12.12.12 : FREE WELLS LOGINS (USER+PASS)

========================================
Local time: 01.03.2011 01:36:09
Session time: 08:40:22
Report time: 01.03.2011 06:13:00
Process name: C:\Program Files\Mozilla Firefox\firefox.exe
Source: https://online.wellsfargo.com/das/fcs?p=
Type: HTTPS request
Size (bytes): 1 429

----------------------------------------
https://online.wellsfargo.com/das/fcs?p=
Referer: -
User input: fff999904244WEwe001csulb9990←90419910279136as2035999904425chester999904425WEwe001999904425WEwe001999904425chestertseegishkahi bagshaasn sn taniih sn uuti←urkd bga yuaane←←bi end lunchinda orool bjinook za kk za gd nic←ghtmuahhdra tuhtai taaritsolmgoog3 legged chair gjohanna spyru←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←ghet ←←←←←←←←←←←jet d eggrand geneva skig3 legged chair ggenevarand genevaggrand geneva ski resort g←←grand gene←di←←ski resoe←rt di←←←←←←←←←←←←←diningtickets from u←long beach to genevalas ←←←os angelesghow many hours w←flight from los angeles to geneva3ggd luck!!!←←←! sn suraarai←←←←←←←←surnaa chi chdna←←←←←←←←←←←←←←←←←←←←←!gfafdawalyhairiin ereld 11wetserenlkhamt930628
POST data:

id=1298943369562
fp=A%3Dt%26SA%3Dt%26SV%3Dt%26EV%3Dt%26MP3%3Dt%26AE%3Dt%26VE%3Dt%26ACC%3Dt%26PR%3Dt%26SP%3Df%26SB%3Df%26DEB%3Df%26V%3DWIN%252010%252C0%252C32%252C18%26M%3DAdobe%2520Windows%26R%3D1280x800%26DP%3D72%26COL%3Dcolor%26AR%3D1%2E0%26OS%3DWindows%2520Vista%26ARCH%3Dx86%26L%3Den%26IME%3Dt%26PT%3DPlugIn%26AVD%3Df%26LFD%3Df%26WD%3Df%26TLS%3Dt%26ML%3D5%2E1
v=597521%5Fc262d9f9933a7618a407a01465cb81b4
client=vfc
action=fp


========================================
Local time: 01.03.2011 01:36:11
Session time: 08:40:24
Report time: 01.03.2011 06:13:01
Process name: C:\Program Files\Mozilla Firefox\firefox.exe
Referer: https://www.wellsfargo.com/
User input: [email protected]egiish←←←shkapass n tseegishka zuereeminm tnai hamtlagn tuhai anugs sonssn bs l evgu im shg bnleshd te nzn ends isto unencheer demjjiina haahhneeeh emr hogshirtsiim shg bi lav bdgaaaral bgaa dag kk←←fhimuuyu ebnahrn tegiilda etr ←←←←ghde ta narn ter ued hchl t←nomtoil bh bhda \←←((← zaya bd2 ta nariiga sanaad l bgaashu end...mm za mmhn ghde zun uuulzna gj naidjiiiina←za onoodrinho tailanga taviiiiiiiislobmessy←←sp←[email protected]←←←←khulan batsa←←←←←←←←←←←←←←←←←←←←hulan batsaemnomin cnomin ctselmuunomgantig bat←←←batsaikhangsusan miller march cancer horoscopegtseegishkaoyg←erbugsirritateannoyadmissiontutoringtutorannoysokgcal state←←←←←←stateka←←la.eduelpcalstatelaadmissionafesolo_love58@yahoo.comelpgcalstatela.edu←←elp fall semestertseegishkagwhen is cal sa←tate un←←←←←←←←←ifornia stet←←ate university los aneles←←←←geles fall quarter?tuuguucartoon s←←←←←←←←←←←←←←elpghairiin ereld 11youhairiin ereld 11damake itmakecom e←←e byacant← not misscfq←we
POST data:

pageURL=https%3A//www.wellsfargo.com/
ids=WF_CON_HP_PRIMARY_BNR,WF_CON_HP_SECONDARY_A_BNR,WF_CON_HP_SECONDARY_B_BNR,WF_CON_HP_SECONDARY_C_BNR
pageID=per_home
tz=480
r=
App_ID=WWW
RequestType=ContentRequest


