 9c 3b ed 1f 3e f7 b4 67 67 52 64 ec 9b bf b3 0a a7 82 f7 b8 24 a4 3a 77 84 fb 9a b5 c4 e4 b7 31 e2 4c 5c 7e b2 a5 bb 79 0e 93 ad 1e a4 25 80 a7 f0 14 fb 4e f8 5f 04 cd ae 9c c7 ae 99 e7 49 c6 6c d1 3e d8 a5 e2 c5 c1 1a d7 24 d8 a5 29 cf 89 91 3c 5e 9c a1 13 a0 73 fe 76 32 0b 00 32 8c 97 cd db cd 5d 8c ae 80 2e 46 57 f3 76 f3 4b 86 59 c0 85 9a 80 1a 60 86 29 39 52 2d 57 88 4b 11 a3 4f 4f 00 46 b0 bf fa 9f b0 00 d6 c8 4f 41 d2 be bb b2 01 8c e4 8e f8 af 6f Data Ascii: R\uSC!(yP,9>LtVGNFU<0;zsyY_bG\HHw]6@+r4r;3F_;>ggRd$:w1L\~y%N_Il>$)<^sv22].FWvKY`)9R-WKOOFOAo
2024-11-01 16:52:14 UTC	2489	IN	Data Raw: ca 3f 8d 97 61 5f 87 cf 7e 90 3c eb 11 7c 76 84 5a eb bf 5a e8 28 f4 d1 23 7f 43 ad dd 45 a5 9d 89 2f e6 99 65 0b b9 91 00 5d 49 33 69 22 b5 d3 20 b5 d2 1a ea 7c bb 5d a6 9c 09 da 50 29 0b a9 97 f9 94 c9 f1 14 c8 1e ea e5 4c 6a 65 c2 b2 e0 fd f4 c8 99 d4 17 aa 32 37 ca a3 01 aa a1 21 6a a4 c5 85 0a 48 b7 7c f4 e5 fd c5 80 0e af ff 4b 3b 84 61 f5 02 15 fa 76 1a f5 6d 54 e8 e7 28 d2 8f 2f af 4a bf 8d 5f 9f 86 5f 92 e9 d7 6f d1 a8 4f a3 b1 fd d2 41 c2 aa 99 e0 76 da 3a bf 1c 64 da 7a 0b bd 87 b9 4f e1 55 d7 73 90 3e 9b 2d fa 36 fa cc e2 86 a5 c6 7d 6e ce 53 fa 6e 8e 6a 9b 6b f7 a8 b2 89 80 be d0 7d 4a 87 98 5a dc 80 de 4c d8 0d a8 5f 89 76 2f 70 ac 1c c7 6c 14 04 4f 68 55 52 2e 37 b2 56 5f eb fe b3 44 b7 d1 58 38 44 44 4f 26 e2 43 a3 a4 ad 8b e1 ed 26 d5 ec Data Ascii: ?a_~<\|vZZ(#CE/e]I3i" \|]P)Lje27!jH\|K;avmT(/J__oOAv:dzOUs>-6}nSnjk}JZL_v/plOhUR.7V_DX8DDO&C&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49794	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:14 UTC	1414	OUT	GET /content/dam/inst/retirement-plans/learn/Youtube.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:15 UTC	4235	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2274 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="Youtube.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:15 GMT ETag: "8e2-5ebdd52dbf580" Last-Modified: Tue, 25 Oct 2022 15:11:34 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a3c1615d6bdfc01a05a0b3a742d10d38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: k8Z2spn3SD9ZlsIdJ14dAZ39Yk0xlD74bwL2NmfwrErKVoeVB3iWVA== Age: 235288
2024-11-01 16:52:15 UTC	2274	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e f0 9f 90 b7 49 63 6f 6e 73 2f 44 65 73 6b 74 6f 70 2f 53 6f 63 69 61 6c 2f 59 6f 75 74 75 62 65 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 48 65 61 64 65 72 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Icons/Desktop/Social/Youtube </title> <g id="Header-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49799	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:14 UTC	1168	OUT	GET /content/dam/inst/retirement-plans/digital-advisor/icons/facebook.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:15 UTC	4236	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1484 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="facebook.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:15 GMT ETag: "5cc-5e88f5cd53fc0" Last-Modified: Tue, 13 Sep 2022 13:55:19 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3578a2fc7abb753f586c61e194c5489a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: YFIQgrh4OMe-6oVxJ6O_2lzOdivTFlBIjgYQOezVH2C_aRW41eWlAQ== Age: 235287
2024-11-01 16:52:15 UTC	1484	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 36 34 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 64 (101010) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49801	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:14 UTC	1167	OUT	GET /content/dam/inst/retirement-plans/digital-advisor/icons/twitter.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:15 UTC	4235	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2492 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="twitter.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:15 GMT ETag: "9bc-5e88f5ce48200" Last-Modified: Tue, 13 Sep 2022 13:55:20 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0a817a6f6857cf3eedfb0006771e08f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: 6RQ_ny15bT5BL0Uf7ce-0OMj9ALqVDrHTZAPkvGAGPR-fHBj6KAaUQ== Age: 235280
2024-11-01 16:52:15 UTC	2492	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 36 34 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 64 (101010) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49800	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:14 UTC	1415	OUT	GET /content/dam/inst/retirement-plans/learn/Vanguard.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:15 UTC	4236	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1567 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="Vanguard.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:15 GMT ETag: "61f-5ebdd674db940" Last-Modified: Tue, 25 Oct 2022 15:17:17 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b2ba97e9b6a83eff85433dad7f6e6288.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: xnoShYN2C4j7S2JznLgRbGPFcY7lj3xbOZktF07BVxgP64g3jiv-rw== Age: 235286
2024-11-01 16:52:15 UTC	1567	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e f0 9f 90 b7 49 63 6f 6e 73 2f 44 65 73 6b 74 6f 70 2f 53 6f 63 69 61 6c 2f 56 61 6e 67 75 61 72 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 48 65 61 64 65 72 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Icons/Desktop/Social/Vanguard</title> <g id="Header-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49803	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:14 UTC	1152	OUT	GET /content/dam/inst/retirement-plans/learn/Linkedin.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:15 UTC	4236	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2212 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="Linkedin.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:15 GMT ETag: "8a4-5ebdd52dbf580" Last-Modified: Tue, 25 Oct 2022 15:11:34 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 32454b720dce934befa2d50bacc6d890.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: g4URdHTuTb4I93UeRZu7xDqaBaNFdQMRwoJPiatPc5Umy1NqyZzhiQ== Age: 235286
2024-11-01 16:52:15 UTC	2212	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e f0 9f 90 b7 49 63 6f 6e 73 2f 44 65 73 6b 74 6f 70 2f 53 6f 63 69 61 6c 2f 4c 69 6e 6b 65 64 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 48 65 61 64 65 72 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Icons/Desktop/Social/Linkedin</title> <g id="Header-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49802	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:14 UTC	1437	OUT	GET /content/dam/inst/retirement-plans/digital-advisor/logo-vanguard_advice.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:15 UTC	4250	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 10456 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="logo-vanguard_advice.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:15 GMT ETag: "28d8-5e892a09bfd40" Last-Modified: Tue, 13 Sep 2022 17:49:01 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 78280b924a7a9f0f018abcebd8ad82d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: i4awc2O4kmIUDVriO6wE7m46pvdWtVFOW7v9fCFQ2VMPkIUYaTnrzA== Age: 235286
2024-11-01 16:52:15 UTC	10456	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 37 20 32 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 36 34 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 30 32 35 35 34 35 39 30 2d 42 43 43 35 2d 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg viewBox="0 0 127 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 64 (101010) - https://sketch.com --> <title>02554590-BCC5-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49804	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:15 UTC	1169	OUT	GET /content/dam/inst/retirement-plans/digital-advisor/icons/instagram.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:16 UTC	4238	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 5238 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="instagram.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:15 GMT ETag: "1476-5e88f5ce48200" Last-Modified: Tue, 13 Sep 2022 13:55:20 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f758c2c588bf48b72686b6d10cca72ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: 8OIWpdaswHOJsZFXC1kHrheRd4VBSosu-_-u7tg1w_Asqc5tW4wKUA== Age: 235287
2024-11-01 16:52:16 UTC	5238	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 36 34 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="25px" viewBox="0 0 24 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 64 (101010) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49805	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:15 UTC	1524	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/fonts/MARKPROBOLD.otf HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ownyourfuture.vanguard.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:16 UTC	4228	IN	HTTP/1.1 200 OK Content-Type: application/x-font-otf Content-Length: 165936 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:16 GMT ETag: "28830-5cf85317674c0" Last-Modified: Fri, 29 Oct 2021 22:17:31 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a5a8e743f28968822c126102a78bb7c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: dvlAM0NFwamvEAodK0xdvBn7dpd2VbBHrURPT6e2y6kFtC-HIEOhTg== Age: 62471
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: 4f 54 54 4f 00 0c 00 80 00 03 00 40 43 46 46 20 9b 39 15 02 00 00 1e 3c 00 01 ab c8 44 53 49 47 10 a4 7a 06 00 02 6e ec 00 00 19 44 47 50 4f 53 9b d5 b1 08 00 01 ca 04 00 00 7e a2 47 53 55 42 93 06 b6 9f 00 02 48 a8 00 00 26 42 4f 53 2f 32 68 10 74 34 00 00 01 30 00 00 00 60 63 6d 61 70 39 e2 c5 2b 00 00 18 28 00 00 05 f2 68 65 61 64 02 74 c8 7b 00 00 00 cc 00 00 00 36 68 68 65 61 0e bf 0d 27 00 00 01 04 00 00 00 24 68 6d 74 78 7c e2 79 ce 00 00 01 90 00 00 10 9c 6d 61 78 70 04 27 50 00 00 00 01 28 00 00 00 06 6e 61 6d 65 7c 91 c1 e7 00 00 12 2c 00 00 05 f9 70 6f 73 74 ff 43 00 88 00 00 1e 1c 00 00 00 20 00 01 00 00 00 07 81 06 fe 59 68 5a 5f 0f 3c f5 00 03 07 d0 00 00 00 00 ce 43 84 ed 00 00 00 00 ce 43 76 e2 fa af fe 27 0c 21 08 b3 00 00 00 07 00 02 00 Data Ascii: OTTO@CFF 9<DSIGznDGPOS~GSUBH&BOS/2ht40`cmap9+(headt{6hhea'$hmtx\|ymaxp'P(name\|,postC YhZ_<CCv'!
2024-11-01 16:52:16 UTC	1514	IN	Data Raw: 6e 2e 73 73 30 31 61 62 72 65 76 65 2e 73 73 30 31 61 6f 67 6f 6e 65 6b 2e 73 73 30 31 75 6e 69 30 31 43 45 2e 73 73 30 31 4a 2e 73 73 30 32 49 4a 2e 73 73 30 32 4a 63 69 72 63 75 6d 66 6c 65 78 2e 73 73 30 32 6a 2e 73 63 2e 73 73 30 32 69 6a 2e 73 63 2e 73 73 30 32 6a 63 69 72 63 75 6d 66 6c 65 78 2e 73 63 2e 73 73 30 32 75 6e 69 30 32 33 37 2e 73 63 2e 73 73 30 32 6a 2e 6c 61 74 6e 5f 4e 4c 44 2e 73 63 2e 73 73 30 32 6a 2e 6c 61 74 6e 5f 4e 4c 44 2e 63 61 73 65 2e 73 73 30 32 73 65 76 65 6e 2e 73 73 30 33 73 65 76 65 6e 2e 6f 73 66 2e 73 73 30 33 73 65 76 65 6e 2e 74 66 2e 73 73 30 33 73 65 76 65 6e 2e 74 6f 73 66 2e 73 73 30 33 73 65 76 65 6e 2e 73 63 2e 73 73 30 33 5a 2e 73 73 30 34 7a 2e 73 73 30 34 5a 61 63 75 74 65 2e 73 73 30 34 7a 61 63 75 74 65 Data Ascii: n.ss01abreve.ss01aogonek.ss01uni01CE.ss01J.ss02IJ.ss02Jcircumflex.ss02j.sc.ss02ij.sc.ss02jcircumflex.sc.ss02uni0237.sc.ss02j.latn_NLD.sc.ss02j.latn_NLD.case.ss02seven.ss03seven.osf.ss03seven.tf.ss03seven.tosf.ss03seven.sc.ss03Z.ss04z.ss04Zacute.ss04zacute
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: 24 24 00 24 75 00 24 b0 00 25 29 00 25 b1 00 26 80 00 26 ef 00 27 45 00 27 9d 00 28 01 00 28 7a 00 28 ea 00 29 6b 00 29 bf 00 2a 37 00 2a 83 00 2a d1 00 2b 2b 00 2b 91 00 2b c8 00 2c 00 00 2c 45 00 2c 96 00 2c f5 00 2d 6a 00 2d e0 00 2e 58 00 2e dc 00 2f 76 00 30 06 00 30 40 00 30 e2 00 31 42 00 31 a4 00 32 12 00 32 8d 00 32 d8 00 33 2f 00 33 bd 00 34 3f 00 34 c3 00 35 54 00 35 fb 00 36 98 00 37 46 00 38 1a 00 38 81 00 39 0a 00 39 95 00 3a 2d 00 3a d1 00 3b 04 00 3b 38 00 3b 79 00 3b c7 00 3c 57 00 3c e0 00 3d 54 00 3d ca 00 3e 4d 00 3e e6 00 3f 75 00 3f bb 00 40 4d 00 40 a7 00 41 03 00 41 6a 00 41 de 00 42 25 00 42 90 00 42 ee 00 43 3e 00 43 bb 00 44 2e 00 44 cd 00 45 39 00 45 ca 00 46 4c 00 46 be 00 47 4c 00 47 ca 00 48 50 00 48 c6 00 49 55 00 49 d4 00 Data Ascii: $$$u$%)%&&'E'((z()k)7*++++,,E,,-j-.X./v00@01B12223/34?45T567F8899:-:;;8;y;<W<=T=>M>?u?@M@AAjAB%BBC>CD.DE9EFLFGLGHPHIUI
2024-11-01 16:52:16 UTC	10829	IN	Data Raw: fb 6f f7 9f f7 19 e9 c1 d9 ca 1f 13 53 20 f7 93 07 13 a3 fc 85 f9 84 15 f7 29 f0 fb 06 fb 2d fb 2d 26 fb 06 fb 29 fb 2d 2a f7 0b f7 28 f7 28 ec f7 0b f7 2d 1f 13 0c f8 23 f7 ee 15 fb 6e f7 cf 05 fb cf 06 fb 6e fb cf 05 f7 91 06 f7 0e f7 2d f7 0f fb 2d 05 0e f6 72 f7 87 fb 59 76 f9 84 f7 87 71 77 f7 3c f7 6a fb 24 f7 6a 12 d8 f7 9f f8 80 f7 93 13 93 fa d7 fa 5d 15 fb 93 20 06 13 a3 da 4b 2e c1 fb 19 1b fb 9f fb 5e fb 6f fb b7 fb b7 f7 5e fb 6f f7 9f f7 19 e9 c1 d9 ca 1f 13 53 20 f7 93 07 13 a3 fc 85 f9 84 15 f7 29 f0 fb 06 fb 2d fb 2d 26 fb 06 fb 29 fb 2d 2a f7 0b f7 28 f7 28 ec f7 0b f7 2d 1f 13 04 fb 7d f8 05 15 b6 ba b1 a2 b2 1b 13 08 ca c6 45 f7 1e 1b f5 df b1 e9 d4 1f fb 1f f7 29 05 5f 5c 66 74 63 1b 13 04 4e 50 d1 fb 20 1b 21 37 65 2e 43 1f 0e f6 72 Data Ascii: oS )--&)-((-#nn--rYvqw<j$j] K.^o^oS )--&)-((-}E)_\ftcNP !7e.Cr
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: 06 fd 5b fa 3b 05 fb 99 1c fa 88 f7 ab 06 8c fa 3b f9 5a fe 3b 05 f7 9a 06 13 c0 fd 79 37 15 60 fc 19 05 f7 6c 06 e7 f8 19 05 0e c8 fc 58 76 f8 19 77 f7 11 76 f9 82 f7 89 71 77 12 f7 1d f7 99 f8 1e f7 99 13 36 f9 38 fa 77 15 fb 02 21 66 24 46 1f 13 2e f7 06 fb 92 fe 5d f7 99 f8 a7 07 13 36 f7 26 e8 d4 f7 04 f7 0b d1 3e fb 20 1e fc a9 f7 99 f8 fd 07 f7 75 fb 31 f7 2d fb 70 1e 13 c0 fb 5c fe cb 15 60 fc 19 05 f7 6c 06 e7 f8 19 05 0e f8 55 a0 76 1c 05 78 77 f7 29 76 f7 cf 77 12 f7 33 f7 ab f9 49 f7 ac 13 cc 1c 05 83 1c 05 78 15 fb ac fe 3b 06 fd 5b fa 3b 05 fb 99 1c fa 88 f7 ab 06 8c fa 3b f9 5a fe 3b 05 f7 9a 06 13 30 fe 78 1c 07 1f 15 f7 6e fb cf 05 f7 cf 06 f7 6e f7 cf 05 fb 91 06 fb 0f fb 2d fb 0e f7 2d 05 0e c8 a0 76 f9 82 f7 89 71 77 f7 3e 76 f7 cf 77 Data Ascii: [;;Z;y7`lXvwvqw68w!f$F.]6&> u1-p\`lUvxw)vw3Ix;[;;Z;0xnn--vqw>vw
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: f8 c1 f7 87 f7 eb f7 95 12 f7 33 f7 ab f8 af f7 b3 13 7c f7 33 1c 05 78 15 1c fa 88 f7 ab f8 c1 dd 07 f8 2c fc c1 05 f7 e6 06 fc 43 f8 c5 05 f7 a1 a5 f7 34 f7 31 f7 7a 1a f7 a0 fb 47 f7 32 fb e2 1e 86 fb 95 15 f7 28 de 56 fb 08 fb 0a 3c 53 fb 2c 1f fb c8 f7 eb 06 13 80 25 1c fa 1a 15 f9 2a f7 66 fd 2a 06 0e fb ad fc 03 f7 66 f7 46 76 f9 7e f7 8d 71 77 12 f7 1d f7 99 13 68 f9 2b fa 77 15 fb 0b 2e 62 30 4e 1f 13 58 f5 fb 91 fe 5d f7 99 f8 a4 07 13 68 f7 24 de d5 f7 0d c0 c9 7f 78 b6 1e b2 f7 97 05 98 67 5f 93 53 1b 13 80 fd 6a 1c fa ae 15 f9 2a f7 66 fd 2a 06 0e f7 7c fc 34 76 f7 e2 77 ed f7 95 fa 3a f7 96 12 f7 28 f7 bc f8 99 f7 bd 13 3c 1c 04 d9 1c 04 fb 15 f4 fb 44 fb 37 b7 fb 58 1b fb be fb 98 fb 2c fb b8 fb 91 f7 48 fb 01 f7 8b 64 1f e4 7d 05 f7 57 6c Data Ascii: 3\|3x,C41zG2(V<S,%ffFv~qwh+w.b0NX]h$xg_Sjf\|4vw:(<D7X,Hd}Wl
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: c7 c9 52 ad 46 1f f7 e4 04 4e 5b 6c 53 53 bb 6b c8 c9 bc ab c3 c3 5a aa 4d 1f 0e fa 35 fb 36 76 f8 7c 76 f9 3f f7 4a f8 46 77 01 f9 4d f7 6b f7 8c f7 6c 03 fa 95 1c 06 2f 15 fc 84 fc 24 fc 20 fc 7a fc 7b f8 24 fc 21 f8 84 f8 85 f8 24 f8 21 f8 7b f8 7a fc 24 f8 20 fc 85 1f fb 6a 1c fa ed 15 f7 64 f7 b0 05 81 06 fb 56 fb 0a f7 12 f7 31 f7 41 f7 26 f7 11 f7 55 f7 55 f7 27 fb 0f fb 3d 3a 6a 3d 54 3a 1f fb 7a fb e1 05 75 f8 5c 15 d2 c0 bb cc cd 56 bb 44 44 56 5b 49 4a c0 5b d2 1f 0e f9 3b 7f 76 1c 05 ea 77 01 fa d4 fa 1a 15 fb 4f f8 d7 fb 4f fc d7 05 fc f4 06 f8 80 fb f8 fb 4f fc d7 f8 7e f7 fa f8 7f fb fa fb 50 f8 d7 f8 7e f7 f8 05 0e f9 3b 7f 76 f9 b0 f7 1f f8 d7 77 01 fa d4 fa 1a 15 fb 4f f8 d7 fb 4f fc d7 05 fc f4 06 f8 80 fb f8 fb 4f fc d7 f8 7e f7 fa f8 Data Ascii: RFN[lSSkZM56v\|v?JFwMkl/$ z{$!$!{z$ jdV1A&UU'=:j=T:zu\VDDV[IJ[;vwOOO~P~;vwOOO~
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: fc e9 1c 04 83 15 f7 22 fc 0d 05 fb b1 06 0e d9 77 f7 88 f9 03 f7 87 f7 20 76 f7 d0 77 12 e1 f7 9d 13 c8 f9 24 fa d6 15 fb e2 fb 80 fb 7b fb d8 fb d7 f7 80 fb 7c f7 e2 f7 63 f7 39 e5 f7 28 ee 1f fb 63 f7 26 05 30 4f 2d 5a fb 05 1b fb 36 fb 20 f7 04 f7 5b f7 4d f7 14 f7 13 f7 42 f7 06 e8 59 30 c2 1f f7 72 f7 12 05 f7 38 2e fb 49 e9 fb 63 1b 13 30 cf f7 0b 15 f7 9c f7 d0 05 fb cc 06 fb 5d fb d0 05 0e d9 77 f7 88 f9 03 f7 87 f7 16 76 f7 d0 77 12 e1 f7 9d 13 c8 f9 24 fa d6 15 fb e2 fb 80 fb 7b fb d8 fb d7 f7 80 fb 7c f7 e2 f7 63 f7 39 e5 f7 28 ee 1f fb 63 f7 26 05 30 4f 2d 5a fb 05 1b fb 36 fb 20 f7 04 f7 5b f7 4d f7 14 f7 13 f7 42 f7 06 e8 59 30 c2 1f f7 72 f7 12 05 f7 38 2e fb 49 e9 fb 63 1b 13 30 f8 05 f7 01 15 fb 6e f7 d0 05 fb cf 06 fb 6e fb d0 05 f7 91 Data Ascii: "w vw${\|c9(c&0O-Z6 [MBY0r8.Ic0]wvw${\|c9(c&0O-Z6 [MBY0r8.Ic0nn
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: 25 fb 23 fb 0a fb 08 fb 21 fb 23 f7 0a fb 07 f7 23 1f f7 29 04 53 5a ba c9 c7 bc bb c3 c5 bc 5b 4f 4d 5a 5c 51 1f 0e 1c 06 03 76 f7 cf 77 01 fd 11 1c 05 ee 15 f7 8b f7 cf 05 fb b0 06 fb 6d fb cf 05 fb 0f 16 f7 6e f7 cf 05 fb a9 06 fb 55 fb cf 05 0e 1c 05 f9 76 f7 cf 77 01 1c fb 4d 1c 07 1f 15 f7 6e fb cf 05 f7 cf 06 f7 6e f7 cf 05 fb 91 06 fb 0f fb 2d fb 0e f7 2d 05 0e fc 34 76 f7 e2 77 01 fd cf 24 15 2d 43 41 2d 2d d3 43 e9 e9 d4 d3 e9 e9 42 d5 2d 1f 0e fc 58 76 f8 19 77 01 fe 3e 37 15 60 fc 19 05 f7 6c 06 e7 f8 19 05 0e fb c0 76 f7 dc 77 01 fd 16 92 15 fb 96 06 fb 04 fb dc 05 f7 9f 06 0e fc 54 f7 65 f7 38 77 01 1c fb 46 fb 19 15 fb 60 c2 f7 1d fb 03 f7 53 1b f7 53 f7 1d f7 03 f7 60 c2 1f fb 5b c5 05 fb 03 68 4f 56 32 1b 32 4e c0 f7 03 69 1f 0e fc 03 f7 Data Ascii: %#!##)SZ[OMZ\QvwmnUvwMnn--4vw$-CA--CB-Xvw>7`lvwTe8wF`SS`[hOV22Ni
2024-11-01 16:52:17 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 21 00 06 00 12 00 15 00 16 00 17 00 18 00 19 00 1a 00 1b 00 1c 00 39 00 63 00 81 02 96 02 98 02 99 02 9a 02 9b 02 9d 02 b4 02 b5 02 bc 02 c1 02 c2 02 c3 02 c4 02 c5 02 c6 02 c7 03 c7 04 09 04 0a 04 0d 00 02 00 20 00 06 00 06 00 0e 00 12 00 12 00 1b 00 15 00 15 00 1f 00 16 00 16 00 1e 00 17 00 17 00 08 00 18 00 18 00 05 Data Ascii: !9c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49806	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:15 UTC	1520	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/fonts/MARKPRO.otf HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ownyourfuture.vanguard.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:16 UTC	4228	IN	HTTP/1.1 200 OK Content-Type: application/x-font-otf Content-Length: 165396 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:16 GMT ETag: "28614-5cf85317674c0" Last-Modified: Fri, 29 Oct 2021 22:17:31 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 77517a7f5d9094d359ba5186c3bda1e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: ryBXgYKkNsyFxMs8R6EOlsnnPg4kLD62P8fa1VnYhj7k1OnX_tYDFg== Age: 62449
2024-11-01 16:52:16 UTC	12156	IN	Data Raw: 4f 54 54 4f 00 0c 00 80 00 03 00 40 43 46 46 20 c0 fb 90 03 00 00 1e 0c 00 01 ae ab 44 53 49 47 cc 59 4c 31 00 02 6c d0 00 00 19 44 47 50 4f 53 48 89 0e 84 00 01 cc b8 00 00 79 d2 47 53 55 42 93 06 b6 9f 00 02 46 8c 00 00 26 42 4f 53 2f 32 66 e4 71 55 00 00 01 30 00 00 00 60 63 6d 61 70 39 e2 c5 2b 00 00 17 f8 00 00 05 f2 68 65 61 64 02 9b d9 8e 00 00 00 cc 00 00 00 36 68 68 65 61 0e e6 0d 66 00 00 01 04 00 00 00 24 68 6d 74 78 54 cb ef e8 00 00 01 90 00 00 10 9c 6d 61 78 70 04 27 50 00 00 00 01 28 00 00 00 06 6e 61 6d 65 e0 e4 01 f8 00 00 12 2c 00 00 05 ca 70 6f 73 74 ff 43 00 88 00 00 1d ec 00 00 00 20 00 01 00 00 00 07 81 06 6b 48 8d fe 5f 0f 3c f5 00 03 07 d0 00 00 00 00 ce 43 8d 83 00 00 00 00 ce 43 7f 78 fa bb fe 23 0c 3c 08 9e 00 00 00 07 00 02 00 Data Ascii: OTTO@CFF DSIGYL1lDGPOSHyGSUBF&BOS/2fqU0`cmap9+head6hheaf$hmtxTmaxp'P(name,postC kH_<CCx#<
2024-11-01 16:52:16 UTC	9136	IN	Data Raw: 37 38 43 75 6e 69 32 37 38 44 75 6e 69 32 37 38 45 75 6e 69 32 37 38 46 75 6e 69 32 37 39 30 75 6e 69 32 37 39 31 75 6e 69 32 37 39 32 75 6e 69 32 42 35 31 75 6e 69 32 42 35 32 75 6e 69 32 45 31 37 75 6e 69 32 45 33 38 75 6e 69 45 41 30 30 75 6e 69 45 41 30 31 75 6e 69 46 42 30 30 75 6e 69 46 42 30 33 75 6e 69 46 42 30 34 75 6e 69 46 42 30 35 75 6e 69 46 42 30 36 75 6e 69 30 33 30 43 2e 61 6c 74 30 30 31 75 6e 69 30 33 32 38 2e 61 6c 74 30 30 31 75 6e 69 30 33 32 38 2e 61 6c 74 30 30 32 75 6e 69 30 33 32 38 2e 61 6c 74 30 30 33 75 6e 69 30 33 32 38 2e 61 6c 74 30 30 34 69 2e 6c 61 74 6e 5f 54 52 4b 6a 2e 6c 61 74 6e 5f 4e 4c 44 4c 64 6f 74 2e 6c 61 74 6e 5f 43 41 54 6c 64 6f 74 2e 6c 61 74 6e 5f 43 41 54 7a 65 72 6f 2e 6e 75 6d 72 6f 6e 65 2e 6e 75 6d 72 Data Ascii: 78Cuni278Duni278Euni278Funi2790uni2791uni2792uni2B51uni2B52uni2E17uni2E38uniEA00uniEA01uniFB00uniFB03uniFB04uniFB05uniFB06uni030C.alt001uni0328.alt001uni0328.alt002uni0328.alt003uni0328.alt004i.latn_TRKj.latn_NLDLdot.latn_CATldot.latn_CATzero.numrone.numr
2024-11-01 16:52:16 UTC	7107	IN	Data Raw: 64 f7 67 f7 33 f7 2f f7 64 f7 62 fb 33 f7 31 fb 67 1e fb 18 04 f7 18 ed 2b fb 1b fb 1b 29 2b fb 18 fb 14 29 eb f7 1b f7 1b ed eb f7 14 1f 0e f7 9b 78 f7 21 26 76 1c 04 fe f7 21 12 f7 03 f7 34 31 f7 35 f8 13 f7 33 13 6c 1c 05 5a 16 fb e7 f7 de f7 7c f7 f2 fb 0c d7 fb 6d fb d8 fb ce f7 c5 05 f7 21 f3 f7 17 f7 02 f7 35 1a f7 46 fb 24 f7 15 fb 62 fb 65 fb 24 fb 20 fb 43 fb 1c cd 32 f7 1f fb 1c 1e 13 b4 fb 22 20 fb 19 fb 0f fb 4a 1a fb 6d f7 2f fb 19 f7 88 f7 5a f7 16 ef f7 12 f2 1e 13 74 f7 69 fb 63 05 13 b4 fd 0f f7 0e 15 fb 26 25 e2 f7 13 f7 12 ed e9 f7 0a e4 1f f7 f2 fb e6 05 fb 09 30 32 47 fb 1e 1b 13 6c fb 45 fa 61 15 f6 d6 d7 f7 09 f7 08 d6 44 25 23 2a 3a fb 09 35 1e fb 13 f7 11 61 bf df 1a 0e fc 40 fa 4e 76 f8 8f 77 01 f7 af f7 29 03 f7 af 1c 05 a0 15 Data Ascii: dg3/db31g+)+)x!&v!4153lZ\|m!5F$be$ C2" Jm/Ztic&%02GlEaD%#*:5a@Nvw)
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: 24 f7 23 05 c2 d5 ac e6 ef 1a ee 6a e6 53 d5 1e f7 24 f7 24 33 e3 fb 23 fb 25 05 c2 42 2f ab 29 1b 27 30 6a 55 42 1f fb 26 f7 25 05 f8 2e fd c1 15 fb 45 fb 1f f7 20 f7 45 f7 44 f7 1f f7 20 f7 45 f7 43 f7 20 fb 20 fb 44 fb 45 fb 20 fb 20 fb 43 1f 0e f7 95 a0 76 f7 d1 f7 0f f7 59 f7 0f f9 14 77 01 f9 08 f7 2e 03 1c 04 9b f8 4c 15 fc 21 f7 59 f8 21 f7 0f fb e1 06 f8 54 f9 14 05 fb 49 06 fc 2c fc e5 fc 32 f8 e5 05 fb 4c 06 f8 5a fd 14 05 fb de fb 0f f8 21 fb 59 fc 21 fb 0f f8 21 fb d1 f7 2e f7 d1 f8 21 06 0e fc 40 fb 88 76 f9 4a 77 f7 d2 76 f9 4a 77 01 f7 af f7 29 03 f8 44 1c 05 78 15 fb 29 fd 4a f7 29 06 fb a9 04 fb 29 fd 4a f7 29 06 0e f7 3a fb b7 f7 20 1c 05 96 f7 1f 01 f7 5a f7 2d f9 14 f7 2c 03 fa fe 1c 05 02 15 d9 fb 07 fb 29 c5 fb 50 1b fb 9f fb 69 fb Data Ascii: $#jS$$3#%B/)'0jUB&%.E ED EC DE CvYw.L!Y!TI,2LZ!Y!!.!@vJwvJw)Dx)J))J): Z-,)Pi
2024-11-01 16:52:16 UTC	328	IN	Data Raw: 05 a0 77 12 f7 43 f7 2a 13 38 f7 d9 1c 05 a0 15 fb 2a 1c fa 60 f7 2a 06 13 c0 fb 24 33 15 61 fb f2 05 f7 18 06 d5 f7 f2 05 0e d1 8b f7 2c fa 04 76 f8 19 77 12 f7 5e f7 35 13 b0 1c 04 95 f7 2c 15 fd be 1c 04 e0 fb 35 1c fa 88 fa 5f 06 13 60 fc 52 fa 87 15 ad f8 19 05 fb 2d 06 84 fc 19 05 0e fc ec a0 76 fa c4 76 f8 19 77 12 f7 43 f7 2a 13 b0 f7 d9 1c 05 a0 15 fb 2a 1c fa 60 f7 2a 06 13 60 f7 7d fa af 15 ad f8 19 05 fb 2d 06 84 fc 19 05 0e d1 8b f7 2c f8 65 76 f7 6e 77 f8 f2 77 12 f7 5e f7 35 13 98 1c 04 95 f7 2c 15 fd be 1c 04 e0 fb 35 1c fa 88 fa 5f 06 13 60 fb d0 f9 c2 15 4d 5c 5c 4d 4d ba 5c c9 c8 bc ba c9 c9 5a ba 4e 1f 0e fc a6 a0 76 f9 1a 76 f7 67 77 f9 04 77 12 f7 43 f7 2a 13 98 f7 d9 1c 05 a0 15 fb 2a 1c fa 60 f7 2a 06 13 60 f7 77 f9 d8 15 4f 5e 5d Data Ascii: wC8`$3a,vw^5,5_`R-vvwC``}-,evnww^5,5_`M\\MM\ZNvvgwwC*``wO^]
2024-11-01 16:52:16 UTC	8949	IN	Data Raw: 07 f7 6a f7 0c 05 fc 8b fa 5f 07 0e fc 6d a0 76 f8 7f 76 f8 bf 77 f8 47 77 01 f7 97 f7 2a 03 f8 2d 1c 05 a0 15 fb 2a fd 31 06 fb 62 fb 26 05 fb 2f 07 f7 62 f7 26 05 fc fc f7 2a f9 66 07 f7 64 f7 28 05 f7 2f 07 fb 64 fb 28 05 0e f8 46 a0 76 1c 05 78 77 f7 28 76 f7 c0 77 12 f7 5e f7 35 f9 e7 f7 35 13 cc 1c 05 5f 1c 05 78 15 fb 35 fe f8 06 fd f7 fa f8 05 fb 25 1c fa 88 f7 35 fa f8 06 f9 f7 fe f8 05 f7 25 06 13 30 fc d8 1c 05 e3 15 f7 8f f7 c0 05 fb 52 06 fb 65 fb c0 05 0e c5 a0 76 f9 cc f7 22 78 77 f7 4e 76 f7 c0 77 12 f7 43 f7 2a f8 c7 f7 29 13 c6 f9 16 fa 5a 15 fb 08 fb 12 62 fb 05 3e 1f 13 a6 f7 1b fb 28 fe 47 f7 2a f8 aa 07 13 c6 f7 48 f7 17 f7 02 f7 33 f7 41 ef 21 fb 48 1e fc ae f7 29 f8 df 07 f7 79 fb 35 f7 2a fb 7e 1e 13 18 84 f7 12 15 f7 8f f7 c0 05 Data Ascii: j_mvvwGw-1b&/b&fd(/d(Fvxw(vw^55_x5%5%0Rev"xwNvwC)Zb>(GH3A!H)y5~
2024-11-01 16:52:16 UTC	7435	IN	Data Raw: fb 0b e7 f7 58 1e f8 ae fb 29 fc bc 07 fb ad f7 5d fb 19 f7 79 f7 78 f7 5e f7 19 f7 ad 1e 13 30 fd 0d fa 48 15 4f 5d 5c 4f 4f b9 5e c7 c6 ba b8 c7 c7 5c ba 50 1f f8 2a 16 4f 5e 5c 4f 4f b8 5e c7 c6 ba b8 c7 c7 5c ba 50 1f 13 0c fc ae f8 48 15 f7 7f fb b4 05 f7 5c 06 f7 7e f7 b4 05 fb 34 06 fb 42 fb 51 fb 43 f7 51 05 0e f8 0a 78 f7 2e 1c 04 f1 77 f7 4f 76 f7 68 77 f7 51 76 f7 c0 77 12 f7 4a f7 34 f9 d4 f7 35 13 c3 1c 05 37 1c 05 78 15 fb 35 fd dc 06 fb b9 fb 45 fb 18 fb 83 fb 83 fb 45 f7 18 f7 b9 1e f9 dc fb 34 fd e8 07 fc 10 f7 94 fb 4f f7 d4 f7 d4 f7 95 f7 4f f8 10 1e 13 0c fc e6 1c 05 4e 15 f7 28 06 fb 66 f7 c0 05 fb 51 06 13 30 cc fc 54 15 4f 5d 5c 4f 4f b9 5e c7 c6 ba b8 c7 c7 5c ba 50 1f f8 2a 16 4f 5e 5c 4f 4f b8 5e c7 c6 ba b8 c7 c7 5c ba 50 1f 0e Data Ascii: X)]yx^0HO]\OO^\PO^\OO^\PH\~4BQCQx.wOvhwQvwJ457x5EE4OON(fQ0TO]\OO^\PO^\OO^\P
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: 5d 4f 4f b8 5e c7 c6 ba b8 c7 c7 5c b9 50 1f 0e f7 66 fb f1 76 f7 67 77 f7 5c 76 f8 f5 f7 26 f8 82 f7 2b 12 f7 5e f7 35 f9 5a f7 3b 13 3e f7 5e 1c 05 78 15 1c fa 88 f7 35 f8 f5 f7 45 07 f8 81 fc f5 05 f7 5c 06 fc 8b f8 f5 05 a2 06 f7 bf f7 50 f7 2e f7 86 f7 91 fb 42 f7 22 fb cf 1f 89 fb 2b 15 f7 66 f7 06 39 fb 36 fb 37 fb 03 34 fb 69 1f fc 16 f8 82 06 13 c0 f7 c2 1c fa 80 15 4f 5e 5d 4f 4f b8 5e c7 c6 ba b8 c7 c7 5c b9 50 1f 0e fb cd fb f1 76 f7 67 77 f7 5c 76 f9 cd f7 21 78 77 12 f7 43 f7 29 13 34 f8 f0 fa 5a 15 fb 08 27 54 2a 4a 1f 13 2c f7 19 fb 28 fe 47 f7 29 f8 a6 07 13 34 f7 47 f5 f7 08 f7 28 c2 ca 7e 72 b9 1e af f7 27 05 a2 59 53 94 47 1b 13 c0 fb f5 fe f9 15 4f 5e 5d 4f 4f b8 5e c7 c6 ba b8 c7 c7 5c b9 50 1f 0e f7 66 fb f1 76 f7 67 77 f7 5c 76 f8 Data Ascii: ]OO^\Pfvgw\v&+^5Z;>^x5E\P.B"+f9674iO^]OO^\Pvgw\v!xwC)4Z'T*J,(G)4G(~r'YSGO^]OO^\Pfvgw\v
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: 46 fb 12 23 b9 d7 44 1f d3 ea 05 55 be e2 62 e5 1b f7 03 c9 c6 e0 e1 51 c5 fb 2c 1f fb 55 06 96 f8 53 05 f7 6c f8 45 15 fc 77 fc 19 fc 19 fc 72 fc 73 f8 19 fc 1a f8 77 f8 77 f8 1a f8 1a f8 73 f8 72 fc 1a f8 19 fc 77 1f 0e fa 1f fb 27 76 f8 52 f7 0b f7 db f7 05 f7 be 77 f8 59 77 01 f9 4f f7 1f f7 fb f7 1e 03 fa 95 1c 06 20 15 fc 77 fc 19 fc 19 fc 72 fc 73 f8 19 fc 1a f8 77 f8 77 f8 1a f8 1a f8 73 f8 72 fc 1a f8 19 fc 77 1f f7 2a fc 45 15 fb 68 fb c8 05 91 a2 a3 8f a5 1b f7 44 f7 0f fb 0d fb 2e fb 38 fb 1c fb 0c fb 49 fb 4a fb 1d f7 0b f7 35 d0 a5 cc b7 ce 1f f7 8a f8 0c 05 8e fc 2f 15 24 3e 45 2d 2c d8 47 f2 f1 d8 d0 e9 e9 3e d1 25 1f 0e fa 1f fb 27 76 f8 73 76 f9 65 f7 10 f8 45 77 01 1c 05 4d 1c 04 6f 15 22 07 fc 0a fd 78 05 fb 32 06 f8 0b f9 65 05 fc 55 Data Ascii: F#DUbQ,USlEwrswwsrw'vRwYwO wrswwsrw*EhD.8IJ5/$>E-,G>%'vsveEwMo"x2eU
2024-11-01 16:52:16 UTC	8949	IN	Data Raw: cc fa c8 fa a7 15 fb 28 fd 03 06 fb 5c fb 15 2e fb 43 fb 42 fb 14 e8 f7 5c 1e f9 03 fb 28 fd 0a 07 fb af f7 55 fb 25 f7 95 f7 96 f7 56 f7 25 f7 af 1e 13 30 fd 22 fa 94 15 4f 5d 5c 4f 4f b9 5e c7 c6 ba b8 c7 c7 5c ba 50 1f f8 2a 16 4f 5e 5c 4f 4f b8 5e c7 c6 ba b8 c7 c7 5c ba 50 1f 0e 20 a0 76 fa a7 77 f7 4e 76 f7 c0 77 12 f8 52 f7 28 13 c8 fa 96 fa a7 15 fb 3f 06 fb e3 fc 73 fb e3 f8 73 05 fb 43 06 f8 48 fd 00 05 fc 3b f7 28 f8 3a 07 13 30 54 f9 92 15 f7 8f f7 c0 05 fb 52 06 fb 65 fb c0 05 0e 69 a0 76 f7 68 f7 1b f8 06 f7 1d f7 51 77 01 f7 55 f7 28 f8 9a f7 2d 03 f7 e9 fa a7 15 fb 28 fe a7 f7 28 f7 68 f7 a6 06 f7 90 f7 25 f7 0e f7 5a f7 5b fb 25 f7 0f fb 90 1f fb a6 06 f7 a3 fb 1d 15 f7 32 e4 4c fb 0e fb 0e 32 4c fb 32 1f fb a3 f8 06 06 0e 20 a0 76 fa a7 Data Ascii: (\.CB\(U%V%0"O]\OO^\P*O^\OO^\P vwNvwR(?ssCH;(:0TReivhQwU(-((h%Z[%2L2L2 v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49808	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:16 UTC	1151	OUT	GET /content/dam/inst/retirement-plans/learn/Youtube.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:16 UTC	4235	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2274 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="Youtube.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:16 GMT ETag: "8e2-5ebdd52dbf580" Last-Modified: Tue, 25 Oct 2022 15:11:34 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 bf2c1281bca673d86dec75a77f0790bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: MBzwQY8vwQPfIsYrGufvkgLaGXDLB5g1ukj-i0zvzmGdMWkcRcA7hw== Age: 235289
2024-11-01 16:52:16 UTC	2274	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e f0 9f 90 b7 49 63 6f 6e 73 2f 44 65 73 6b 74 6f 70 2f 53 6f 63 69 61 6c 2f 59 6f 75 74 75 62 65 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 48 65 61 64 65 72 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Icons/Desktop/Social/Youtube </title> <g id="Header-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49807	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:16 UTC	1525	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/fonts/MARKPROHEAVY.otf HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ownyourfuture.vanguard.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ownyourfuture.vanguard.com/etc.clientlibs/iig-transformation/clientlibs/clientlib-site.min.ACSHASHb857eacd0e4f666ef310f27533fd5fe2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:16 UTC	4228	IN	HTTP/1.1 200 OK Content-Type: application/x-font-otf Content-Length: 165096 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:16 GMT ETag: "284e8-5cf85317674c0" Last-Modified: Fri, 29 Oct 2021 22:17:31 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 da392114e7046bd9720a70f40c796f62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: icxds0y7bvnNAsvsVIPZ9seRt1UhfUf1aYmLs9ML9QVCTjzcrpBWDA== Age: 62463
2024-11-01 16:52:16 UTC	12348	IN	Data Raw: 4f 54 54 4f 00 0c 00 80 00 03 00 40 43 46 46 20 d4 e1 e5 5d 00 00 1e 44 00 01 a8 78 44 53 49 47 e5 40 0c 3b 00 02 6b a4 00 00 19 44 47 50 4f 53 64 40 86 e6 00 01 c6 bc 00 00 7e a2 47 53 55 42 93 06 b6 9f 00 02 45 60 00 00 26 42 4f 53 2f 32 68 74 75 b5 00 00 01 30 00 00 00 60 63 6d 61 70 39 e2 c5 2b 00 00 18 30 00 00 05 f2 68 65 61 64 02 41 c9 7a 00 00 00 cc 00 00 00 36 68 68 65 61 0e 8c 0c e5 00 00 01 04 00 00 00 24 68 6d 74 78 6b b0 31 ae 00 00 01 90 00 00 10 9c 6d 61 78 70 04 27 50 00 00 00 01 28 00 00 00 06 6e 61 6d 65 78 4f 47 57 00 00 12 2c 00 00 06 02 70 6f 73 74 ff 75 00 ec 00 00 1e 24 00 00 00 20 00 01 00 00 00 07 81 06 7b 84 84 a1 5f 0f 3c f5 00 03 07 d0 00 00 00 00 ce 43 85 6e 00 00 00 00 ce 43 77 64 fa af fe 14 0b ee 08 c2 00 00 00 07 00 02 00 Data Ascii: OTTO@CFF ]DxDSIG@;kDGPOSd@~GSUBE`&BOS/2htu0`cmap9+0headAz6hhea$hmtxk1maxp'P(namexOGW,postu$ {_<CnCwd
2024-11-01 16:52:16 UTC	16379	IN	Data Raw: 30 33 30 43 2e 61 6c 74 30 30 31 75 6e 69 30 33 32 38 2e 61 6c 74 30 30 31 75 6e 69 30 33 32 38 2e 61 6c 74 30 30 32 75 6e 69 30 33 32 38 2e 61 6c 74 30 30 33 75 6e 69 30 33 32 38 2e 61 6c 74 30 30 34 69 2e 6c 61 74 6e 5f 54 52 4b 6a 2e 6c 61 74 6e 5f 4e 4c 44 4c 64 6f 74 2e 6c 61 74 6e 5f 43 41 54 6c 64 6f 74 2e 6c 61 74 6e 5f 43 41 54 7a 65 72 6f 2e 6e 75 6d 72 6f 6e 65 2e 6e 75 6d 72 74 77 6f 2e 6e 75 6d 72 74 68 72 65 65 2e 6e 75 6d 72 66 6f 75 72 2e 6e 75 6d 72 66 69 76 65 2e 6e 75 6d 72 73 69 78 2e 6e 75 6d 72 73 65 76 65 6e 2e 6e 75 6d 72 65 69 67 68 74 2e 6e 75 6d 72 6e 69 6e 65 2e 6e 75 6d 72 7a 65 72 6f 2e 64 6e 6f 6d 6f 6e 65 2e 64 6e 6f 6d 74 77 6f 2e 64 6e 6f 6d 74 68 72 65 65 2e 64 6e 6f 6d 66 6f 75 72 2e 64 6e 6f 6d 66 69 76 65 2e 64 6e 6f Data Ascii: 030C.alt001uni0328.alt001uni0328.alt002uni0328.alt003uni0328.alt004i.latn_TRKj.latn_NLDLdot.latn_CATldot.latn_CATzero.numrone.numrtwo.numrthree.numrfour.numrfive.numrsix.numrseven.numreight.numrnine.numrzero.dnomone.dnomtwo.dnomthree.dnomfour.dnomfive.dno
2024-11-01 16:52:16 UTC	8028	IN	Data Raw: fb c4 fb 8c fb 89 fb c7 fb c7 fb 8d f7 89 f7 c4 f7 c3 f7 8d f7 88 f7 c7 1f f8 15 fc 04 15 f7 21 4b fb 26 dc fb 38 1b fb 87 fb 3d fb 37 fb 83 fb 81 f7 3d fb 38 f7 87 f7 3a f7 11 d8 f7 0c d4 1f fb 62 f7 19 05 47 63 55 6c 47 1b 43 3b b8 f7 11 f3 cb cf e3 d2 be 6c 47 ac 1f 0e fc 22 f8 ba f7 3a fb 13 76 f7 b5 f7 1c f7 03 f7 51 12 c0 f7 71 f7 7f f7 62 13 bc f8 0f 1c 05 0d 15 fb 17 27 62 5a 4a 1f de fb 36 05 ac ba ca a9 dc 1b e3 b7 64 43 93 1f fb 23 06 fb 53 fb 02 38 fb 1c fb 1c eb 33 f7 2e eb cc b1 b8 b8 1f 13 7c 4a f7 62 f8 30 07 f7 6d fb 1f eb fb 59 1e 13 bc 77 fc d5 15 52 6f ab b1 b1 ac ac d9 1f f7 0b 42 06 65 69 57 6d 50 1b 0e 38 f7 2b 76 f9 b7 77 01 f9 e2 f8 a8 15 f7 59 f8 25 05 fb c3 06 fb 59 fc 25 f7 59 fc 26 05 f7 c3 06 fd 32 f8 26 15 f7 59 f8 25 05 fb Data Ascii: !K&8=7=8:bGcUlGC;lG":vQqb'bZJ6dC#S83.\|Jb0mYwRoBeiWmP8+vwY%Y%Y&2&Y%
2024-11-01 16:52:16 UTC	16384	IN	Data Raw: 42 06 fc 69 f9 3d 15 27 37 38 28 28 df 36 ef ed de e0 ee ee 38 de 29 1f fd 77 04 27 37 38 29 27 df 36 ef ed de e0 ef ed 38 de 29 1f 0e 7d 68 76 a9 f7 ab f8 70 f7 ab a9 77 01 c5 f7 c8 f8 56 f7 c7 03 f8 e3 fa 84 15 fb c7 fb 76 fb 70 fb bd 21 a8 2b be 3b 1f 2c 2c f7 43 fb 3e ed ed 05 60 da e8 72 f2 1b f7 c6 f7 76 f7 70 f7 bd f4 6e ea 59 db 1f eb eb fb 42 f7 3f 28 27 05 b8 3b 2e a4 24 1b fb ab 04 a6 a5 86 82 a3 1f fb ba fb b9 05 86 a1 88 a2 a3 1a f7 1f eb ee f7 15 1e f7 75 fb 82 15 fb 1f 2a 28 fb 14 70 71 8f 93 74 1e f7 b9 f7 b9 05 90 76 8e 74 74 1a 0e 61 71 f7 b8 f9 5f 77 f7 39 76 f7 e0 77 12 f2 f7 cd f7 d6 f7 cc 13 cc fa ae fa 69 15 fb cc fc a9 06 fb 11 47 52 2e 2d 48 c4 f7 11 1e f8 a9 fb cd fc c4 07 fb c8 f7 68 fb 1f f7 9a f7 99 f7 68 f7 1f f7 c7 1e 13 30 Data Ascii: Bi='78((68)w'78)'68)}hvpwVvp!+;,,C>`rvpnYB?(';.$u*(pqtvttaq_w9vwiGR.-Hhh0
2024-11-01 16:52:17 UTC	16384	IN	Data Raw: 22 21 dc 3a f4 f5 dd dc f5 f4 39 dd 21 1f f8 64 16 21 3a 39 22 21 dc 3a f5 f4 dd dc f5 f4 39 dd 22 1f 0e 61 71 f7 b8 f9 5f 77 f7 1b 76 f8 0a 77 ec 76 f7 e0 77 12 f2 f7 cd f7 d6 f7 cc 13 c3 fa ae fa 69 15 fb cc fc a9 06 fb 11 47 52 2e 2d 48 c4 f7 11 1e f8 a9 fb cd fc c4 07 fb c8 f7 68 fb 1f f7 9a f7 99 f7 68 f7 1f f7 c7 1e 13 30 fd 58 fa 99 15 22 3a 39 22 21 dc 3a f4 f5 dd dc f5 f4 39 dd 21 1f f8 64 16 21 3a 39 22 21 dc 3a f5 f4 dd dc f5 f4 39 dd 22 1f 13 0c fd 09 f8 18 15 f7 75 fb e0 05 f7 ec 06 f7 76 f7 e0 05 fb b0 06 fb 05 fb 24 fb 06 f7 24 05 0e f7 96 71 f7 d5 fa e5 77 f7 0c 76 f8 0a 77 ed 76 f7 e0 77 12 f7 06 f7 e3 f8 bf f7 e3 13 c3 1c 05 3b 1c 05 78 15 fb e3 fd ca 06 fb 54 fb 02 30 fb 3c fb 3b fb 02 e6 f7 54 1e f9 ca fb e3 fd d7 07 fc 13 f7 7b fb 64 Data Ascii: "!:9!d!:9"!:9"aq_wvwvwiGR.-Hhh0X":9"!:9!d!:9"!:9"uv$$qwvwvw;xT0<;T{d
2024-11-01 16:52:17 UTC	16384	IN	Data Raw: f9 d4 15 fc 92 06 7f fc 81 05 f7 69 06 e7 b4 6e 5c 5a 68 6d 47 37 36 b8 aa 65 1f 25 fb 3c 05 50 ce f7 03 5a f7 18 1b f7 57 f7 1c f7 0a f7 45 f7 2c fb 07 ea fb 5e 1f 4e 06 8d f3 05 f7 d7 06 13 16 80 1c fa 12 f9 a5 15 fb 1f 30 57 43 46 1f f7 09 fb 25 05 b4 b2 c3 ad d9 1b ca b3 75 5d 5c 59 70 4a 1f 2b fb 4a e8 06 13 16 40 d3 c7 71 59 58 57 73 4b 49 51 a5 b9 5c 1f fb 0e fb 22 05 3c d0 f5 5f f7 16 1b f7 40 f7 37 da f7 3c e1 59 cd 34 ae 1f 13 16 80 d8 b0 b6 cb e1 1a f7 26 fb 1a ea fb 50 1e 0e f9 a9 7b f7 5c fb 37 76 f7 e7 f7 4f ca 76 c9 f7 5e fb 17 f7 59 f8 89 77 a0 77 12 f8 21 f7 72 fa c8 f7 79 13 41 00 1c 06 24 1c 05 78 15 fb a5 06 fe 07 1c fa 88 05 f7 a5 06 13 a8 40 1c 04 9e f9 d4 15 fc 92 06 7f fc 81 05 f7 69 06 e7 b4 6e 5c 5a 68 6d 47 37 36 b8 aa 65 1f 25 Data Ascii: in\ZhmG76e%<PZWE,^N0WCF%u]\YpJ+J@qYXWsKIQ\"<_@7<Y4&P{\7vOv^Yww!ryA$x@in\ZhmG76e%
2024-11-01 16:52:17 UTC	16384	IN	Data Raw: 6f 36 35 3e ac c9 4d 1f fb 34 fb 52 05 25 e5 f7 20 51 f7 40 1b f7 78 f7 6a f2 f7 70 f7 02 48 e0 fb 09 b8 1f 13 f0 f3 ba c5 e0 f7 04 1a f7 52 fb 44 f7 10 fb 8e 1e 0e fb 72 a0 76 f7 3f f7 a4 f9 13 77 01 f8 9d f7 b9 03 f9 c2 f9 68 15 fb 58 06 2a fb 60 05 3e fb 1f 07 f7 cb f9 13 05 fb d4 06 fb ea fd 5b 05 fb 5c f8 7e fb 3f f7 b9 f7 3f f7 14 f7 a4 fb 14 07 0e fb 79 77 f7 9c f7 56 f7 8a f7 15 f7 a1 01 f8 e4 f7 c4 03 f9 cd fa ce 15 fd 35 06 7c fd 18 05 f7 ae 06 f7 14 b8 66 54 46 5b 6a 34 fb 03 fb 04 c6 b2 59 1f fb 1a fb 74 05 41 e3 f7 27 4b f7 42 1b f7 96 f7 47 f7 2e f7 7b f7 5c fb 28 f7 0b fb 95 1f 2e 06 8e f7 15 05 f8 3c 06 0e fb 65 77 f7 97 f7 8a f7 85 f7 f8 77 01 b9 f7 ca f7 a3 f7 c9 03 f9 b4 fa ce 15 fb f5 06 fb b0 fc 2e 05 41 21 60 22 22 1a fb 6e f7 55 fb Data Ascii: o65>M4R% Q@xjpHRDrv?whX*`>[\~??ywV5\|fTF[j4YtA'KBG.{\(.<eww.A!`""nU
2024-11-01 16:52:17 UTC	16384	IN	Data Raw: fb 2d fb 2b fb 10 fb 0e fb 29 fb 2b f7 10 fb 0d f7 2b 1f f7 3a 04 55 5b b9 c7 c5 bb b9 c1 c3 ba 5d 51 4f 5c 5d 53 1f 0e 1c 04 cb 76 f7 e0 77 01 fb be 1c 04 b6 15 f7 97 f7 e0 05 fb d8 06 fb 7f fb e0 05 fb 06 16 f7 80 f7 e0 05 fb d3 06 fb 64 fb e0 05 0e 1c 04 c1 76 f7 e0 77 01 fe aa 1c 05 f8 15 f7 75 fb e0 05 f7 ec 06 f7 76 f7 e0 05 fb b0 06 fb 05 fb 24 fb 06 f7 24 05 0e fc 47 76 f8 0a 77 01 fd 1d 39 15 21 3a 39 21 22 dc 3a f5 f4 dd dc f4 f5 39 dd 22 1f 0e fc 6b 76 f8 30 77 01 fd a5 3b 15 5a fc 30 05 f7 8c 06 f1 f8 30 05 0e fb c0 76 f7 dc 77 01 fc 5a 92 15 fb ab 06 fb 03 fb dc 05 f7 b3 06 0e fc 38 f7 81 f7 9a 77 01 fc a3 fb 2d 15 76 70 74 82 74 1b 69 72 9b af ae 9d be ef be 1f 2c d4 05 fb 0e 52 fb 30 31 fb 29 1a fb 16 f7 09 42 f7 24 f7 0b ec ba bc c1 1e 0e Data Ascii: -+)++:U[]QO\]Svwdvwuv$$Gvw9!:9!":9"kv0w;Z00vwZ8w-vpttir,R01)B$
2024-11-01 16:52:17 UTC	16384	IN	Data Raw: 00 00 fc 00 00 00 fe 00 00 01 00 00 00 01 02 00 00 01 0b 00 0c 01 41 00 00 01 d2 00 0c 01 d3 00 0c 01 d4 ff 59 01 d5 00 0c 01 d6 00 0c 01 d7 ff 59 01 d8 00 0c 01 d9 00 0c 01 dc ff 59 01 de 00 0c 01 df 00 0c 02 01 00 0c 02 60 00 0c 02 88 00 0c 02 8a 00 0c 02 8b 00 0c 02 8c 00 0c 02 8d 00 0c 02 8e 00 0c 02 8f 00 0c 02 90 00 0c 02 91 00 0c 02 93 00 0c 03 00 00 0e 03 39 00 0c 03 9f ff 59 03 a2 ff 59 03 c7 ff 52 03 ec 00 09 03 ed 00 21 03 fa ff d6 04 20 00 07 04 21 00 1b 04 26 00 00 00 01 00 9a ff cf 00 04 00 ae 00 2a 03 00 00 00 04 20 00 03 04 21 00 15 00 03 00 ae 00 00 03 00 00 00 04 20 ff e1 00 2e 00 5d ff c1 00 a6 ff b3 00 ac ff 9d 00 ad ff ba 00 ae 00 4d 00 b6 ff 96 00 b7 ff a5 00 b8 ff c1 00 be ff d6 00 c3 ff 96 00 c5 ff 96 00 cf ff 96 00 d5 ff a5 00 d7 Data Ascii: AYYY`9YYR! !&* ! .]M
2024-11-01 16:52:17 UTC	16384	IN	Data Raw: 29 ff d5 ff af ff 97 00 00 00 21 00 00 ff f9 ff e9 ff a6 ff 96 ff af ff c3 ff 93 ff 9d ff 9d ff 93 00 00 ff a4 ff a4 00 00 00 09 00 09 00 1c 00 00 00 00 00 5f 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 32 00 00 00 00 00 00 00 00 00 2e ff cb ff f2 00 16 00 16 ff 2f ff 2f ff 2f 00 1d 00 1d ff 71 ff e7 ff 53 ff 87 ff 22 00 1d 00 00 ff e8 ff e5 ff d7 00 14 00 0e ff c5 ff 95 00 35 00 00 00 07 ff fc 00 00 00 3c 00 00 00 00 ff ea ff d0 ff a1 00 00 ff fd ff ab ff 90 ff b5 ff b8 00 0c ff ae ff 87 00 0e 00 13 00 13 00 1a 00 09 00 00 00 00 00 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 ff 88 ff 7b 00 15 00 00 00 00 ff bd 00 00 ff eb ff 99 ff 99 00 00 00 00 00 00 ff 9d ff 9d Data Ascii: )!_@2.///qS"5<{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49809	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:16 UTC	1152	OUT	GET /content/dam/inst/retirement-plans/learn/Vanguard.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:16 UTC	4236	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1567 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="Vanguard.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:16 GMT ETag: "61f-5ebdd674db940" Last-Modified: Tue, 25 Oct 2022 15:17:17 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0a817a6f6857cf3eedfb0006771e08f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: CeyuOgKAXODxRCa5ay8nFMTsMoUzmNSDQCJ77NvxGG7WxzB5OCxqaw== Age: 235280
2024-11-01 16:52:16 UTC	1567	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e f0 9f 90 b7 49 63 6f 6e 73 2f 44 65 73 6b 74 6f 70 2f 53 6f 63 69 61 6c 2f 56 61 6e 67 75 61 72 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 48 65 61 64 65 72 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Icons/Desktop/Social/Vanguard</title> <g id="Header-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49810	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:16 UTC	1174	OUT	GET /content/dam/inst/retirement-plans/digital-advisor/logo-vanguard_advice.svg HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:16 UTC	4250	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 10456 Connection: close Accept-Ranges: bytes Content-Disposition: attachment; filename="logo-vanguard_advice.svg" Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:16 GMT ETag: "28d8-5e892a09bfd40" Last-Modified: Tue, 13 Sep 2022 17:49:01 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ed63bc28ec03a429dffd93eedad2fd5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: 65W9erpsc7B8bn8_nVkijGGnXi395RdJLnUmSdCbs9W6WIdV-0b4Ug== Age: 235280
2024-11-01 16:52:16 UTC	3970	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 37 20 32 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 36 34 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 30 32 35 35 34 35 39 30 2d 42 43 43 35 2d 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg viewBox="0 0 127 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 64 (101010) - https://sketch.com --> <title>02554590-BCC5-4
2024-11-01 16:52:16 UTC	6486	IN	Data Raw: 2e 31 32 38 31 35 38 2c 39 2e 30 31 30 34 36 39 31 34 20 31 31 35 2e 34 37 36 31 30 39 2c 39 2e 32 36 32 31 32 33 34 36 20 31 31 35 2e 34 39 38 31 33 37 2c 39 2e 32 33 38 39 36 32 39 36 20 43 31 31 37 2e 35 31 39 34 36 37 2c 39 2e 32 36 31 34 33 32 31 20 31 31 37 2e 35 31 38 34 33 35 2c 31 31 2e 35 39 39 32 35 39 33 20 31 31 37 2e 35 31 38 34 33 35 2c 31 31 2e 35 31 35 36 30 34 39 20 4c 31 31 37 2e 35 32 31 38 37 36 2c 31 31 2e 36 39 38 31 32 33 35 20 4c 31 31 37 2e 35 32 31 38 37 36 2c 32 30 2e 35 31 33 39 37 35 33 20 4c 31 31 37 2e 35 32 32 35 36 35 2c 32 30 2e 35 31 33 36 32 39 36 20 4c 31 31 37 2e 35 32 32 35 36 35 2c 32 30 2e 35 31 33 39 37 35 33 20 4c 31 32 34 2e 30 30 32 36 36 32 2c 32 30 2e 35 31 37 37 37 37 38 20 4c 31 32 34 2e 30 30 32 36 36 32 Data Ascii: .128158,9.01046914 115.476109,9.26212346 115.498137,9.23896296 C117.519467,9.2614321 117.518435,11.5992593 117.518435,11.5156049 L117.521876,11.6981235 L117.521876,20.5139753 L117.522565,20.5136296 L117.522565,20.5139753 L124.002662,20.5177778 L124.002662