========================================
Local time: 01.03.2011 05:45:58
Session time: 03:00:54
Report time: 01.03.2011 06:13:09
Process name: C:\Program Files\Mozilla Firefox\firefox.exe
Source: https://www.wellsfargo.com/tas
Type: HTTPS request
Size (bytes): 1 644

----------------------------------------
https://www.wellsfargo.com/tas
Referer: https://www.wellsfargo.com/
User input: [email protected]egiish←←←shkapass n tseegishka zuereeminm tnai hamtlagn tuhai anugs sonssn bs l evgu im shg bnleshd te nzn ends isto unencheer demjjiina haahhneeeh emr hogshirtsiim shg bi lav bdgaaaral bgaa dag kk←←fhimuuyu ebnahrn tegiilda etr ←←←←ghde ta narn ter ued hchl t←nomtoil bh bhda \←←((← zaya bd2 ta nariiga sanaad l bgaashu end...mm za mmhn ghde zun uuulzna gj naidjiiiina←za onoodrinho tailanga taviiiiiiiislobmessy←←sp←[email protected]←←←←khulan batsa←←←←←←←←←←←←←←←←←←←←hulan batsaemnomin cnomin ctselmuunomgantig bat←←←batsaikhangsusan miller march cancer horoscopegtseegishkaoyg←erbugsirritateannoyadmissiontutoringtutorannoysokgcal state←←←←←←stateka←←la.eduelpcalstatelaadmissionafesolo_love58@yahoo.comelpgcalstatela.edu←←elp fall semestertseegishkagwhen is cal sa←tate un←←←←←←←←←ifornia stet←←ate university los aneles←←←←geles fall quarter?tuuguucartoon s←←←←←←←←←←←←←←elpghairiin ereld 11youhairiin ereld 11damake itmakecom e←←e byacant← not misscfq←we
POST data:

ids=WF_CON_HP_PRIMARY_BNR,WF_CON_HP_SECONDARY_A_BNR,WF_CON_HP_SECONDARY_B_BNR,WF_CON_HP_SECONDARY_C_BNR
displayed=CHPPB_HomepagePrimary_pcm_cdsav,CHPSBA_HomepageSecondary_sav_permanenthabit,CHPSBB_HomepageSecondary_mtg_2ndprequalfodmiweghc5,CHPSBC_HomepageSecondary_iau_412
RequestType=ServeConfirm
pageURL=https%3A//www.wellsfargo.com/
pageID=per_home
tz=480
r=
App_ID=WWW


========================================
Local time: 01.03.2011 05:46:10
Session time: 03:01:05
Referer: https://www.wellsfargo.com/
User input: hoo.comtseegiish←←←shkapass n tseegishka zuereeminm tnai hamtlagn tuhai anugs sonssn bs l evgu im shg bnleshd te nzn ends isto unencheer demjjiina haahhneeeh emr hogshirtsiim shg bi lav bdgaaaral bgaa dag kk←←fhimuuyu ebnahrn tegiilda etr ←←←←ghde ta narn ter ued hchl t←nomtoil bh bhda \←←((← zaya bd2 ta nariiga sanaad l bgaashu end...mm za mmhn ghde zun uuulzna gj naidjiiiina←za onoodrinho tailanga taviiiiiiiislobmessy←←sp←[email protected]←←←←khulan batsa←←←←←←←←←←←←←←←←←←←←hulan batsaemnomin cnomin ctselmuunomgantig bat←←←batsaikhangsusan miller march cancer horoscopegtseegishkaoyg←erbugsirritateannoyadmissiontutoringtutorannoysokgcal state←←←←←←stateka←←[email protected]

Click to expand...