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49811	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:18 UTC	1207	OUT	GET /etc.clientlibs/vanguard-components/clientlibs/clientlib-site.min.ACSHASH0b524cdef39893463854517c5d39ca98.js HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:19 UTC	4206	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 3402139 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:18 GMT ETag: "33e99b-625c95640b780" Last-Modified: Thu, 31 Oct 2024 17:42:06 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 021a4e35e84fade8d5f4c19ba7784276.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: QiNnSHO0QY4tciyT_uRCidO5q1NTDs8a5DE3OK0CirIyCyvGs3jxxw== Age: 83383
2024-11-01 16:52:19 UTC	12178	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 70 3d 7b 7d 2c 62 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6e 3d 62 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 62 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 70 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 74 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 74 2e 6d 3d 70 2c 65 3d 5b 5d 2c 74 2e 4f 3d 28 6e 2c 72 2c 61 2c 6f 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 69 3d 31 2f 30 3b 66 6f 72 28 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 Data Ascii: (()=>{"use strict";var e,p={},b={};function t(e){var n=b[e];if(void 0!==n)return n.exports;var r=b[e]={id:e,loaded:!1,exports:{}};return p[e].call(r.exports,r,r.exports,t),r.loaded=!0,r.exports}t.m=p,e=[],t.O=(n,r,a,o)=>{if(!r){var i=1/0;for(f=0;f<e.lengt
2024-11-01 16:52:19 UTC	9141	IN	Data Raw: 29 7b 76 61 72 20 77 2c 61 65 3d 43 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 6a 3d 61 65 5b 53 65 5d 2c 73 65 3d 43 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 3b 6a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 73 65 29 26 26 28 6a 3d 6a 5b 73 65 5d 2c 28 77 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 49 65 2c 7b 62 75 62 62 6c 65 73 3a 21 30 7d 29 29 2e 61 74 74 72 4e 61 6d 65 3d 6a 2e 6e 61 6d 65 2c 77 2e 70 72 65 76 56 61 6c 75 65 3d 6a 2e 76 61 6c 75 65 7c 7c 6e 75 6c 6c 2c 77 2e 6e 65 77 56 61 6c 75 65 3d 6a 2e 76 61 6c 75 65 3d 61 65 5b 73 65 5d 7c 7c 6e 75 6c 6c 2c 6e 75 6c 6c 3d 3d 77 2e 70 72 65 76 56 61 6c 75 65 3f 77 5b 4b 65 5d 3d 77 2e 61 74 74 72 43 68 61 6e 67 65 3d 30 3a 77 2e 4d 4f 44 49 46 49 43 41 54 49 4f 4e 3d 77 2e 61 74 74 Data Ascii: ){var w,ae=C.currentTarget,j=ae[Se],se=C.propertyName;j.hasOwnProperty(se)&&(j=j[se],(w=new CustomEvent(Ie,{bubbles:!0})).attrName=j.name,w.prevValue=j.value\|\|null,w.newValue=j.value=ae[se]\|\|null,null==w.prevValue?w[Ke]=w.attrChange=0:w.MODIFICATION=w.att
2024-11-01 16:52:19 UTC	7430	IN	Data Raw: 54 61 73 6b 5a 53 3d 6f 26 26 28 6f 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 6f 3a 74 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 5a 53 29 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 44 6c 67 74 3d 6f 26 26 28 6f 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 74 3a 74 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 44 6c 67 74 29 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 43 75 72 72 5a 6f 6e 65 3d 6f 26 26 28 6f 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 74 68 69 73 2e 7a 6f 6e 65 3a 74 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 43 75 72 72 5a 6f 6e 65 29 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 5a 53 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 44 6c 67 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 44 6c 67 74 4f 77 6e 65 72 3d 6e 75 6c 6c 2c Data Ascii: TaskZS=o&&(o.onCancelTask?o:t._cancelTaskZS),this._cancelTaskDlgt=o&&(o.onCancelTask?t:t._cancelTaskDlgt),this._cancelTaskCurrZone=o&&(o.onCancelTask?this.zone:t._cancelTaskCurrZone),this._hasTaskZS=null,this._hasTaskDlgt=null,this._hasTaskDlgtOwner=null,
2024-11-01 16:52:19 UTC	16384	IN	Data Raw: 72 65 73 70 6f 6e 73 65 42 6c 6f 62 22 3d 3d 3d 69 7c 7c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 5b 6c 5d 3f 6c 65 5b 65 5d 2e 70 72 6f 74 6f 74 79 70 65 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 6b 65 5d 5b 6c 5d 2e 61 70 70 6c 79 28 74 68 69 73 5b 6b 65 5d 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3a 76 65 28 6c 65 5b 65 5d 2e 70 72 6f 74 6f 74 79 70 65 2c 6c 2c 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 28 74 68 69 73 5b 6b 65 5d 5b 6c 5d 3d 65 74 28 68 2c 65 2b 22 2e 22 2b 6c 29 2c 62 65 28 74 68 69 73 5b 6b 65 5d 5b 6c 5d 2c 68 29 29 3a 74 68 69 73 5b 6b 65 5d 5b 6c 5d 3d 68 7d 2c 67 65 74 3a Data Ascii: responseBlob"===i\|\|function(l){"function"==typeof c[l]?le[e].prototype[l]=function(){return this[ke][l].apply(this[ke],arguments)}:ve(le[e].prototype,l,{set:function(h){"function"==typeof h?(this[ke][l]=et(h,e+"."+l),be(this[ke][l],h)):this[ke][l]=h},get:
2024-11-01 16:52:19 UTC	16384	IN	Data Raw: 2c 72 2c 63 2c 22 49 6d 6d 65 64 69 61 74 65 22 29 7d 29 2c 5a 6f 6e 65 2e 5f 5f 6c 6f 61 64 5f 70 61 74 63 68 28 22 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 2c 65 3d 3e 7b 44 65 28 65 2c 22 72 65 71 75 65 73 74 22 2c 22 63 61 6e 63 65 6c 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 29 2c 44 65 28 65 2c 22 6d 6f 7a 52 65 71 75 65 73 74 22 2c 22 6d 6f 7a 43 61 6e 63 65 6c 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 29 2c 44 65 28 65 2c 22 77 65 62 6b 69 74 52 65 71 75 65 73 74 22 2c 22 77 65 62 6b 69 74 43 61 6e 63 65 6c 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 29 7d 29 2c 5a 6f 6e 65 2e 5f 5f 6c 6f 61 64 5f 70 61 74 63 68 28 22 62 6c 6f 63 6b 69 6e 67 22 2c 28 65 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 Data Ascii: ,r,c,"Immediate")}),Zone.__load_patch("requestAnimationFrame",e=>{De(e,"request","cancel","AnimationFrame"),De(e,"mozRequest","mozCancel","AnimationFrame"),De(e,"webkitRequest","webkitCancel","AnimationFrame")}),Zone.__load_patch("blocking",(e,r)=>{const
2024-11-01 16:52:19 UTC	16384	IN	Data Raw: 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 74 72 79 7b 66 6f 72 28 65 3d 66 6f 28 74 29 3b 21 28 6f 3d 79 69 65 6c 64 20 65 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 69 66 28 6e 2e 6e 65 78 74 28 6f 2e 76 61 6c 75 65 29 2c 6e 2e 63 6c 6f 73 65 64 29 72 65 74 75 72 6e 7d 63 61 74 63 68 28 73 29 7b 61 3d 7b 65 72 72 6f 72 3a 73 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 6f 26 26 21 6f 2e 64 6f 6e 65 26 26 28 72 3d 65 2e 72 65 74 75 72 6e 29 26 26 28 79 69 65 6c 64 20 72 2e 63 61 6c 6c 28 65 29 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 61 2e 65 72 72 6f 72 7d 7d 6e 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 29 7d 29 28 74 2c 6e 29 2e 63 61 74 63 68 28 65 3d 3e 6e 2e 65 72 72 6f 72 28 65 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 Data Ascii: oid 0,function*(){try{for(e=fo(t);!(o=yield e.next()).done;)if(n.next(o.value),n.closed)return}catch(s){a={error:s}}finally{try{o&&!o.done&&(r=e.return)&&(yield r.call(e))}finally{if(a)throw a.error}}n.complete()})})(t,n).catch(e=>n.error(e))})}function q
2024-11-01 16:52:19 UTC	8949	IN	Data Raw: 70 74 69 6f 6e 61 6c 7c 7c 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 3b 6c 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 31 28 74 2c 6e 2c 65 2c 6f 29 7b 69 66 28 65 26 74 6e 2e 4f 70 74 69 6f 6e 61 6c 26 26 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 6e 75 6c 6c 29 2c 21 28 65 26 28 74 6e 2e 53 65 6c 66 7c 74 6e 2e 48 6f 73 74 29 29 29 7b 63 6f 6e 73 74 20 61 3d 74 5b 4d 73 5d 2c 72 3d 41 61 28 76 6f 69 64 20 30 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 3f 61 2e 67 65 74 28 6e 2c 6f 2c 65 26 74 6e 2e 4f 70 74 69 6f 6e 61 6c 29 3a 4d 6f 28 6e 2c 6f 2c 65 26 74 6e 2e 4f 70 74 69 6f 6e 61 6c 29 7d 66 69 6e 61 6c 6c 79 7b 41 61 28 72 29 7d 7d 72 65 74 75 72 6e 20 4b 31 28 6f 2c 30 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 31 28 74 2c 6e 2c 65 2c Data Ascii: ptional\|\|void 0!==t)return t;ls()}function Z1(t,n,e,o){if(e&tn.Optional&&void 0===o&&(o=null),!(e&(tn.Self\|tn.Host))){const a=t[Ms],r=Aa(void 0);try{return a?a.get(n,o,e&tn.Optional):Mo(n,o,e&tn.Optional)}finally{Aa(r)}}return K1(o,0,e)}function J1(t,n,e,
2024-11-01 16:52:19 UTC	7435	IN	Data Raw: 71 64 28 74 2c 6e 2c 65 2c 6f 2c 61 2c 72 29 7b 75 66 28 65 2c 6f 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 2c 6e 2c 61 2c 72 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 4d 28 74 2c 6e 2c 65 2c 6f 2c 61 2c 72 29 7b 63 6f 6e 73 74 20 73 3d 65 5b 42 6f 5d 2c 76 3d 73 5b 24 6f 5d 2e 70 72 6f 6a 65 63 74 69 6f 6e 5b 6f 2e 70 72 6f 6a 65 63 74 69 6f 6e 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 76 29 29 66 6f 72 28 6c 65 74 20 45 3d 30 3b 45 3c 76 2e 6c 65 6e 67 74 68 3b 45 2b 2b 29 50 6d 28 6e 2c 74 2c 61 2c 76 5b 45 5d 2c 72 29 3b 65 6c 73 65 20 75 66 28 74 2c 6e 2c 76 2c 73 5b 62 6f 5d 2c 61 2c 72 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 48 4d 28 74 2c 6e 2c 65 29 7b 22 22 3d 3d 3d 65 3f 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6e Data Ascii: qd(t,n,e,o,a,r){uf(e,o,t.firstChild,n,a,r,!1)}function NM(t,n,e,o,a,r){const s=e[Bo],v=s[$o].projection[o.projection];if(Array.isArray(v))for(let E=0;E<v.length;E++)Pm(n,t,a,v[E],r);else uf(t,n,v,s[bo],a,r,!0)}function HM(t,n,e){""===e?t.removeAttribute(n
2024-11-01 16:52:19 UTC	16384	IN	Data Raw: 45 72 72 6f 72 3a 20 4e 6f 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 24 7b 5f 6f 28 6e 29 7d 21 60 29 3b 74 68 72 6f 77 20 6f 2e 6e 61 6d 65 3d 22 4e 75 6c 6c 49 6e 6a 65 63 74 6f 72 45 72 72 6f 72 22 2c 6f 7d 72 65 74 75 72 6e 20 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 33 28 2e 2e 2e 74 29 7b 72 65 74 75 72 6e 7b 5c 75 30 32 37 35 70 72 6f 76 69 64 65 72 73 3a 6e 43 28 30 2c 74 29 2c 5c 75 30 32 37 35 66 72 6f 6d 4e 67 4d 6f 64 75 6c 65 3a 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 43 28 74 2c 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 5b 5d 2c 6f 3d 6e 65 77 20 53 65 74 3b 6c 65 74 20 61 3b 72 65 74 75 72 6e 20 43 6c 28 6e 2c 72 3d 3e 7b 63 6f 6e 73 74 20 73 3d 72 3b 4d 66 28 73 2c 65 2c 5b 5d 2c 6f 29 26 26 28 61 7c 7c 28 61 3d 5b 5d 29 2c 61 2e 70 75 73 Data Ascii: Error: No provider for ${_o(n)}!`);throw o.name="NullInjectorError",o}return e}}function N3(...t){return{\u0275providers:nC(0,t),\u0275fromNgModule:!0}}function nC(t,...n){const e=[],o=new Set;let a;return Cl(n,r=>{const s=r;Mf(s,e,[],o)&&(a\|\|(a=[]),a.pus
2024-11-01 16:52:19 UTC	16384	IN	Data Raw: 75 6c 6c 3a 5b 73 2c 64 5d 3d 72 2c 6e 75 6c 6c 21 3d 3d 73 26 26 46 43 28 74 2c 6e 2c 65 2c 73 2c 61 2c 64 29 2c 61 26 26 66 75 6e 63 74 69 6f 6e 20 58 35 28 74 2c 6e 2c 65 29 7b 69 66 28 6e 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 6c 6f 63 61 6c 4e 61 6d 65 73 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 61 2b 3d 32 29 7b 63 6f 6e 73 74 20 72 3d 65 5b 6e 5b 61 2b 31 5d 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 72 29 74 68 72 6f 77 20 6e 65 77 20 70 74 28 2d 33 30 31 2c 21 31 29 3b 6f 2e 70 75 73 68 28 6e 5b 61 5d 2c 72 29 7d 7d 7d 28 65 2c 6f 2c 61 29 7d 65 2e 6d 65 72 67 65 64 41 74 74 72 73 3d 52 6f 28 65 2e 6d 65 72 67 65 64 41 74 74 72 73 2c 65 2e 61 74 74 72 73 29 7d 66 75 6e 63 74 69 6f 6e 20 46 43 28 74 2c 6e 2c 65 2c 6f 2c Data Ascii: ull:[s,d]=r,null!==s&&FC(t,n,e,s,a,d),a&&function X5(t,n,e){if(n){const o=t.localNames=[];for(let a=0;a<n.length;a+=2){const r=e[n[a+1]];if(null==r)throw new pt(-301,!1);o.push(n[a],r)}}}(e,o,a)}e.mergedAttrs=Ro(e.mergedAttrs,e.attrs)}function FC(t,n,e,o,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49815	35.244.204.77	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:18 UTC	642	OUT	GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/client.json?ver=470689357 HTTP/1.1 Host: content.zenimpact.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:18 UTC	1427	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:18 GMT Last-Modified: Tue, 09 Jan 2024 21:36:05 GMT ETag: "9acc16ea62debcea613715e324b6f506" x-goog-generation: 1704836165094070 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 494 Content-Type: application/octet-stream x-goog-hash: crc32c=RUhzmA== x-goog-hash: md5=mswW6mLevOphNxXjJLb1Bg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 494 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept, Authorization, Content-Length, Content-Range, Content-Type, Date, Origin, Range, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AHmUCY3vdCwTfLUiMXQ2u_p_B8O311wjKXFO1p3ZYKW2j1A_7-cxZcZae-W56wbghR2Q7w2G6z4 Server: UploadServer Cache-Control: public,max-age=3600 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Permissions-Policy: geolocation=(none), microphone=(none) x-powered-by: FALSE Content-Security-Policy: frame-ancestors 'self'; style-src 'self' ; script-src 'self'; font-src 'self' data:https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self'; media-src 'self'; frame-src 'self'; default-src 'self' Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 16:52:18 UTC	494	IN	Data Raw: 7b 22 69 6e 76 65 73 74 6f 72 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 3a 7b 22 73 69 74 65 49 64 22 3a 22 34 63 36 63 38 34 31 32 2d 31 66 33 33 2d 34 63 36 31 2d 39 36 30 37 2d 33 31 31 32 32 36 30 62 35 38 31 30 22 7d 2c 22 69 6e 73 74 61 65 6d 73 69 74 65 73 61 75 74 68 2e 69 6e 73 74 2e 63 31 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 3a 7b 22 73 69 74 65 49 64 22 3a 22 34 63 36 63 38 34 31 32 2d 31 66 33 33 2d 34 63 36 31 2d 39 36 30 37 2d 33 31 31 32 32 36 30 62 35 38 31 30 22 7d 2c 22 72 65 74 69 72 65 6d 65 6e 74 70 6c 61 6e 73 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 3a 7b 22 73 69 74 65 49 64 22 3a 22 30 62 38 37 66 61 34 36 2d 39 30 64 62 2d 34 63 39 65 2d 62 63 30 33 2d 36 65 33 31 35 38 30 36 37 34 34 33 22 7d 2c 22 74 65 73 74 2e 72 65 74 Data Ascii: {"investor.vanguard.com":{"siteId":"4c6c8412-1f33-4c61-9607-3112260b5810"},"instaemsitesauth.inst.c1.vanguard.com":{"siteId":"4c6c8412-1f33-4c61-9607-3112260b5810"},"retirementplans.vanguard.com":{"siteId":"0b87fa46-90db-4c9e-bc03-6e3158067443"},"test.ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49812	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:18 UTC	1392	OUT	GET /wtl-request-information-webservice/rs/requestInfo/getUserDetail HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:19 UTC	722	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 14296 Connection: close Date: Fri, 01 Nov 2024 16:52:19 GMT ETag: W/"37d8-GLRObbURA5KHP9v9pCIGGw" Server: Set-Cookie: ADRUM_BT=R:51\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735334\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; expires=Fri, 01 Nov 2024 16:52:49 GMT; path=/ Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7efdfc8e9ebc26758933b0151e22707e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: CjKcoNCjlbpVlcFEQ4eeMCAiGAtuMXrXZttJQhczdyVPLFQgQ_wvEg==
2024-11-01 16:52:19 UTC	8949	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 21 2d 2d 20 6d 65 74 61 20 74 61 67 20 66 6f 72 20 73 65 74 20 49 45 20 64 6f 63 75 6d 65 6e 74 20 6d 6f 64 65 20 74 6f 20 31 31 20 2d 2d 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8"> <title>Login</title> <meta name="viewport" content="width=device-width, initial-scale=1"> ... meta tag for set IE document mode to 11 --> <meta http-equiv="X-UA-Compatible" conten
2024-11-01 16:52:19 UTC	5347	IN	Data Raw: 73 6f 6e 22 20 69 64 3d 22 63 63 63 41 70 70 44 79 6e 61 6d 69 63 73 22 3e 7b 22 78 64 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 73 70 61 22 3a 7b 22 73 70 61 32 22 3a 74 72 75 65 7d 2c 22 61 70 70 4b 65 79 22 3a 22 41 44 2d 41 41 42 2d 41 41 57 2d 59 4b 4d 22 2c 22 61 64 72 75 6d 45 78 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 63 33 2d 73 74 61 74 69 63 2d 61 73 73 65 74 73 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 76 67 2d 61 70 70 2d 64 79 6e 61 6d 69 63 73 2f 76 31 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 6d 63 33 2d 73 74 61 74 69 63 2d 61 73 73 65 74 73 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 Data Ascii: son" id="cccAppDynamics">{"xd":{"enable":false},"spa":{"spa2":true},"appKey":"AD-AAB-AAW-YKM","adrumExtUrl":"https://mc3-static-assets.web.vanguard.com/vg-app-dynamics/v1"}</script><script type='text/javascript' src='https://mc3-static-assets.web.vanguard