========================================
Local time: 15.02.2011 15:57:38
Session time: 42:42:47
Referer: https://www.wellsfargo.com/
User input: en.40←←50Sighn←←n me up for Hex←←←He←←←←←←←←←←←←←←←Hexapo. I only need 6000← more bp to take him.w←ww.←w.←←←←←daybnightfall110255030←enbnightfall1fcccooper1bnightfall12001←←11742003000←400←←←3253363609940←22300175400500360336←←200300400500360←←←←360336100200100336←0336←ccooper1well←←←←←←←←←www.wellsfargo.comcamramhawaiicooper1
POST data:

destination=AccountSummary
userid=camramhawaii
password=cooper1
screenid=SIGNON
origination=WebCons
LOB=Cons
btnSignon=Go
u_p=TF1%3B015%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3BMozilla%3BNetscape%3B5.0%2520%2528Windows%253B%2520en-US%2529%3B20101203%3Bundefined%3Btrue%3BWindows%2520NT%25206.1%3Btrue%3BWin32%3Bundefined%3BMozilla%2F5.0%2520%2528Windows%253B%2520U%253B%2520Windows%2520NT%25206.1%253B%2520en-US%253B%2520rv%253A1.9.2.13%2529%2520Gecko%2F20101203%2520Firefox%2F3.6.13%3Ben-US%3Bundefined%3Bwww.wellsfargo.com%3Bundefined%3Bundefined%3Bundefined%3Bundefined%3Btrue%3Bfalse%3B1297814258635%3B-8%3BTuesday%252C%2520June%252007%252C%25202005%25209%253A33%253A44%2520PM%3B1366%3B768%3B%3B10.0%3B7.6.9%3B1.6.0_17%3B%3B%3B49%3B480%3B420%3BTuesday%252C%2520February%252015%252C%25202011%25203%253A57%253A38%2520PM%3B24%3B1366%3B728%3B0%3B0%3BAdobe%2520Acrobat%257CAdobe%2520PDF%2520Plug-In%2520For%2520Firefox%2520and%2520Netscape%3B%3B%3B%3B%3BShockwave%2520Flash%257CShockwave%2520Flash%252010.0%2520r45%3B%3B%3B%3BQuickTime%2520Plug-in%25207.6.9%257CThe%2520QuickTime%2520Plugin%2520allows%2520you%2520to%2520view%2520a%2520wide%2520variety%2520of%2520multimedia%2520content%2520in%2520Web%2520pages.%2520For%2520more%2520information%252C%2520visit%2520the%2520%253CA%2520HREF%253Dhttp%253A%2F%2Fwww.apple.com%2Fquicktime%2F%253EQuickTime%253C%2FA%253E%2520Web%2520site.%3B%3B%3B%3B%3BSilverlight%2520Plug-In%257C4.0.51204.0%3B%3B%3B%3B15%3B


========================================
Bot ID: HARDY1_B75BA27F644497B0
Botnet: 2
Build: 6
OS Version: XP, SP 2
OS Language: 1033
Local time: 14.02.2011 18:45:34
GMT: -5:00
Session time: 92:56:37
Report time: 15.02.2011 00:05:14
Country/Region/City/Postal code:US
IPv4: 184.13.40.153
Process name: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Source: https://secure.fundsxpress.com/piles/fxweb.pile/accounts/generate_history
Type: HTTPS request
Size (bytes): 918

----------------------------------------
https://secure.fundsxpress.com/piles/fxweb.pile/accounts/generate_history
Referer: https://secure.fundsxpress.com/pile...mber&restart_goto=//accounts/accounts_summary
User input: rclewisrclewis2
POST data:

inst_id=WBIWWV
restart_goto=%2F%2Faccounts%2Faccounts_summary
acc_sort=number
search_field=
Referer: https://www.wellsfargo.com/retirementplan/solutions/
User input: m3ingzionheaven
POST data:

action=cmrLogin
username=m3ing
password=zionheaven
Login=Sign On


========================================
Local time: 13.02.2011 04:51:31
Session time: 00:21:31
Report time: 15.02.2011 00:22:15
Process name: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Source: https://retirementservices.wellsfargo.com/Online/Financial/Business/Service
Type: HTTPS request
Size (bytes): 2 831

----------------------------------------
https://retirementservices.wellsfargo.com/Online/Financial/Business/Service
Referer: https://retirementservices.wellsfargo.com/Online/Financial/Business/Service
User input: m3ingzionheavenm3ing1zionheaven1
POST data:

action=Login
userPrefs=TF1%3B015%3B5%3B8%3B16732%3B6%252C1%252C7600%252C16684%3B6%252C1%252C7600%252C16644%3B%3B%3B%3B8%252C0%252C7600%252C16385%3B%3B%3B8%252C0%252C7600%252C17136%3B%3B8%252C0%252C7600%252C16385%3B6%252C1%252C7600%252C16385%3B12%252C0%252C7600%252C16667%3B%3B8%252C0%252C7600%252C16385%3B6%252C1%252C7600%252C16385%3B%3B5%252C0%252C5000%252C0%3BMozilla%3BMicrosoft%2520Internet%2520Explorer%3B4.0%2520%2528compatible%253B%2520MSIE%25208.0%253B%2520Windows%2520NT%25206.1%253B%2520WOW64%253B%2520Trident%2F4.0%253B%2520GTB6.6%253B%2520SLCC2%253B%2520.NET%2520CLR%25202.0.50727%253B%2520.NET%2520CLR%25203.5.30729%253B%2520.NET%2520CLR%25203.0.30729%253B%2520Media%2520Center%2520PC%25206.0%253B%2520.NET4.0C%253B%2520AskTB5.6%2529%3B0%3Ben-us%3Btrue%3Bx86%3Btrue%3BWin32%3Ben-us%3BMozilla%2F4.0%2520%2528compatible%253B%2520MSIE%25208.0%253B%2520Windows%2520NT%25206.1%253B%2520WOW64%253B%2520Trident%2F4.0%253B%2520GTB6.6%253B%2520SLCC2%253B%2520.NET%2520CLR%25202.0.50727%253B%2520.NET%2520CLR%25203.5.30729%253B%2520.NET%2520CLR%25203.0.30729%253B%2520Media%2520Center%2520PC%25206.0%253B%2520.NET4.0C%253B%2520AskTB5.6%2529%3Ben-us%3Bwindows-1252%3Bretirementservices.wellsfargo.com%3B129%3B129%3Btrue%3B0%3Btrue%3Bfalse%3B1297601491750%3B-8%3BTuesday%252C%2520June%252007%252C%25202005%25209%253A33%253A44%2520PM%3B1017%3B572%3B%3BWIN%252010%252C2%252C152%252C26%3B%3B%3B%3B%3B47%3B480%3B420%3BSunday%252C%2520February%252013%252C%25202011%25204%253A51%253A31%2520AM%3B32%3B1017%3B542%3Bundefined%3Bundefined%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B14%3B
bi=version%3D1%26pm_fpua%3Dmozilla%2F4.0 %28compatible%3B msie 8.0%3B windows nt 6.1%3B wow64%3B trident%2F4.0%3B gtb6.6%3B slcc2%3B .net clr 2.0.50727%3B .net clr 3.5.30729%3B .net clr 3.0.30729%3B media center pc 6.0%3B .net4.0c%3B asktb5.6%29%7C4.0 %28compatible%3B MSIE 8.0%3B Windows NT 6.1%3B WOW64%3B Trident%2F4.0%3B GTB6.6%3B SLCC2%3B .NET CLR 2.0.50727%3B .NET CLR 3.5.30729%3B .NET CLR 3.0.30729%3B Media Center PC 6.0%3B .NET4.0C%3B AskTB5.6%29%7CWin32%7C0%7Cx86%7Cen-us%7C16732%26pm_fpsc%3D32%7C1017%7C572%7C542%26pm_fpsw%3Dabk%3D6%2C1%2C7600%2C16684%7Cwnt%3D6%2C1%2C7600%2C16644%7Cdht%3D8%2C0%2C7600%2C16385%7Cie5%3D8%2C0%2C7600%2C17136%7Cieh%3D8%2C0%2C7600%2C16385%7Ciee%3D6%2C1%2C7600%2C16385%7Cwmp%3D12%2C0%2C7600%2C16667%7Cobp%3D8%2C0%2C7600%2C16385%7Coex%3D6%2C1%2C7600%2C16385%7Cmvm%3D5%2C0%2C5000%2C0%26pm_fptz%3D-8%26pm_fpln%3Dlang%3Den-us%7Csyslang%3Den-us%7Cuserlang%3Den-us%26pm_fpjv%3D1%26pm_fpco%3D1
submitAction=true
outmsg=Invalid
outmsgType=%2F
Userid=m3ing1
Password=zionheaven1
Login=Login