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49813	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:18 UTC	1380	OUT	GET /api/institutional/fpid HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Cache-Control: no-store X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; ADRUM_BT=R:152\|i:449826\|g:a64262f0-6dc1-44f3-8fe3-4fe78128e9b0735336\|e:4\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:19 UTC	4216	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 47 Connection: close Cache-Control: no-store Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:19 GMT Server: Set-Cookie: FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc; max-age=200261632; SameSite=Lax; path=/; HttpOnly; secure Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 ad3c90e13b86d72e2a5e6bf65eab3450.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: D--FHmtLG73fn3Y5kMQee1bqc8bSXtlR3cjVlCX6nE7h3gVBVD_smQ==
2024-11-01 16:52:19 UTC	47	IN	Data Raw: 7b 22 66 70 69 64 22 3a 22 37 36 62 66 34 35 32 30 2d 65 62 33 63 2d 34 63 35 66 2d 62 63 62 64 2d 62 64 33 33 62 38 32 61 33 35 62 63 22 7d Data Ascii: {"fpid":"76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49814	3.160.150.55	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:18 UTC	1250	OUT	GET /pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/medallia-digital-embed.js HTTP/1.1 Host: mdl-medallia-digital.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:19 UTC	1630	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 1944 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Allow-Private-Network: true Cache-Control: public, max-age=31536000 Content-Security-Policy: frame-ancestors .vanguard.com .vanguard.com:* http://.vanguard.com http://.vanguard.com:* .vanguard .medallia.com .vanguard.ca: .vanguard.ca .vanguard.com.au .vanguard.com.au: .de.vanguard .de.vanguard:* https://devthevanguardgroup.sharepoint.com https://thevanguardgroup.sharepoint.com https://sdethevanguardgroup.sharepoint.com .kampyle.com .vtseng.com .vtstest.com https://www.vanguardadvisorsolutions.com https://qa.tradewebretail.com/ .vanguardmexico.com .tradewebretail.com .vanguardsouthamerica.com .vanguardinvestor.co.uk https://.vanguard.co.uk https://.de.vanguard https://.ch.vanguard https://.fr.vanguard https://.nl.vanguard https://.it.vanguard https://.ie.vanguard https://teams.microsoft.com; Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Resource-Policy: cross-origin Date: Fri, 01 Nov 2024 16:52:19 GMT ETag: W/"798-19268f60a80" Last-Modified: Mon, 07 Oct 2024 21:50:08 GMT Server: Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: off X-Download-Options: noopen X-XSS-Protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a991dcd8f589d8cb7c64929ec2a499b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 X-Amz-Cf-Id: 4Itqpr8xpa6tie8kNMS3XMFTrK97zAlASH5r-g1eKIQR1VVCuYENBA==
2024-11-01 16:52:19 UTC	1944	IN	Data Raw: 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 4b 41 4d 50 59 4c 45 5f 45 4d 42 45 44 29 7b 76 61 72 20 6f 6e 50 72 65 6d 45 6d 62 65 64 52 65 67 65 78 3d 2f 5c 2f 5b 61 2d 7a 41 2d 5a 5c 64 2d 5d 2b 5c 2f 5c 64 2b 5c 2f 6f 6e 73 69 74 65 5c 2f 6d 65 64 61 6c 6c 69 61 2d 64 69 67 69 74 61 6c 2d 65 6d 62 65 64 5c 2e 6a 73 24 2f 3b 76 61 72 20 67 65 6e 65 72 69 63 50 61 74 68 52 65 67 65 78 3d 2f 5c 2f 5b 61 2d 7a 41 2d 5a 5c 64 2d 5d 2b 5c 2f 5c 64 2b 5c 2f 6f 6e 73 69 74 65 5c 2f 67 65 6e 65 72 69 63 5c 64 7b 31 33 7d 5c 2e 6a 73 24 2f 3b 77 69 6e 64 6f 77 2e 4b 41 4d 50 59 4c 45 5f 45 4d 42 45 44 3d 7b 6b 61 6d 70 79 6c 65 49 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: (function(){if(!window.KAMPYLE_EMBED){var onPremEmbedRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/medallia-digital-embed\.js$/;var genericPathRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/generic\d{13}\.js$/;window.KAMPYLE_EMBED={kampyleInit:function(){var t=document.creat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49816	35.244.204.77	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:19 UTC	678	OUT	GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/init.json?ver=4354856871 HTTP/1.1 Host: content.zenimpact.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:19 UTC	1444	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:19 GMT Last-Modified: Thu, 22 Aug 2024 21:30:03 GMT ETag: "1206ab490d0ca7e59906010191f593e3" x-goog-generation: 1724362203295579 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1270 Content-Type: application/json x-goog-hash: crc32c=CWh7SQ== x-goog-hash: md5=EgarSQ0Mp+WZBgEBkfWT4w== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1270 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept, Authorization, Content-Length, Content-Range, Content-Type, Date, Origin, Range, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AHmUCY0LxLdxc116Qm8tfJwxMZm_L9T6jgjP46JdrMAHSeEOosQ-FrGzZTVrah8pmifxJBMz0nU Server: UploadServer Vary: Accept-Encoding Cache-Control: public,max-age=3600 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Permissions-Policy: geolocation=(none), microphone=(none) x-powered-by: FALSE Content-Security-Policy: frame-ancestors 'self'; style-src 'self' ; script-src 'self'; font-src 'self' data:https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self'; media-src 'self'; frame-src 'self'; default-src 'self' Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 16:52:19 UTC	1270	IN	Data Raw: 7b 22 6f 77 6e 79 6f 75 72 66 75 74 75 72 65 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 3a 7b 22 63 64 6e 50 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 2e 7a 65 6e 69 6d 70 61 63 74 2e 69 6f 22 2c 22 63 6c 69 65 6e 74 49 64 22 3a 22 32 37 39 30 32 36 30 39 2d 62 31 31 34 2d 34 30 32 30 2d 62 63 61 35 2d 65 39 63 61 65 65 31 64 64 36 33 31 22 2c 22 61 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 41 4d 65 38 6b 46 78 72 70 70 43 6e 73 33 44 4f 59 41 7a 74 6a 6d 36 59 47 71 53 79 50 66 48 49 51 22 2c 22 63 6f 6e 66 69 67 22 3a 22 32 37 39 30 32 36 30 39 2d 62 31 31 34 2d 34 30 32 30 2d 62 63 61 35 2d 65 39 63 61 65 65 31 64 64 36 33 31 2f 30 39 30 64 37 37 32 61 2d 62 33 64 36 2d 34 64 64 61 2d 38 30 38 66 2d 37 37 33 61 64 32 35 62 37 37 31 Data Ascii: {"ownyourfuture.vanguard.com":{"cdnPath":"https://content.zenimpact.io","clientId":"27902609-b114-4020-bca5-e9caee1dd631","apiKey":"AIzaSyAMe8kFxrppCns3DOYAztjm6YGqSyPfHIQ","config":"27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b771

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49817	35.244.204.77	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:19 UTC	416	OUT	GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/client.json?ver=470689357 HTTP/1.1 Host: content.zenimpact.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:19 UTC	1435	IN	HTTP/1.1 200 OK x-goog-generation: 1704836165094070 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 494 x-goog-hash: crc32c=RUhzmA== x-goog-hash: md5=mswW6mLevOphNxXjJLb1Bg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 494 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept, Authorization, Content-Length, Content-Range, Content-Type, Date, Origin, Range, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AHmUCY3vdCwTfLUiMXQ2u_p_B8O311wjKXFO1p3ZYKW2j1A_7-cxZcZae-W56wbghR2Q7w2G6z4 Server: UploadServer Date: Fri, 01 Nov 2024 16:52:18 GMT Last-Modified: Tue, 09 Jan 2024 21:36:05 GMT ETag: "9acc16ea62debcea613715e324b6f506" Content-Type: application/octet-stream Age: 1 Cache-Control: public,max-age=3600 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Permissions-Policy: geolocation=(none), microphone=(none) x-powered-by: FALSE Content-Security-Policy: frame-ancestors 'self'; style-src 'self' ; script-src 'self'; font-src 'self' data:https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self'; media-src 'self'; frame-src 'self'; default-src 'self' Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 16:52:19 UTC	494	IN	Data Raw: 7b 22 69 6e 76 65 73 74 6f 72 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 3a 7b 22 73 69 74 65 49 64 22 3a 22 34 63 36 63 38 34 31 32 2d 31 66 33 33 2d 34 63 36 31 2d 39 36 30 37 2d 33 31 31 32 32 36 30 62 35 38 31 30 22 7d 2c 22 69 6e 73 74 61 65 6d 73 69 74 65 73 61 75 74 68 2e 69 6e 73 74 2e 63 31 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 3a 7b 22 73 69 74 65 49 64 22 3a 22 34 63 36 63 38 34 31 32 2d 31 66 33 33 2d 34 63 36 31 2d 39 36 30 37 2d 33 31 31 32 32 36 30 62 35 38 31 30 22 7d 2c 22 72 65 74 69 72 65 6d 65 6e 74 70 6c 61 6e 73 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 3a 7b 22 73 69 74 65 49 64 22 3a 22 30 62 38 37 66 61 34 36 2d 39 30 64 62 2d 34 63 39 65 2d 62 63 30 33 2d 36 65 33 31 35 38 30 36 37 34 34 33 22 7d 2c 22 74 65 73 74 2e 72 65 74 Data Ascii: {"investor.vanguard.com":{"siteId":"4c6c8412-1f33-4c61-9607-3112260b5810"},"instaemsitesauth.inst.c1.vanguard.com":{"siteId":"4c6c8412-1f33-4c61-9607-3112260b5810"},"retirementplans.vanguard.com":{"siteId":"0b87fa46-90db-4c9e-bc03-6e3158067443"},"test.ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49818	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:20 UTC	1162	OUT	GET /wtl-request-information-webservice/rs/requestInfo/getUserDetail HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; ADRUM_BT=R:51\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735334\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6
2024-11-01 16:52:20 UTC	721	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 14296 Connection: close Date: Fri, 01 Nov 2024 16:52:20 GMT ETag: W/"37d8-GLRObbURA5KHP9v9pCIGGw" Server: Set-Cookie: ADRUM_BT=R:0\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735340\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; expires=Fri, 01 Nov 2024 16:52:50 GMT; path=/ Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2314648d77cb37d8a893a71206bcabbe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: hgK8UheEichJbKZ7Jtovm4Z1GT2QszV42ScGArysBVcHDwlNPAdcag==
2024-11-01 16:52:21 UTC	8949	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 21 2d 2d 20 6d 65 74 61 20 74 61 67 20 66 6f 72 20 73 65 74 20 49 45 20 64 6f 63 75 6d 65 6e 74 20 6d 6f 64 65 20 74 6f 20 31 31 20 2d 2d 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8"> <title>Login</title> <meta name="viewport" content="width=device-width, initial-scale=1"> ... meta tag for set IE document mode to 11 --> <meta http-equiv="X-UA-Compatible" conten
2024-11-01 16:52:21 UTC	5347	IN	Data Raw: 73 6f 6e 22 20 69 64 3d 22 63 63 63 41 70 70 44 79 6e 61 6d 69 63 73 22 3e 7b 22 78 64 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 73 70 61 22 3a 7b 22 73 70 61 32 22 3a 74 72 75 65 7d 2c 22 61 70 70 4b 65 79 22 3a 22 41 44 2d 41 41 42 2d 41 41 57 2d 59 4b 4d 22 2c 22 61 64 72 75 6d 45 78 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 63 33 2d 73 74 61 74 69 63 2d 61 73 73 65 74 73 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 76 67 2d 61 70 70 2d 64 79 6e 61 6d 69 63 73 2f 76 31 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 6d 63 33 2d 73 74 61 74 69 63 2d 61 73 73 65 74 73 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 Data Ascii: son" id="cccAppDynamics">{"xd":{"enable":false},"spa":{"spa2":true},"appKey":"AD-AAB-AAW-YKM","adrumExtUrl":"https://mc3-static-assets.web.vanguard.com/vg-app-dynamics/v1"}</script><script type='text/javascript' src='https://mc3-static-assets.web.vanguard

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49819	3.160.150.128	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:20 UTC	1266	OUT	GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.min.js HTTP/1.1 Host: corp-etm-arl.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:21 UTC	806	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 849 Connection: close Date: Fri, 01 Nov 2024 16:52:21 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 30 Oct 2024 13:39:04 GMT ETag: "ab562a053783e606939b76bb474900ae" x-amz-server-side-encryption: AES256 x-amz-version-id: JctTqOmULFKlPcRXZm1zKOOD0WxwPvIM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 88fd4dc311317996718ed4ed98e5cbda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OdDOCXrjYyAFhnf5u0-PWkZ4r-feDIPNg_8yP8uY27BtuWV2fuxZjw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:21 UTC	849	IN	Data Raw: 2f 2f 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 60 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 36 61 62 61 63 37 35 2f 65 64 34 37 33 62 34 65 64 63 61 61 2f 32 33 38 62 64 32 39 38 31 30 64 30 2f 52 43 64 66 33 39 35 35 61 36 36 34 36 64 34 38 64 31 61 33 33 64 30 36 38 66 64 64 66 63 62 66 66 30 2d 73 6f 75 72 63 65 2e 6a 73 60 2e 0a 5f 73 61 74 65 6c 6c 69 74 65 2e 5f 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 27 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 Data Ascii: // For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.js`._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49822	35.244.204.77	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:20 UTC	452	OUT	GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/init.json?ver=4354856871 HTTP/1.1 Host: content.zenimpact.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:20 UTC	1452	IN	HTTP/1.1 200 OK x-goog-generation: 1724362203295579 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1270 x-goog-hash: crc32c=CWh7SQ== x-goog-hash: md5=EgarSQ0Mp+WZBgEBkfWT4w== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1270 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept, Authorization, Content-Length, Content-Range, Content-Type, Date, Origin, Range, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AHmUCY0LxLdxc116Qm8tfJwxMZm_L9T6jgjP46JdrMAHSeEOosQ-FrGzZTVrah8pmifxJBMz0nU Server: UploadServer Date: Fri, 01 Nov 2024 16:52:19 GMT Last-Modified: Thu, 22 Aug 2024 21:30:03 GMT ETag: "1206ab490d0ca7e59906010191f593e3" Content-Type: application/json Vary: Accept-Encoding Age: 1 Cache-Control: public,max-age=3600 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Permissions-Policy: geolocation=(none), microphone=(none) x-powered-by: FALSE Content-Security-Policy: frame-ancestors 'self'; style-src 'self' ; script-src 'self'; font-src 'self' data:https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self'; media-src 'self'; frame-src 'self'; default-src 'self' Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 16:52:20 UTC	1270	IN	Data Raw: 7b 22 6f 77 6e 79 6f 75 72 66 75 74 75 72 65 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 3a 7b 22 63 64 6e 50 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 2e 7a 65 6e 69 6d 70 61 63 74 2e 69 6f 22 2c 22 63 6c 69 65 6e 74 49 64 22 3a 22 32 37 39 30 32 36 30 39 2d 62 31 31 34 2d 34 30 32 30 2d 62 63 61 35 2d 65 39 63 61 65 65 31 64 64 36 33 31 22 2c 22 61 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 41 4d 65 38 6b 46 78 72 70 70 43 6e 73 33 44 4f 59 41 7a 74 6a 6d 36 59 47 71 53 79 50 66 48 49 51 22 2c 22 63 6f 6e 66 69 67 22 3a 22 32 37 39 30 32 36 30 39 2d 62 31 31 34 2d 34 30 32 30 2d 62 63 61 35 2d 65 39 63 61 65 65 31 64 64 36 33 31 2f 30 39 30 64 37 37 32 61 2d 62 33 64 36 2d 34 64 64 61 2d 38 30 38 66 2d 37 37 33 61 64 32 35 62 37 37 31 Data Ascii: {"ownyourfuture.vanguard.com":{"cdnPath":"https://content.zenimpact.io","clientId":"27902609-b114-4020-bca5-e9caee1dd631","apiKey":"AIzaSyAMe8kFxrppCns3DOYAztjm6YGqSyPfHIQ","config":"27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b771

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49820	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:20 UTC	1164	OUT	GET /api/institutional/fpid HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; ADRUM_BT=R:51\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735334\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc
2024-11-01 16:52:20 UTC	4044	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:20 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 df7b13362a8ac70c19bf591aee90d86e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: r9J5-A5nPCVExdUazzcm1Tt8i2ZC_M52bNenZLW5TIRHm_ip4UZKPQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49823	34.160.105.74	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:20 UTC	696	OUT	GET /values HTTP/1.1 Host: hub2.zenimpact.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:20 UTC	475	IN	HTTP/1.1 200 OK content-type: text/html; charset=utf-8 Date: Fri, 01 Nov 2024 16:52:20 GMT Server: Google Frontend Via: 1.1 google Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-store Pragma: no-cache Expires: -1 x-powered-by: FALSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-11-01 16:52:20 UTC	669	IN	Data Raw: 32 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 Data Ascii: 296<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="robots" content="noindex,nofollow" /> <meta name="googlebot" content="noindex,nofollow" /> <meta name="googlebot-news" content="noindex,nofollow" /> <me
2024-11-01 16:52:20 UTC	646	IN	Data Raw: 32 37 66 0d 0a 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 27 61 63 74 69 76 65 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 2e 68 75 62 49 64 20 3d 20 43 6f 6f 6b 69 65 73 2e 67 65 74 28 27 68 75 62 49 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 2e 7a 65 6e 49 64 20 3d 20 43 6f 6f 6b 69 65 73 2e 67 65 74 28 27 7a 65 6e 49 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 2e 7a 65 6e 46 70 20 3d 20 43 6f 6f 6b 69 65 73 2e 67 65 74 28 27 7a 65 6e 46 70 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 27 61 63 74 69 76 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d Data Ascii: 27ftorage.setItem('active', true); values.hubId = Cookies.get('hubId'); values.zenId = Cookies.get('zenId'); values.zenFp = Cookies.get('zenFp'); window.localStorage.removeItem('active'); docum
2024-11-01 16:52:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49821	3.160.150.35	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:20 UTC	1065	OUT	GET /pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/medallia-digital-embed.js HTTP/1.1 Host: mdl-medallia-digital.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:21 UTC	1630	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 1944 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Allow-Private-Network: true Cache-Control: public, max-age=31536000 Content-Security-Policy: frame-ancestors .vanguard.com .vanguard.com:* http://.vanguard.com http://.vanguard.com:* .vanguard .medallia.com .vanguard.ca: .vanguard.ca .vanguard.com.au .vanguard.com.au: .de.vanguard .de.vanguard:* https://devthevanguardgroup.sharepoint.com https://thevanguardgroup.sharepoint.com https://sdethevanguardgroup.sharepoint.com .kampyle.com .vtseng.com .vtstest.com https://www.vanguardadvisorsolutions.com https://qa.tradewebretail.com/ .vanguardmexico.com .tradewebretail.com .vanguardsouthamerica.com .vanguardinvestor.co.uk https://.vanguard.co.uk https://.de.vanguard https://.ch.vanguard https://.fr.vanguard https://.nl.vanguard https://.it.vanguard https://.ie.vanguard https://teams.microsoft.com; Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Resource-Policy: cross-origin Date: Fri, 01 Nov 2024 16:52:20 GMT ETag: W/"798-19268f60a80" Last-Modified: Mon, 07 Oct 2024 21:50:08 GMT Server: Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: off X-Download-Options: noopen X-XSS-Protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b08e1d433d62b5ab056680968a8cc7ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 X-Amz-Cf-Id: B-bREUkb8OhvvHC9ABzsNgUpe52SzSuuXRH8cFiHAzWyS_v3sA0mFg==
2024-11-01 16:52:21 UTC	1944	IN	Data Raw: 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 4b 41 4d 50 59 4c 45 5f 45 4d 42 45 44 29 7b 76 61 72 20 6f 6e 50 72 65 6d 45 6d 62 65 64 52 65 67 65 78 3d 2f 5c 2f 5b 61 2d 7a 41 2d 5a 5c 64 2d 5d 2b 5c 2f 5c 64 2b 5c 2f 6f 6e 73 69 74 65 5c 2f 6d 65 64 61 6c 6c 69 61 2d 64 69 67 69 74 61 6c 2d 65 6d 62 65 64 5c 2e 6a 73 24 2f 3b 76 61 72 20 67 65 6e 65 72 69 63 50 61 74 68 52 65 67 65 78 3d 2f 5c 2f 5b 61 2d 7a 41 2d 5a 5c 64 2d 5d 2b 5c 2f 5c 64 2b 5c 2f 6f 6e 73 69 74 65 5c 2f 67 65 6e 65 72 69 63 5c 64 7b 31 33 7d 5c 2e 6a 73 24 2f 3b 77 69 6e 64 6f 77 2e 4b 41 4d 50 59 4c 45 5f 45 4d 42 45 44 3d 7b 6b 61 6d 70 79 6c 65 49 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: (function(){if(!window.KAMPYLE_EMBED){var onPremEmbedRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/medallia-digital-embed\.js$/;var genericPathRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/generic\d{13}\.js$/;window.KAMPYLE_EMBED={kampyleInit:function(){var t=document.creat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49824	104.17.24.14	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:21 UTC	569	OUT	GET /ajax/libs/js-cookie/2.2.1/js.cookie.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hub2.zenimpact.io/values Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:21 UTC	953	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:21 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec5-653" Last-Modified: Mon, 04 May 2020 16:11:49 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 142660 Expires: Wed, 22 Oct 2025 16:52:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ygTVqaCdH1nyNTslG7XnrQqfXI7x2kt5dbcrabrHP%2FXhrSivDMEHe4RlB6jkT5lrPbuZXm4UI5mfMYURVMSW0AzJqEY52jBSZOv6VIedjToAx3mLnpDP50mITFfFNU9nb20qytnZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dbd65110fe02e21-DFW alt-svc: h3=":443"; ma=86400
2024-11-01 16:52:21 UTC	416	IN	Data Raw: 36 35 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 28 64 65 66 69 6e 65 28 65 29 2c 6e 3d 21 30 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 2c 6e 3d 21 30 29 2c 21 6e 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 2c 6f 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 3d 65 28 29 3b 6f 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 3d 74 2c 6f 7d 7d 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 Data Ascii: 653!function(e){var n;if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){var t=window.Cookies,o=window.Cookies=e();o.noConflict=function(){return window.Cookies=t,o}}}(function(){function f
2024-11-01 16:52:21 UTC	1210	IN	Data Raw: 6e 65 6e 74 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 75 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 7b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 74 3d 66 28 7b 70 61 74 68 3a 22 2f 22 7d 2c 63 2e 64 65 66 61 75 6c 74 73 2c 74 29 29 2e 65 78 70 69 72 65 73 26 26 28 74 2e 65 78 70 69 72 65 73 3d 6e 65 77 20 44 61 74 65 28 31 2a 6e 65 77 20 44 61 74 65 2b 38 36 34 65 35 2a 74 2e 65 78 70 69 72 65 73 29 29 2c 74 2e 65 78 70 69 72 65 73 3d 74 2e 65 78 70 69 72 65 73 3f 74 2e 65 78 70 69 72 65 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3a 22 22 3b 74 72 79 7b 76 61 72 20 6f 3d 4a Data Ascii: nent)}return function e(u){function c(){}function t(e,n,t){if("undefined"!=typeof document){"number"==typeof(t=f({path:"/"},c.defaults,t)).expires&&(t.expires=new Date(1new Date+864e5t.expires)),t.expires=t.expires?t.expires.toUTCString():"";try{var o=J
2024-11-01 16:52:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49825	3.160.150.128	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:21 UTC	1081	OUT	GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.min.js HTTP/1.1 Host: corp-etm-arl.web.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==
2024-11-01 16:52:22 UTC	813	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 849 Connection: close Date: Fri, 01 Nov 2024 16:52:21 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 30 Oct 2024 13:39:04 GMT ETag: "ab562a053783e606939b76bb474900ae" x-amz-server-side-encryption: AES256 x-amz-version-id: JctTqOmULFKlPcRXZm1zKOOD0WxwPvIM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6dcc6937cfa978a65f9d5d75296b24a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TeirPysyJP5_vXEzSOPh5R4YOsaaY_og-Ty9fV3OkLfdvsmIKBscMA== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:22 UTC	849	IN	Data Raw: 2f 2f 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 60 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 36 61 62 61 63 37 35 2f 65 64 34 37 33 62 34 65 64 63 61 61 2f 32 33 38 62 64 32 39 38 31 30 64 30 2f 52 43 64 66 33 39 35 35 61 36 36 34 36 64 34 38 64 31 61 33 33 64 30 36 38 66 64 64 66 63 62 66 66 30 2d 73 6f 75 72 63 65 2e 6a 73 60 2e 0a 5f 73 61 74 65 6c 6c 69 74 65 2e 5f 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 27 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 Data Ascii: // For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCdf3955a6646d48d1a33d068fddfcbff0-source.js`._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49826	3.160.150.128	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:21 UTC	1339	OUT	GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.min.js HTTP/1.1 Host: corp-etm-arl.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481800; at_check=true
2024-11-01 16:52:22 UTC	807	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1832 Connection: close Date: Fri, 01 Nov 2024 16:52:23 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 30 Oct 2024 13:39:04 GMT ETag: "38401a394f33fc8ca441cece82fe7f2e" x-amz-server-side-encryption: AES256 x-amz-version-id: oRHKn1.zEjqYJp6DU2cgjJ5Y_DQnrk0f Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 444bee00bd8f759506e806be3c13fa6c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: CkRCBFgPfZlA-9xYXUGxtAXV3zw-E_tS5yqeAS7PZ8qskxkmsiJT-g== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:22 UTC	1832	IN	Data Raw: 2f 2f 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 60 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 36 61 62 61 63 37 35 2f 65 64 34 37 33 62 34 65 64 63 61 61 2f 32 33 38 62 64 32 39 38 31 30 64 30 2f 52 43 63 35 32 32 37 37 37 63 31 32 32 63 34 33 33 66 61 63 63 38 32 37 32 38 31 30 37 65 66 31 39 39 2d 73 6f 75 72 63 65 2e 6a 73 60 2e 0a 5f 73 61 74 65 6c 6c 69 74 65 2e 5f 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 27 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 Data Ascii: // For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.js`._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49827	66.235.152.225	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:21 UTC	727	OUT	POST /rest/v1/delivery?client=thevanguardgroup&sessionId=d0323fb320e24e1081d8caf666dc7197&version=2.11.4 HTTP/1.1 Host: thevanguardgroup.tt.omtrdc.net Connection: keep-alive Content-Length: 1729 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:21 UTC	1729	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 65 33 65 61 64 62 37 39 39 61 39 34 63 36 62 62 37 32 65 36 36 39 32 33 62 62 35 36 31 64 38 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 63 6c 69 65 6e 74 48 69 6e 74 73 22 3a 7b 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 55 41 57 69 74 68 4d 61 6a 6f 72 Data Ascii: {"requestId":"ee3eadb799a94c6bb72e66923bb561d8","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","clientHints":{"mobile":false,"platform":"Windows","browserUAWithMajor
2024-11-01 16:52:22 UTC	852	IN	HTTP/1.1 200 OK date: Fri, 01 Nov 2024 16:52:22 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://ownyourfuture.vanguard.com access-control-allow-credentials: true x-request-id: 57b808af-1c16-4273-8c83-dd6a515d9355 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-11-01 16:52:22 UTC	366	IN	Data Raw: 31 36 37 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 65 33 65 61 64 62 37 39 39 61 39 34 63 36 62 62 37 32 65 36 36 39 32 33 62 62 35 36 31 64 38 22 2c 22 63 6c 69 65 6e 74 22 3a 22 74 68 65 76 61 6e 67 75 61 72 64 67 72 6f 75 70 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 64 30 33 32 33 66 62 33 32 30 65 32 34 65 31 30 38 31 64 38 63 61 66 36 36 36 64 63 37 31 39 37 2e 33 37 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 38 36 35 39 31 36 38 31 30 36 31 36 35 34 30 32 33 32 36 33 33 39 32 36 33 32 34 32 32 35 38 31 31 34 34 38 38 36 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 37 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 Data Ascii: 167{"status":200,"requestId":"ee3eadb799a94c6bb72e66923bb561d8","client":"thevanguardgroup","id":{"tntId":"d0323fb320e24e1081d8caf666dc7197.37_0","marketingCloudVisitorId":"86591681061654023263392632422581144886"},"edgeHost":"mboxedge37.tt.omtrdc.net","
2024-11-01 16:52:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49828	104.17.25.14	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:21 UTC	386	OUT	GET /ajax/libs/js-cookie/2.2.1/js.cookie.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:22 UTC	961	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:22 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec5-653" Last-Modified: Mon, 04 May 2020 16:11:49 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 142661 Expires: Wed, 22 Oct 2025 16:52:22 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jEyX8l9Jl13hZbdV0VX3u61yClWrzSATgnLGXkbWM9ekzr0uQRv5o7YbJ99UclEIRVRotZgC45%2Fz%2BPMBCUzw2h%2B898ZVrwVcduvH7ccSicmbPTES9zMMOrvN1dWd7TEywi%2FnR9%2BA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dbd6515de282d3e-DFW alt-svc: h3=":443"; ma=86400
2024-11-01 16:52:22 UTC	408	IN	Data Raw: 36 35 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 28 64 65 66 69 6e 65 28 65 29 2c 6e 3d 21 30 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 2c 6e 3d 21 30 29 2c 21 6e 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 2c 6f 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 3d 65 28 29 3b 6f 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 3d 74 2c 6f 7d 7d 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 Data Ascii: 653!function(e){var n;if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){var t=window.Cookies,o=window.Cookies=e();o.noConflict=function(){return window.Cookies=t,o}}}(function(){function f
2024-11-01 16:52:22 UTC	1218	IN	Data Raw: 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 75 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 7b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 74 3d 66 28 7b 70 61 74 68 3a 22 2f 22 7d 2c 63 2e 64 65 66 61 75 6c 74 73 2c 74 29 29 2e 65 78 70 69 72 65 73 26 26 28 74 2e 65 78 70 69 72 65 73 3d 6e 65 77 20 44 61 74 65 28 31 2a 6e 65 77 20 44 61 74 65 2b 38 36 34 65 35 2a 74 2e 65 78 70 69 72 65 73 29 29 2c 74 2e 65 78 70 69 72 65 73 3d 74 2e 65 78 70 69 72 65 73 3f 74 2e 65 78 70 69 72 65 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3a 22 22 3b 74 72 79 Data Ascii: URIComponent)}return function e(u){function c(){}function t(e,n,t){if("undefined"!=typeof document){"number"==typeof(t=f({path:"/"},c.defaults,t)).expires&&(t.expires=new Date(1new Date+864e5t.expires)),t.expires=t.expires?t.expires.toUTCString():"";try
2024-11-01 16:52:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49829	35.244.204.77	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:21 UTC	687	OUT	GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/configv21.json?version=9308211776 HTTP/1.1 Host: content.zenimpact.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:22 UTC	1453	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:22 GMT Last-Modified: Thu, 22 Aug 2024 21:30:03 GMT ETag: "e5198e6617b486b0d233db0265b4475e" x-goog-generation: 1724362203065897 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 19966 Content-Type: application/json x-goog-hash: crc32c=Y6rshg== x-goog-hash: md5=5RmOZhe0hrDSM9sCZbRHXg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 19966 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept, Authorization, Content-Length, Content-Range, Content-Type, Date, Origin, Range, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AHmUCY0x7dHibjKwI6sldRmSpmUF7YVO5FcmNpbS_n5T_MK7wDGRq0eMc83R9FMPcfRl0-ITTVTsB-tcUg Server: UploadServer Vary: Accept-Encoding Cache-Control: public,max-age=3600 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Permissions-Policy: geolocation=(none), microphone=(none) x-powered-by: FALSE Content-Security-Policy: frame-ancestors 'self'; style-src 'self' ; script-src 'self'; font-src 'self' data:https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self'; media-src 'self'; frame-src 'self'; default-src 'self' Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 16:52:22 UTC	1453	IN	Data Raw: 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 76 61 6e 69 74 69 65 73 22 3a 7b 22 2a 22 3a 22 57 69 6c 64 63 61 72 64 22 2c 22 2f 65 6e 2f 68 6f 6d 65 2f 70 75 62 6c 6f 67 69 6e 22 3a 22 50 75 62 6c 69 63 20 48 6f 6d 65 70 61 67 65 22 2c 22 2f 63 6f 6e 74 65 6e 74 2f 65 6e 2f 61 64 76 69 63 65 2f 61 64 76 69 63 65 2d 6f 76 65 72 76 69 65 77 2f 63 6f 6d 70 61 72 65 2e 68 74 6d 6c 22 3a 22 41 64 76 69 63 65 20 45 64 75 63 61 74 69 6f 6e 20 53 69 74 65 20 28 48 6f 6d 65 29 22 2c 22 2f 63 6f 6e 74 65 6e 74 2f 65 6e 2f 61 64 76 69 63 65 2f 64 69 67 69 74 61 6c 2d 61 64 76 69 73 6f 72 2f 77 68 61 74 2d 69 73 2d 69 74 2e 68 74 6d 6c 22 3a 22 44 69 67 69 74 61 6c 20 41 64 76 69 73 6f 72 22 2c 22 2f 63 6f 6e 74 65 6e 74 2f 65 6e 2f 61 64 76 69 63 65 2f 70 65 72 73 6f 6e 61 Data Ascii: {"config":{"vanities":{"*":"Wildcard","/en/home/publogin":"Public Homepage","/content/en/advice/advice-overview/compare.html":"Advice Education Site (Home)","/content/en/advice/digital-advisor/what-is-it.html":"Digital Advisor","/content/en/advice/persona
2024-11-01 16:52:22 UTC	1453	IN	Data Raw: 33 30 63 62 63 37 63 62 22 2c 22 65 76 65 6e 74 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 6d 65 74 72 69 63 49 64 22 3a 39 38 31 2c 22 6c 61 62 65 6c 73 22 3a 5b 22 4f 62 73 65 72 76 65 64 22 2c 22 50 61 67 65 22 2c 22 54 61 72 67 65 74 22 5d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 22 3a 22 61 73 73 65 74 5f 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 37 63 34 30 63 38 63 39 2d 64 31 36 39 2d 34 32 35 64 2d 62 36 32 61 2d 35 34 35 37 35 37 35 39 61 62 66 62 22 2c 22 74 79 70 65 22 3a 6e 75 6c 6c 7d 5d 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 22 3a 6e 75 6c 6c 7d 5d 2c 22 73 65 72 65 6e 64 69 70 69 74 79 22 3a 6e 75 6c 6c 7d 2c 22 41 64 76 69 63 65 20 Data Ascii: 30cbc7cb","eventname":"PageView","metricId":981,"labels":["Observed","Page","Target"],"properties":[{"selector":null,"name":"asset_id","value":"7c40c8c9-d169-425d-b62a-54575759abfb","type":null}],"interactionProperties":null}],"serendipity":null},"Advice
2024-11-01 16:52:22 UTC	1453	IN	Data Raw: 30 34 32 31 31 37 30 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 22 23 76 67 63 6f 72 65 63 6f 6e 74 61 69 6e 65 72 2d 61 33 37 39 61 66 66 62 39 61 20 3e 20 64 69 76 20 3e 20 64 69 76 20 3e 20 64 69 76 20 3e 20 64 69 76 20 3e 20 64 69 76 2e 73 69 64 65 2d 62 79 2d 73 69 64 65 2d 70 73 78 5f 5f 64 65 73 63 2d 77 72 61 70 2e 76 61 6e 67 75 61 72 64 52 65 64 20 3e 20 64 69 76 20 3e 20 64 69 76 2e 64 65 73 63 72 70 74 20 3e 20 70 22 2c 22 76 61 6c 75 65 22 3a 22 47 65 74 20 6c 6f 77 2d 63 6f 73 74 20 61 64 76 69 63 65 20 61 6e 64 20 6d 6f 6e 65 79 20 6d 61 6e 61 67 65 6d 65 6e 74 20 74 68 61 74 20 63 61 6e 20 68 65 6c 70 20 79 6f 75 20 72 65 61 63 68 20 61 6c 6c 20 79 6f 75 72 20 66 69 6e 61 6e 63 69 61 6c 20 67 6f 61 6c 73 2e 20 22 2c 22 74 79 70 65 22 3a Data Ascii: 0421170":[{"selector":"#vgcorecontainer-a379affb9a > div > div > div > div > div.side-by-side-psx__desc-wrap.vanguardRed > div > div.descrpt > p","value":"Get low-cost advice and money management that can help you reach all your financial goals. ","type":
2024-11-01 16:52:22 UTC	1453	IN	Data Raw: 65 35 65 61 32 31 64 33 61 37 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 22 2e 63 74 61 42 75 74 74 6f 6e 20 3e 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 3e 20 61 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 3e 20 73 70 61 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 3e 20 73 70 61 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 22 2c 22 76 61 6c 75 65 22 3a 22 20 3c 73 74 79 6c 65 3e 20 61 20 7b 20 63 6f 6c 6f 72 3a 62 6c 75 65 3b 7d 20 2e 63 74 61 42 75 74 74 6f 6e 20 61 3a 68 6f 76 65 72 20 73 76 67 20 23 7a 65 6e 69 63 6f 6e 20 7b 20 66 69 6c 6c 3a 20 77 68 69 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 3c 2f 73 74 79 6c 65 3e 3c 73 76 67 20 77 69 64 74 68 3d 5c 22 31 35 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 39 5c 22 20 76 69 65 77 42 6f 78 Data Ascii: e5ea21d3a7":[{"selector":".ctaButton > div:nth-child(1) > a:nth-child(1) > span:nth-child(1) > span:nth-child(1)","value":" <style> a { color:blue;} .ctaButton a:hover svg #zenicon { fill: white!important; } </style><svg width=\"15\" height=\"19\" viewBox
2024-11-01 16:52:22 UTC	1453	IN	Data Raw: 69 6e 65 72 2d 61 33 37 39 61 66 66 62 39 61 20 3e 20 64 69 76 20 3e 20 64 69 76 20 3e 20 64 69 76 20 3e 20 64 69 76 20 3e 20 64 69 76 2e 73 69 64 65 2d 62 79 2d 73 69 64 65 2d 70 73 78 5f 5f 64 65 73 63 2d 77 72 61 70 2e 76 61 6e 67 75 61 72 64 52 65 64 20 3e 20 64 69 76 20 3e 20 64 69 76 2e 63 74 61 42 75 74 74 6f 6e 20 3e 20 64 69 76 20 3e 20 61 20 3e 20 73 70 61 6e 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 62 6f 78 20 3e 20 73 70 61 6e 20 3e 20 73 76 67 20 7c 20 73 74 79 6c 65 22 2c 22 76 61 6c 75 65 22 3a 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 22 2c 22 74 79 70 65 22 3a 35 7d 5d 2c 22 32 35 37 36 61 65 63 32 2d 66 36 36 61 2d 34 38 39 33 2d 38 31 32 39 2d 64 35 30 66 35 38 65 31 30 Data Ascii: iner-a379affb9a > div > div > div > div > div.side-by-side-psx__desc-wrap.vanguardRed > div > div.ctaButton > div > a > span.c11n-button__box > span > svg \| style","value":"margin-top: 2px; margin-right: 8px;","type":5}],"2576aec2-f66a-4893-8129-d50f58e10
2024-11-01 16:52:22 UTC	1453	IN	Data Raw: 7a 2d 2d 62 67 2d 79 65 6c 6c 6f 77 22 2c 22 74 72 69 67 67 65 72 54 79 70 65 22 3a 31 2c 22 75 73 65 43 6f 6d 6d 75 6e 69 74 79 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 73 22 3a 7b 22 39 31 37 37 35 34 35 32 2d 39 33 30 66 2d 34 66 35 61 2d 62 64 30 31 2d 30 37 62 35 61 37 35 63 61 61 61 32 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 22 23 68 65 61 64 6c 69 6e 65 2e 7a 2d 2d 68 65 61 64 22 2c 22 76 61 6c 75 65 22 3a 22 50 75 74 20 65 78 70 65 72 69 65 6e 63 65 64 20 61 64 76 69 73 6f 72 73 20 61 6e 64 20 3c 62 72 3e 6c 65 61 64 69 6e 67 20 74 65 63 68 20 74 6f 20 77 6f 72 6b 20 66 6f 72 20 79 6f 75 22 2c 22 74 79 70 65 22 3a 31 7d 2c 7b 22 73 65 6c 65 63 74 6f 72 22 3a 22 23 73 75 62 68 65 61 64 2e 7a 2d 2d 73 75 62 68 65 61 64 22 2c 22 76 Data Ascii: z--bg-yellow","triggerType":1,"useCommunity":false,"variations":{"91775452-930f-4f5a-bd01-07b5a75caaa2":[{"selector":"#headline.z--head","value":"Put experienced advisors and <br>leading tech to work for you","type":1},{"selector":"#subhead.z--subhead","v
2024-11-01 16:52:22 UTC	1453	IN	Data Raw: 63 3d 27 68 74 74 70 73 3a 2f 2f 61 65 6d 64 61 6d 2e 61 73 73 65 74 73 2e 76 67 64 79 6e 61 6d 69 63 2e 69 6e 66 6f 2f 61 73 73 65 74 73 2f 69 6e 73 74 2f 74 61 72 67 65 74 2f 74 65 73 74 69 6e 67 2f 5a 65 6e 61 70 73 65 20 49 6d 61 67 65 20 33 20 31 2e 77 65 62 70 27 20 61 6c 74 3d 27 72 65 73 75 6c 74 20 69 6d 61 67 65 27 20 2f 3e 22 2c 22 74 79 70 65 22 3a 31 7d 2c 7b 22 73 65 6c 65 63 74 6f 72 22 3a 22 2e 7a 2d 2d 73 75 62 68 65 61 64 2e 7a 2d 2d 73 75 62 68 65 61 64 2d 63 6f 70 79 2d 62 6c 6f 63 6b 22 2c 22 76 61 6c 75 65 22 3a 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 61 72 6b 20 50 72 6f 27 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 5c Data Ascii: c='https://aemdam.assets.vgdynamic.info/assets/inst/target/testing/Zenapse Image 3 1.webp' alt='result image' />","type":1},{"selector":".z--subhead.z--subhead-copy-block","value":"<span style=\"font-family: 'Mark Pro', Arial, sans-serif;font-weight:700;\
2024-11-01 16:52:22 UTC	654	IN	Data Raw: 61 72 64 2e 63 6f 6d 2f 22 2c 22 74 79 70 65 22 3a 35 7d 5d 7d 7d 5d 2c 22 6c 69 73 74 65 6e 65 72 73 22 3a 5b 7b 22 70 61 67 65 4e 61 6d 65 22 3a 22 41 64 76 69 63 65 20 45 64 75 63 61 74 69 6f 6e 20 53 69 74 65 20 28 48 6f 6d 65 29 22 2c 22 74 79 70 65 22 3a 31 2c 22 74 72 69 67 67 65 72 54 79 70 65 22 3a 32 2c 22 74 72 69 67 67 65 72 22 3a 6e 75 6c 6c 2c 22 67 75 69 64 22 3a 22 30 65 66 38 37 62 39 63 2d 34 63 62 63 2d 34 34 39 38 2d 62 32 33 39 2d 32 37 65 36 34 62 36 31 63 38 64 34 22 2c 22 65 76 65 6e 74 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 6d 65 74 72 69 63 49 64 22 3a 31 30 31 36 2c 22 6c 61 62 65 6c 73 22 3a 5b 22 4f 62 73 65 72 76 65 64 22 2c 22 50 61 67 65 22 2c 22 54 61 72 67 65 74 22 5d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 Data Ascii: ard.com/","type":5}]}}],"listeners":[{"pageName":"Advice Education Site (Home)","type":1,"triggerType":2,"trigger":null,"guid":"0ef87b9c-4cbc-4498-b239-27e64b61c8d4","eventname":"PageView","metricId":1016,"labels":["Observed","Page","Target"],"properties"
2024-11-01 16:52:22 UTC	1378	IN	Data Raw: 6c 73 22 3a 5b 22 4f 62 73 65 72 76 65 64 22 2c 22 54 61 72 67 65 74 22 5d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 22 3a 22 61 73 73 65 74 5f 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 36 34 63 38 66 64 65 36 2d 35 65 37 31 2d 34 37 61 65 2d 62 37 39 39 2d 30 30 36 32 30 64 66 63 32 66 64 34 22 2c 22 74 79 70 65 22 3a 6e 75 6c 6c 7d 5d 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 70 61 67 65 4e 61 6d 65 22 3a 22 41 64 76 69 63 65 20 45 64 75 63 61 74 69 6f 6e 20 53 69 74 65 20 28 48 6f 6d 65 29 22 2c 22 74 79 70 65 22 3a 31 2c 22 74 72 69 67 67 65 72 54 79 70 65 22 3a 31 2c 22 74 72 69 67 67 65 72 22 3a 22 2e 7a 65 6e 2d 73 75 62 6d 69 Data Ascii: ls":["Observed","Target"],"properties":[{"selector":null,"name":"asset_id","value":"64c8fde6-5e71-47ae-b799-00620dfc2fd4","type":null}],"interactionProperties":null},{"pageName":"Advice Education Site (Home)","type":1,"triggerType":1,"trigger":".zen-submi
2024-11-01 16:52:22 UTC	1378	IN	Data Raw: 62 75 74 74 6f 6e 5f 5f 62 6f 78 22 2c 22 67 75 69 64 22 3a 22 62 37 66 32 65 62 63 37 2d 61 30 39 37 2d 34 64 31 65 2d 61 64 61 39 2d 63 35 30 34 32 64 30 62 30 62 39 33 22 2c 22 65 76 65 6e 74 6e 61 6d 65 22 3a 22 4c 65 61 64 53 74 61 72 74 22 2c 22 6d 65 74 72 69 63 49 64 22 3a 31 32 30 38 2c 22 6c 61 62 65 6c 73 22 3a 5b 22 4f 62 73 65 72 76 65 64 22 2c 22 54 61 72 67 65 74 22 5d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 22 3a 22 61 73 73 65 74 5f 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 39 34 37 37 36 66 39 38 2d 34 30 35 65 2d 34 33 31 66 2d 61 31 35 34 2d 63 37 33 39 37 64 63 64 34 63 62 61 22 2c 22 74 79 70 65 22 3a 6e 75 6c 6c 7d 5d 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 50 72 6f Data Ascii: button__box","guid":"b7f2ebc7-a097-4d1e-ada9-c5042d0b0b93","eventname":"LeadStart","metricId":1208,"labels":["Observed","Target"],"properties":[{"selector":null,"name":"asset_id","value":"94776f98-405e-431f-a154-c7397dcd4cba","type":null}],"interactionPro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49830	35.227.196.211	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:22 UTC	593	OUT	OPTIONS /zenid?zenId=2d998ac0-80f1-8946-9b27-6d49017b3789 HTTP/1.1 Host: insight-api-kgw.zenimpact.io Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-api-key Origin: https://ownyourfuture.vanguard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:22 UTC	868	IN	HTTP/1.1 200 OK access-control-allow-headers: Content-Type, Authorization, x-api-key access-control-allow-methods: GET, POST, PUT, DELETE access-control-allow-origin: * access-control-max-age: 86400 x-cloud-trace-context: 233b6812b60a1ac4cc3256abb04a09a0 content-type: text/html alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 01 Nov 2024 16:52:22 GMT Server: Google Frontend Content-Length: 0 Via: 1.1 google Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Cache-Control: no-store Pragma: no-cache Expires: -1 x-powered-by: FALSE Content-Security-Policy: upgrade-insecure-requests Permissions-Policy: microphone=() Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49834	35.244.204.77	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:23 UTC	461	OUT	GET /dist/data/27902609-b114-4020-bca5-e9caee1dd631/090d772a-b3d6-4dda-808f-773ad25b7715/configv21.json?version=9308211776 HTTP/1.1 Host: content.zenimpact.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:23 UTC	1461	IN	HTTP/1.1 200 OK x-goog-generation: 1724362203065897 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 19966 x-goog-hash: crc32c=Y6rshg== x-goog-hash: md5=5RmOZhe0hrDSM9sCZbRHXg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 19966 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept, Authorization, Content-Length, Content-Range, Content-Type, Date, Origin, Range, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AHmUCY0x7dHibjKwI6sldRmSpmUF7YVO5FcmNpbS_n5T_MK7wDGRq0eMc83R9FMPcfRl0-ITTVTsB-tcUg Server: UploadServer Date: Fri, 01 Nov 2024 16:52:22 GMT Last-Modified: Thu, 22 Aug 2024 21:30:03 GMT ETag: "e5198e6617b486b0d233db0265b4475e" Content-Type: application/json Vary: Accept-Encoding Age: 1 Cache-Control: public,max-age=3600 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Permissions-Policy: geolocation=(none), microphone=(none) x-powered-by: FALSE Content-Security-Policy: frame-ancestors 'self'; style-src 'self' ; script-src 'self'; font-src 'self' data:https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self'; media-src 'self'; frame-src 'self'; default-src 'self' Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 16:52:23 UTC	1461	IN	Data Raw: 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 76 61 6e 69 74 69 65 73 22 3a 7b 22 2a 22 3a 22 57 69 6c 64 63 61 72 64 22 2c 22 2f 65 6e 2f 68 6f 6d 65 2f 70 75 62 6c 6f 67 69 6e 22 3a 22 50 75 62 6c 69 63 20 48 6f 6d 65 70 61 67 65 22 2c 22 2f 63 6f 6e 74 65 6e 74 2f 65 6e 2f 61 64 76 69 63 65 2f 61 64 76 69 63 65 2d 6f 76 65 72 76 69 65 77 2f 63 6f 6d 70 61 72 65 2e 68 74 6d 6c 22 3a 22 41 64 76 69 63 65 20 45 64 75 63 61 74 69 6f 6e 20 53 69 74 65 20 28 48 6f 6d 65 29 22 2c 22 2f 63 6f 6e 74 65 6e 74 2f 65 6e 2f 61 64 76 69 63 65 2f 64 69 67 69 74 61 6c 2d 61 64 76 69 73 6f 72 2f 77 68 61 74 2d 69 73 2d 69 74 2e 68 74 6d 6c 22 3a 22 44 69 67 69 74 61 6c 20 41 64 76 69 73 6f 72 22 2c 22 2f 63 6f 6e 74 65 6e 74 2f 65 6e 2f 61 64 76 69 63 65 2f 70 65 72 73 6f 6e 61 Data Ascii: {"config":{"vanities":{"*":"Wildcard","/en/home/publogin":"Public Homepage","/content/en/advice/advice-overview/compare.html":"Advice Education Site (Home)","/content/en/advice/digital-advisor/what-is-it.html":"Digital Advisor","/content/en/advice/persona
2024-11-01 16:52:23 UTC	1461	IN	Data Raw: 22 2c 22 65 76 65 6e 74 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 6d 65 74 72 69 63 49 64 22 3a 39 38 31 2c 22 6c 61 62 65 6c 73 22 3a 5b 22 4f 62 73 65 72 76 65 64 22 2c 22 50 61 67 65 22 2c 22 54 61 72 67 65 74 22 5d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 22 3a 22 61 73 73 65 74 5f 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 37 63 34 30 63 38 63 39 2d 64 31 36 39 2d 34 32 35 64 2d 62 36 32 61 2d 35 34 35 37 35 37 35 39 61 62 66 62 22 2c 22 74 79 70 65 22 3a 6e 75 6c 6c 7d 5d 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 22 3a 6e 75 6c 6c 7d 5d 2c 22 73 65 72 65 6e 64 69 70 69 74 79 22 3a 6e 75 6c 6c 7d 2c 22 41 64 76 69 63 65 20 45 64 75 63 61 74 69 6f Data Ascii: ","eventname":"PageView","metricId":981,"labels":["Observed","Page","Target"],"properties":[{"selector":null,"name":"asset_id","value":"7c40c8c9-d169-425d-b62a-54575759abfb","type":null}],"interactionProperties":null}],"serendipity":null},"Advice Educatio
2024-11-01 16:52:23 UTC	1461	IN	Data Raw: 63 74 6f 72 22 3a 22 23 76 67 63 6f 72 65 63 6f 6e 74 61 69 6e 65 72 2d 61 33 37 39 61 66 66 62 39 61 20 3e 20 64 69 76 20 3e 20 64 69 76 20 3e 20 64 69 76 20 3e 20 64 69 76 20 3e 20 64 69 76 2e 73 69 64 65 2d 62 79 2d 73 69 64 65 2d 70 73 78 5f 5f 64 65 73 63 2d 77 72 61 70 2e 76 61 6e 67 75 61 72 64 52 65 64 20 3e 20 64 69 76 20 3e 20 64 69 76 2e 64 65 73 63 72 70 74 20 3e 20 70 22 2c 22 76 61 6c 75 65 22 3a 22 47 65 74 20 6c 6f 77 2d 63 6f 73 74 20 61 64 76 69 63 65 20 61 6e 64 20 6d 6f 6e 65 79 20 6d 61 6e 61 67 65 6d 65 6e 74 20 74 68 61 74 20 63 61 6e 20 68 65 6c 70 20 79 6f 75 20 72 65 61 63 68 20 61 6c 6c 20 79 6f 75 72 20 66 69 6e 61 6e 63 69 61 6c 20 67 6f 61 6c 73 2e 20 22 2c 22 74 79 70 65 22 3a 31 7d 5d 7d 7d 2c 7b 22 6f 70 74 49 64 22 3a 22 Data Ascii: ctor":"#vgcorecontainer-a379affb9a > div > div > div > div > div.side-by-side-psx__desc-wrap.vanguardRed > div > div.descrpt > p","value":"Get low-cost advice and money management that can help you reach all your financial goals. ","type":1}]}},{"optId":"
2024-11-01 16:52:23 UTC	1461	IN	Data Raw: 3a 22 2e 63 74 61 42 75 74 74 6f 6e 20 3e 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 3e 20 61 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 3e 20 73 70 61 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 3e 20 73 70 61 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 22 2c 22 76 61 6c 75 65 22 3a 22 20 3c 73 74 79 6c 65 3e 20 61 20 7b 20 63 6f 6c 6f 72 3a 62 6c 75 65 3b 7d 20 2e 63 74 61 42 75 74 74 6f 6e 20 61 3a 68 6f 76 65 72 20 73 76 67 20 23 7a 65 6e 69 63 6f 6e 20 7b 20 66 69 6c 6c 3a 20 77 68 69 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 3c 2f 73 74 79 6c 65 3e 3c 73 76 67 20 77 69 64 74 68 3d 5c 22 31 35 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 39 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 31 35 20 31 39 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f Data Ascii: :".ctaButton > div:nth-child(1) > a:nth-child(1) > span:nth-child(1) > span:nth-child(1)","value":" <style> a { color:blue;} .ctaButton a:hover svg #zenicon { fill: white!important; } </style><svg width=\"15\" height=\"19\" viewBox=\"0 0 15 19\" fill=\"no
2024-11-01 16:52:23 UTC	1461	IN	Data Raw: 76 20 3e 20 64 69 76 20 3e 20 64 69 76 2e 73 69 64 65 2d 62 79 2d 73 69 64 65 2d 70 73 78 5f 5f 64 65 73 63 2d 77 72 61 70 2e 76 61 6e 67 75 61 72 64 52 65 64 20 3e 20 64 69 76 20 3e 20 64 69 76 2e 63 74 61 42 75 74 74 6f 6e 20 3e 20 64 69 76 20 3e 20 61 20 3e 20 73 70 61 6e 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 62 6f 78 20 3e 20 73 70 61 6e 20 3e 20 73 76 67 20 7c 20 73 74 79 6c 65 22 2c 22 76 61 6c 75 65 22 3a 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 22 2c 22 74 79 70 65 22 3a 35 7d 5d 2c 22 32 35 37 36 61 65 63 32 2d 66 36 36 61 2d 34 38 39 33 2d 38 31 32 39 2d 64 35 30 66 35 38 65 31 30 62 62 37 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 22 2e 63 74 61 42 75 74 74 6f 6e 20 3e 20 Data Ascii: v > div > div.side-by-side-psx__desc-wrap.vanguardRed > div > div.ctaButton > div > a > span.c11n-button__box > span > svg \| style","value":"margin-top: 2px; margin-right: 8px;","type":5}],"2576aec2-f66a-4893-8129-d50f58e10bb7":[{"selector":".ctaButton >
2024-11-01 16:52:23 UTC	1461	IN	Data Raw: 69 74 79 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 73 22 3a 7b 22 39 31 37 37 35 34 35 32 2d 39 33 30 66 2d 34 66 35 61 2d 62 64 30 31 2d 30 37 62 35 61 37 35 63 61 61 61 32 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 22 23 68 65 61 64 6c 69 6e 65 2e 7a 2d 2d 68 65 61 64 22 2c 22 76 61 6c 75 65 22 3a 22 50 75 74 20 65 78 70 65 72 69 65 6e 63 65 64 20 61 64 76 69 73 6f 72 73 20 61 6e 64 20 3c 62 72 3e 6c 65 61 64 69 6e 67 20 74 65 63 68 20 74 6f 20 77 6f 72 6b 20 66 6f 72 20 79 6f 75 22 2c 22 74 79 70 65 22 3a 31 7d 2c 7b 22 73 65 6c 65 63 74 6f 72 22 3a 22 23 73 75 62 68 65 61 64 2e 7a 2d 2d 73 75 62 68 65 61 64 22 2c 22 76 61 6c 75 65 22 3a 22 50 65 72 73 6f 6e 61 6c 20 41 64 76 69 73 6f 72 20 6f 66 66 65 72 73 20 75 6e 6c 69 6d 69 74 65 64 Data Ascii: ity":false,"variations":{"91775452-930f-4f5a-bd01-07b5a75caaa2":[{"selector":"#headline.z--head","value":"Put experienced advisors and <br>leading tech to work for you","type":1},{"selector":"#subhead.z--subhead","value":"Personal Advisor offers unlimited
2024-11-01 16:52:23 UTC	1461	IN	Data Raw: 6e 73 74 2f 74 61 72 67 65 74 2f 74 65 73 74 69 6e 67 2f 5a 65 6e 61 70 73 65 20 49 6d 61 67 65 20 33 20 31 2e 77 65 62 70 27 20 61 6c 74 3d 27 72 65 73 75 6c 74 20 69 6d 61 67 65 27 20 2f 3e 22 2c 22 74 79 70 65 22 3a 31 7d 2c 7b 22 73 65 6c 65 63 74 6f 72 22 3a 22 2e 7a 2d 2d 73 75 62 68 65 61 64 2e 7a 2d 2d 73 75 62 68 65 61 64 2d 63 6f 70 79 2d 62 6c 6f 63 6b 22 2c 22 76 61 6c 75 65 22 3a 22 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 61 72 6b 20 50 72 6f 27 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 5c 22 3e 45 6e 6a 6f 79 20 79 6f 75 72 20 6c 69 66 65 20 61 6e 64 20 73 70 65 6e 64 20 6d 6f 72 65 20 74 69 6d 65 20 64 6f 69 6e 67 20 74 68 69 6e Data Ascii: nst/target/testing/Zenapse Image 3 1.webp' alt='result image' />","type":1},{"selector":".z--subhead.z--subhead-copy-block","value":"<span style=\"font-family: 'Mark Pro', Arial, sans-serif;font-weight:700;\">Enjoy your life and spend more time doing thin
2024-11-01 16:52:23 UTC	1461	IN	Data Raw: 20 45 64 75 63 61 74 69 6f 6e 20 53 69 74 65 20 28 48 6f 6d 65 29 22 2c 22 74 79 70 65 22 3a 31 2c 22 74 72 69 67 67 65 72 54 79 70 65 22 3a 32 2c 22 74 72 69 67 67 65 72 22 3a 6e 75 6c 6c 2c 22 67 75 69 64 22 3a 22 30 65 66 38 37 62 39 63 2d 34 63 62 63 2d 34 34 39 38 2d 62 32 33 39 2d 32 37 65 36 34 62 36 31 63 38 64 34 22 2c 22 65 76 65 6e 74 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 6d 65 74 72 69 63 49 64 22 3a 31 30 31 36 2c 22 6c 61 62 65 6c 73 22 3a 5b 22 4f 62 73 65 72 76 65 64 22 2c 22 50 61 67 65 22 2c 22 54 61 72 67 65 74 22 5d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 22 3a 22 61 73 73 65 74 5f 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 34 37 31 65 31 34 34 64 2d 39 Data Ascii: Education Site (Home)","type":1,"triggerType":2,"trigger":null,"guid":"0ef87b9c-4cbc-4498-b239-27e64b61c8d4","eventname":"PageView","metricId":1016,"labels":["Observed","Page","Target"],"properties":[{"selector":null,"name":"asset_id","value":"471e144d-9
2024-11-01 16:52:23 UTC	1461	IN	Data Raw: 6e 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 5d 7d 2c 7b 22 70 61 67 65 4e 61 6d 65 22 3a 22 41 64 76 69 63 65 20 45 64 75 63 61 74 69 6f 6e 20 53 69 74 65 20 28 48 6f 6d 65 29 22 2c 22 74 79 70 65 22 3a 31 2c 22 74 72 69 67 67 65 72 54 79 70 65 22 3a 31 2c 22 74 72 69 67 67 65 72 22 3a 22 2e 7a 65 6e 2d 73 75 62 6d 69 74 2e 7a 2d 2d 70 75 72 70 6c 65 2e 7a 2d 2d 62 67 2d 79 65 6c 6c 6f 77 22 2c 22 67 75 69 64 22 3a 22 36 66 36 65 62 61 38 38 2d 62 62 32 63 2d 34 35 30 39 2d 38 36 32 36 2d 36 63 61 63 65 30 36 65 65 30 30 62 22 2c 22 65 76 65 6e 74 6e 61 6d 65 22 3a 22 53 65 72 65 6e 64 69 70 69 74 79 46 6f 72 6d 22 2c 22 6d 65 74 72 69 63 49 64 22 3a 31 31 30 31 2c 22 6c 61 62 65 6c 73 22 3a 5b 22 4f 62 73 65 72 76 65 64 22 2c 22 54 61 72 67 65 74 22 5d 2c Data Ascii: nProperties":[]},{"pageName":"Advice Education Site (Home)","type":1,"triggerType":1,"trigger":".zen-submit.z--purple.z--bg-yellow","guid":"6f6eba88-bb2c-4509-8626-6cace06ee00b","eventname":"SerendipityForm","metricId":1101,"labels":["Observed","Target"],
2024-11-01 16:52:23 UTC	1461	IN	Data Raw: 74 73 22 3a 5b 22 6c 69 73 74 65 6e 65 72 73 22 2c 22 6c 69 6e 6b 73 22 2c 22 70 72 65 64 69 63 74 69 6f 6e 73 22 5d 2c 22 70 72 65 64 69 63 74 69 6f 6e 73 22 3a 5b 7b 22 6f 70 74 49 64 22 3a 22 31 34 34 30 62 35 61 37 2d 30 32 34 66 2d 34 62 36 31 2d 38 33 63 65 2d 33 38 38 33 31 66 33 63 37 65 39 35 22 2c 22 69 64 22 3a 33 37 33 2c 22 74 72 69 67 67 65 72 22 3a 22 22 2c 22 74 72 69 67 67 65 72 54 79 70 65 22 3a 32 2c 22 75 73 65 43 6f 6d 6d 75 6e 69 74 79 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 73 22 3a 7b 22 32 64 64 36 33 64 31 31 2d 37 65 33 62 2d 34 63 33 65 2d 62 35 61 37 2d 32 30 66 33 65 62 30 62 33 62 39 37 22 3a 5b 7b 22 73 65 6c 65 63 74 6f 72 22 3a 22 23 76 67 63 6f 72 65 63 6f 6e 74 61 69 6e 65 72 2d 38 61 39 35 34 61 34 39 31 Data Ascii: ts":["listeners","links","predictions"],"predictions":[{"optId":"1440b5a7-024f-4b61-83ce-38831f3c7e95","id":373,"trigger":"","triggerType":2,"useCommunity":false,"variations":{"2dd63d11-7e3b-4c3e-b5a7-20f3eb0b3b97":[{"selector":"#vgcorecontainer-8a954a491