========================================
Local time: 13.02.2011 04:53:46
Session time: 00:23:45
Report time: 15.02.2011 00:22:16
Process name: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Referer: https://www.wellsfargo.com/
User input: 9NSDMNvandy1springsteenfanmountains1
POST data:

destination=AccountSummary
userid=springsteenfan
password=mountains1
screenid=SIGNON
origination=WebCons
LOB=Cons
btnSignon=Go
u_p=TF1%3B015%3B5%3B8%3B22960%3B6%252C0%252C2900%252C5512%3B6%252C0%252C2900%252C5512%3B6%252C0%252C3%252C531%3B6%252C0%252C1%252C223%3B11%252C0%252C5721%252C5145%3B8%252C0%252C6001%252C18702%3B6%252C0%252C1%252C223%3B5%252C0%252C2918%252C1900%3B8%252C0%252C6001%252C18702%3B%3B8%252C0%252C6001%252C18702%3B6%252C0%252C6001%252C18702%3B11%252C0%252C5721%252C5145%3B4%252C4%252C0%252C3400%3B8%252C0%252C6001%252C18702%3B6%252C0%252C2900%252C5512%3B4%252C71%252C1968%252C1%3B5%252C0%252C5000%252C0%3BMozilla%3BMicrosoft%2520Internet%2520Explorer%3B4.0%2520%2528compatible%253B%2520MSIE%25208.0%253B%2520Windows%2520NT%25205.1%253B%2520Trident%2F4.0%253B%2520.NET%2520CLR%25202.0.50727%253B%2520.NET%2520CLR%25203.0.4506.2152%253B%2520.NET%2520CLR%25203.5.30729%2529%3B0%3Ben-us%3Btrue%3Bx86%3Btrue%3BWin32%3Ben-us%3BMozilla%2F4.0%2520%2528compatible%253B%2520MSIE%25208.0%253B%2520Windows%2520NT%25205.1%253B%2520Trident%2F4.0%253B%2520.NET%2520CLR%25202.0.50727%253B%2520.NET%2520CLR%25203.0.4506.2152%253B%2520.NET%2520CLR%25203.5.30729%2529%3Ben-us%3Bwindows-1252%3Bwww.wellsfargo.com%3B96%3B96%3Btrue%3B0%3Btrue%3Bfalse%3B1297788793344%3B-8%3BTuesday%252C%2520June%252007%252C%25202005%25209%253A33%253A44%2520PM%3B1024%3B768%3B%3BWIN%252010%252C0%252C32%252C18%3B%3B%3B%3B%3B265%3B480%3B420%3BTuesday%252C%2520February%252015%252C%25202011%25208%253A53%253A13%2520AM%3B32%3B1024%3B734%3Bundefined%3Bundefined%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B15%3B


========================================
Local time: 15.02.2011 08:53:15
Session time: 149:34:22
Report time: 15.02.2011 17:07:01
Process name: C:\Program Files\Internet Explorer\iexplore.exe
Source: https://online.wellsfargo.com/das/fcs?p=
Type: HTTPS request
Size (bytes): 598