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49831	66.235.152.156	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:23 UTC	452	OUT	GET /rest/v1/delivery?client=thevanguardgroup&sessionId=d0323fb320e24e1081d8caf666dc7197&version=2.11.4 HTTP/1.1 Host: thevanguardgroup.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:23 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Fri, 01 Nov 2024 16:52:23 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-11-01 16:52:23 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-11-01 16:52:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49832	35.227.196.211	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:23 UTC	730	OUT	POST /zenid?zenId=2d998ac0-80f1-8946-9b27-6d49017b3789 HTTP/1.1 Host: insight-api-kgw.zenimpact.io Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-api-key: AIzaSyAMe8kFxrppCns3DOYAztjm6YGqSyPfHIQ sec-ch-ua-platform: "Windows" Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:23 UTC	971	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-credentials: true access-control-allow-origin: https://ownyourfuture.vanguard.com access-control-expose-headers: Access-Control-Allow-Origin vary: Origin x-rate-limit-limit: 1s x-rate-limit-remaining: 499 x-rate-limit-reset: 2024-11-01T16:52:24.1802730Z x-cloud-trace-context: 68d2ebee0dcd64a23e6a79dac0fc12b5 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 01 Nov 2024 16:52:23 GMT Server: Google Frontend Content-Length: 52 Via: 1.1 google Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Cache-Control: no-store Pragma: no-cache Expires: -1 x-powered-by: FALSE Content-Security-Policy: upgrade-insecure-requests Permissions-Policy: microphone=() Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 16:52:23 UTC	52	IN	Data Raw: 7b 22 63 6f 6e 73 75 6d 65 72 5f 6e 6f 64 65 5f 69 64 22 3a 22 31 34 36 34 36 38 34 38 33 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 22 7a 32 30 30 22 7d Data Ascii: {"consumer_node_id":"146468483","statusCode":"z200"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49833	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:23 UTC	1597	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/zenapse/dist/scaffold/zen_insight_V4.min.js?ver=7091632830 HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc; ADRUM_BT=R:0\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735340\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741
2024-11-01 16:52:23 UTC	4017	IN	HTTP/1.1 404 Not Found Content-Type: application/javascript Content-Length: 0 Connection: close Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:23 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Frame-Options: SAMEORIGIN X-Cache: Error from cloudfront Via: 1.1 b2ba97e9b6a83eff85433dad7f6e6288.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: zvX37KsOAaXKO4N-gULIkv-X8Z4HicFEx9-ug2O5cqi1Xj2EtckrfQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49836	3.160.150.128	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:23 UTC	1391	OUT	GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.min.js HTTP/1.1 Host: corp-etm-arl.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741
2024-11-01 16:52:24 UTC	806	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 382 Connection: close Date: Fri, 01 Nov 2024 16:52:24 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 30 Oct 2024 13:39:04 GMT ETag: "1b1e92d067c0335f1b8abb3ea14d37a1" x-amz-server-side-encryption: AES256 x-amz-version-id: TZW7lochDQks91SMAsCrZJQraw.MdGRc Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d0a36dbd6f5cc87855296f2852cab3ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Fv0Tix1fMoDENQCCeJezDESRKADaN8Ntwfx1IXGesrRnQEjoj4xHiA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:24 UTC	382	IN	Data Raw: 2f 2f 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 60 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 36 61 62 61 63 37 35 2f 65 64 34 37 33 62 34 65 64 63 61 61 2f 32 33 38 62 64 32 39 38 31 30 64 30 2f 52 43 63 35 39 64 36 38 61 34 62 33 33 39 34 38 62 38 38 30 38 63 34 63 63 38 30 32 39 32 30 62 33 66 2d 73 6f 75 72 63 65 2e 6a 73 60 2e 0a 5f 73 61 74 65 6c 6c 69 74 65 2e 5f 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 27 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 Data Ascii: // For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.js`._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49835	3.160.150.128	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:23 UTC	1206	OUT	GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.min.js HTTP/1.1 Host: corp-etm-arl.web.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741
2024-11-01 16:52:23 UTC	814	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1832 Connection: close Date: Fri, 01 Nov 2024 16:52:23 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 30 Oct 2024 13:39:04 GMT ETag: "38401a394f33fc8ca441cece82fe7f2e" x-amz-server-side-encryption: AES256 x-amz-version-id: oRHKn1.zEjqYJp6DU2cgjJ5Y_DQnrk0f Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 7a6b4cd1254095c5b4b5ec2c3af1870a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: z7qX6Vu4JJgGQq3PO5sLN6hxffXxe8-Kmk5pQNmuVpHugi84AG3OzA== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:23 UTC	1832	IN	Data Raw: 2f 2f 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 60 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 36 61 62 61 63 37 35 2f 65 64 34 37 33 62 34 65 64 63 61 61 2f 32 33 38 62 64 32 39 38 31 30 64 30 2f 52 43 63 35 32 32 37 37 37 63 31 32 32 63 34 33 33 66 61 63 63 38 32 37 32 38 31 30 37 65 66 31 39 39 2d 73 6f 75 72 63 65 2e 6a 73 60 2e 0a 5f 73 61 74 65 6c 6c 69 74 65 2e 5f 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 27 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 Data Ascii: // For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc522777c122c433facc82728107ef199-source.js`._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49837	35.227.196.211	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:23 UTC	400	OUT	GET /zenid?zenId=2d998ac0-80f1-8946-9b27-6d49017b3789 HTTP/1.1 Host: insight-api-kgw.zenimpact.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:24 UTC	649	IN	HTTP/1.1 405 Method Not Allowed content-type: application/json X-Cloud-Trace-Context: a849e80737f77951a736961613e3a2fd Date: Fri, 01 Nov 2024 16:52:24 GMT Server: Google Frontend Content-Length: 130 Via: 1.1 google Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Cache-Control: no-store Pragma: no-cache Expires: -1 x-powered-by: FALSE Content-Security-Policy: upgrade-insecure-requests Permissions-Policy: microphone=() Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 16:52:24 UTC	130	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 63 75 72 72 65 6e 74 20 72 65 71 75 65 73 74 20 69 73 20 6d 61 74 63 68 65 64 20 74 6f 20 74 68 65 20 64 65 66 69 6e 65 64 20 75 72 6c 20 74 65 6d 70 6c 61 74 65 20 5c 22 2f 7a 65 6e 69 64 5c 22 20 62 75 74 20 69 74 73 20 68 74 74 70 20 6d 65 74 68 6f 64 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"code":405,"message":"The current request is matched to the defined url template \"/zenid\" but its http method is not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49838	3.160.150.128	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:24 UTC	1206	OUT	GET /pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.min.js HTTP/1.1 Host: corp-etm-arl.web.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741
2024-11-01 16:52:25 UTC	813	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 382 Connection: close Date: Fri, 01 Nov 2024 16:52:24 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 30 Oct 2024 13:39:04 GMT ETag: "1b1e92d067c0335f1b8abb3ea14d37a1" x-amz-server-side-encryption: AES256 x-amz-version-id: TZW7lochDQks91SMAsCrZJQraw.MdGRc Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 dc929648f0c936ae1fcea0675ad0382c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YAHiZE4UfNY8LlicM87v3JhGFvGcLbOjatJZrJWuNsqyDHjXeizv2Q== Age: 2 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:25 UTC	382	IN	Data Raw: 2f 2f 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 60 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 36 61 62 61 63 37 35 2f 65 64 34 37 33 62 34 65 64 63 61 61 2f 32 33 38 62 64 32 39 38 31 30 64 30 2f 52 43 63 35 39 64 36 38 61 34 62 33 33 39 34 38 62 38 38 30 38 63 34 63 63 38 30 32 39 32 30 62 33 66 2d 73 6f 75 72 63 65 2e 6a 73 60 2e 0a 5f 73 61 74 65 6c 6c 69 74 65 2e 5f 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 27 68 74 74 70 73 3a 2f 2f 63 6f 72 70 2d 65 74 6d 2d 61 72 6c 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 70 61 63 65 5f 62 32 63 5f 70 72 64 2f 33 37 39 66 32 Data Ascii: // For license information, see `https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f26abac75/ed473b4edcaa/238bd29810d0/RCc59d68a4b33948b8808c4cc802920b3f-source.js`._satellite.__registerScript('https://corp-etm-arl.web.vanguard.com/pace_b2c_prd/379f2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49841	63.140.62.17	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:24 UTC	784	OUT	POST /ee/irl1/v1/interact?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=23a41a4e-0ff2-4378-912e-2a0f075ca3d1 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 3207 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:24 UTC	3207	OUT	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 22 63 6f 6d 5f 61 64 6f 62 65 5f 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 72 65 70 6f 72 74 53 75 69 74 65 73 22 3a 5b 22 76 61 6e 67 75 61 72 64 70 61 63 65 77 65 62 73 64 6b 74 65 73 74 22 5d 7d 7d 2c 22 74 61 72 67 65 74 22 3a 7b 22 6d 69 67 72 61 74 69 6f 6e 22 3a 74 72 75 65 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 39 32 43 41 33 37 30 34 35 33 32 39 35 34 34 30 30 41 34 39 30 44 34 34 5f 41 64 6f 62 65 4f 72 67 5f 63 6c 75 73 74 65 72 22 2c 22 76 61 6c 75 65 22 3a Data Ascii: {"meta":{"configOverrides":{"com_adobe_analytics":{"reportSuites":["vanguardpacewebsdktest"]}},"target":{"migration":true},"state":{"domain":"vanguard.com","cookiesEnabled":true,"entries":[{"key":"kndctr_92CA3704532954400A490D44_AdobeOrg_cluster","value":
2024-11-01 16:52:25 UTC	660	IN	HTTP/1.1 200 OK x-request-id: 23a41a4e-0ff2-4378-912e-2a0f075ca3d1 vary: Origin access-control-allow-origin: https://ownyourfuture.vanguard.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Fri, 01 Nov 2024 16:52:24 GMT x-konductor: 24.10.123:a83471aca x-adobe-edge: IRL1;6 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-11-01 16:52:25 UTC	534	IN	Data Raw: 32 30 61 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 33 61 34 31 61 34 65 2d 30 66 66 32 2d 34 33 37 38 2d 39 31 32 65 2d 32 61 30 66 30 37 35 63 61 33 64 31 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 38 36 35 39 31 36 38 31 30 36 31 36 35 34 30 32 33 32 36 33 33 39 32 36 33 32 34 32 32 35 38 31 31 34 34 38 38 36 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 37 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 20a{"requestId":"23a41a4e-0ff2-4378-912e-2a0f075ca3d1","handle":[{"payload":[{"id":"86591681061654023263392632422581144886","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"37","ttlSeconds":1800},{"scope":"AA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49840	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:24 UTC	1768	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/favicon.ico HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc; ADRUM_BT=R:0\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735340\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; [TRUNCATED]
2024-11-01 16:52:25 UTC	4226	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 3638 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:25 GMT ETag: "e36-5d21a10990640" Last-Modified: Wed, 01 Dec 2021 18:44:33 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f7aba4a0337c5f98c4703e2b10f1940a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: O1Qze66Uk33Y74yPqpQUUPE5b-Id22J6dt4jQ_MppDqF1MvTQpgsAA== Age: 62459
2024-11-01 16:52:25 UTC	3638	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 00 00 00 00 68 05 00 00 26 00 00 00 20 20 00 00 00 00 00 00 a8 08 00 00 8e 05 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 5b 4b da 00 ac a6 eb 00 00 00 c3 00 d7 d3 f4 00 36 23 cd 00 75 6a df 00 ea ea f8 00 c4 bc f0 00 1b 09 ca 00 9b 93 e9 00 44 32 d6 00 2a 14 ce 00 69 5e da 00 49 42 d4 00 f4 f5 fb 00 b8 b4 ec 00 e2 de f7 00 0c 00 c7 00 cf ca f4 00 53 46 d5 00 62 53 da 00 2f 1b ca 00 a6 9f ea 00 b2 ad eb 00 21 0f cb 00 70 61 dc 00 3e 2e d3 00 13 00 ca 00 f9 fa fb 00 f1 ef fc 00 e6 e3 f6 00 04 00 c8 00 4e 3f d5 00 09 00 c2 00 e5 e9 f6 00 2d 1a cf 00 c0 b9 ee 00 ff fe fa 00 18 05 c9 00 58 47 d9 00 5f 4e d9 00 27 10 ce 00 36 Data Ascii: h& ( @[K6#ujD2*i^IBSFbS/!pa>.N?-XG_N'6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49839	3.160.150.55	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:24 UTC	1524	OUT	GET /pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/generic1715176030848.js HTTP/1.1 Host: mdl-medallia-digital.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_tslv=1730479942827; s_inv=0
2024-11-01 16:52:25 UTC	1634	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 363620 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Allow-Private-Network: true Cache-Control: public, max-age=31536000 Content-Security-Policy: frame-ancestors .vanguard.com .vanguard.com:* http://.vanguard.com http://.vanguard.com:* .vanguard .medallia.com .vanguard.ca: .vanguard.ca .vanguard.com.au .vanguard.com.au: .de.vanguard .de.vanguard:* https://devthevanguardgroup.sharepoint.com https://thevanguardgroup.sharepoint.com https://sdethevanguardgroup.sharepoint.com .kampyle.com .vtseng.com .vtstest.com https://www.vanguardadvisorsolutions.com https://qa.tradewebretail.com/ .vanguardmexico.com .tradewebretail.com .vanguardsouthamerica.com .vanguardinvestor.co.uk https://.vanguard.co.uk https://.de.vanguard https://.ch.vanguard https://.fr.vanguard https://.nl.vanguard https://.it.vanguard https://.ie.vanguard https://teams.microsoft.com; Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Resource-Policy: cross-origin Date: Fri, 01 Nov 2024 16:52:25 GMT ETag: W/"58c64-19268f60a80" Last-Modified: Mon, 07 Oct 2024 21:50:08 GMT Server: Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: off X-Download-Options: noopen X-XSS-Protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f14a77f80eb66aa455bd94a07a2a0c64.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 X-Amz-Cf-Id: XgFPRnzw2oNwlfAwNd-TjFr662zB_2J7vDKjk2GUV_E6vUG16FQbdw==
2024-11-01 16:52:25 UTC	14481	IN	Data Raw: 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 4d 44 49 47 49 54 41 4c 3d 77 69 6e 64 6f 77 2e 4d 44 49 47 49 54 41 4c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 44 49 47 49 54 41 4c 2e 76 65 72 73 69 6f 6e 3d 27 32 2e 35 34 2e 31 27 3b 7d 29 28 77 69 6e 64 6f 77 29 3b 77 69 6e 64 6f 77 2e 4b 41 4d 50 59 4c 45 5f 43 4f 4e 53 54 41 4e 54 3d 7b 50 4c 41 43 45 48 4f 4c 44 45 52 53 3a 7b 55 52 4c 5f 50 52 45 46 49 58 3a 27 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 64 69 67 69 74 61 6c 2d 63 6c 6f 75 64 2d 70 72 65 6d 2e 6d 65 64 61 6c 6c 69 61 2e 63 6f 6d 2f 27 2c 43 4f 4f 4c 41 44 41 54 41 5f 53 52 43 5f 50 52 45 46 49 58 3a 27 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 64 69 67 69 74 61 6c 2d 63 6c 6f 75 64 Data Ascii: (function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.54.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud
2024-11-01 16:52:25 UTC	16384	IN	Data Raw: 6e 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 73 6b 69 70 49 6e 76 69 74 61 74 69 6f 6e 4f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 32 33 64 63 72 35 5f 4d 50 43 37 35 36 36 5f 65 78 74 72 61 63 74 50 72 6f 76 69 73 69 6f 6e 73 54 6f 4f 6e 73 69 74 65 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 72 65 75 73 61 62 6c 65 52 65 73 6f 75 72 63 65 73 4c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 66 6f 72 6d 54 65 6d 70 6c 61 74 65 73 57 43 41 47 22 3a 74 72 75 65 2c 22 66 6f 72 6d 53 70 61 63 69 6e 67 22 3a 74 72 75 65 2c 22 32 34 64 63 72 31 5f 4d 50 43 37 37 32 34 5f 65 6e 61 62 6c 65 46 6f 72 6d 76 32 61 6e 64 49 6e 76 69 74 65 43 53 53 44 65 6c 61 79 22 3a 6e 75 6c 6c 2c 22 32 31 64 63 72 31 5f 4d 50 43 5f 33 32 38 33 5f 65 Data Ascii: nCaptureEnabled":false,"skipInvitationOptimization":null,"23dcr5_MPC7566_extractProvisionsToOnsiteData":null,"reusableResourcesLibrary":true,"formTemplatesWCAG":true,"formSpacing":true,"24dcr1_MPC7724_enableFormv2andInviteCSSDelay":null,"21dcr1_MPC_3283_e
2024-11-01 16:52:25 UTC	3417	IN	Data Raw: 7c 7c 72 65 66 65 72 72 65 72 44 69 66 66 65 72 65 6e 74 54 68 61 6e 48 6f 73 74 29 7b 76 61 72 20 73 65 73 73 69 6f 6e 44 61 74 61 3d 7b 75 73 65 72 5f 73 65 73 73 69 6f 6e 3a 6b 61 6d 70 79 6c 65 55 73 65 72 53 65 73 73 69 6f 6e 2c 64 69 72 65 63 74 5f 6e 61 76 69 67 61 74 69 6f 6e 3a 69 73 44 69 72 65 63 74 4e 61 76 69 67 61 74 69 6f 6e 2c 64 69 66 66 65 72 65 6e 74 5f 72 65 66 65 72 72 65 72 3a 72 65 66 65 72 72 65 72 44 69 66 66 65 72 65 6e 74 54 68 61 6e 48 6f 73 74 7d 0a 69 66 28 63 68 65 63 6b 50 72 6f 76 69 73 69 6f 6e 28 4b 41 4d 50 59 4c 45 5f 43 4f 4e 53 54 41 4e 54 2e 50 52 4f 56 49 53 49 4f 4e 53 2e 43 52 45 41 54 45 5f 53 45 53 53 49 4f 4e 29 29 7b 4b 41 4d 50 59 4c 45 5f 43 4f 4f 4c 41 44 41 54 41 2e 74 72 69 67 67 65 72 43 6f 6f 6c 61 64 Data Ascii: \|\|referrerDifferentThanHost){var sessionData={user_session:kampyleUserSession,direct_navigation:isDirectNavigation,different_referrer:referrerDifferentThanHost}if(checkProvision(KAMPYLE_CONSTANT.PROVISIONS.CREATE_SESSION)){KAMPYLE_COOLADATA.triggerCoolad
2024-11-01 16:52:25 UTC	1514	IN	Data Raw: 61 28 7b 66 6f 72 6d 49 64 3a 64 61 74 61 2e 66 6f 72 6d 49 64 2c 63 61 6c 6c 62 61 63 6b 3a 63 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 2c 6f 6e 45 72 72 6f 72 3a 6f 6e 45 72 72 6f 72 2c 69 73 49 6e 76 69 74 65 3a 74 72 75 65 7d 2c 74 72 75 65 29 7d 65 6c 73 65 7b 4b 41 4d 50 59 4c 45 5f 55 54 49 4c 53 2e 73 65 6e 64 4d 65 73 73 61 67 65 54 6f 49 66 72 61 6d 65 28 27 6b 61 6d 70 79 6c 65 49 6e 76 69 74 65 27 2c 7b 61 63 74 69 6f 6e 3a 27 73 65 74 45 78 74 72 61 44 61 74 61 27 2c 64 61 74 61 3a 6d 65 73 73 61 67 65 44 61 74 61 2c 7d 29 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 49 6e 76 69 74 65 53 74 61 74 65 28 65 76 65 6e 74 4e 61 6d 65 2c 64 61 74 61 29 7b 4b 41 4d 50 59 4c 45 5f 55 54 49 4c 53 2e 73 65 6e 64 4d 65 73 73 61 67 65 54 6f 49 66 Data Ascii: a({formId:data.formId,callback:callbackFunction,onError:onError,isInvite:true},true)}else{KAMPYLE_UTILS.sendMessageToIframe('kampyleInvite',{action:'setExtraData',data:messageData,});}}function setInviteState(eventName,data){KAMPYLE_UTILS.sendMessageToIf
2024-11-01 16:52:25 UTC	3558	IN	Data Raw: 64 74 68 26 26 68 6f 73 74 48 65 69 67 68 74 3e 66 6f 72 6d 48 65 69 67 68 74 29 7b 69 66 28 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 69 73 43 75 73 74 6f 6d 48 74 6d 6c 41 6e 64 46 69 78 65 64 53 69 7a 65 46 6f 72 6d 28 63 75 72 72 65 6e 74 46 6f 72 6d 49 64 29 29 7b 69 66 72 61 6d 65 53 74 79 6c 65 4f 62 6a 65 63 74 3d 7b 70 6f 73 69 74 69 6f 6e 3a 27 61 62 73 6f 6c 75 74 65 27 2c 74 6f 70 3a 27 35 30 25 27 2c 27 6d 61 72 67 69 6e 2d 74 6f 70 27 3a 2d 66 6f 72 6d 48 65 69 67 68 74 2f 32 2b 27 70 78 27 2c 6c 65 66 74 3a 27 35 30 25 27 2c 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 2d 66 6f 72 6d 57 69 64 74 68 2f 32 2b 27 70 78 27 2c 68 65 69 67 68 74 3a 66 6f 72 6d 48 65 69 67 68 74 2b 27 70 78 27 2c 77 69 64 74 68 3a 66 6f 72 6d 57 69 64 74 68 2b 27 70 78 Data Ascii: dth&&hostHeight>formHeight){if(KAMPYLE_DATA.isCustomHtmlAndFixedSizeForm(currentFormId)){iframeStyleObject={position:'absolute',top:'50%','margin-top':-formHeight/2+'px',left:'50%','margin-left':-formWidth/2+'px',height:formHeight+'px',width:formWidth+'px
2024-11-01 16:52:25 UTC	8023	IN	Data Raw: 74 72 69 6e 67 2c 69 64 65 6e 74 69 66 69 65 72 56 61 6c 4f 6e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3a 6c 6f 63 61 6c 53 74 6f 72 61 67 65 44 61 74 65 7d 3b 76 61 72 20 69 64 65 6e 74 69 66 69 65 72 44 61 74 61 56 61 6c 75 65 73 3d 7b 69 64 65 6e 74 69 66 69 65 72 44 61 74 61 53 74 61 74 65 3a 75 73 65 72 53 74 61 74 65 53 74 72 69 6e 67 2c 69 64 65 6e 74 69 66 69 65 72 56 61 6c 4f 6e 53 62 74 3a 69 64 65 6e 74 69 66 69 65 72 44 61 74 61 56 61 6c 75 65 2c 69 64 65 6e 74 69 66 69 65 72 56 61 6c 4f 6e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3a 6c 6f 63 61 6c 53 74 6f 72 61 67 65 44 61 74 65 7d 3b 69 64 65 6e 74 69 66 69 65 72 44 61 74 61 56 61 6c 75 65 3d 69 64 65 6e 74 69 66 69 65 72 44 61 74 61 56 61 6c 75 65 3f 69 64 65 6e 74 69 66 69 65 72 44 61 74 61 56 61 Data Ascii: tring,identifierValOnLocalStorage:localStorageDate};var identifierDataValues={identifierDataState:userStateString,identifierValOnSbt:identifierDataValue,identifierValOnLocalStorage:localStorageDate};identifierDataValue=identifierDataValue?identifierDataVa
2024-11-01 16:52:25 UTC	16384	IN	Data Raw: 4d 4f 44 41 4c 5f 44 49 41 4c 4f 47 53 29 29 7b 72 65 74 75 72 6e 3b 7d 0a 76 61 72 20 66 6f 63 75 73 65 64 3d 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 67 65 74 4d 65 6d 6f 72 79 44 61 74 61 28 27 6b 61 6d 70 79 6c 65 46 6f 63 75 73 65 64 45 6c 65 6d 65 6e 74 27 29 3b 69 66 28 66 6f 63 75 73 65 64 26 26 66 6f 63 75 73 65 64 2e 66 6f 63 75 73 29 7b 66 6f 63 75 73 65 64 2e 66 6f 63 75 73 28 29 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 50 72 6f 76 69 73 69 6f 6e 28 6e 61 6d 65 29 7b 76 61 72 20 64 61 74 61 4f 62 6a 3d 4d 44 49 47 49 54 41 4c 2e 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 2e 67 65 74 4f 6e 73 69 74 65 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 28 29 3b 72 65 74 75 72 6e 21 21 6e 61 6d 65 26 26 21 21 64 61 74 61 4f 62 6a 26 26 21 21 64 61 74 Data Ascii: MODAL_DIALOGS)){return;}var focused=KAMPYLE_DATA.getMemoryData('kampyleFocusedElement');if(focused&&focused.focus){focused.focus();}}function checkProvision(name){var dataObj=MDIGITAL.CONFIGURATION.getOnsiteConfiguration();return!!name&&!!dataObj&&!!dat
2024-11-01 16:52:25 UTC	8361	IN	Data Raw: 28 29 3b 69 66 28 70 72 6f 70 65 72 74 79 53 68 61 72 65 64 53 75 62 64 6f 6d 61 69 6e 29 7b 4b 41 4d 50 59 4c 45 5f 55 54 49 4c 53 2e 6b 61 6d 70 79 6c 65 44 65 6c 65 74 65 43 6f 6f 6b 69 65 28 4b 41 4d 50 59 4c 45 5f 55 54 49 4c 53 2e 54 4f 50 5f 4c 45 56 45 4c 5f 44 4f 4d 41 49 4e 5f 43 4f 4f 4b 49 45 5f 50 52 45 46 49 58 2b 64 61 74 61 4e 61 6d 65 2c 70 72 6f 70 65 72 74 79 53 68 61 72 65 64 53 75 62 64 6f 6d 61 69 6e 29 3b 72 65 74 75 72 6e 3b 7d 0a 74 72 79 7b 69 66 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 64 61 74 61 4e 61 6d 65 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 64 65 6c 65 74 65 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 64 61 74 61 4e 61 6d 65 5d 3b 7d 7d 0a 63 61 74 63 68 28 65 29 7b 7d 0a 4b 41 4d 50 59 4c 45 5f 55 54 49 4c 53 2e 6b Data Ascii: ();if(propertySharedSubdomain){KAMPYLE_UTILS.kampyleDeleteCookie(KAMPYLE_UTILS.TOP_LEVEL_DOMAIN_COOKIE_PREFIX+dataName,propertySharedSubdomain);return;}try{if(localStorage[dataName]!==undefined){delete localStorage[dataName];}}catch(e){}KAMPYLE_UTILS.k
2024-11-01 16:52:25 UTC	8949	IN	Data Raw: 6c 6c 62 61 63 6b 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 6f 62 6a 2e 63 61 6c 6c 62 61 63 6b 28 64 61 74 61 29 3b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 72 72 6f 72 29 7b 4b 41 4d 50 59 4c 45 5f 43 4f 4f 4c 41 44 41 54 41 2e 74 72 69 67 67 65 72 43 6f 6f 6c 61 64 61 74 61 45 76 65 6e 74 44 69 73 70 61 74 63 68 65 72 45 72 72 6f 72 28 7b 6d 65 73 73 61 67 65 3a 27 46 61 69 6c 65 64 20 74 6f 20 66 65 74 63 68 20 4a 53 4f 4e 20 64 61 74 61 2e 20 45 72 72 6f 72 3a 20 27 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 72 72 6f 72 29 7d 29 3b 74 79 70 65 6f 66 20 6f 62 6a 2e 6f 6e 45 72 72 6f 72 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 6f 62 6a 2e 6f 6e 45 72 72 6f 72 28 65 72 72 6f 72 29 3b 7d 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 46 6f Data Ascii: llback==="function"&&obj.callback(data);}},function(error){KAMPYLE_COOLADATA.triggerCooladataEventDispatcherError({message:'Failed to fetch JSON data. Error: '+JSON.stringify(error)});typeof obj.onError==="function"&&obj.onError(error);});}function getFo
2024-11-01 16:52:25 UTC	7435	IN	Data Raw: 50 41 54 43 48 45 52 2e 74 72 69 67 67 65 72 28 27 6e 65 62 5f 73 6b 69 70 49 6e 76 69 74 61 74 69 6f 6e 27 2c 7b 66 6f 72 6d 49 64 3a 66 6f 72 6d 44 61 74 61 2e 66 6f 72 6d 49 64 7d 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 6c 72 65 61 64 79 53 75 62 6d 69 74 74 65 64 28 66 6f 72 6d 44 61 74 61 29 7b 76 61 72 20 69 73 41 6c 72 65 61 64 79 53 75 62 6d 69 74 74 65 64 3d 69 73 53 75 62 6d 69 74 74 65 64 28 66 6f 72 6d 44 61 74 61 2e 6f 6e 53 69 74 65 44 61 74 61 29 3d 3d 3d 74 72 75 65 3b 76 61 72 20 73 75 62 6d 69 74 74 65 64 44 61 79 73 3d 4b 41 4d 50 59 4c 45 5f 55 54 49 4c 53 2e 67 65 74 4e 65 73 74 65 64 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 66 6f 72 6d 44 61 74 61 2c 27 6f 6e 53 69 74 65 44 61 74 61 2e 73 75 62 6d 69 74 74 65 64 2e 64 61 79 Data Ascii: PATCHER.trigger('neb_skipInvitation',{formId:formData.formId});}function isAlreadySubmitted(formData){var isAlreadySubmitted=isSubmitted(formData.onSiteData)===true;var submittedDays=KAMPYLE_UTILS.getNestedPropertyValue(formData,'onSiteData.submitted.day

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49842	63.140.62.17	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:26 UTC	452	OUT	GET /ee/irl1/v1/interact?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=23a41a4e-0ff2-4378-912e-2a0f075ca3d1 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:26 UTC	435	IN	HTTP/1.1 404 Not Found x-request-id: 23a41a4e-0ff2-4378-912e-2a0f075ca3d1 vary: Origin date: Fri, 01 Nov 2024 16:52:25 GMT x-konductor: 24.10.123:a83471aca x-adobe-edge: IRL1;6 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49843	63.140.62.17	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:26 UTC	2198	OUT	GET /b/ss/vanguardpeprodlaunch/1/JS-2.23.0-LEWM/s93352462118844?AQB=1&ndh=1&pf=1&t=1%2F10%2F2024%2012%3A52%3A24%205%20240&sdid=247944E3FF11DE52-4A0A27777F0FE879&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&g=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&r=http%3A%2F%2Fwww.vanguard.com%2F&c.&getVisitNum=4.2.1&endOfDatePeriod=1.2&getPreviousValue=3.0.1&getTimeSinceLastVisit=2.0&.c&cc=USD&ch=pe%3Aweb&server=ownyourfuture.vanguard.com&events=event284&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&h1=home%3Ahome&v4=mcmid%7C86591681061654023263392632422581144886&c5=unknown&v5=unknown&c8=logged%20out&v8=logged%20out&v13=fri%2C%201%20nov%202024%2012%3A52%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=D%3Dv18&v18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&c21=www.vanguard.com&c26=D%3Dv26&c30=home&c31=D%3Dg&v36=1&c38=home&c39=home&v39=home&c42=1.0.0&v42=1.0.0&c44=pageLoaded%2Cu [TRUNCATED] Host: vanguard.d2.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:26 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 01 Nov 2024 16:52:26 GMT expires: Thu, 31 Oct 2024 16:52:26 GMT last-modified: Sat, 02 Nov 2024 16:52:26 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3716177387627839488-4618608912526103090 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-11-01 16:52:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49844	18.172.153.97	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:26 UTC	1607	OUT	GET /etc.clientlibs/iig-transformation/clientlibs/clientlib-site/resources/images/favicon.ico HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc; ADRUM_BT=R:0\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735340\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; [TRUNCATED]
2024-11-01 16:52:26 UTC	4226	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 3638 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Content-Security-Policy: default-src 'self' .vanguard.com: .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net: .amcharts.com .zenimpact.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' .gstatic.com vanguard.d2.sc.omtrdc.net connect.facebook.net .zenimpact.io .doubleclick.net sitecatalyst.omniture.com activitymap.adobe.com .vanguard.com:* .kampyle.com: .vgcontent.info: .vgdynamic.info: .llnw.net .delvenetworks.com https://delve-public-read.s3.amazonaws.com blob: https://.limelight.com https://.youtube.com .vgcontent.info .vgdynamic.info .net .googleadservices.com www.google.com www.googletagmanager.com .googleads.g.doubleclick.net: .amcharts.com: munchkin.marketo.net s.amazon-adsystem.com https://s.pinimg.com/ct/core.js www.redditstatic.com bat.bing.com .bttrack.com bttrack.com www.googleadservices.com api.ipif [TRUNCATED] Date: Fri, 01 Nov 2024 16:52:26 GMT ETag: "e36-5d21a10990640" Last-Modified: Wed, 01 Dec 2021 18:44:33 GMT Server: Strict-Transport-Security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5150f5498db22842b8e5f639ceaf9506.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P5 X-Amz-Cf-Id: lIykUL1wNJXJmXxWufDd8MFV1Xq6WElGnJbb1kdU_xNjGz7W3scrTQ== Age: 62484
2024-11-01 16:52:26 UTC	3638	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 00 00 00 00 68 05 00 00 26 00 00 00 20 20 00 00 00 00 00 00 a8 08 00 00 8e 05 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 5b 4b da 00 ac a6 eb 00 00 00 c3 00 d7 d3 f4 00 36 23 cd 00 75 6a df 00 ea ea f8 00 c4 bc f0 00 1b 09 ca 00 9b 93 e9 00 44 32 d6 00 2a 14 ce 00 69 5e da 00 49 42 d4 00 f4 f5 fb 00 b8 b4 ec 00 e2 de f7 00 0c 00 c7 00 cf ca f4 00 53 46 d5 00 62 53 da 00 2f 1b ca 00 a6 9f ea 00 b2 ad eb 00 21 0f cb 00 70 61 dc 00 3e 2e d3 00 13 00 ca 00 f9 fa fb 00 f1 ef fc 00 e6 e3 f6 00 04 00 c8 00 4e 3f d5 00 09 00 c2 00 e5 e9 f6 00 2d 1a cf 00 c0 b9 ee 00 ff fe fa 00 18 05 c9 00 58 47 d9 00 5f 4e d9 00 27 10 ce 00 36 Data Ascii: h& ( @[K6#ujD2*i^IBSFbS/!pa>.N?-XG_N'6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49847	34.160.105.74	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:27 UTC	782	OUT	GET /set?zenId=2d998ac0-80f1-8946-9b27-6d49017b3789&token=AIzaSyAMe8kFxrppCns3DOYAztjm6YGqSyPfHIQ HTTP/1.1 Host: hub2.zenimpact.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:27 UTC	727	IN	HTTP/1.1 200 OK content-type: text/html; charset=utf-8 set-cookie: zenId=2d998ac0-80f1-8946-9b27-6d49017b3789; expires=Fri, 28 Sep 4762 16:52:27 GMT; path=/; secure; samesite=none set-cookie: hubId=720c6404-2e5a-4534-a7ac-689e520a00dd; expires=Fri, 28 Sep 4762 16:52:27 GMT; path=/; secure; samesite=none Date: Fri, 01 Nov 2024 16:52:27 GMT Server: Google Frontend Via: 1.1 google Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-store Pragma: no-cache Expires: -1 x-powered-by: FALSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-11-01 16:52:27 UTC	651	IN	Data Raw: 35 31 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 Data Ascii: 515<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="robots" content="noindex,nofollow" /> <meta name="googlebot" content="noindex,nofollow" /> <meta name="googlebot-news" content="noindex,nofollow" /> <me
2024-11-01 16:52:27 UTC	657	IN	Data Raw: 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 27 61 63 74 69 76 65 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 2e 68 75 62 49 64 20 3d 20 43 6f 6f 6b 69 65 73 2e 67 65 74 28 27 68 75 62 49 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 2e 7a 65 6e 49 64 20 3d 20 43 6f 6f 6b 69 65 73 2e 67 65 74 28 27 7a 65 6e 49 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 2e 7a 65 6e 46 70 20 3d 20 43 6f 6f 6b 69 65 73 2e 67 65 74 28 27 7a 65 6e 46 70 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 27 61 63 74 69 76 65 27 29 3b 0a 20 20 20 20 20 20 Data Ascii: window.localStorage.setItem('active', true); values.hubId = Cookies.get('hubId'); values.zenId = Cookies.get('zenId'); values.zenFp = Cookies.get('zenFp'); window.localStorage.removeItem('active');
2024-11-01 16:52:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49845	3.160.150.35	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:27 UTC	1441	OUT	GET /pkg/1.0.0/web/IIG_external_libs/wdcusprem/13700/onsite/generic1715176030848.js HTTP/1.1 Host: mdl-medallia-digital.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_tslv=1730479942827; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_fasts=1730479944066; s_cc=true
2024-11-01 16:52:27 UTC	1634	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 363620 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Allow-Private-Network: true Cache-Control: public, max-age=31536000 Content-Security-Policy: frame-ancestors .vanguard.com .vanguard.com:* http://.vanguard.com http://.vanguard.com:* .vanguard .medallia.com .vanguard.ca: .vanguard.ca .vanguard.com.au .vanguard.com.au: .de.vanguard .de.vanguard:* https://devthevanguardgroup.sharepoint.com https://thevanguardgroup.sharepoint.com https://sdethevanguardgroup.sharepoint.com .kampyle.com .vtseng.com .vtstest.com https://www.vanguardadvisorsolutions.com https://qa.tradewebretail.com/ .vanguardmexico.com .tradewebretail.com .vanguardsouthamerica.com .vanguardinvestor.co.uk https://.vanguard.co.uk https://.de.vanguard https://.ch.vanguard https://.fr.vanguard https://.nl.vanguard https://.it.vanguard https://.ie.vanguard https://teams.microsoft.com; Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Resource-Policy: cross-origin Date: Fri, 01 Nov 2024 16:52:27 GMT ETag: W/"58c64-19268f60a80" Last-Modified: Mon, 07 Oct 2024 21:50:08 GMT Server: Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: off X-Download-Options: noopen X-XSS-Protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 134eef7df83fe066fda8a86e722c33dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 X-Amz-Cf-Id: BBR-w9gBLpMumMJT2dZg4i9_rpYIgEJS6LqNTcO2ukoiOtfjaR9f0w==
2024-11-01 16:52:27 UTC	14750	IN	Data Raw: 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 4d 44 49 47 49 54 41 4c 3d 77 69 6e 64 6f 77 2e 4d 44 49 47 49 54 41 4c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 44 49 47 49 54 41 4c 2e 76 65 72 73 69 6f 6e 3d 27 32 2e 35 34 2e 31 27 3b 7d 29 28 77 69 6e 64 6f 77 29 3b 77 69 6e 64 6f 77 2e 4b 41 4d 50 59 4c 45 5f 43 4f 4e 53 54 41 4e 54 3d 7b 50 4c 41 43 45 48 4f 4c 44 45 52 53 3a 7b 55 52 4c 5f 50 52 45 46 49 58 3a 27 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 64 69 67 69 74 61 6c 2d 63 6c 6f 75 64 2d 70 72 65 6d 2e 6d 65 64 61 6c 6c 69 61 2e 63 6f 6d 2f 27 2c 43 4f 4f 4c 41 44 41 54 41 5f 53 52 43 5f 50 52 45 46 49 58 3a 27 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 64 69 67 69 74 61 6c 2d 63 6c 6f 75 64 Data Ascii: (function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.54.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud
2024-11-01 16:52:27 UTC	8220	IN	Data Raw: 6c 2c 22 32 31 44 43 52 33 5f 4d 50 43 33 38 36 36 5f 65 78 70 6f 73 65 56 65 72 62 61 74 69 6d 51 75 65 73 74 69 6f 6e 73 49 6e 43 75 73 74 6f 6d 45 76 65 6e 74 22 3a 6e 75 6c 6c 2c 22 32 33 64 63 72 33 5f 4d 50 43 37 30 39 38 5f 65 6e 61 62 6c 65 46 6f 72 6d 32 47 61 70 53 70 61 63 69 6e 67 22 3a 6e 75 6c 6c 2c 22 32 30 64 63 72 34 5f 4d 50 43 32 39 35 32 5f 65 6e 61 62 6c 65 5f 65 78 65 6d 70 74 46 6f 72 6d 73 46 72 6f 6d 51 75 61 72 61 6e 74 69 6e 65 22 3a 74 72 75 65 2c 22 32 31 64 63 72 31 5f 4d 50 43 33 31 39 39 5f 41 64 64 69 74 69 6f 6e 61 6c 42 75 74 74 6f 6e 53 74 79 6c 65 73 22 3a 74 72 75 65 2c 22 32 32 64 63 72 32 5f 4d 50 43 34 32 37 37 5f 75 73 65 44 65 63 69 62 65 6c 54 72 69 67 67 65 72 73 22 3a 6e 75 6c 6c 2c 22 32 33 64 63 72 32 5f 4d Data Ascii: l,"21DCR3_MPC3866_exposeVerbatimQuestionsInCustomEvent":null,"23dcr3_MPC7098_enableForm2GapSpacing":null,"20dcr4_MPC2952_enable_exemptFormsFromQuarantine":true,"21dcr1_MPC3199_AdditionalButtonStyles":true,"22dcr2_MPC4277_useDecibelTriggers":null,"23dcr2_M
2024-11-01 16:52:27 UTC	8351	IN	Data Raw: 41 6e 79 4f 74 68 65 72 46 6f 72 6d 41 6c 72 65 61 64 79 53 68 6f 77 6e 28 66 6f 72 6d 49 64 29 3b 76 61 72 20 69 73 46 6f 72 6d 53 68 6f 77 6e 3d 4d 44 49 47 49 54 41 4c 2e 46 4f 52 4d 5f 53 54 41 54 45 2e 69 73 46 6f 72 6d 53 68 6f 77 6e 28 66 6f 72 6d 49 64 29 3b 69 66 28 73 68 6f 75 6c 64 53 6b 69 70 53 68 6f 77 69 6e 67 46 6f 72 6d 29 7b 4b 41 4d 50 59 4c 45 5f 45 56 45 4e 54 5f 44 49 53 50 41 54 43 48 45 52 2e 74 72 69 67 67 65 72 28 27 6e 65 62 5f 66 6f 72 6d 52 65 61 64 79 27 2c 7b 66 6f 72 6d 49 64 3a 66 6f 72 6d 49 64 7d 29 3b 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 73 65 74 46 6f 72 6d 53 74 61 74 65 28 66 6f 72 6d 49 64 2c 7b 73 68 6f 75 6c 64 42 65 53 68 6f 77 6e 3a 66 61 6c 73 65 7d 29 3b 4b 41 4d 50 59 4c 45 5f 45 56 45 4e 54 5f 44 49 53 50 Data Ascii: AnyOtherFormAlreadyShown(formId);var isFormShown=MDIGITAL.FORM_STATE.isFormShown(formId);if(shouldSkipShowingForm){KAMPYLE_EVENT_DISPATCHER.trigger('neb_formReady',{formId:formId});KAMPYLE_DATA.setFormState(formId,{shouldBeShown:false});KAMPYLE_EVENT_DISP
2024-11-01 16:52:28 UTC	12042	IN	Data Raw: 29 3b 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 73 65 74 44 61 74 61 28 27 6b 61 6d 70 79 6c 65 53 65 73 73 69 6f 6e 50 61 67 65 43 6f 75 6e 74 65 72 27 2c 30 29 3b 61 64 64 54 6f 53 65 73 73 69 6f 6e 43 6f 75 6e 74 28 29 3b 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 64 65 6c 65 74 65 44 61 74 61 28 27 6b 61 6d 70 79 6c 65 55 73 65 72 50 65 72 63 65 6e 74 69 6c 65 27 29 3b 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 64 65 6c 65 74 65 44 61 74 61 28 27 6b 61 6d 70 79 6c 65 49 6e 76 69 74 65 50 72 65 73 65 6e 74 65 64 27 29 3b 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 64 65 6c 65 74 65 44 61 74 61 28 4b 41 4d 50 59 4c 45 5f 43 4f 4e 53 54 41 4e 54 2e 53 45 53 53 49 4f 4e 5f 44 41 54 41 5f 46 49 45 4c 44 53 2e 49 53 5f 53 55 52 56 45 59 5f 53 55 42 4d 49 54 54 45 44 5f 49 Data Ascii: );KAMPYLE_DATA.setData('kampyleSessionPageCounter',0);addToSessionCount();KAMPYLE_DATA.deleteData('kampyleUserPercentile');KAMPYLE_DATA.deleteData('kampyleInvitePresented');KAMPYLE_DATA.deleteData(KAMPYLE_CONSTANT.SESSION_DATA_FIELDS.IS_SURVEY_SUBMITTED_I
2024-11-01 16:52:28 UTC	13291	IN	Data Raw: 41 2e 67 65 74 4d 65 6d 6f 72 79 44 61 74 61 28 27 63 6f 6e 74 65 78 74 27 29 3d 3d 3d 27 70 72 65 76 69 65 77 27 29 7b 77 69 6e 64 6f 77 2e 63 6c 6f 73 65 28 29 3b 7d 0a 66 69 6e 69 73 68 46 6f 72 6d 43 6c 6f 73 65 64 28 64 61 74 61 2e 66 6f 72 6d 49 64 29 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 69 6e 69 73 68 46 6f 72 6d 43 6c 6f 73 65 64 28 66 6f 72 6d 49 64 29 7b 76 61 72 20 62 75 74 74 6f 6e 46 6f 72 6d 49 64 3d 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 67 65 74 4d 65 6d 6f 72 79 44 61 74 61 28 27 62 75 74 74 6f 6e 46 6f 72 6d 49 64 27 29 3b 76 61 72 20 66 6f 72 6d 44 61 74 61 3d 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 67 65 74 46 6f 72 6d 44 61 74 61 28 62 75 74 74 6f 6e 46 6f 72 6d 49 64 29 3b 76 61 72 20 64 65 6c 61 79 3d 4b 41 4d 50 59 4c 45 5f 44 Data Ascii: A.getMemoryData('context')==='preview'){window.close();}finishFormClosed(data.formId);}}function finishFormClosed(formId){var buttonFormId=KAMPYLE_DATA.getMemoryData('buttonFormId');var formData=KAMPYLE_DATA.getFormData(buttonFormId);var delay=KAMPYLE_D
2024-11-01 16:52:28 UTC	7435	IN	Data Raw: 4f 56 49 53 49 4f 4e 53 2e 45 58 50 4f 53 45 5f 56 45 52 42 41 54 49 4d 5f 51 55 45 53 54 49 4f 4e 53 29 7d 0a 72 65 74 75 72 6e 7b 69 6e 63 72 65 61 73 65 50 61 67 65 56 69 65 77 43 6f 75 6e 74 65 72 3a 69 6e 63 72 65 61 73 65 50 61 67 65 56 69 65 77 43 6f 75 6e 74 65 72 2c 73 75 62 73 63 72 69 62 65 54 6f 43 75 73 74 6f 6d 45 76 65 6e 74 73 3a 73 75 62 73 63 72 69 62 65 54 6f 43 75 73 74 6f 6d 45 76 65 6e 74 73 2c 73 75 62 73 63 72 69 62 65 54 6f 50 61 67 65 45 76 65 6e 74 73 3a 73 75 62 73 63 72 69 62 65 54 6f 50 61 67 65 45 76 65 6e 74 73 2c 63 72 65 61 74 65 53 65 73 73 69 6f 6e 3a 63 72 65 61 74 65 53 65 73 73 69 6f 6e 2c 75 70 64 61 74 65 54 61 72 67 65 74 69 6e 67 3a 75 70 64 61 74 65 54 61 72 67 65 74 69 6e 67 2c 63 68 65 63 6b 50 72 6f 76 69 73 Data Ascii: OVISIONS.EXPOSE_VERBATIM_QUESTIONS)}return{increasePageViewCounter:increasePageViewCounter,subscribeToCustomEvents:subscribeToCustomEvents,subscribeToPageEvents:subscribeToPageEvents,createSession:createSession,updateTargeting:updateTargeting,checkProvis
2024-11-01 16:52:28 UTC	16384	IN	Data Raw: 67 65 74 41 6c 6c 46 6f 72 6d 73 28 29 3b 76 61 72 20 6c 65 6e 3d 61 6c 6c 46 6f 72 6d 73 2e 6c 65 6e 67 74 68 2c 63 75 72 72 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6c 65 6e 3b 69 2b 2b 29 7b 63 75 72 72 3d 61 6c 6c 46 6f 72 6d 73 5b 69 5d 3b 69 66 28 70 61 72 73 65 49 6e 74 28 66 6f 72 6d 49 64 29 3d 3d 3d 70 61 72 73 65 49 6e 74 28 63 75 72 72 2e 66 6f 72 6d 49 64 29 29 7b 72 65 74 75 72 6e 20 63 75 72 72 3b 7d 7d 0a 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 4d 65 6d 6f 72 79 28 29 7b 72 65 74 75 72 6e 20 5f 6d 65 6d 6f 72 79 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 46 6f 72 6d 53 74 61 74 65 28 66 6f 72 6d 49 64 29 7b 66 6f 72 6d 49 64 3d 66 6f 72 6d 49 64 7c 7c 27 27 3b 72 65 74 75 72 6e 20 67 65 74 4d 65 Data Ascii: getAllForms();var len=allForms.length,curr;for(var i=0;i<len;i++){curr=allForms[i];if(parseInt(formId)===parseInt(curr.formId)){return curr;}}return null;}function getMemory(){return _memory;}function getFormState(formId){formId=formId\|\|'';return getMe
2024-11-01 16:52:28 UTC	16384	IN	Data Raw: 4c 45 5f 45 56 45 4e 54 5f 44 49 53 50 41 54 43 48 45 52 2e 74 72 69 67 67 65 72 28 4b 41 4d 50 59 4c 45 5f 43 4f 4e 53 54 41 4e 54 2e 45 56 45 4e 54 53 2e 4d 44 49 47 49 54 41 4c 5f 54 41 52 47 45 54 49 4e 47 5f 52 55 4c 45 5f 45 56 41 4c 55 41 54 45 44 2c 7b 66 6f 72 6d 49 64 3a 66 6f 72 6d 44 61 74 61 2e 66 6f 72 6d 49 64 2c 74 61 72 67 65 74 69 6e 67 52 75 6c 65 3a 27 75 62 74 46 61 69 6c 65 64 27 2c 66 6f 72 6d 54 72 69 67 67 65 72 54 79 70 65 3a 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 67 65 74 46 6f 72 6d 54 72 69 67 67 65 72 54 79 70 65 28 66 6f 72 6d 44 61 74 61 2e 66 6f 72 6d 49 64 29 2c 74 61 72 67 65 74 69 6e 67 50 68 61 73 65 3a 4b 41 4d 50 59 4c 45 5f 43 4f 4e 53 54 41 4e 54 2e 54 41 52 47 45 54 49 4e 47 5f 50 48 41 53 45 53 2e 50 41 47 45 5f Data Ascii: LE_EVENT_DISPATCHER.trigger(KAMPYLE_CONSTANT.EVENTS.MDIGITAL_TARGETING_RULE_EVALUATED,{formId:formData.formId,targetingRule:'ubtFailed',formTriggerType:KAMPYLE_DATA.getFormTriggerType(formData.formId),targetingPhase:KAMPYLE_CONSTANT.TARGETING_PHASES.PAGE_
2024-11-01 16:52:28 UTC	16384	IN	Data Raw: 41 4d 50 59 4c 45 5f 44 41 54 41 2e 73 65 74 4d 65 6d 6f 72 79 44 61 74 61 28 27 74 61 72 67 65 74 69 6e 67 53 74 61 74 65 2e 6b 61 6d 70 79 6c 65 50 61 67 65 45 6c 65 6d 65 6e 74 45 76 65 6e 74 27 2c 74 72 75 65 29 3b 4b 41 4d 50 59 4c 45 5f 45 56 45 4e 54 5f 44 49 53 50 41 54 43 48 45 52 2e 74 72 69 67 67 65 72 28 4b 41 4d 50 59 4c 45 5f 43 4f 4e 53 54 41 4e 54 2e 45 56 45 4e 54 53 2e 4d 44 49 47 49 54 41 4c 5f 54 41 52 47 45 54 49 4e 47 5f 52 55 4c 45 5f 45 56 41 4c 55 41 54 45 44 2c 7b 66 6f 72 6d 49 64 3a 66 6f 72 6d 44 61 74 61 2e 66 6f 72 6d 49 64 2c 74 61 72 67 65 74 69 6e 67 52 75 6c 65 3a 27 50 61 67 65 45 6c 65 6d 65 6e 74 27 2c 66 6f 72 6d 54 72 69 67 67 65 72 54 79 70 65 3a 4b 41 4d 50 59 4c 45 5f 44 41 54 41 2e 67 65 74 46 6f 72 6d 54 72 69 Data Ascii: AMPYLE_DATA.setMemoryData('targetingState.kampylePageElementEvent',true);KAMPYLE_EVENT_DISPATCHER.trigger(KAMPYLE_CONSTANT.EVENTS.MDIGITAL_TARGETING_RULE_EVALUATED,{formId:formData.formId,targetingRule:'PageElement',formTriggerType:KAMPYLE_DATA.getFormTri
2024-11-01 16:52:28 UTC	8949	IN	Data Raw: 67 68 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 4d 61 74 68 2e 6d 61 78 28 30 2c 28 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2d 70 61 72 73 65 49 6e 74 28 66 6f 72 6d 48 65 69 67 68 74 2c 31 30 29 29 2f 32 29 29 29 2b 27 70 78 27 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 44 69 73 70 6c 61 79 44 69 72 65 63 74 69 6f 6e 28 66 6f 72 6d 44 61 74 61 29 7b 66 6f 72 6d 44 61 74 61 3d 66 6f 72 6d 44 61 74 61 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 4b 41 4d 50 59 4c 45 5f 55 54 49 4c 53 2e 67 65 74 4e 65 73 74 65 64 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 66 6f 72 6d 44 61 74 61 2c 27 66 6f 72 6d 44 69 73 70 6c 61 79 2e 64 69 73 70 6c 61 79 44 69 72 65 63 74 69 6f 6e 27 29 7c 7c 44 45 46 41 55 4c 54 53 2e 41 4e 49 4d 41 54 49 4f 4e 5f 44 Data Ascii: ght){return String(Math.max(0,((window.innerHeight-parseInt(formHeight,10))/2)))+'px';}function getDisplayDirection(formData){formData=formData\|\|{};return KAMPYLE_UTILS.getNestedPropertyValue(formData,'formDisplay.displayDirection')\|\|DEFAULTS.ANIMATION_D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49846	146.75.117.230	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:27 UTC	629	OUT	GET /wdcusprem/13700/onsite/onsiteData.json HTTP/1.1 Host: resources.digital-cloud-prem.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:28 UTC	891	IN	HTTP/1.1 200 OK Connection: close Content-Length: 531788 x-amz-id-2: gQbXFCjOmVKJXEQl0kecpoxAtvShF2+dD0TPncuRqARzUa1gY0FbQqgMAP/Thu1TbZMaM0OdMR4= x-amz-request-id: J71KBJAY726451NN Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 30 Oct 2024 14:10:18 GMT ETag: "46b351d9e6f367f5091e777066ca1ad1" x-amz-server-side-encryption: AES256 x-amz-version-id: XY1ufadS9sLKnOrEgg94XwvWXwmsQCJs Content-Type: application/json Server: AmazonS3 Access-Control-Allow-Origin: * Cache-Control: max-age=0,must-revalidate Accept-Ranges: bytes Age: 1 Date: Fri, 01 Nov 2024 16:52:28 GMT Via: 1.1 varnish X-Served-By: cache-fra-eddf8230046-FRA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1730479947.193664,VS0,VE1276 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-11-01 16:52:28 UTC	1378	IN	Data Raw: 7b 0a 20 20 22 73 62 74 53 65 72 76 65 72 44 6f 6d 61 69 6e 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 75 62 74 2d 6c 62 2e 64 69 67 69 74 61 6c 2d 63 6c 6f 75 64 2d 70 72 65 6d 2e 6d 65 64 61 6c 6c 69 61 2e 63 6f 6d 22 2c 0a 20 20 22 73 62 74 45 6e 76 50 72 65 66 69 78 22 20 3a 20 22 77 64 63 75 73 70 72 65 6d 5f 22 2c 0a 20 20 22 65 6e 64 55 73 65 72 49 64 65 6e 74 69 66 69 65 72 22 20 3a 20 7b 20 7d 2c 0a 20 20 22 66 6f 72 6d 4e 6f 64 65 73 22 20 3a 20 5b 20 7b 0a 20 20 20 20 22 66 6f 72 6d 49 64 22 20 3a 20 22 39 35 39 36 22 2c 0a 20 20 20 20 22 69 73 43 75 73 74 6f 6d 48 74 6d 6c 45 6e 61 62 6c 65 64 22 20 3a 20 22 66 61 6c 73 65 22 2c 0a 20 20 20 20 22 66 6f 72 6d 56 65 72 73 69 6f 6e 22 20 3a 20 22 32 22 2c 0a 20 20 20 20 22 66 6f 72 6d 48 74 6d 6c 55 Data Ascii: { "sbtServerDomain" : "https://ubt-lb.digital-cloud-prem.medallia.com", "sbtEnvPrefix" : "wdcusprem_", "endUserIdentifier" : { }, "formNodes" : [ { "formId" : "9596", "isCustomHtmlEnabled" : "false", "formVersion" : "2", "formHtmlU
2024-11-01 16:52:28 UTC	1378	IN	Data Raw: 3a 5c 22 31 34 34 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 73 70 6f 69 64 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 4e 75 6d 62 65 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 73 70 6f 69 64 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 32 30 31 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 Data Ascii: :\"144\",\"unique_name\":\"spoid\",\"type\":\"Number\",\"source\":\"Var\",\"source_name\":\"spoid\",\"is_identifier\":\"false\"}, {\"id\":\"201\",\"unique_name\":\"navigator.userAgent\",\"type\":\"Text\",\"source\":\"Var\",\"source_name\":\"navigator.user
2024-11-01 16:52:28 UTC	1378	IN	Data Raw: 5c 22 69 64 5c 22 3a 5c 22 31 30 39 37 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 72 65 62 61 6c 43 61 6e 63 65 6c 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 42 6f 6f 6c 65 61 6e 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 72 65 62 61 6c 43 61 6e 63 65 6c 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 5d 22 2c 0a 20 20 20 20 22 66 6f 72 6d 54 79 70 65 22 20 3a 20 22 69 6e 76 69 74 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 66 6f 72 6d 44 69 73 70 6c 61 79 22 20 3a 20 7b 0a 20 20 20 20 20 20 22 64 69 73 70 6c 61 79 54 79 70 65 22 20 3a 20 22 6c 69 67 68 74 62 6f 78 22 2c 0a 20 20 20 20 20 20 22 64 69 73 70 6c 61 79 44 69 Data Ascii: \"id\":\"1097\",\"unique_name\":\"rebalCancel\",\"type\":\"Boolean\",\"source\":\"Var\",\"source_name\":\"rebalCancel\",\"is_identifier\":\"false\"}]", "formType" : "invitation", "formDisplay" : { "displayType" : "lightbox", "displayDi
2024-11-01 16:52:28 UTC	1378	IN	Data Raw: 6d 65 5c 22 3a 5c 22 68 75 62 53 68 6f 77 42 69 53 75 72 76 65 79 5c 22 2c 5c 22 66 69 65 6c 64 54 79 70 65 5c 22 3a 5c 22 42 6f 6f 6c 65 61 6e 5c 22 2c 5c 22 66 69 65 6c 64 4f 72 69 67 69 6e 5c 22 3a 5c 22 63 75 73 74 6f 6d 50 61 72 61 6d 5c 22 7d 5d 7d 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 75 72 6c 52 75 6c 65 73 22 20 3a 20 7b 0a 20 20 20 20 20 20 22 65 78 63 6c 75 73 69 6f 6e 55 72 6c 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 22 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 22 69 6e 63 6c 75 73 69 6f 6e 55 72 6c 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 69 6e 73 74 69 74 75 74 69 6f 6e 61 6c 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 63 6f 6e 73 75 6c 74 61 6e 74 Data Ascii: me\":\"hubShowBiSurvey\",\"fieldType\":\"Boolean\",\"fieldOrigin\":\"customParam\"}]}" }, "urlRules" : { "exclusionUrl" : { "rule" : "" }, "inclusionUrl" : { "rule" : "https://institutional.vanguard.com/consultant
2024-11-01 16:52:28 UTC	1378	IN	Data Raw: 20 20 20 20 22 76 65 72 73 69 6f 6e 65 64 52 65 73 6f 75 72 63 65 73 55 72 6c 22 20 3a 20 22 2f 2a 2a 2a 2a 4f 4e 50 52 45 4d 5f 55 52 4c 5f 50 52 45 46 49 58 2a 2a 2a 2a 2f 2f 6c 69 76 65 41 70 70 2f 32 2e 35 34 2e 35 22 2c 0a 20 20 20 20 22 66 75 6e 63 74 69 6f 6e 46 69 6c 65 55 72 6c 22 20 3a 20 22 22 2c 0a 20 20 20 20 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 22 20 3a 20 22 5b 7b 5c 22 69 64 5c 22 3a 5c 22 31 34 34 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 73 70 6f 69 64 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 4e 75 6d 62 65 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 73 70 6f 69 64 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 Data Ascii: "versionedResourcesUrl" : "/**ONPREM_URL_PREFIX**//liveApp/2.54.5", "functionFileUrl" : "", "customParams" : "[{\"id\":\"144\",\"unique_name\":\"spoid\",\"type\":\"Number\",\"source\":\"Var\",\"source_name\":\"spoid\",\"is_identifier\":\"f
2024-11-01 16:52:28 UTC	1378	IN	Data Raw: 6e 61 6d 65 5c 22 3a 5c 22 68 75 62 53 68 6f 77 42 69 53 75 72 76 65 79 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 42 6f 6f 6c 65 61 6e 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 68 75 62 53 68 6f 77 42 69 53 75 72 76 65 79 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 31 30 39 37 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 72 65 62 61 6c 43 61 6e 63 65 6c 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 42 6f 6f 6c 65 61 6e 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 72 65 62 61 6c 43 61 6e 63 65 6c 5c 22 2c 5c Data Ascii: name\":\"hubShowBiSurvey\",\"type\":\"Boolean\",\"source\":\"Var\",\"source_name\":\"hubShowBiSurvey\",\"is_identifier\":\"false\"}, {\"id\":\"1097\",\"unique_name\":\"rebalCancel\",\"type\":\"Boolean\",\"source\":\"Var\",\"source_name\":\"rebalCancel\",\
2024-11-01 16:52:28 UTC	1378	IN	Data Raw: 5c 22 66 69 65 6c 64 49 64 5c 22 3a 31 30 38 34 2c 5c 22 66 6f 72 6d 4e 61 6d 65 5c 22 3a 5c 22 43 48 5f 54 45 53 54 5f 42 49 5f 43 6f 6e 73 75 6c 74 61 6e 74 5f 48 75 62 5f 41 63 74 69 6f 6e 5c 22 2c 5c 22 75 6e 69 71 75 65 49 64 5c 22 3a 5c 22 63 75 73 74 6f 6d 50 61 72 61 6d 31 30 38 34 5c 22 2c 5c 22 63 6f 6e 64 69 74 69 6f 6e 5c 22 3a 5c 22 65 71 75 61 6c 73 5c 22 2c 5c 22 66 69 65 6c 64 4e 61 6d 65 5c 22 3a 5c 22 68 75 62 53 68 6f 77 42 69 53 75 72 76 65 79 5c 22 2c 5c 22 66 69 65 6c 64 54 79 70 65 5c 22 3a 5c 22 42 6f 6f 6c 65 61 6e 5c 22 2c 5c 22 66 69 65 6c 64 4f 72 69 67 69 6e 5c 22 3a 5c 22 63 75 73 74 6f 6d 50 61 72 61 6d 5c 22 7d 5d 7d 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 75 72 6c 52 75 6c 65 73 22 20 3a 20 7b 0a 20 20 20 20 20 20 22 65 Data Ascii: \"fieldId\":1084,\"formName\":\"CH_TEST_BI_Consultant_Hub_Action\",\"uniqueId\":\"customParam1084\",\"condition\":\"equals\",\"fieldName\":\"hubShowBiSurvey\",\"fieldType\":\"Boolean\",\"fieldOrigin\":\"customParam\"}]}" }, "urlRules" : { "e
2024-11-01 16:52:28 UTC	1378	IN	Data Raw: 3a 20 22 65 6e 22 2c 0a 20 20 20 20 20 20 22 75 73 65 43 75 73 74 6f 6d 50 61 72 61 6d 22 20 3a 20 22 66 61 6c 73 65 22 2c 0a 20 20 20 20 20 20 22 63 75 73 74 6f 6d 50 61 72 61 6d 22 20 3a 20 22 6e 75 6c 6c 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 66 6f 72 6d 4a 73 6f 6e 52 65 6c 61 74 69 76 65 50 61 74 68 22 20 3a 20 22 77 64 63 75 73 70 72 65 6d 2f 31 33 37 30 30 2f 66 6f 72 6d 73 2f 36 30 33 36 2f 66 6f 72 6d 44 61 74 61 31 37 32 39 38 36 35 37 34 34 31 34 36 5f 23 23 23 4c 41 4e 47 55 41 47 45 5f 43 4f 44 45 23 23 23 2e 6a 73 6f 6e 22 2c 0a 20 20 20 20 22 66 6f 72 6d 4a 73 6f 6e 56 32 52 65 6c 61 74 69 76 65 50 61 74 68 22 20 3a 20 22 77 64 63 75 73 70 72 65 6d 2f 31 33 37 30 30 2f 66 6f 72 6d 73 2f 36 30 33 36 2f 66 6f 72 6d 44 61 74 61 56 32 5f 31 Data Ascii: : "en", "useCustomParam" : "false", "customParam" : "null" }, "formJsonRelativePath" : "wdcusprem/13700/forms/6036/formData1729865744146_###LANGUAGE_CODE###.json", "formJsonV2RelativePath" : "wdcusprem/13700/forms/6036/formDataV2_1
2024-11-01 16:52:28 UTC	1378	IN	Data Raw: 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 70 61 67 65 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 64 61 74 61 4c 61 79 65 72 2e 31 2e 70 61 67 65 2e 70 61 67 65 4e 61 6d 65 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 38 39 39 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 70 6c 61 74 66 6f 72 6d 4e 61 6d 65 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 64 61 74 61 4c 61 79 65 72 2e 30 2e Data Ascii: ,\"unique_name\":\"page\",\"type\":\"Text\",\"source\":\"Var\",\"source_name\":\"dataLayer.1.page.pageName\",\"is_identifier\":\"false\"}, {\"id\":\"899\",\"unique_name\":\"platformName\",\"type\":\"Text\",\"source\":\"Var\",\"source_name\":\"dataLayer.0.
2024-11-01 16:52:28 UTC	1378	IN	Data Raw: 4f 4e 50 52 45 4d 5f 55 52 4c 5f 50 52 45 46 49 58 2a 2a 2a 2a 2f 2f 6c 69 76 65 41 70 70 2f 32 2e 35 34 2e 35 2f 72 65 61 63 74 2d 69 6e 76 69 74 65 2d 61 70 70 2d 77 65 62 2e 68 74 6d 6c 22 2c 0a 20 20 20 20 20 20 22 69 6e 76 69 74 65 48 65 69 67 68 74 22 20 3a 20 22 34 30 30 22 2c 0a 20 20 20 20 20 20 22 69 6e 76 69 74 65 57 69 64 74 68 22 20 3a 20 22 37 30 30 22 2c 0a 20 20 20 20 20 20 22 73 6b 69 70 49 6e 76 69 74 61 74 69 6f 6e 22 20 3a 20 22 74 72 75 65 22 2c 0a 20 20 20 20 20 20 22 69 6e 76 69 74 61 74 69 6f 6e 50 6f 73 69 74 69 6f 6e 22 20 3a 20 22 74 6f 70 22 2c 0a 20 20 20 20 20 20 22 69 6e 76 69 74 65 44 61 74 61 55 72 6c 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 64 69 67 69 74 61 6c 2d 63 6c 6f 75 64 2d 70 72 65 6d Data Ascii: ONPREM_URL_PREFIX****//liveApp/2.54.5/react-invite-app-web.html", "inviteHeight" : "400", "inviteWidth" : "700", "skipInvitation" : "true", "invitationPosition" : "top", "inviteDataUrl" : "https://resources.digital-cloud-prem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49848	63.140.62.17	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:27 UTC	1952	OUT	GET /b/ss/vanguardpeprodlaunch/1/JS-2.23.0-LEWM/s93352462118844?AQB=1&ndh=1&pf=1&t=1%2F10%2F2024%2012%3A52%3A24%205%20240&sdid=247944E3FF11DE52-4A0A27777F0FE879&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&g=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&r=http%3A%2F%2Fwww.vanguard.com%2F&c.&getVisitNum=4.2.1&endOfDatePeriod=1.2&getPreviousValue=3.0.1&getTimeSinceLastVisit=2.0&.c&cc=USD&ch=pe%3Aweb&server=ownyourfuture.vanguard.com&events=event284&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&h1=home%3Ahome&v4=mcmid%7C86591681061654023263392632422581144886&c5=unknown&v5=unknown&c8=logged%20out&v8=logged%20out&v13=fri%2C%201%20nov%202024%2012%3A52%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=D%3Dv18&v18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&c21=www.vanguard.com&c26=D%3Dv26&c30=home&c31=D%3Dg&v36=1&c38=home&c39=home&v39=home&c42=1.0.0&v42=1.0.0&c44=pageLoaded%2Cu [TRUNCATED] Host: vanguard.d2.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:27 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 01 Nov 2024 16:52:27 GMT expires: Thu, 31 Oct 2024 16:52:27 GMT last-modified: Sat, 02 Nov 2024 16:52:27 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3716177391109439488-4618675440516375700 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-11-01 16:52:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49849	35.241.45.82	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:29 UTC	682	OUT	POST /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive Content-Length: 2092 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:29 UTC	2092	OUT	Data Raw: 64 61 74 61 3d 25 37 42 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 32 30 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 73 65 73 73 69 6f 6e 5f 73 63 72 65 65 6e 5f 73 69 7a 65 25 32 32 25 33 41 25 32 30 25 32 32 31 32 38 30 78 31 30 32 34 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 64 75 61 25 32 32 25 33 41 25 32 30 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 53 Data Ascii: data=%7B%22events%22%3A%20%5B%0A%20%20%20%20%7B%22session_screen_size%22%3A%20%221280x1024%22%2C%22session_dua%22%3A%20%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20S
2024-11-01 16:52:30 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:30 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ownyourfuture.vanguard.com Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-wb49 X-Application-Context: application:9090 Content-Type: text/plain;charset=ISO-8859-1 Content-Length: 59 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close
2024-11-01 16:52:30 UTC	59	IN	Data Raw: 7b 22 65 76 65 6e 74 73 5f 63 6f 75 6e 74 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 22 2c 22 72 65 73 75 6c 74 73 22 3a 7b 7d 2c 22 73 74 61 74 75 73 22 3a 74 72 75 65 7d Data Ascii: {"events_count":1,"version":"5","results":{},"status":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49850	35.241.45.82	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:30 UTC	2366	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 [TRUNCATED] Host: udc-neb.kampyle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:30 UTC	521	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:30 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-blue-pj1q X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	49851	146.75.117.230	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:30 UTC	403	OUT	GET /wdcusprem/13700/onsite/onsiteData.json HTTP/1.1 Host: resources.digital-cloud-prem.medallia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:31 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 531788 x-amz-id-2: QoV2RRhOibKCtGopP+jCG+SieYzdh1xX7bo+FFWXclbH0sideubmMR0lOehAqwzDYp7LyuK4t9Q= x-amz-request-id: 74H5MZ7V43EVQXRS Last-Modified: Wed, 30 Oct 2024 14:10:18 GMT ETag: "46b351d9e6f367f5091e777066ca1ad1" x-amz-server-side-encryption: AES256 x-amz-version-id: XY1ufadS9sLKnOrEgg94XwvWXwmsQCJs Content-Type: application/json Server: AmazonS3 Access-Control-Allow-Origin: * Cache-Control: max-age=0,must-revalidate Accept-Ranges: bytes Age: 1 Date: Fri, 01 Nov 2024 16:52:31 GMT Via: 1.1 varnish X-Served-By: cache-fra-eddf8230071-FRA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1730479950.380057,VS0,VE1251 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-11-01 16:52:31 UTC	1378	IN	Data Raw: 7b 0a 20 20 22 73 62 74 53 65 72 76 65 72 44 6f 6d 61 69 6e 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 75 62 74 2d 6c 62 2e 64 69 67 69 74 61 6c 2d 63 6c 6f 75 64 2d 70 72 65 6d 2e 6d 65 64 61 6c 6c 69 61 2e 63 6f 6d 22 2c 0a 20 20 22 73 62 74 45 6e 76 50 72 65 66 69 78 22 20 3a 20 22 77 64 63 75 73 70 72 65 6d 5f 22 2c 0a 20 20 22 65 6e 64 55 73 65 72 49 64 65 6e 74 69 66 69 65 72 22 20 3a 20 7b 20 7d 2c 0a 20 20 22 66 6f 72 6d 4e 6f 64 65 73 22 20 3a 20 5b 20 7b 0a 20 20 20 20 22 66 6f 72 6d 49 64 22 20 3a 20 22 39 35 39 36 22 2c 0a 20 20 20 20 22 69 73 43 75 73 74 6f 6d 48 74 6d 6c 45 6e 61 62 6c 65 64 22 20 3a 20 22 66 61 6c 73 65 22 2c 0a 20 20 20 20 22 66 6f 72 6d 56 65 72 73 69 6f 6e 22 20 3a 20 22 32 22 2c 0a 20 20 20 20 22 66 6f 72 6d 48 74 6d 6c 55 Data Ascii: { "sbtServerDomain" : "https://ubt-lb.digital-cloud-prem.medallia.com", "sbtEnvPrefix" : "wdcusprem_", "endUserIdentifier" : { }, "formNodes" : [ { "formId" : "9596", "isCustomHtmlEnabled" : "false", "formVersion" : "2", "formHtmlU
2024-11-01 16:52:31 UTC	1378	IN	Data Raw: 3a 5c 22 31 34 34 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 73 70 6f 69 64 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 4e 75 6d 62 65 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 73 70 6f 69 64 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 32 30 31 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 Data Ascii: :\"144\",\"unique_name\":\"spoid\",\"type\":\"Number\",\"source\":\"Var\",\"source_name\":\"spoid\",\"is_identifier\":\"false\"}, {\"id\":\"201\",\"unique_name\":\"navigator.userAgent\",\"type\":\"Text\",\"source\":\"Var\",\"source_name\":\"navigator.user
2024-11-01 16:52:31 UTC	1378	IN	Data Raw: 5c 22 69 64 5c 22 3a 5c 22 31 30 39 37 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 72 65 62 61 6c 43 61 6e 63 65 6c 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 42 6f 6f 6c 65 61 6e 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 72 65 62 61 6c 43 61 6e 63 65 6c 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 5d 22 2c 0a 20 20 20 20 22 66 6f 72 6d 54 79 70 65 22 20 3a 20 22 69 6e 76 69 74 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 66 6f 72 6d 44 69 73 70 6c 61 79 22 20 3a 20 7b 0a 20 20 20 20 20 20 22 64 69 73 70 6c 61 79 54 79 70 65 22 20 3a 20 22 6c 69 67 68 74 62 6f 78 22 2c 0a 20 20 20 20 20 20 22 64 69 73 70 6c 61 79 44 69 Data Ascii: \"id\":\"1097\",\"unique_name\":\"rebalCancel\",\"type\":\"Boolean\",\"source\":\"Var\",\"source_name\":\"rebalCancel\",\"is_identifier\":\"false\"}]", "formType" : "invitation", "formDisplay" : { "displayType" : "lightbox", "displayDi
2024-11-01 16:52:31 UTC	1378	IN	Data Raw: 6d 65 5c 22 3a 5c 22 68 75 62 53 68 6f 77 42 69 53 75 72 76 65 79 5c 22 2c 5c 22 66 69 65 6c 64 54 79 70 65 5c 22 3a 5c 22 42 6f 6f 6c 65 61 6e 5c 22 2c 5c 22 66 69 65 6c 64 4f 72 69 67 69 6e 5c 22 3a 5c 22 63 75 73 74 6f 6d 50 61 72 61 6d 5c 22 7d 5d 7d 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 75 72 6c 52 75 6c 65 73 22 20 3a 20 7b 0a 20 20 20 20 20 20 22 65 78 63 6c 75 73 69 6f 6e 55 72 6c 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 22 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 22 69 6e 63 6c 75 73 69 6f 6e 55 72 6c 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 69 6e 73 74 69 74 75 74 69 6f 6e 61 6c 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 63 6f 6e 73 75 6c 74 61 6e 74 Data Ascii: me\":\"hubShowBiSurvey\",\"fieldType\":\"Boolean\",\"fieldOrigin\":\"customParam\"}]}" }, "urlRules" : { "exclusionUrl" : { "rule" : "" }, "inclusionUrl" : { "rule" : "https://institutional.vanguard.com/consultant
2024-11-01 16:52:31 UTC	1378	IN	Data Raw: 20 20 20 20 22 76 65 72 73 69 6f 6e 65 64 52 65 73 6f 75 72 63 65 73 55 72 6c 22 20 3a 20 22 2f 2a 2a 2a 2a 4f 4e 50 52 45 4d 5f 55 52 4c 5f 50 52 45 46 49 58 2a 2a 2a 2a 2f 2f 6c 69 76 65 41 70 70 2f 32 2e 35 34 2e 35 22 2c 0a 20 20 20 20 22 66 75 6e 63 74 69 6f 6e 46 69 6c 65 55 72 6c 22 20 3a 20 22 22 2c 0a 20 20 20 20 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 22 20 3a 20 22 5b 7b 5c 22 69 64 5c 22 3a 5c 22 31 34 34 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 73 70 6f 69 64 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 4e 75 6d 62 65 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 73 70 6f 69 64 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 Data Ascii: "versionedResourcesUrl" : "/**ONPREM_URL_PREFIX**//liveApp/2.54.5", "functionFileUrl" : "", "customParams" : "[{\"id\":\"144\",\"unique_name\":\"spoid\",\"type\":\"Number\",\"source\":\"Var\",\"source_name\":\"spoid\",\"is_identifier\":\"f
2024-11-01 16:52:31 UTC	1378	IN	Data Raw: 6e 61 6d 65 5c 22 3a 5c 22 68 75 62 53 68 6f 77 42 69 53 75 72 76 65 79 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 42 6f 6f 6c 65 61 6e 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 68 75 62 53 68 6f 77 42 69 53 75 72 76 65 79 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 31 30 39 37 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 72 65 62 61 6c 43 61 6e 63 65 6c 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 42 6f 6f 6c 65 61 6e 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 72 65 62 61 6c 43 61 6e 63 65 6c 5c 22 2c 5c Data Ascii: name\":\"hubShowBiSurvey\",\"type\":\"Boolean\",\"source\":\"Var\",\"source_name\":\"hubShowBiSurvey\",\"is_identifier\":\"false\"}, {\"id\":\"1097\",\"unique_name\":\"rebalCancel\",\"type\":\"Boolean\",\"source\":\"Var\",\"source_name\":\"rebalCancel\",\
2024-11-01 16:52:31 UTC	1378	IN	Data Raw: 5c 22 66 69 65 6c 64 49 64 5c 22 3a 31 30 38 34 2c 5c 22 66 6f 72 6d 4e 61 6d 65 5c 22 3a 5c 22 43 48 5f 54 45 53 54 5f 42 49 5f 43 6f 6e 73 75 6c 74 61 6e 74 5f 48 75 62 5f 41 63 74 69 6f 6e 5c 22 2c 5c 22 75 6e 69 71 75 65 49 64 5c 22 3a 5c 22 63 75 73 74 6f 6d 50 61 72 61 6d 31 30 38 34 5c 22 2c 5c 22 63 6f 6e 64 69 74 69 6f 6e 5c 22 3a 5c 22 65 71 75 61 6c 73 5c 22 2c 5c 22 66 69 65 6c 64 4e 61 6d 65 5c 22 3a 5c 22 68 75 62 53 68 6f 77 42 69 53 75 72 76 65 79 5c 22 2c 5c 22 66 69 65 6c 64 54 79 70 65 5c 22 3a 5c 22 42 6f 6f 6c 65 61 6e 5c 22 2c 5c 22 66 69 65 6c 64 4f 72 69 67 69 6e 5c 22 3a 5c 22 63 75 73 74 6f 6d 50 61 72 61 6d 5c 22 7d 5d 7d 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 75 72 6c 52 75 6c 65 73 22 20 3a 20 7b 0a 20 20 20 20 20 20 22 65 Data Ascii: \"fieldId\":1084,\"formName\":\"CH_TEST_BI_Consultant_Hub_Action\",\"uniqueId\":\"customParam1084\",\"condition\":\"equals\",\"fieldName\":\"hubShowBiSurvey\",\"fieldType\":\"Boolean\",\"fieldOrigin\":\"customParam\"}]}" }, "urlRules" : { "e
2024-11-01 16:52:31 UTC	1378	IN	Data Raw: 3a 20 22 65 6e 22 2c 0a 20 20 20 20 20 20 22 75 73 65 43 75 73 74 6f 6d 50 61 72 61 6d 22 20 3a 20 22 66 61 6c 73 65 22 2c 0a 20 20 20 20 20 20 22 63 75 73 74 6f 6d 50 61 72 61 6d 22 20 3a 20 22 6e 75 6c 6c 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 66 6f 72 6d 4a 73 6f 6e 52 65 6c 61 74 69 76 65 50 61 74 68 22 20 3a 20 22 77 64 63 75 73 70 72 65 6d 2f 31 33 37 30 30 2f 66 6f 72 6d 73 2f 36 30 33 36 2f 66 6f 72 6d 44 61 74 61 31 37 32 39 38 36 35 37 34 34 31 34 36 5f 23 23 23 4c 41 4e 47 55 41 47 45 5f 43 4f 44 45 23 23 23 2e 6a 73 6f 6e 22 2c 0a 20 20 20 20 22 66 6f 72 6d 4a 73 6f 6e 56 32 52 65 6c 61 74 69 76 65 50 61 74 68 22 20 3a 20 22 77 64 63 75 73 70 72 65 6d 2f 31 33 37 30 30 2f 66 6f 72 6d 73 2f 36 30 33 36 2f 66 6f 72 6d 44 61 74 61 56 32 5f 31 Data Ascii: : "en", "useCustomParam" : "false", "customParam" : "null" }, "formJsonRelativePath" : "wdcusprem/13700/forms/6036/formData1729865744146_###LANGUAGE_CODE###.json", "formJsonV2RelativePath" : "wdcusprem/13700/forms/6036/formDataV2_1
2024-11-01 16:52:31 UTC	1378	IN	Data Raw: 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 70 61 67 65 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 64 61 74 61 4c 61 79 65 72 2e 31 2e 70 61 67 65 2e 70 61 67 65 4e 61 6d 65 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 38 39 39 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 70 6c 61 74 66 6f 72 6d 4e 61 6d 65 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 64 61 74 61 4c 61 79 65 72 2e 30 2e Data Ascii: ,\"unique_name\":\"page\",\"type\":\"Text\",\"source\":\"Var\",\"source_name\":\"dataLayer.1.page.pageName\",\"is_identifier\":\"false\"}, {\"id\":\"899\",\"unique_name\":\"platformName\",\"type\":\"Text\",\"source\":\"Var\",\"source_name\":\"dataLayer.0.
2024-11-01 16:52:31 UTC	1378	IN	Data Raw: 4f 4e 50 52 45 4d 5f 55 52 4c 5f 50 52 45 46 49 58 2a 2a 2a 2a 2f 2f 6c 69 76 65 41 70 70 2f 32 2e 35 34 2e 35 2f 72 65 61 63 74 2d 69 6e 76 69 74 65 2d 61 70 70 2d 77 65 62 2e 68 74 6d 6c 22 2c 0a 20 20 20 20 20 20 22 69 6e 76 69 74 65 48 65 69 67 68 74 22 20 3a 20 22 34 30 30 22 2c 0a 20 20 20 20 20 20 22 69 6e 76 69 74 65 57 69 64 74 68 22 20 3a 20 22 37 30 30 22 2c 0a 20 20 20 20 20 20 22 73 6b 69 70 49 6e 76 69 74 61 74 69 6f 6e 22 20 3a 20 22 74 72 75 65 22 2c 0a 20 20 20 20 20 20 22 69 6e 76 69 74 61 74 69 6f 6e 50 6f 73 69 74 69 6f 6e 22 20 3a 20 22 74 6f 70 22 2c 0a 20 20 20 20 20 20 22 69 6e 76 69 74 65 44 61 74 61 55 72 6c 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 64 69 67 69 74 61 6c 2d 63 6c 6f 75 64 2d 70 72 65 6d Data Ascii: ONPREM_URL_PREFIX****//liveApp/2.54.5/react-invite-app-web.html", "inviteHeight" : "400", "inviteWidth" : "700", "skipInvitation" : "true", "invitationPosition" : "top", "inviteDataUrl" : "https://resources.digital-cloud-prem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	49852	35.241.45.82	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:30 UTC	2120	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 [TRUNCATED] Host: udc-neb.kampyle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:31 UTC	521	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 16:52:30 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-blue-6hfj X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	49853	35.241.45.82	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:30 UTC	384	OUT	GET /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:31 UTC	537	IN	HTTP/1.1 400 Bad Request Date: Fri, 01 Nov 2024 16:52:30 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-8vvx X-Application-Context: application:9090 Content-Type: text/plain;charset=ISO-8859-1 Content-Length: 91 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close
2024-11-01 16:52:31 UTC	91	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 61 72 67 75 6d 65 6e 74 73 22 2c 22 65 76 65 6e 74 73 5f 63 6f 75 6e 74 22 3a 22 30 22 2c 22 72 65 73 75 6c 74 73 22 3a 7b 7d 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 22 2c 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"reason":"Invalid arguments","events_count":"0","results":{},"version":"5","status":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	49854	18.66.147.79	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:36 UTC	1938	OUT	GET /home/ulogin HTTP/1.1 Host: ownyourfuture.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; FPID=76bf4520-eb3c-4c5f-bcbd-bd33b82a35bc; ADRUM_BT=R:0\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735340\|e:5\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; [TRUNCATED]
2024-11-01 16:52:37 UTC	756	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=utf-8 Content-Length: 126 Connection: close Date: Fri, 01 Nov 2024 16:52:37 GMT Location: https://logon.vanguard.com/logon?site=iig Server: Set-Cookie: ADRUM_BT=R:51\|i:449826\|g:e5bdd47a-875d-4491-9164-fbd534792c05735454\|e:2\|n:vanguard_58016838-26e7-4717-b96d-b575db0eceb6; expires=Fri, 01 Nov 2024 16:53:07 GMT; path=/ Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Vary: Accept,Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d81b69368e6f8be2907e338480e58682.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: AAkzDW9OgmA--EBxgQC8R0QpW6yp_09q-SXZ2G2sStJ_VVPnbdhUAg==
2024-11-01 16:52:37 UTC	126	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 6f 6e 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 6c 6f 67 6f 6e 3f 73 69 74 65 3d 69 69 67 22 3e 68 74 74 70 73 3a 2f 2f 6c 6f 67 6f 6e 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 6c 6f 67 6f 6e 3f 73 69 74 65 3d 69 69 67 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="https://logon.vanguard.com/logon?site=iig">https://logon.vanguard.com/logon?site=iig</a></p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	49855	63.140.62.17	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:36 UTC	2119	OUT	GET /b/ss/vanguardpeprodlaunch/1/JS-2.23.0-LEWM/s98491030390773?AQB=1&ndh=1&pf=1&t=1%2F10%2F2024%2012%3A52%3A34%205%20240&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&g=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&cc=USD&ch=pe%3Aweb&events=event111&h1=home%3Ahome&v4=mcmid%7C86591681061654023263392632422581144886&v8=logged%20out&v13=fri%2C%201%20nov%202024%2012%3A52%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&v18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&c30=home&c31=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&v36=1&c38=home&c39=home&v39=home&v59=web&v66=new&v88=9B89012098711098B0DDD47FCE30B589&v99=9B89012098711098B0DDD47FCE30B589&v102=www.vanguard.com%2F&v103=home%20-%20logon&v104=home%20-%20logon%3Alog%20in&v111=button%20primary&v130=Web%20SDK&v188=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Wi [TRUNCATED] Host: vanguard.d2.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ownyourfuture.vanguard.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:36 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 01 Nov 2024 16:52:36 GMT expires: Thu, 31 Oct 2024 16:52:36 GMT last-modified: Sat, 02 Nov 2024 16:52:36 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3716177409096155136-4618373128429743465 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-11-01 16:52:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	49856	63.140.62.17	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:36 UTC	784	OUT	POST /ee/irl1/v1/interact?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=ff673c82-2567-43cd-8b3f-29d44c0e802e HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 2526 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://ownyourfuture.vanguard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ownyourfuture.vanguard.com/en/home/publogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:36 UTC	2526	OUT	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 22 63 6f 6d 5f 61 64 6f 62 65 5f 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 72 65 70 6f 72 74 53 75 69 74 65 73 22 3a 5b 22 76 61 6e 67 75 61 72 64 70 61 63 65 77 65 62 73 64 6b 74 65 73 74 22 5d 7d 7d 2c 22 74 61 72 67 65 74 22 3a 7b 22 6d 69 67 72 61 74 69 6f 6e 22 3a 74 72 75 65 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 39 32 43 41 33 37 30 34 35 33 32 39 35 34 34 30 30 41 34 39 30 44 34 34 5f 41 64 6f 62 65 4f 72 67 5f 63 6c 75 73 74 65 72 22 2c 22 76 61 6c 75 65 22 3a Data Ascii: {"meta":{"configOverrides":{"com_adobe_analytics":{"reportSuites":["vanguardpacewebsdktest"]}},"target":{"migration":true},"state":{"domain":"vanguard.com","cookiesEnabled":true,"entries":[{"key":"kndctr_92CA3704532954400A490D44_AdobeOrg_cluster","value":
2024-11-01 16:52:37 UTC	660	IN	HTTP/1.1 200 OK x-request-id: ff673c82-2567-43cd-8b3f-29d44c0e802e vary: Origin access-control-allow-origin: https://ownyourfuture.vanguard.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Fri, 01 Nov 2024 16:52:36 GMT x-konductor: 24.10.123:a83471aca x-adobe-edge: IRL1;6 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-11-01 16:52:37 UTC	529	IN	Data Raw: 32 30 61 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 66 66 36 37 33 63 38 32 2d 32 35 36 37 2d 34 33 63 64 2d 38 62 33 66 2d 32 39 64 34 34 63 30 65 38 30 32 65 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 38 36 35 39 31 36 38 31 30 36 31 36 35 34 30 32 33 32 36 33 33 39 32 36 33 32 34 32 32 35 38 31 31 34 34 38 38 36 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 37 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 20a{"requestId":"ff673c82-2567-43cd-8b3f-29d44c0e802e","handle":[{"payload":[{"id":"86591681061654023263392632422581144886","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"37","ttlSeconds":1800},{"scope":"AA
2024-11-01 16:52:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	49860	63.140.62.17	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:37 UTC	1873	OUT	GET /b/ss/vanguardpeprodlaunch/1/JS-2.23.0-LEWM/s98491030390773?AQB=1&ndh=1&pf=1&t=1%2F10%2F2024%2012%3A52%3A34%205%20240&mid=86591681061654023263392632422581144886&aamlh=6&ce=ISO-8859-1&pageName=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&g=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&cc=USD&ch=pe%3Aweb&events=event111&h1=home%3Ahome&v4=mcmid%7C86591681061654023263392632422581144886&v8=logged%20out&v13=fri%2C%201%20nov%202024%2012%3A52%20edt&v14=12&v15=friday&v16=fri%2C%201%20nov%202024&c18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&v18=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome&c30=home&c31=https%3A%2F%2Fownyourfuture.vanguard.com%2Fen%2Fhome%2Fpublogin&v36=1&c38=home&c39=home&v39=home&v59=web&v66=new&v88=9B89012098711098B0DDD47FCE30B589&v99=9B89012098711098B0DDD47FCE30B589&v102=www.vanguard.com%2F&v103=home%20-%20logon&v104=home%20-%20logon%3Alog%20in&v111=button%20primary&v130=Web%20SDK&v188=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Wi [TRUNCATED] Host: vanguard.d2.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:38 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 01 Nov 2024 16:52:37 GMT expires: Thu, 31 Oct 2024 16:52:37 GMT last-modified: Sat, 02 Nov 2024 16:52:37 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3716177411374415872-4618532835785734998 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-11-01 16:52:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	49861	63.140.62.17	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:37 UTC	452	OUT	GET /ee/irl1/v1/interact?configId=207035cb-9d8b-404f-92aa-c7b3dfc1ab1d&requestId=ff673c82-2567-43cd-8b3f-29d44c0e802e HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:38 UTC	435	IN	HTTP/1.1 404 Not Found x-request-id: ff673c82-2567-43cd-8b3f-29d44c0e802e vary: Origin date: Fri, 01 Nov 2024 16:52:37 GMT x-konductor: 24.10.123:a83471aca x-adobe-edge: IRL1;6 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	49871	3.161.82.25	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:39 UTC	2524	OUT	GET /nav-preload.css HTTP/1.1 Host: n4v.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://logon.vanguard.com/logon?site=iig Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645 [TRUNCATED]
2024-11-01 16:52:40 UTC	624	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1241 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 22 Oct 2024 23:37:38 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Wvg8zb5U2rZmNlNDGUWXCxRk6iXEaXiu Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 16:52:41 GMT ETag: "269ae0f4de1382d43c68582d95d0ee2e" X-Cache: RefreshHit from cloudfront Via: 1.1 87b9fb3f8157b5916fbe1d11149c4f3a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: fgSqraiq9WhNZdjhwhFa73yEskJm5B67O4aB34z-Hg6QHa5bELsKIg== Vary: Origin
2024-11-01 16:52:40 UTC	1241	IN	Data Raw: 2e 63 31 31 6e 2d 65 6c 65 76 61 74 69 6f 6e 2d 31 30 30 2c 76 67 2d 76 67 6e 2d 6e 61 76 3a 6e 6f 74 28 3a 64 65 66 69 6e 65 64 2c 5b 6e 6f 2d 68 65 61 64 65 72 5d 29 3a 3a 62 65 66 6f 72 65 7b 7a 2d 69 6e 64 65 78 3a 31 30 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 2e 32 35 72 65 6d 20 2e 30 36 32 35 72 65 6d 20 72 67 62 61 28 34 2c 35 2c 35 2c 2e 30 36 29 2c 30 20 2e 30 36 32 35 72 65 6d 20 2e 30 36 32 35 72 65 6d 20 30 20 72 67 62 61 28 34 2c 35 2c 35 2c 2e 31 38 29 7d 2e 63 31 31 6e 2d 7a 2d 69 6e 64 65 78 2d 31 30 30 7b 7a 2d 69 6e 64 65 78 3a 31 30 30 7d 2e 63 31 31 6e 2d 65 6c 65 76 61 74 69 6f 6e 2d 38 30 30 7b 7a 2d 69 6e 64 65 78 3a 38 30 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 2e 32 35 72 65 6d 20 2e 30 36 32 35 72 65 6d 20 Data Ascii: .c11n-elevation-100,vg-vgn-nav:not(:defined,[no-header])::before{z-index:100;box-shadow:0 0 .25rem .0625rem rgba(4,5,5,.06),0 .0625rem .0625rem 0 rgba(4,5,5,.18)}.c11n-z-index-100{z-index:100}.c11n-elevation-800{z-index:800;box-shadow:0 0 .25rem .0625rem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	49870	3.161.82.25	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:39 UTC	2520	OUT	GET /secure-site-components.js HTTP/1.1 Host: n4v.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://logon.vanguard.com/logon?site=iig Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645 [TRUNCATED]
2024-11-01 16:52:40 UTC	682	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 277872 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 22 Oct 2024 23:37:38 GMT x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 x-amz-version-id: X7ZekPBXi0d4m9SPEYCfdi0iuUV8FQ3H Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 16:52:41 GMT ETag: "084a65a81480fd3d228171753acf6963" X-Cache: RefreshHit from cloudfront Via: 1.1 0c32b42e3b5070fcbe6b5b320d0621b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: e7x-uKZKNxijXtRnVraK1ajO19NyymEBNEE6Gl7EBKhNT4u92XAmMA== Vary: Origin
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 66 61 63 74 6f 72 79 28 65 78 70 6f 72 74 73 29 20 3a 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 3f 20 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 20 66 61 63 74 6f 72 79 29 20 3a 20 28 67 6c 6f 62 61 6c 20 3d 20 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 67 6c 6f 62 61 6c 54 68 69 73 20 3a 20 67 6c 6f 62 61 6c 20 Data Ascii: (function(global, factory) { typeof exports === "object" && typeof module !== "undefined" ? factory(exports) : typeof define === "function" && define.amd ? define(["exports"], factory) : (global = typeof globalThis !== "undefined" ? globalThis : global
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2d 2d 6c 65 61 64 69 6e 67 2d 69 63 6f 6e 2d 67 68 6f 73 74 20 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 6c 65 61 64 69 6e 67 2d 69 63 6f 6e 2c 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2d 2d 6c 65 61 64 69 6e 67 2d 69 63 6f 6e 2d 67 68 6f 73 74 2d 6f 6e 2d 64 61 72 6b 20 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 6c 65 61 64 69 6e 67 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 72 64 65 72 3a 30 20 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2d 2d 74 72 61 69 6c 69 6e 67 2d 69 63 6f 6e 2d 70 72 69 6d 61 72 79 20 2e 63 31 31 6e 2d Data Ascii: .c11n-button.c11n-button--leading-icon-ghost .c11n-button__leading-icon,.c11n-button.c11n-button--leading-icon-ghost-on-dark .c11n-button__leading-icon{display:flex;border:0 none;height:100%;padding:0}.c11n-button.c11n-button--trailing-icon-primary .c11n-
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2d 2d 69 63 6f 6e 2d 70 72 69 6d 61 72 79 20 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 34 30 35 30 35 3b 62 6f 72 64 65 72 3a 2e 31 32 35 72 65 6d 20 73 6f 6c 69 64 20 23 30 34 30 35 30 35 7d 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2d 2d 69 63 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 20 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 62 6f 78 2c 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 2d 2d 69 63 6f 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 63 31 31 6e 2d 62 75 74 74 6f 6e 5f 5f 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: .c11n-button.c11n-button--icon-primary .c11n-button__box{background-color:#040505;border:.125rem solid #040505}.c11n-button.c11n-button--icon-primary:hover .c11n-button__box,.c11n-button.c11n-button--icon-primary:focus-visible .c11n-button__box{background
2024-11-01 16:52:40 UTC	14808	IN	Data Raw: 2d 73 6d 20 61 2e 63 31 31 6e 2d 6c 69 6e 6b 20 2e 63 31 31 6e 2d 6c 69 6e 6b 5f 5f 74 65 78 74 2c 62 75 74 74 6f 6e 2e 63 31 31 6e 2d 6c 69 6e 6b 2e 63 31 31 6e 2d 74 65 78 74 2d 73 6d 20 2e 63 31 31 6e 2d 6c 69 6e 6b 5f 5f 63 6f 6e 74 65 6e 74 2c 62 75 74 74 6f 6e 2e 63 31 31 6e 2d 6c 69 6e 6b 2e 63 31 31 6e 2d 74 65 78 74 2d 73 6d 20 2e 6c 61 62 65 6c 65 64 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 5f 5f 6c 61 62 65 6c 2c 62 75 74 74 6f 6e 2e 63 31 31 6e 2d 6c 69 6e 6b 2e 63 31 31 6e 2d 74 65 78 74 2d 73 6d 20 2e 63 31 31 6e 2d 6c 69 6e 6b 5f 5f 74 65 78 74 2c 2e 63 31 31 6e 2d 74 65 78 74 2d 73 6d 20 62 75 74 74 6f 6e 2e 63 31 31 6e 2d 6c 69 6e 6b 20 2e 63 31 31 6e 2d 6c 69 6e 6b 5f 5f 63 6f 6e 74 65 6e 74 2c 2e 63 31 31 6e 2d 74 65 78 74 2d Data Ascii: -sm a.c11n-link .c11n-link__text,button.c11n-link.c11n-text-sm .c11n-link__content,button.c11n-link.c11n-text-sm .labeled-button-container__label,button.c11n-link.c11n-text-sm .c11n-link__text,.c11n-text-sm button.c11n-link .c11n-link__content,.c11n-text-
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 2d 6c 69 6e 6b 5f 5f 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 63 75 72 72 65 6e 74 43 6f 6c 6f 72 2c 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 29 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 63 75 72 72 65 6e 74 43 6f 6c 6f 72 2c 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 30 25 20 2e 30 36 32 35 72 65 6d 2c 30 25 20 2e 30 36 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 25 20 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3b 74 72 61 Data Ascii: -link__content{background-image:linear-gradient(currentColor, currentColor),linear-gradient(currentColor, currentColor);background-size:0% .0625rem,0% .0625rem;background-position:0% 100%;background-repeat:no-repeat;transition-property:background-size;tra
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 38 70 78 2c 20 31 34 70 78 2c 20 30 29 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 62 75 74 74 6f 6e 2d 6c 48 33 55 52 43 75 4a 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 23 30 30 30 7d 2e 62 75 74 74 6f 6e 2d 6c 48 33 55 52 43 75 4a 20 2e 68 61 6d 62 75 72 67 65 72 2d 4e 46 4c 35 71 49 54 46 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b Data Ascii: 8px, 14px, 0);opacity:1;transition:opacity .25s ease-in-out}.button-lH3URCuJ:focus-visible{box-shadow:0 0 0 2px #000}.button-lH3URCuJ .hamburger-NFL5qITF{background:none;height:100%;width:auto;display:inline-flex;align-items:center;justify-content:center;
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 63 74 69 76 65 2c 2e 63 31 31 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 6e 64 65 72 6c 69 6e 65 73 20 2e 63 31 31 6e 2d 6e 61 76 2d 69 74 65 6d 2d 2d 68 69 64 64 65 6e 2e 63 31 31 6e 2d 6e 61 76 2d 69 74 65 6d 2e 61 63 74 69 76 65 2b 2e 61 63 74 69 76 65 2c 2e 63 31 31 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 6e 64 65 72 6c 69 6e 65 73 20 2e 63 31 31 6e 2d 6e 61 76 2d 69 74 65 6d 2d 2d 68 69 64 64 65 6e 2e 61 63 74 69 76 65 2e 63 31 31 6e 2d 6e 61 76 2d 69 74 65 6d 2d 6f 70 65 6e 2b 2e 61 63 74 69 76 65 2c 2e 63 31 31 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 63 31 31 6e 2d 74 61 62 73 5f 5f 74 61 62 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 2c 2e 63 31 31 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 63 31 31 6e 2d 74 61 62 73 5f 5f 74 61 62 2e 63 31 Data Ascii: ctive,.c11n-navigation .underlines .c11n-nav-item--hidden.c11n-nav-item.active+.active,.c11n-navigation .underlines .c11n-nav-item--hidden.active.c11n-nav-item-open+.active,.c11n-navigation .c11n-tabs__tab:first-of-type,.c11n-navigation .c11n-tabs__tab.c1
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 20 3d 3d 20 63 32 20 3f 20 6f 32 20 3d 20 74 33 5b 63 32 5d 20 3a 20 22 72 65 66 22 20 3d 3d 20 63 32 20 3f 20 61 32 20 3d 20 74 33 5b 63 32 5d 20 3a 20 72 32 5b 63 32 5d 20 3d 20 74 33 5b 63 32 5d 3b 0a 20 20 20 20 20 20 69 66 20 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 32 20 26 26 20 28 72 32 2e 63 68 69 6c 64 72 65 6e 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 33 20 3f 20 69 32 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 20 32 29 20 3a 20 65 32 29 2c 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 6e 33 20 26 26 20 6e 75 6c 6c 20 21 3d 20 6e 33 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 63 32 20 69 6e 20 6e 33 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 Data Ascii: == c2 ? o2 = t3[c2] : "ref" == c2 ? a2 = t3[c2] : r2[c2] = t3[c2]; if (arguments.length > 2 && (r2.children = arguments.length > 3 ? i2.call(arguments, 2) : e2), "function" == typeof n3 && null != n3.defaultProps) for (c2 in n3.defaultProps
2024-11-01 16:52:40 UTC	360	IN	Data Raw: 75 6c 6c 20 21 3d 20 69 33 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 43 61 74 63 68 20 26 26 20 28 69 33 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 43 61 74 63 68 28 6e 33 2c 20 6f 32 20 7c 7c 20 7b 7d 29 2c 20 63 32 20 3d 20 69 33 2e 5f 5f 64 29 2c 20 63 32 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 33 2e 5f 5f 45 20 3d 20 69 33 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 74 34 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 33 20 3d 20 74 34 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 33 3b 0a 20 20 20 20 7d 20 7d 2c 20 63 20 3d 20 30 2c 20 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 33 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 20 21 3d 20 6e 33 20 26 26 Data Ascii: ull != i3.componentDidCatch && (i3.componentDidCatch(n3, o2 \|\| {}), c2 = i3.__d), c2) return i3.__E = i3; } catch (t4) { n3 = t4; } throw n3; } }, c = 0, r = function(n3) { return null != n3 &&
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 3d 20 74 68 69 73 2e 5f 5f 73 20 26 26 20 74 68 69 73 2e 5f 5f 73 20 21 3d 3d 20 74 68 69 73 2e 73 74 61 74 65 20 3f 20 74 68 69 73 2e 5f 5f 73 20 3a 20 74 68 69 73 2e 5f 5f 73 20 3d 20 6b 28 7b 7d 2c 20 74 68 69 73 2e 73 74 61 74 65 29 2c 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 6e 33 20 26 26 20 28 6e 33 20 3d 20 6e 33 28 6b 28 7b 7d 2c 20 65 32 29 2c 20 74 68 69 73 2e 70 72 6f 70 73 29 29 2c 20 6e 33 20 26 26 20 6b 28 65 32 2c 20 6e 33 29 2c 20 6e 75 6c 6c 20 21 3d 20 6e 33 20 26 26 20 74 68 69 73 2e 5f 5f 76 20 26 26 20 28 74 33 20 26 26 20 74 68 69 73 2e 5f 73 62 2e 70 75 73 68 28 74 33 29 2c 20 4e 28 74 68 69 73 29 29 3b 0a 20 20 20 20 7d 2c 20 4c 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 63 65 55 70 64 61 74 65 20 3d 20 66 Data Ascii: = this.__s && this.__s !== this.state ? this.__s : this.__s = k({}, this.state), "function" == typeof n3 && (n3 = n3(k({}, e2), this.props)), n3 && k(e2, n3), null != n3 && this.__v && (t3 && this._sb.push(t3), N(this)); }, L.prototype.forceUpdate = f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	49869	13.225.78.16	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:39 UTC	2549	OUT	GET /adobe-data-layer/adobe-data-layer.min.js HTTP/1.1 Host: mc3-static-assets.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://logon.vanguard.com/logon?site=iig Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645 [TRUNCATED]
2024-11-01 16:52:40 UTC	844	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 47786 Connection: close Date: Fri, 01 Nov 2024 16:52:41 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 01 Nov 2024 15:07:39 GMT ETag: "081ffdacf8aebe0d7a00757a3b9c08ed" x-amz-server-side-encryption: AES256 x-amz-version-id: zGlqPh414crnTF_C5LzPfvSnfQ2bMs9T Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 999a435eb37a050d3de26fe63534c416.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: COYpZn72pfLQUClrHCTfdZNL6B_YlPWGCADNC2RUexGL3GUdDK8pUA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-11-01 16:52:40 UTC	15540	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 32 33 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 41 72 72 61 79 28 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 39 2d 65 2e 63 68 61 72 41 74 28 74 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 65 7c 7c 69 73 4e 61 4e 28 65 29 7c 7c 22 22 3d 3d 3d 65 3f 22 22 3a 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 6e 2e 6c 65 6e 67 74 68 3c 74 3b 29 6e 3d 22 30 22 2b 6e 3b 72 65 74 75 72 6e 20 6e 7d 28 65 2c 31 30 29 2c 74 5b 30 5d 3d 6e 28 38 29 2c 74 5b 31 5d 3d 6e 28 39 29 2c 74 5b 32 5d 3d 6e 28 34 29 2c 74 Data Ascii: (()=>{"use strict";var e={235:e=>{e.exports=function(e){var t=new Array(10);function n(t){return 9-e.charAt(t)}return null===e\|\|isNaN(e)\|\|""===e?"":(e=function(e,t){for(var n=e.toString();n.length<t;)n="0"+n;return n}(e,10),t[0]=n(8),t[1]=n(9),t[2]=n(4),t
2024-11-01 16:52:40 UTC	1370	IN	Data Raw: 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 21 64 28 65 29 26 26 6e 75 6c 6c 21 3d 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 64 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 70 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 69 73 42 75 66 66 65 72 29 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 69 73 42 75 66 66 65 72 28 65 29 7d 2c 69 73 46 6f 72 6d 44 61 74 61 3a 65 3d 3e 7b 6c 65 74 20 74 3b 72 65 74 75 72 6e 20 65 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 46 6f 72 6d 44 61 74 61 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6f 72 6d 44 61 74 61 7c 7c 70 28 65 2e 61 70 70 65 6e 64 29 26 26 28 22 66 6f 72 6d 64 61 74 61 22 3d 3d 3d 28 74 3d 69 28 65 29 29 7c 7c 22 Data Ascii: r:function(e){return null!==e&&!d(e)&&null!==e.constructor&&!d(e.constructor)&&p(e.constructor.isBuffer)&&e.constructor.isBuffer(e)},isFormData:e=>{let t;return e&&("function"==typeof FormData&&e instanceof FormData\|\|p(e.append)&&("formdata"===(t=i(e))\|\|"
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 7d 2c 74 6f 46 6c 61 74 4f 62 6a 65 63 74 3a 28 65 2c 74 2c 6e 2c 72 29 3d 3e 7b 6c 65 74 20 6f 2c 69 2c 61 3b 63 6f 6e 73 74 20 63 3d 7b 7d 3b 69 66 28 74 3d 74 7c 7c 7b 7d 2c 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 64 6f 7b 66 6f 72 28 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 65 29 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 69 2d 2d 20 3e 30 3b 29 61 3d 6f 5b 69 5d 2c 72 26 26 21 72 28 61 2c 65 2c 74 29 7c 7c 63 5b 61 5d 7c 7c 28 74 5b 61 5d 3d 65 5b 61 5d 2c 63 5b 61 5d 3d 21 30 29 3b 65 3d 21 31 21 3d 3d 6e 26 26 73 28 65 29 7d 77 68 69 6c 65 28 65 26 26 28 21 6e 7c 7c 6e 28 65 2c 74 29 29 26 26 65 21 3d 3d 4f 62 6a 65 Data Ascii: Object.assign(e.prototype,n)},toFlatObject:(e,t,n,r)=>{let o,i,a;const c={};if(t=t\|\|{},null==e)return t;do{for(o=Object.getOwnPropertyNames(e),i=o.length;i-- >0;)a=o[i],r&&!r(a,e,t)\|\|c[a]\|\|(t[a]=e[a],c[a]=!0);e=!1!==n&&s(e)}while(e&&(!n\|\|n(e,t))&&e!==Obje
2024-11-01 16:52:40 UTC	14492	IN	Data Raw: 73 53 65 72 69 61 6c 69 7a 65 72 3a 69 2c 74 69 6d 65 6f 75 74 3a 69 2c 74 69 6d 65 6f 75 74 4d 65 73 73 61 67 65 3a 69 2c 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 69 2c 77 69 74 68 58 53 52 46 54 6f 6b 65 6e 3a 69 2c 61 64 61 70 74 65 72 3a 69 2c 72 65 73 70 6f 6e 73 65 54 79 70 65 3a 69 2c 78 73 72 66 43 6f 6f 6b 69 65 4e 61 6d 65 3a 69 2c 78 73 72 66 48 65 61 64 65 72 4e 61 6d 65 3a 69 2c 6f 6e 55 70 6c 6f 61 64 50 72 6f 67 72 65 73 73 3a 69 2c 6f 6e 44 6f 77 6e 6c 6f 61 64 50 72 6f 67 72 65 73 73 3a 69 2c 64 65 63 6f 6d 70 72 65 73 73 3a 69 2c 6d 61 78 43 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 3a 69 2c 6d 61 78 42 6f 64 79 4c 65 6e 67 74 68 3a 69 2c 62 65 66 6f 72 65 52 65 64 69 72 65 63 74 3a 69 2c 74 72 61 6e 73 70 6f 72 74 3a 69 2c 68 74 74 70 Data Ascii: sSerializer:i,timeout:i,timeoutMessage:i,withCredentials:i,withXSRFToken:i,adapter:i,responseType:i,xsrfCookieName:i,xsrfHeaderName:i,onUploadProgress:i,onDownloadProgress:i,decompress:i,maxContentLength:i,maxBodyLength:i,beforeRedirect:i,transport:i,http