----------------------------------------
https://online.wellsfargo.com/das/fcs?p=
Referer: https://online.wellsfargo.com/das/common/images/bharosa.swf
User input: 9NSDMNvandy1springsteenfanmountains1
POST data:

id=1297788795110
fp=A%3Dt%26SA%3Dt%26SV%3Dt%26EV%3Dt%26MP3%3Dt%26AE%3Dt%26VE%3Dt%26ACC%3Dt%26PR%3Dt%26SP%3Df%26SB%3Df%26DEB%3Df%26V%3DWIN%252010%252C0%252C32%252C18%26M%3DAdobe%2520Windows%26R%3D1024x768%26DP%3D72%26COL%3Dcolor%26AR%3D1%2E0%26OS%3DWindows%2520XP%26ARCH%3Dx86%26L%3Den%26IME%3Dt%26PT%3DActiveX%26AVD%3Df%26LFD%3Df%26WD%3Df%26TLS%3Dt%26ML%3D5%2E1
v=689101%5F32ede91add5d8e1c46632f64a4bb9f29
client=vfc
action=fp


========================================
Local time: 15.02.2011 08:53:17
Session time: 149:34:24
Report time: 15.02.2011 17:07:02
Process name: C:\Program Files\Internet Explorer\iexplore.exe
Referer: https://www.wellsfargo.com/
User input: 2342 Burlington #12missoula youth [email protected]dy1springsteenfanmountains1
POST data:

destination=AccountSummary
userid=springsteenfan
password=mountains1
screenid=SIGNON
origination=WebCons
LOB=Cons
btnSignon=Go
u_p=TF1%3B015%3B5%3B8%3B22960%3B6%252C0%252C2900%252C5512%3B6%252C0%252C2900%252C5512%3B6%252C0%252C3%252C531%3B6%252C0%252C1%252C223%3B11%252C0%252C5721%252C5145%3B8%252C0%252C6001%252C18702%3B6%252C0%252C1%252C223%3B5%252C0%252C2918%252C1900%3B8%252C0%252C6001%252C18702%3B%3B8%252C0%252C6001%252C18702%3B6%252C0%252C6001%252C18702%3B11%252C0%252C5721%252C5145%3B4%252C4%252C0%252C3400%3B8%252C0%252C6001%252C18702%3B6%252C0%252C2900%252C5512%3B4%252C71%252C1968%252C1%3B5%252C0%252C5000%252C0%3BMozilla%3BMicrosoft%2520Internet%2520Explorer%3B4.0%2520%2528compatible%253B%2520MSIE%25208.0%253B%2520Windows%2520NT%25205.1%253B%2520Trident%2F4.0%253B%2520.NET%2520CLR%25202.0.50727%253B%2520.NET%2520CLR%25203.0.4506.2152%253B%2520.NET%2520CLR%25203.5.30729%2529%3B0%3Ben-us%3Btrue%3Bx86%3Btrue%3BWin32%3Ben-us%3BMozilla%2F4.0%2520%2528compatible%253B%2520MSIE%25208.0%253B%2520Windows%2520NT%25205.1%253B%2520Trident%2F4.0%253B%2520.NET%2520CLR%25202.0.50727%253B%2520.NET%2520CLR%25203.0.4506.2152%253B%2520.NET%2520CLR%25203.5.30729%2529%3Ben-us%3Bwindows-1252%3Bwww.wellsfargo.com%3B96%3B96%3Btrue%3B0%3Btrue%3Bfalse%3B1297805770485%3B-8%3BTuesday%252C%2520June%252007%252C%25202005%25209%253A33%253A44%2520PM%3B1024%3B768%3B%3BWIN%252010%252C0%252C32%252C18%3B%3B%3B%3B%3B250%3B480%3B420%3BTuesday%252C%2520February%252015%252C%25202011%25201%253A36%253A10%2520PM%3B32%3B1024%3B734%3Bundefined%3Bundefined%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B%3B15%3B


========================================

Click to expand...