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	49873	18.245.46.68	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:39 UTC	581	OUT	GET /files/js/core/antiflicker-v2.min.js HTTP/1.1 Host: corp.at2.assets.vgdynamic.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://logon.vanguard.com/logon?site=iig Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:40 UTC	701	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 606 Connection: close x-amz-id-2: 9ioeztbfnxntmrEdyQiKveBjgUDRcy37O/XqYJDVwaRm9iaj2OL0cRmJjN0DP0WhfZAsaJ6H89o2qDIwZsim9hzP08uKRwOo x-amz-request-id: 86Y5X22MFZYHHM2V Last-Modified: Thu, 26 Sep 2024 13:25:34 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: xJmZvhxIYAzAq8aRLODdQ8UghwYVZ7TP Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 16:52:41 GMT ETag: "a4c4068383095feedf588749482f1d79" X-Cache: RefreshHit from cloudfront Via: 1.1 e4a4a1d8cbc68200b55d6f49ec5eb07a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: ltpZcnYOo-kQkVbIG0mBABTsFxwB2F9tBrdWmtqe6dOxTJ_VbZtw-g==
2024-11-01 16:52:40 UTC	606	IN	Data Raw: 6c 65 74 20 63 73 73 53 65 6c 65 63 74 6f 72 73 20 3d 20 77 69 6e 64 6f 77 2e 74 61 72 67 65 74 63 73 73 53 65 6c 65 63 74 6f 72 73 20 7c 7c 20 5b 22 62 6f 64 79 22 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 20 74 2c 20 6e 2c 20 6f 29 20 7b 20 21 66 75 6e 63 74 69 6f 6e 28 65 2c 20 6e 2c 20 6f 29 20 7b 20 69 66 20 28 65 29 20 7b 20 76 61 72 20 61 20 3d 20 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 20 61 2e 69 64 20 3d 20 22 61 74 2d 62 6f 64 79 2d 73 74 79 6c 65 22 2c 20 61 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6f 2c 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 20 7d 20 7d 28 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 20 30 2c 20 6e 29 2c 20 73 65 74 54 69 6d Data Ascii: let cssSelectors = window.targetcssSelectors \|\| ["body"];!function(e, t, n, o) { !function(e, n, o) { if (e) { var a = t.createElement("style"); a.id = "at-body-style", a.innerHTML = o, e.appendChild(a) } }(t.getElementsByTagName("head")[0], 0, n), setTim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	49872	52.222.236.24	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:39 UTC	600	OUT	GET /challenge-check.esm.js HTTP/1.1 Host: oob-check.cdn.web.vanguard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://logon.vanguard.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://logon.vanguard.com/logon?site=iig Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:40 UTC	1043	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 644 Connection: close Date: Fri, 01 Nov 2024 16:52:41 GMT Access-Control-Allow-Origin: https://logon.vanguard.com Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Content-Length, Content-Type Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true x-amz-replication-status: COMPLETED Last-Modified: Wed, 16 Oct 2024 20:48:13 GMT ETag: "bb232071fc269e3edb99e8c7229274c6" x-amz-server-side-encryption: AES256 x-amz-version-id: ntsrNDzwsIhO1sseXuuzpzQ2FnFXiVXC Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Miss from cloudfront Via: 1.1 64f5a3ab7bfb476c633b87746aced0ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: w5W_MkRbsr4HhGei2m1fzzC_2nu4lsFJYzucg0gIShvF8_P2akFnOA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-11-01 16:52:40 UTC	644	IN	Data Raw: 63 6f 6e 73 74 20 61 20 3d 20 7b 0a 20 20 41 50 49 3a 20 22 68 74 74 70 73 3a 2f 2f 70 65 72 73 6f 6e 61 6c 31 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 73 65 32 2d 73 65 63 75 72 69 74 79 2d 63 6f 64 65 2d 65 6e 72 6f 6c 6c 6d 65 6e 74 2d 63 6f 6e 73 75 6d 65 72 2d 61 70 69 2f 63 68 65 63 6b 43 6f 6f 6b 69 65 22 2c 0a 20 20 54 46 51 5f 45 4e 44 50 4f 49 4e 54 3a 20 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 69 74 79 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 22 2c 0a 20 20 45 58 43 45 50 54 49 4f 4e 5f 4c 49 53 54 3a 20 5b 22 6c 6f 67 6f 6e 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 2c 20 22 73 65 63 75 72 69 74 79 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 2c 20 22 69 6e 76 Data Ascii: const a = { API: "https://personal1.vanguard.com/se2-security-code-enrollment-consumer-api/checkCookie", TFQ_ENDPOINT: "https://securityenrollment.web.vanguard.com/", EXCEPTION_LIST: ["logon.vanguard.com", "securityenrollment.web.vanguard.com", "inv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	49874	18.239.50.87	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:39 UTC	591	OUT	GET /vg-vgn/latest/css/vgn.min.css?appPrefix=LGN HTTP/1.1 Host: ccc.vgcontent.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://logon.vanguard.com/logon?site=iig Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:40 UTC	512	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=UTF-8 Content-Length: 71384 Connection: close Accept-Ranges: bytes Access-Control-Allow-Credentials: true Cache-Control: public, max-age=1800 Date: Fri, 01 Nov 2024 16:52:40 GMT Last-Modified: Wed, 21 Aug 2024 15:47:16 GMT Server: Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 af1da25c2dddf71cac076999aa9861e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: dxaq2D84UW6tQKjmiG5FCUM6_MLRIzcUJ3lvGoaqS22NivCGe-HlIQ==
2024-11-01 16:52:40 UTC	15872	IN	Data Raw: 2f 2a 21 20 76 67 2d 76 67 6e 20 2d 20 76 37 2e 36 2e 35 38 20 2d 20 57 65 64 20 46 65 62 20 31 34 20 32 30 32 34 2d 31 39 3a 34 37 3a 35 36 20 2a 2f 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 74 65 6c 6c 61 74 69 6f 6e 2d 73 74 61 74 69 63 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 76 30 2f 66 6f 6e 74 73 2f 66 66 2d 6d 61 72 6b 2e 63 73 73 29 3b 2e 6e 6f 6e 43 6e 74 41 6c 69 67 6e 20 2e 76 67 6e 2d 73 65 63 74 69 6f 6e 20 2e 76 67 6e 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6e 6f 6e 43 6e 74 41 6c 69 67 6e 20 2e 76 67 6e 2d 73 65 63 74 69 6f 6e 20 2e 76 67 6e 2d 69 73 43 65 6e 74 65 72 41 6c 69 67 6e 65 64 2c 2e 6e 6f 6e 43 6e 74 41 6c 69 67 6e 20 2e 76 67 6e 2d 73 65 63 74 69 6f 6e 20 2e 76 67 6e 2d 6e 61 76 42 61 72 Data Ascii: /! vg-vgn - v7.6.58 - Wed Feb 14 2024-19:47:56 /@import url(https://constellation-static.web.vanguard.com/v0/fonts/ff-mark.css);.nonCntAlign .vgn-section .vgn-container,.nonCntAlign .vgn-section .vgn-isCenterAligned,.nonCntAlign .vgn-section .vgn-navBar
2024-11-01 16:52:40 UTC	9141	IN	Data Raw: 7d 2e 76 67 6e 2d 6c 65 67 61 6c 2d 66 65 65 64 62 61 63 6b 4c 69 6e 6b 20 61 7b 6f 75 74 6c 69 6e 65 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 76 67 6e 2d 6c 65 67 61 6c 2d 66 65 65 64 62 61 63 6b 4c 69 6e 6b 20 2e 76 67 6e 2d 6c 69 6e 6b 20 2e 76 67 6e 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 7b 6c 65 66 74 3a 2d 34 70 78 3b 74 6f 70 3a 2d 32 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 38 70 78 29 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 35 70 78 29 7d 2e 76 67 6e 2d 6c 65 67 61 6c 2d 66 65 65 64 62 61 63 6b 4c 69 6e 6b 20 2e 76 67 6e 2d 6c 69 6e 6b 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 69 6e 68 Data Ascii: }.vgn-legal-feedbackLink a{outline:0;position:relative;z-index:0;display:inline-block}.vgn-legal-feedbackLink .vgn-link .vgn-focus-indicator{left:-4px;top:-2px;width:calc(100% + 8px);height:calc(100% + 5px)}.vgn-legal-feedbackLink .vgn-link>span{color:inh
2024-11-01 16:52:40 UTC	7430	IN	Data Raw: 61 76 2d 6f 70 65 6e 20 2e 76 67 6e 2d 6d 65 6e 75 42 75 74 74 6f 6e 3e 2e 76 67 6e 2d 6d 65 6e 75 42 75 74 74 6f 6e 49 63 6f 6e 3a 61 66 74 65 72 2c 2e 76 67 6e 2d 76 65 72 74 69 63 61 6c 4e 61 76 2d 6f 70 65 6e 20 2e 76 67 6e 2d 6d 65 6e 75 42 75 74 74 6f 6e 3e 2e 76 67 6e 2d 6d 65 6e 75 42 75 74 74 6f 6e 49 63 6f 6e 3a 62 65 66 6f 72 65 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 74 6f 70 20 2e 32 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 35 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 74 6f 70 20 2e 32 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 35 73 3b 2d Data Ascii: av-open .vgn-menuButton>.vgn-menuButtonIcon:after,.vgn-verticalNav-open .vgn-menuButton>.vgn-menuButtonIcon:before{-webkit-transition:top .25s ease-in-out,transform .25s ease-in-out .5s;-moz-transition:top .25s ease-in-out,transform .25s ease-in-out .5s;-
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 76 67 6e 2d 6e 61 76 42 61 72 53 65 61 72 63 68 7b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 36 31 35 31 64 7d 2e 76 67 6e 2d 6e 61 76 42 61 72 20 2e 76 67 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 76 67 6e 2d 61 75 74 6f 53 75 67 67 65 73 74 7b 6c 65 66 74 3a 30 7d 2e 76 67 6e 2d 6e 61 76 42 61 72 52 65 73 70 6f 6e 73 69 76 65 43 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 76 67 6e 2d 6e 61 76 42 61 72 52 65 73 70 6f 6e 73 69 76 65 43 6f 6e 74 61 69 6e 65 72 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 76 67 6e 2d 6d 65 6e 75 42 75 74 74 6f 6e 2c 2e 76 67 6e 2d 6e 61 76 42 61 72 53 65 61 72 63 68 7b 64 Data Ascii: -container .vgn-navBarSearch{width:100%;background-color:#96151d}.vgn-navBar .vgn-container .vgn-autoSuggest{left:0}.vgn-navBarResponsiveContainer{height:100%;width:100%}.vgn-navBarResponsiveContainer:focus{outline:none}.vgn-menuButton,.vgn-navBarSearch{d
2024-11-01 16:52:40 UTC	16384	IN	Data Raw: 6e 2d 75 74 69 6c 69 74 79 49 74 65 6d 4c 61 62 65 6c 2c 2e 76 67 6e 2d 75 74 69 6c 69 74 79 42 61 72 20 2e 76 67 6e 2d 64 72 6f 70 44 6f 77 6e 4c 61 62 65 6c 3a 68 6f 76 65 72 20 73 70 61 6e 2e 76 67 6e 2d 75 74 69 6c 69 74 79 49 74 65 6d 4c 61 62 65 6c 2c 2e 76 67 6e 2d 75 74 69 6c 69 74 79 42 61 72 20 2e 76 67 6e 2d 75 74 69 6c 69 74 79 4c 69 6e 6b 3a 61 63 74 69 76 65 20 73 70 61 6e 2e 76 67 6e 2d 75 74 69 6c 69 74 79 49 74 65 6d 4c 61 62 65 6c 2c 2e 76 67 6e 2d 75 74 69 6c 69 74 79 42 61 72 20 2e 76 67 6e 2d 75 74 69 6c 69 74 79 4c 69 6e 6b 3a 66 6f 63 75 73 20 73 70 61 6e 2e 76 67 6e 2d 75 74 69 6c 69 74 79 49 74 65 6d 4c 61 62 65 6c 2c 2e 76 67 6e 2d 75 74 69 6c 69 74 79 42 61 72 20 2e 76 67 6e 2d 75 74 69 6c 69 74 79 4c 69 6e 6b 3a 68 6f 76 65 72 Data Ascii: n-utilityItemLabel,.vgn-utilityBar .vgn-dropDownLabel:hover span.vgn-utilityItemLabel,.vgn-utilityBar .vgn-utilityLink:active span.vgn-utilityItemLabel,.vgn-utilityBar .vgn-utilityLink:focus span.vgn-utilityItemLabel,.vgn-utilityBar .vgn-utilityLink:hover
2024-11-01 16:52:40 UTC	6173	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 76 67 6e 2d 67 72 61 70 68 69 63 73 2f 69 6d 61 67 65 73 2f 73 70 72 69 74 65 2e 73 76 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 32 39 38 70 78 20 2d 35 37 70 78 7d 23 76 67 6e 2d 67 6c 6f 62 61 6c 48 65 61 64 65 72 20 2e 76 67 6e 2d 76 65 72 74 69 63 61 6c 4e 61 76 20 2e 76 67 6e 2d 73 75 62 4d 65 6e 75 20 2e 76 67 6e 2d 61 63 63 6f 72 64 69 6f 6e 2e 76 67 6e 2d 65 78 70 61 6e 64 65 64 20 2e 76 67 6e 2d 61 63 63 6f 72 64 69 6f 6e 43 6f 6e 74 65 6e 74 20 2e 76 67 6e 2d 73 75 62 53 65 63 74 69 6f 6e 4c 69 6e 6b 20 61 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 32 70 78 7d 23 76 67 6e 2d 67 6c 6f 62 61 6c 48 65 61 64 65 72 20 2e 76 67 6e 2d 76 65 72 74 69 63 61 6c 4e 61 76 20 2e 76 67 6e 2d 73 75 Data Ascii: ;background:url(../vgn-graphics/images/sprite.svg) no-repeat -298px -57px}#vgn-globalHeader .vgn-verticalNav .vgn-subMenu .vgn-accordion.vgn-expanded .vgn-accordionContent .vgn-subSectionLink a{padding-right:62px}#vgn-globalHeader .vgn-verticalNav .vgn-su

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	49882	18.245.46.39	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:41 UTC	389	OUT	GET /files/js/core/antiflicker-v2.min.js HTTP/1.1 Host: corp.at2.assets.vgdynamic.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 16:52:41 UTC	701	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 606 Connection: close x-amz-id-2: 9ioeztbfnxntmrEdyQiKveBjgUDRcy37O/XqYJDVwaRm9iaj2OL0cRmJjN0DP0WhfZAsaJ6H89o2qDIwZsim9hzP08uKRwOo x-amz-request-id: 86Y5X22MFZYHHM2V Last-Modified: Thu, 26 Sep 2024 13:25:34 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: xJmZvhxIYAzAq8aRLODdQ8UghwYVZ7TP Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 16:52:42 GMT ETag: "a4c4068383095feedf588749482f1d79" X-Cache: RefreshHit from cloudfront Via: 1.1 f5af2731a86629973e69564f824d95be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: MYUV0hUjyOhYfxWQpZVwqSSdC2WwS-1MbZ40LuoIW9irxpL37exI4w==
2024-11-01 16:52:41 UTC	606	IN	Data Raw: 6c 65 74 20 63 73 73 53 65 6c 65 63 74 6f 72 73 20 3d 20 77 69 6e 64 6f 77 2e 74 61 72 67 65 74 63 73 73 53 65 6c 65 63 74 6f 72 73 20 7c 7c 20 5b 22 62 6f 64 79 22 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 20 74 2c 20 6e 2c 20 6f 29 20 7b 20 21 66 75 6e 63 74 69 6f 6e 28 65 2c 20 6e 2c 20 6f 29 20 7b 20 69 66 20 28 65 29 20 7b 20 76 61 72 20 61 20 3d 20 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 20 61 2e 69 64 20 3d 20 22 61 74 2d 62 6f 64 79 2d 73 74 79 6c 65 22 2c 20 61 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6f 2c 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 20 7d 20 7d 28 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 20 30 2c 20 6e 29 2c 20 73 65 74 54 69 6d Data Ascii: let cssSelectors = window.targetcssSelectors \|\| ["body"];!function(e, t, n, o) { !function(e, n, o) { if (e) { var a = t.createElement("style"); a.id = "at-body-style", a.innerHTML = o, e.appendChild(a) } }(t.getElementsByTagName("head")[0], 0, n), setTim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	49885	52.222.236.44	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 16:52:41 UTC	2336	OUT	GET /challenge-check.esm.js HTTP/1.1 Host: oob-check.cdn.web.vanguard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TLTSID=9B89012098711098B0DDD47FCE30B589; TLTUID=9B89012098711098B0DDD47FCE30B589; HNWPRD=C22; AMCVS_92CA3704532954400A490D44%40AdobeOrg=1; AMCV_92CA3704532954400A490D44%40AdobeOrg=179643557%7CMCIDTS%7C20029%7CMCMID%7C86591681061654023263392632422581144886%7CMCAAMLH-1731084725%7C6%7CMCAAMB-1731084725%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1730487126s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; kndctr_92CA3704532954400A490D44_AdobeOrg_cluster=irl1; kndctr_92CA3704532954400A490D44_AdobeOrg_identity=CiY4NjU5MTY4MTA2MTY1NDAyMzI2MzM5MjYzMjQyMjU4MTE0NDg4NlIRCM7ikMWuMhgBKgRJUkwxMAPwAc7ikMWuMg==; at_check=true; mbox=session#d0323fb320e24e1081d8caf666dc7197#1730481801\|PC#d0323fb320e24e1081d8caf666dc7197.37_0#1793724741; s_previouspage=pre_pageName=us:en:pe:web:retirementplans:public:home:home; s_vnc365=1762015942826%26vn%3D1; s_ivc=true; s_inv=0; gpv_pn=us%3Aen%3Ape%3Aweb%3Aretirementplans%3Apublic%3Ahome%3Ahome; s_cc=true; s_fasts=1730479954638; s_sq=%5B%5BB%5D%5D; s_tslv=1730479954645 [TRUNCATED]
2024-11-01 16:52:41 UTC	830	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 644 Connection: close Date: Fri, 01 Nov 2024 15:10:45 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 16 Oct 2024 20:48:13 GMT ETag: "bb232071fc269e3edb99e8c7229274c6" x-amz-server-side-encryption: AES256 x-amz-version-id: ntsrNDzwsIhO1sseXuuzpzQ2FnFXiVXC Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 a2cac9c5f0e90f8b7fede4ac9aca75ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: opblDOpb6LIglwfDXCnd1f5prlLmYfe7I_rhPonH5eJ4LbFiMjxDug== Age: 6116 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-11-01 16:52:41 UTC	644	IN	Data Raw: 63 6f 6e 73 74 20 61 20 3d 20 7b 0a 20 20 41 50 49 3a 20 22 68 74 74 70 73 3a 2f 2f 70 65 72 73 6f 6e 61 6c 31 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 73 65 32 2d 73 65 63 75 72 69 74 79 2d 63 6f 64 65 2d 65 6e 72 6f 6c 6c 6d 65 6e 74 2d 63 6f 6e 73 75 6d 65 72 2d 61 70 69 2f 63 68 65 63 6b 43 6f 6f 6b 69 65 22 2c 0a 20 20 54 46 51 5f 45 4e 44 50 4f 49 4e 54 3a 20 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 69 74 79 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 2f 22 2c 0a 20 20 45 58 43 45 50 54 49 4f 4e 5f 4c 49 53 54 3a 20 5b 22 6c 6f 67 6f 6e 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 2c 20 22 73 65 63 75 72 69 74 79 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 77 65 62 2e 76 61 6e 67 75 61 72 64 2e 63 6f 6d 22 2c 20 22 69 6e 76 Data Ascii: const a = { API: "https://personal1.vanguard.com/se2-security-code-enrollment-consumer-api/checkCookie", TFQ_ENDPOINT: "https://securityenrollment.web.vanguard.com/", EXCEPTION_LIST: ["logon.vanguard.com", "securityenrollment.web.vanguard.com", "inv

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6920, Parent PID: 1576

General

Target ID:	0
Start time:	12:51:54
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7108, Parent PID: 6920

General

Target ID:	1
Start time:	12:51:54
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6672, Parent PID: 1576

General

Target ID:	2
Start time:	12:51:55
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.vanguard.com/retirementplans"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 8164, Parent PID: 6920

General

Target ID:	11
Start time:	12:52:52
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6096 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 8176, Parent PID: 6920

General

Target ID:	12
Start time:	12:52:52
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3164 --field-trial-handle=1972,i,11015137593506351581,5383423458651138880,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly