{"report_id":"2807b7c1-28de-4fd7-81a4-9d7d046e1e8e","version":6,"status":"done","tags":[],"date":"2023-11-19T02:01:09Z","url":{"schema":"http","addr":"pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev/signon.html","fqdn":"pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev","domain":"pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.3.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"title":"Sign On to View Your Personal Accounts | Wells Fargo"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T12:44:36Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www15.wellsfargomedia.com","ip":{"addr":"96.6.19.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2009-06-25","domain_rank":20573,"first_seen":"2019-09-12 21:28:23","last_seen":"2023-11-16 02:49:23","alert_count":0,"request_count":3,"received_data":72683,"sent_data":1722,"comment":"","tags":null,"fingerprints":null},{"fqdn":"resources.digital-cloud-prem.medallia.com","ip":{"addr":"151.101.245.230","port":443,"asn":54113,"as":"FASTLY","country":"Finland","country_code":"FI"},"domain_registered":"2000-06-28","domain_rank":21249,"first_seen":"2020-05-14 22:27:20","last_seen":"2023-11-18 20:21:54","alert_count":0,"request_count":1,"received_data":2589,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"udc-neb.kampyle.com","ip":{"addr":"35.241.45.82","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-04-10","domain_rank":3039,"first_seen":"2015-12-24 10:52:27","last_seen":"2023-11-18 20:21:55","alert_count":0,"request_count":2,"received_data":1153,"sent_data":2936,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev","ip":{"addr":"104.18.2.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2023-11-18 19:38:47","last_seen":"2023-11-18 23:55:12","alert_count":1,"request_count":1,"received_data":459,"sent_data":511,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","ip":{"addr":"104.18.2.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2023-11-18 19:39:08","last_seen":"2023-11-19 03:00:24","alert_count":1,"request_count":2,"received_data":29012,"sent_data":1060,"comment":"","tags":null,"fingerprints":null},{"fqdn":"connect.secure.wellsfargo.com","ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1993-04-28","domain_rank":11812,"first_seen":"2017-01-31 16:32:35","last_seen":"2023-11-18 10:23:49","alert_count":0,"request_count":28,"received_data":56948,"sent_data":24863,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.wellsfargo.com","ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1993-04-28","domain_rank":12306,"first_seen":"2015-03-14 23:03:25","last_seen":"2023-11-18 10:23:46","alert_count":0,"request_count":18,"received_data":309854,"sent_data":8639,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www10.wellsfargomedia.com","ip":{"addr":"104.110.9.46","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2009-06-25","domain_rank":35571,"first_seen":"2017-01-30 09:35:44","last_seen":"2023-11-15 03:00:40","alert_count":0,"request_count":2,"received_data":627803,"sent_data":991,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-18","alert":"Wells Fargo \u0026 Company","trigger":"pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev/signon.html","verdict":"phishing","severity":"medium","comment":"Wells Fargo \u0026 Company","link":"https://openphish.com","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-18","alert":"Wells Fargo \u0026 Company","trigger":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","verdict":"phishing","severity":"medium","comment":"Wells Fargo \u0026 Company","link":"https://openphish.com","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?t=DC-2549153","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","size":106326,"data":"","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.2.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3ca36a997a7e2eb1c22d306f354a391","sha1":"3d04f6cbfc5dc22ff7c2dedde66b2ed345049b19","sha256":"4d5a95c5fb6ddc7fbf700cb2de740be804070d72121dd44db9fcb3cc43b59e30","sha512":"e51ffac54b7fdfdb3987952f652a47f65626fae424f654968df2431c897de08f7088caddac671e947e864c61429b7faa0691693d8d955c4641e57a846e9e67b4","ssdeep":"","tlshash":"80c012b7b3c135303ae6153a862051e9202f0c826c5855f69c1994301026edc13b7478","size":186,"data":"","first_seen":"2023-03-07T12:07:14Z","last_seen":"2026-05-05T15:43:09.313435Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.9.js?utv=ut4.48.202108231941","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7d078e49a0d7b507dbff8cf78554ec3","sha1":"89020fd9ed1678f2fd3d97fa6008ba5a5875b1cc","sha256":"34d6af1ed862f62ede259dedabcadba6446c1e9182cd70b19c66cb3acedae93d","sha512":"b2b0124f2d7ab969e80a2b0f10c4d1cce8089191d95946daf48e5dd36550ada1dd59e64aa65452ae5fc9dfe32ed67380a268d45611e9f50cf9d48b33d5d14a74","ssdeep":"192:2bFnNojImVVMwKpTXv161EyzcYr2hjCWCYrQ5+QBHYrQ5rwkxHYrQ5rik/YrQ5rc:2lNsImVVMwKp/oiyzcqTqQ5+8qQ5rwki","tlshash":"1832844cf6f8a53e86f0705c140e4b08b175ba8b19e2494eb9a95c107760cadb5f7b8e","size":11194,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2025-11-11T10:30:37.41875Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.2.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c7210e255f49e5a52b3329d4721295f","sha1":"c5f2fb55ed5146916a6a264b2135514fa7fe87e9","sha256":"c8fd3530e490ccc6f03c7744856abd35b4da057c38a95fe85e7302b5ab3e1e5e","sha512":"bb64bc01096956e9e203a501d4ac82486e093b20e273dfd80cfa934dab0345926f5ed1c5ae202d8cb9ae6b2d5b0a76e7a54cac5bfa734c32d119ce3d7778bccb","ssdeep":"","tlshash":"b5019cb668785a2399279c77c31fa7187c195fe75845c831bacca704bf81887ec8e54c","size":742,"data":"","first_seen":"2023-03-10T21:19:09Z","last_seen":"2025-04-08T11:32:03.966105Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"28118b10e976acfd04c408fd5b2bf75f","sha1":"602467c73559091d2a290028566d92599e85b12b","sha256":"c096151906e12dab59a9ef244248a08b30021d778fd538394bead31aff29d21d","sha512":"a6083f4c573af70a31e4b1658b2a4a7de26a9dc22ed3d393983f384f94ea7c446c7e5129090abc59e0197cd1b63b25825f49739c7fae607c89c428514b5264e0","ssdeep":"","tlshash":"284111ba7e4ae4115113259b2b5bdb09262b60d71c44d68195f8ce90b031b4bdd3bccc","size":1952,"data":"","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-08-20T18:51:20.749418Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/glu.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.7.js?utv=ut4.48.202010230514","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab4745d183b02aecc2f060184d98883d","sha1":"6ea6f3d306bda585b0743f4760d6a9ae368a2c40","sha256":"9c4cf53fef9222fc5d6659fa4b776fe20d64c46886c3d96547aaae16134afb2a","sha512":"2420b5f4e6f6c9c351a6ea65925dd092381c6d7fa641e37a30026b098ccaaaeefa044884c35383626963526c6414e10368b718282e05d4338a92c23eba8db56c","ssdeep":"192:jbFnNojImVVMbpK3TXvUcgbRmYaUshd/3UmNzT5Qad9FMjnpBu4x0allS45/2vNK:jlNsImVVMbpKDBgFAUg/3UsgME","tlshash":"0722525efba8843ec5f67248544e0f00b732b96e88c30889fa946c543350d9eb4b6f5e","size":10463,"data":"","first_seen":"2023-03-07T01:02:39Z","last_seen":"2025-11-11T10:30:37.356939Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.10.js?utv=ut4.48.202102191956","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbc6a7a6729ddbafeb954b2688e4e4bb","sha1":"a18e5362444cd63d08180a035e3d07c52e699f34","sha256":"de5f63b7382d3479f84e396eb2b19ea62be6a30a6292bbf5b95d46716be552c7","sha512":"d31a0b4fd359b8a087a366d14cfbbae6b5f888209f26d7dcb85fb1d6293d4346c3023cae3ac83e7e8d00fc0fb7af44cad2643031a97160f188e0faeba31f1fb0","ssdeep":"384:ilNsImVVMlKpA3easDSgp8ilpin3UPDFGlu:ilKV1nDxp7lgn+DFB","tlshash":"5a92a38cf1b898be41f92818e41f468cf676b68ab4c70c54fb542d887368d4d61b3e6d","size":20670,"data":"","first_seen":"2023-05-10T15:11:47Z","last_seen":"2025-04-08T11:32:03.957072Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.15.js?utv=ut4.48.202109220050","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc23176aa665855c451bceb08ca718e","sha1":"ad9d1d43415aa1800b2f2c024d07e1e9042cfed6","sha256":"384f41d37d3a9be1a72e761589096fcce4119150ea81ead29ba758514d321e94","sha512":"63a059663ef62a8afca74327224947705777f11af3eb23bf9aa0639f13e3dd51c3834dd9af6d202b10bbd7e8da5734e78ff2dc3cea73834ab1d1a099a37e1d2f","ssdeep":"","tlshash":"bd81630df7e9d12ec5b0f82a1cbe0e246051b01b1ca30866b5c5dc0ea398dbdb975e4e","size":3772,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.551054Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ytc/ytc.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5ec882b57df1cff1ede91ddafe202c","sha1":"ba692da656e93b474b2c2559409b6cae1d2a2a76","sha256":"052776ce5bb96d76cced9b9d9d5cc8ab2110e33eaba59f6cd3259642a83ff4d4","sha512":"dbeb2ee98ba87b67496d6c79f5ae277bbae6301fb94cf58f756e49b86c80cdc0a51df3f51a2fabddeb9c995fe45adecb78f9ce13508e16286ec74dadf57bb998","ssdeep":"384:p40C/wTGLq+MYe2LrExHg3FmPS4KtmAshNnyyRgm:s4nRRxhAmKsryyr","tlshash":"5f62d654f2e0f0a543e2a161113fa907b776253d1c6a9460a206dbc4297cecb8276fbe","size":15059,"data":"","first_seen":"2023-03-08T23:14:58Z","last_seen":"2026-02-25T12:49:52.546452Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.2.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5eb5b18af13283537df9c3278aaaa605","sha1":"0623a7f2e7c2102be998df1011a3e77d759d6a8b","sha256":"29b991e2c67037dcbe9658c3e0299476f16273d1367ab8fac398e7816379e536","sha512":"d9a421f813ad48afcf7e957c55921ca2dd60862f60c0d3ba4bf7857e49c6954f3a4dfc20dda22bbd5bc8cf131fca7d9cf96c57f34595368453d4b9b576dde99c","ssdeep":"","tlshash":"d9d05e3410a397b8ea9a0458f22997ea3fbade30b86731101d9f2a010451d0f911c9b0","size":256,"data":"","first_seen":"2023-03-10T21:19:09Z","last_seen":"2025-04-08T11:32:03.966642Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.2.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfc1337a01154745a17ad96b4baee655","sha1":"007b6453f60b4e73948ca5ca6846e8c4b243f90f","sha256":"12d1d59b16c4a29e8903cc4a04b87a367c6c57e6f034aedbba2d3475b5dee8e0","sha512":"62d435d3f4ea496206bea9b61a802cd5f0bdea59fabc668b1b29fa77e110c2374d9d71f2ca38b4f2171913169f13332bc1544fd9df4850154746457f30bbe7db","ssdeep":"768:OYFs3n2BfYfIDfw1vbA8hUOiwMuoKZfrryNtgugPJ:OkDBomw1vUOVMunrGNtg9PJ","tlshash":"f04361cbf2ced5e582020f6c975e1455b7618048c1d86cd2cce9c29abebde0db63e259","size":59818,"data":"","first_seen":"2023-11-19T03:00:52Z","last_seen":"2025-04-08T11:32:03.967202Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.5.js?utv=ut4.48.202202030106","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd4bf818c99ff83fc9ce2156c6be55f","sha1":"26927a92d9bc8ba2b63af7e05eee77578703245d","sha256":"08d354755dc9adefb41c59c46592115a5c76ccd543108ce7c6ab2fb7617a908f","sha512":"c2d7bb5fc0c7516f566f3e7b4c4c382a4eddc794033383af66e0363850cb4d6bf95770d55b1a835044bdee2b2c8e96de8871c691c11a8cadd7cb08d7a40a32ae","ssdeep":"96:lN6taeIpB/yjRdB1OsHML3Hv5G+r904/BDJ/mHq+9gHq+9o4:lNYXIpsVj1DHMo+r9d+B+O4","tlshash":"4cd1938d3d4cf03ec8e4e193d8bf0e741101761349875862a594ae8ea36cdfd9926b0f","size":6096,"data":"","first_seen":"2023-05-10T15:11:47Z","last_seen":"2024-08-21T08:24:40.47658Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.21.js?utv=ut4.49.202210132016","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"389a2b5df08337c70ed0ec2795effdf5","sha1":"169cda9ef1fc39d810d2b4d99d9621a13c1da795","sha256":"050e2aa89c3945fa04373c714347297146adebc89effa9e41c0df8090ba0ed51","sha512":"b9e91f5140bfe2becd680b4cf017bcb85f9212fd05c539e93def2188a9eebe5f951617b7560cb3edb7fe2c850cbcbfd84374dca21287bce4733d452373182bbb","ssdeep":"96:HN6taeIpB/yj8yjyVypxuujFnL3Hv3Geq+rk0E04/BDJ/mH+eH+Ca/:HNYXIpstGspxuQFn6x+rkV3PCC","tlshash":"82a1424d7a88e13ec9b0d112493f0e7820557a171993886275849c4eb328d7de966f4e","size":4560,"data":"","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-09-19T21:40:36.16441Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/generic1697649041190.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"073be3890e20fbdcfcd85ed26864de52","sha1":"92cb3cbeb2e9dd170b716689cb47f433c904918d","sha256":"889a7d5363b778aa5a9ef66112c4da95363031ca6d1909133ef0691d268f7971","sha512":"4467152230b6dcf3a9e143e99e8d0b745b6429c33237081386072e48602aca22961dd34de08272bace9c78a1558795d7b1c6399ca5b8d68660792cfc3a59cbf6","ssdeep":"6144:HFAk6rgSZItMlN7hA1YzTEre/qozC8myMVCm:HFSrgPtMlN7hEYoe/qozCZ","tlshash":"7174f9843fd63128624b176e14af530a2c3732597dd1f588ebadc98030ac9cb7d6bb65","size":364535,"data":"","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-08-20T18:51:20.750835Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/jenny/nd","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e405921d7d55bd84212096d960c67262","sha1":"5ed60be3a05a8dd5a880a1e428742eb9c7934aa6","sha256":"c93ca8d7881a6ddec256992493310b290916f48d38da504e089a8a7fe17d2a6b","sha512":"6f42cf4ec14f8ebbf68d4a8181947c09b1fe662382eac285aaba7f50be0ea82a6983fb8e610e042a30461d2990d14902c1515bb5bd7cd7def7a358dfa5b935ae","ssdeep":"768:6PxFCUcPQPGPnaZkGjUPlxluPoP5PW9P7fUkbzfyvaPWPxP5P9HLwPh0/6BWueHB:kFCU8xLkvkHLoc/escIXt+M","tlshash":"ca333c893675783948f61979403f220b72765f9b78f8e480d699ec702eb898f0117f69","size":54113,"data":"","first_seen":"2023-11-19T03:00:52Z","last_seen":"2023-11-19T03:01:12Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/ga_conversion_async.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a40602db7616a31c9da4548ee920190","sha1":"878e01cb0c90cb247aabc137327655a6fcffcbd5","sha256":"6c771bd1c269646a76015f2f6410a40c031e5adea88f665bfe9ae15a972ab6ab","sha512":"f300ef35835ccfa6cde375b24bd2dcfc8374d6e698e857431bed0404d5dd3634e09c92a0efa7f2015b92a80831c06ae7363f2ebf8407854e04d2970b8363eb48","ssdeep":"384:y8QkSSXI2OCj27cj1Dfo2Y2rJLO+Pv5H9AeHAmvApNkStktL5/CohDAI5jUWZ1V0:y8/Sip1g+zAL1NkW01jZUT0dX2knK","tlshash":"3ef209caba45b06bc3a3a1a4217f4907f37e9d96a888d4d0d941d4807d34bdd02b7fad","size":35889,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-02-25T12:49:52.55026Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.3.js?utv=ut4.48.202112091836","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"afb83cb0c351cf06179a4e19d73ab7be","sha1":"77e67c47f724a1a96839fc4ef843b5366100a62b","sha256":"3636799d3181248d5db968a7851b9aa972ea77f64b3cba9ce6b0a8933106c0c2","sha512":"563cc90e051e133eb73a4f4d6f9f2715590322e4224d20c54a1318828aeb59ed3112c139ebfd7c2396c947070643f0e2ff953ea6633e34de1c9bb9f5405b8c89","ssdeep":"96:UhZWWWNfWB/KGjNGLyYrQbMYrQV3Yr2hMGtCcBhpg7rpGIOWp3r7U8oN98XHUc1u:UhMHfWZYrQbMYrQV3Yr2hbC8X+13rKN9","tlshash":"75c1944df978e22ec6b0b569243e0e34a0f0b9525ad34958b455dc09e324c7c72fbb4e","size":5625,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.536482Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"52ceaa24ff02c7acc2123d516f74ac76","sha1":"854f566a3ded22d56d80856bae40b73185d1dee2","sha256":"8e011261942d9f89c394af6e3ec838beef85c536f43fc8a3d052deed076a5ce7","sha512":"a893536fbf8efb121ccba5c6024db8698f77c9c55ba7e1d639bdbc5c756f6056cb7bb3f1c3d3cf6d1bbe4803185c412de68e9a3755538c0fcf28e39eee884654","ssdeep":"768:EGkqO1zX9zw0pQbNxXMKNkUYTUYsZnER0q4ZVcHDo+CBTR/KKedh1ci:5k/xX9zw0pYNxcKytTtsZER0b3cMTRCl","tlshash":"21f2e80031f8a139c3d171ad544fcf069836b16728f1446aa46c9d88dfa4a0fe5bbfad","size":34545,"data":"","first_seen":"2023-05-10T15:11:47Z","last_seen":"2024-08-21T07:37:55.725328Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.4.js?utv=ut4.48.202108231941","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"15bd844e81d95845c29b50ec9f3e100c","sha1":"b4694ab4ad0384db500c155b371df093790f01f6","sha256":"d05c6eece255484babbedeb74b3a5b19daaa9763049e08362b82cfdf1fc8bfbe","sha512":"3a2f98e778fa0f19261cbc75972fa2c0c85d4723239d853ed44a27c82b9bff98327f811fa2303211043bb549ce19047d200d070e12a283807b0470baa1ca6451","ssdeep":"96:LNTJ2taeIpB/jLvoYrFooYrKaoYrkPEoYrlKXoYrKYrQbfYrQ5Z5YrQ5rikJYrQD:LNTaXIppvoYrFooYrKaoYrMEoYrlCoYM","tlshash":"88c10250f5f97361abb0b4bc284a8e2894de814329f15e9ef079c455863cc2986ff78c","size":5856,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.530515Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"4e44298897ed12cdc10e5302fa781688","sha1":"0f7689264bc63373cb9727382a2241632bc1c3d4","sha256":"90a90a48e23dcc51ad4a821a301e3440ffeb5e986bd69d7bf347a2ba2da23bd3","sha512":"8a19fd11994cb5dcb77f1d184b17e54147f53b6496771a6beb09bf1ba7a98832d0fa9ef8dcff1d645bd6664162a479334f13ba85873131af0152ee9bca8ee982","ssdeep":"","tlshash":"af60000030c000c003030000c0000c00300fc00000000c0000ccc00f0000000003003c","size":12,"data":"","first_seen":"2023-03-12T16:29:09Z","last_seen":"2026-01-18T08:49:05.710483Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev/signon.html","fqdn":"pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev","domain":"pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.2.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-19T02:00:51.150322464Z","timestamp":1700359251150,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /signon.html HTTP/1.1\r\nHost: pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 19 Nov 2023 02:00:49 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"1d4f5afe7dbc8d17e6e59d02326f13d8\"\r\nLast-Modified: Sat, 18 Nov 2023 15:29:08 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8284dc9dda4156a4-OSL\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":141,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"1d4f5afe7dbc8d17e6e59d02326f13d8","sha1":"38cd7ac977c26325b3af6158f43fcfb69eea57f2","sha256":"d710e011dbf4c0e9ad46c57b4463217fda54776ab7c111b78b47a3acedf4d585","sha512":"eea8db43effb6a23ca3f75feaf073fe5c81757746628700862b23f59e58a938181173198cb4d66dd7accf73eb82749243958cb1263cffa2762551e4c2d3b990c","ssdeep":"","tlshash":"1cb09bd78c43c9489b854991c1a1f91c8452426657ccd457c3c44c716289bd94d1d9d9","first_seen":"2023-11-19T03:01:11Z","last_seen":"2024-08-20T18:51:20.706345Z","times_seen":7,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-18","alert":"Wells Fargo \u0026 Company","trigger":"pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev/signon.html","verdict":"phishing","severity":"medium","comment":"Wells Fargo \u0026 Company","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.2.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-11-19T02:00:51.388Z","timestamp":1700359251388,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Oct 2023 17:13:53 GMT","end":"Tue, 09 Jan 2024 17:13:52 GMT"},"fingerprint":{"sha1":"91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF","sha256":"F3:D6:02:91:4C:11:83:7C:7C:FD:D0:A3:86:08:75:A0:37:A4:08:AF:67:24:48:AE:14:4D:D0:BA:8D:6A:19:A9"}}},"request":{"raw":"GET /signon.htm HTTP/1.1\r\nHost: pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-a3a5a8cea3c04c628a089478faa7d611.r2.dev/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"c468de057245c43255e666dd38d589cf\"\r\nLast-Modified: Sat, 18 Nov 2023 16:53:47 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8284dca13b6fb50b-OSL\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26696,"size_decoded":0,"mime_type":"text/html","magic":"PHP script text\\012- HTML document text\\012- HTML document text\\012- HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (18511), with CRLF line terminators","md5":"c468de057245c43255e666dd38d589cf","sha1":"2db5ad87ffab99b26fda6069deb1fd5c6a29e7bc","sha256":"b32732d5447d91b0a04f9bdc5b91f2b7ba202eab794887aa37dad2d955290f4a","sha512":"f84a33e51815bd65f0bd973a3844bce59dba76400ea9d07b15d08168846fe20a6f8b4580e2a8b3c73c0ee9d5fc9251baa8bfa8f01ea215b88767e1b1d30c2f6f","ssdeep":"1536:sb+HecuLRztJA8mMg0nBYqUOg6m/txTsrfxDBomw1vUOVMunrGqtgYgSVF+:uLyqBomw1vprGqtgj","tlshash":"a1a3f9c7e6cdcae586120f98d25d5089b2118008c2d49cd1fdedc259bffee4db92e299","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-08-20T18:51:20.724763Z","times_seen":11,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":18,"dns":0,"connect":1,"send":0,"wait":132,"receive":6,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-18","alert":"Wells Fargo \u0026 Company","trigger":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","verdict":"phishing","severity":"medium","comment":"Wells Fargo \u0026 Company","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/ATADUN/2.2/w/w-642409/init/js/?q=NDX%3A%25pR%20Z*d%20UcHG4Pt6k%3F%22KmP%3Ck%3B0G%3A.y7xpE%3DG%3CAp39dLl%25N%3EKJ%60%5D%27sX5rJ!u%25%3Fr%5E8p.%5ErA4m!3mC5%3E1%3D-h%2C9LL%23lK%3E%7D2eH%3Ca4L1ozMnA%23jQ%5Ec%7B%3A%25%40u%20pC%3E%22%22hlFg%40TuXBp55t%5D)z%23XnOmGPSF7L%2BF%3DnClfQsD6%7D%25)Pu%5Cd-r%27OD0f79j%22c%3CS%5E%7BG(_9vX%25qE7A%7B%3Db%3BX9t5%3Bn9N%2FbLlHQ%3B%60uN)EgyY_t0V%3A%3C%7D%5EKE%5Er4%3A%27g%3Bg%5C%407imewVcr%25teRf_hebAfazc9N%20(Zn49Kbx%60%607%2BcfRwO-zVD%5DD9Q%22%7CzFw%5E%5C9Rdkl0fCT%7D8%2B%7DTMeZ.zW%5CzR%2Bb%3D%27aG9!1-%3Bn3L%5D%5EGn5i%3C%5Bk%5B%20SI%5Bp%5C%22iCzH7J%3EKY!%24J1i%2C%2Fg%24a(F%3CiS%2B%2F%7CMcu%40auRzp.%27P6%40z%24RvL%22%2BWuNGn%3CH1j_Ux4%404%3Cs%20-qB86j6uO3Mw9q9Q2s2lEDh%5B05%3E%20.dBfSHg!%2CfOU%5EV%7DG5y%3Ak1b*3.RB7WS%26JAL%7D%5DcIpX%7D6a%7BCB%2FR%23","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.687Z","timestamp":1700359251687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /ATADUN/2.2/w/w-642409/init/js/?q=NDX%3A%25pR%20Z*d%20UcHG4Pt6k%3F%22KmP%3Ck%3B0G%3A.y7xpE%3DG%3CAp39dLl%25N%3EKJ%60%5D%27sX5rJ!u%25%3Fr%5E8p.%5ErA4m!3mC5%3E1%3D-h%2C9LL%23lK%3E%7D2eH%3Ca4L1ozMnA%23jQ%5Ec%7B%3A%25%40u%20pC%3E%22%22hlFg%40TuXBp55t%5D)z%23XnOmGPSF7L%2BF%3DnClfQsD6%7D%25)Pu%5Cd-r%27OD0f79j%22c%3CS%5E%7BG(_9vX%25qE7A%7B%3Db%3BX9t5%3Bn9N%2FbLlHQ%3B%60uN)EgyY_t0V%3A%3C%7D%5EKE%5Er4%3A%27g%3Bg%5C%407imewVcr%25teRf_hebAfazc9N%20(Zn49Kbx%60%607%2BcfRwO-zVD%5DD9Q%22%7CzFw%5E%5C9Rdkl0fCT%7D8%2B%7DTMeZ.zW%5CzR%2Bb%3D%27aG9!1-%3Bn3L%5D%5EGn5i%3C%5Bk%5B%20SI%5Bp%5C%22iCzH7J%3EKY!%24J1i%2C%2Fg%24a(F%3CiS%2B%2F%7CMcu%40auRzp.%27P6%40z%24RvL%22%2BWuNGn%3CH1j_Ux4%404%3Cs%20-qB86j6uO3Mw9q9Q2s2lEDh%5B05%3E%20.dBfSHg!%2CfOU%5EV%7DG5y%3Ak1b*3.RB7WS%26JAL%7D%5DcIpX%7D6a%7BCB%2FR%23 HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=cTL2IrHgZYMvvF9fOElaMQ%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"f3f3ffbfe944002d9ca2b9eea8874f7e","sha1":"6467e529b88b40b05c68405f8c8657ccf6bf30e3","sha256":"dfccdf4cae09e3c2bc556b6cdbdcb4e036b1f16d90b1775769ad3501513f4be9","sha512":"7b76ba3a451e871702f94ef22d47f61652a61bc1d164469f3399f3a4a532ebf6cf7b25647d355f7bdb7de6697fe510ed5418dbefcd4b8865906b897f75cd2442","ssdeep":"","tlshash":"04c022c8e8732ee0c02004002c8a3a80ac92c112938180a1328081668f0320ccacb213","first_seen":"2023-11-19T03:01:11Z","last_seen":"2023-11-19T03:01:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":37,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/mint.js?dt=login\u0026r=0.7640382844861511","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.759Z","timestamp":1700359251759,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/mint.js?dt=login\u0026r=0.7640382844861511 HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=oZbi6tGbHS6ZJVoOObtmhA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"de63258b1c725d336f0f1ea6b4e420ab","sha1":"2a257ecae7131287f66544aed5aa33e936612918","sha256":"33014b71324e11860348871be31ffb0bb7966b02bdc03dd68b4eb266a9db2af2","sha512":"d6c4df13cebf8f97ca8191e0963b721fc7728a0392d2d7318cf2bc6f7c5135e25c8e9c7ecf5d22ab3cca98f57183881cbd44baf99ba3fd4388b8a504c810453e","ssdeep":"","tlshash":"73c012c9e8632ee1d42155006d8a3a95ed96c156939544a53280816a8f57258ca8b157","first_seen":"2023-11-19T03:01:11Z","last_seen":"2023-11-19T03:01:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/PIDO/pic.js?r=0.8426445611056853","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.760Z","timestamp":1700359251760,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /PIDO/pic.js?r=0.8426445611056853 HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=To81dkM7j381mA7qbQ5m%2fQ%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"eadfe4357986baa5c164621bac091622","sha1":"ce222c97738ba4899c166f5140bc958680008c7e","sha256":"1a87b9f5c9fe1d78f0634a35f7c9c22c508e21780e211e487418de7936b65a09","sha512":"2730a3b6116007ee8a73d77aa6beba3cb6135027d46349e2b78f30519fe3b42d88e16198fad86e56cad7e0ba4ed2609b545564b31c9c781d8559f1196c7c66a5","ssdeep":"","tlshash":"36c012c8e8732ee1d42159406d8a3a55ad96c156839544a5328091668f4725dcacb257","first_seen":"2023-11-19T03:01:11Z","last_seen":"2023-11-19T03:01:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/trx.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.765Z","timestamp":1700359251765,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/trx.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=HCNmjeXhx9GdSiRilTyD9w%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"26f06f17044787cc131ebffc8eb37abd","sha1":"a0a377620efd15bc2ff783658e0921179d27d309","sha256":"2056769b09bb3d816365e547cbce2f32fef005e01ff398ad202a3c2d124850c1","sha512":"9ae8abfdb9206af87ccd8cc8317788302da41537c65934a87b0b487c4d45b84d375442d9e5a5e0c0236f1e99d0805f4d584e3468458194352754e5824244e31d","ssdeep":"","tlshash":"dfc012c8e8632ee1d42159006d8a3a55ad96c15683a544a5328081668f47259ca8b157","first_seen":"2023-11-19T03:01:11Z","last_seen":"2023-11-19T03:01:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?id=AW-984436569","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.706Z","timestamp":1700359251706,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/gtag.js?id=AW-984436569 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Oct 2023 20:05:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65400c94-19f56\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 41174\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=YuqTMDrBkrPcgbDaAW9W3g%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65508)","md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":25,"dns":4,"connect":3,"send":0,"wait":9,"receive":3,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.693Z","timestamp":1700359251693,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/gtag.js?t=UA-107148943-1 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Oct 2023 20:05:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65400c94-19f56\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 41174\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=mdQtFE1KB5mQ+khJP+lenA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65508)","md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":34,"dns":3,"connect":1,"send":0,"wait":14,"receive":4,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?t=AW-984436569","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.702Z","timestamp":1700359251702,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/gtag.js?t=AW-984436569 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Oct 2023 20:05:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65400c94-19f56\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 41174\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=M5TpBOvUZPE5wBrBj5WBLQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65508)","md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":28,"dns":4,"connect":2,"send":0,"wait":10,"receive":20,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/try.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.770Z","timestamp":1700359251770,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/try.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=xJB+KGENOP2WexrV9fD2sA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"bec372304336ee17cad507d8b382466a","sha1":"c8149951a3accf9d4eae7053375b3997ec00154c","sha256":"7feb7ffb2259887842512debc6a5538a14ba9967b6cbe3282f28f81cc83db7f3","sha512":"3217ff23dde09621900e1133a59b5aef832aa26bb018ab273e3554bfbc132cbdc6d2346945f7a16b6168a56d953184ca07e6f59449a453ba758c1d0753362169","ssdeep":"","tlshash":"38c012c8e8632ee1d42159006d8a3a55ed96c156839584a53281c1678f47259ca8b157","first_seen":"2023-11-19T03:01:11Z","last_seen":"2023-11-19T03:01:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?t=DC-2549153","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.698Z","timestamp":1700359251698,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/gtag.js?t=DC-2549153 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Oct 2023 20:05:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65400c94-19f56\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 41174\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=RI0X%2fEuipWx5uhUkfwikog%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65508)","md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":29,"dns":1,"connect":11,"send":0,"wait":18,"receive":32,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/ga_conversion_async.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.689Z","timestamp":1700359251689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/ga_conversion_async.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 09 Sep 2021 17:30:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"613a44c0-8c31\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 13593\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=MU7wKrCWH23fULqMu4L05w%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13593,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (35846)","md5":"0a40602db7616a31c9da4548ee920190","sha1":"878e01cb0c90cb247aabc137327655a6fcffcbd5","sha256":"6c771bd1c269646a76015f2f6410a40c031e5adea88f665bfe9ae15a972ab6ab","sha512":"f300ef35835ccfa6cde375b24bd2dcfc8374d6e698e857431bed0404d5dd3634e09c92a0efa7f2015b92a80831c06ae7363f2ebf8407854e04d2970b8363eb48","ssdeep":"384:y8QkSSXI2OCj27cj1Dfo2Y2rJLO+Pv5H9AeHAmvApNkStktL5/CohDAI5jUWZ1V0:y8/Sip1g+zAL1NkW01jZUT0dX2knK","tlshash":"3ef209caba45b06bc3a3a1a4217f4907f37e9d96a888d4d0d941d4807d34bdd02b7fad","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-02-25T12:49:52.55026Z","times_seen":45,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":39,"dns":1,"connect":11,"send":0,"wait":53,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ytc/ytc.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.707Z","timestamp":1700359251707,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ytc/ytc.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 15 Jul 2021 21:00:28 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"60f0a1ec-3ad3\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 5614\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=J6s4SD%2fjx19raMkDExwvGQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5614,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (15032)","md5":"7a5ec882b57df1cff1ede91ddafe202c","sha1":"ba692da656e93b474b2c2559409b6cae1d2a2a76","sha256":"052776ce5bb96d76cced9b9d9d5cc8ab2110e33eaba59f6cd3259642a83ff4d4","sha512":"dbeb2ee98ba87b67496d6c79f5ae277bbae6301fb94cf58f756e49b86c80cdc0a51df3f51a2fabddeb9c995fe45adecb78f9ce13508e16286ec74dadf57bb998","ssdeep":"384:p40C/wTGLq+MYe2LrExHg3FmPS4KtmAshNnyyRgm:s4nRRxhAmKsryyr","tlshash":"5f62d654f2e0f0a543e2a161113fa907b776253d1c6a9460a206dbc4297cecb8276fbe","first_seen":"2023-03-08T23:14:58Z","last_seen":"2026-02-25T12:49:52.546452Z","times_seen":40,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":40,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.3.js?utv=ut4.48.202112091836","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.729Z","timestamp":1700359251729,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.3.js?utv=ut4.48.202112091836 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 03 Dec 2020 23:04:06 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"5fc96ee6-15f9\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 2186\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=SWIJaOy7YtTZ3o1+oAdG4w%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2186,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1022)","md5":"afb83cb0c351cf06179a4e19d73ab7be","sha1":"77e67c47f724a1a96839fc4ef843b5366100a62b","sha256":"3636799d3181248d5db968a7851b9aa972ea77f64b3cba9ce6b0a8933106c0c2","sha512":"563cc90e051e133eb73a4f4d6f9f2715590322e4224d20c54a1318828aeb59ed3112c139ebfd7c2396c947070643f0e2ff953ea6633e34de1c9bb9f5405b8c89","ssdeep":"96:UhZWWWNfWB/KGjNGLyYrQbMYrQV3Yr2hMGtCcBhpg7rpGIOWp3r7U8oN98XHUc1u:UhMHfWZYrQbMYrQV3Yr2hbC8X+13rKN9","tlshash":"75c1944df978e22ec6b0b569243e0e34a0f0b9525ad34958b455dc09e324c7c72fbb4e","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.536482Z","times_seen":33,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":7,"connect":12,"send":0,"wait":73,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.4.js?utv=ut4.48.202108231941","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.732Z","timestamp":1700359251732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.4.js?utv=ut4.48.202108231941 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Sep 2021 21:00:33 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"614ceaf1-16e0\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 1663\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=9jkWw8iPc3+GIxruyGFI4A%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1663,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4209)","md5":"15bd844e81d95845c29b50ec9f3e100c","sha1":"b4694ab4ad0384db500c155b371df093790f01f6","sha256":"d05c6eece255484babbedeb74b3a5b19daaa9763049e08362b82cfdf1fc8bfbe","sha512":"3a2f98e778fa0f19261cbc75972fa2c0c85d4723239d853ed44a27c82b9bff98327f811fa2303211043bb549ce19047d200d070e12a283807b0470baa1ca6451","ssdeep":"96:LNTJ2taeIpB/jLvoYrFooYrKaoYrkPEoYrlKXoYrKYrQbfYrQ5Z5YrQ5rikJYrQD:LNTaXIppvoYrFooYrKaoYrMEoYrlCoYM","tlshash":"88c10250f5f97361abb0b4bc284a8e2894de814329f15e9ef079c455863cc2986ff78c","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.530515Z","times_seen":33,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.5.js?utv=ut4.48.202202030106","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.735Z","timestamp":1700359251735,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.5.js?utv=ut4.48.202202030106 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 28 Mar 2023 20:08:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6423493b-17d0\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 2228\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=HwMkgLB6CxShsYTjkZYZCw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1438)","md5":"4cd4bf818c99ff83fc9ce2156c6be55f","sha1":"26927a92d9bc8ba2b63af7e05eee77578703245d","sha256":"08d354755dc9adefb41c59c46592115a5c76ccd543108ce7c6ab2fb7617a908f","sha512":"c2d7bb5fc0c7516f566f3e7b4c4c382a4eddc794033383af66e0363850cb4d6bf95770d55b1a835044bdee2b2c8e96de8871c691c11a8cadd7cb08d7a40a32ae","ssdeep":"96:lN6taeIpB/yjRdB1OsHML3Hv5G+r904/BDJ/mHq+9gHq+9o4:lNYXIpsVj1DHMo+r9d+B+O4","tlshash":"4cd1938d3d4cf03ec8e4e193d8bf0e741101761349875862a594ae8ea36cdfd9926b0f","first_seen":"2023-05-10T15:11:47Z","last_seen":"2024-08-21T08:24:40.47658Z","times_seen":16,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/ay6u?d=JTVCJTdCJTIyaWQlMjIlM0ElMjIxNSUyMiUyQyUyMmRhdGElMjIlM0ElN0IlMjJyZWYlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmNvbm5lY3Quc2VjdXJlLndlbGxzZmFyZ28uY29tJTJGYXV0aCUyRmxvZ2luJTJGcHJlc2VudCUzRm9yaWdpbiUzRGNvYiUyNkxPQiUzRENPTlMlMjIlN0QlN0QlMkMlN0IlMjJpZCUyMiUzQSUyMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMnMlMjIlM0ElMjJhYWY5NTg4OS0yMDZiLTQ1N2UtOWQzNC0xMGE0NDYwY2U3YTUlMjIlN0QlN0QlNUQ%3D\u0026cid=15%2C28\u0026si=3\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=tasfxhz_xfidlmov\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.772Z","timestamp":1700359251772,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/ay6u?d=JTVCJTdCJTIyaWQlMjIlM0ElMjIxNSUyMiUyQyUyMmRhdGElMjIlM0ElN0IlMjJyZWYlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmNvbm5lY3Quc2VjdXJlLndlbGxzZmFyZ28uY29tJTJGYXV0aCUyRmxvZ2luJTJGcHJlc2VudCUzRm9yaWdpbiUzRGNvYiUyNkxPQiUzRENPTlMlMjIlN0QlN0QlMkMlN0IlMjJpZCUyMiUzQSUyMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMnMlMjIlM0ElMjJhYWY5NTg4OS0yMDZiLTQ1N2UtOWQzNC0xMGE0NDYwY2U3YTUlMjIlN0QlN0QlNUQ%3D\u0026cid=15%2C28\u0026si=3\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=tasfxhz_xfidlmov\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=LGldY%2fWbEKbS5e05%2fCX%2fKw%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"c4bc3cbad68a0a5755ee61fb11b7994e","sha1":"16a2e428613e66c63b40550b223f24a61c5f2924","sha256":"0caf7565cf9c7dbb7214848838f925ab4715de4b105d06ea18c729a1ed529ee0","sha512":"7670568a7a87f5568718fcd59cb7f74e925c66f28ee50701c1b192e31a83fafec964db41a7c7cc81da841bc59af74d919dbcd6e8596bfd5d9be1cde99574f9be","ssdeep":"","tlshash":"65c080c8ec732ee1d42155406dca3b55ed96c15683d544b53280d1778f4765ccacf257","first_seen":"2023-11-19T03:01:11Z","last_seen":"2023-11-19T03:01:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.7.js?utv=ut4.48.202010230514","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.737Z","timestamp":1700359251737,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.7.js?utv=ut4.48.202010230514 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 28 Oct 2020 21:48:43 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"5f99e73b-28df\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 3220\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=KLCA0beA09nAd9nwOa0Dxg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3220,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1579)","md5":"ab4745d183b02aecc2f060184d98883d","sha1":"6ea6f3d306bda585b0743f4760d6a9ae368a2c40","sha256":"9c4cf53fef9222fc5d6659fa4b776fe20d64c46886c3d96547aaae16134afb2a","sha512":"2420b5f4e6f6c9c351a6ea65925dd092381c6d7fa641e37a30026b098ccaaaeefa044884c35383626963526c6414e10368b718282e05d4338a92c23eba8db56c","ssdeep":"192:jbFnNojImVVMbpK3TXvUcgbRmYaUshd/3UmNzT5Qad9FMjnpBu4x0allS45/2vNK:jlNsImVVMbpKDBgFAUg/3UsgME","tlshash":"0722525efba8843ec5f67248544e0f00b732b96e88c30889fa946c543350d9eb4b6f5e","first_seen":"2023-03-07T01:02:39Z","last_seen":"2025-11-11T10:30:37.356939Z","times_seen":24,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.10.js?utv=ut4.48.202102191956","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.747Z","timestamp":1700359251747,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.10.js?utv=ut4.48.202102191956 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 13 Feb 2023 21:04:12 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"63eaa5cc-50be\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 5672\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=+T6VYzn6CZ2kIdzn5MKm+Q%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5672,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2575)","md5":"cbc6a7a6729ddbafeb954b2688e4e4bb","sha1":"a18e5362444cd63d08180a035e3d07c52e699f34","sha256":"de5f63b7382d3479f84e396eb2b19ea62be6a30a6292bbf5b95d46716be552c7","sha512":"d31a0b4fd359b8a087a366d14cfbbae6b5f888209f26d7dcb85fb1d6293d4346c3023cae3ac83e7e8d00fc0fb7af44cad2643031a97160f188e0faeba31f1fb0","ssdeep":"384:ilNsImVVMlKpA3easDSgp8ilpin3UPDFGlu:ilKV1nDxp7lgn+DFB","tlshash":"5a92a38cf1b898be41f92818e41f468cf676b68ab4c70c54fb542d887368d4d61b3e6d","first_seen":"2023-05-10T15:11:47Z","last_seen":"2025-04-08T11:32:03.957072Z","times_seen":27,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.9.js?utv=ut4.48.202108231941","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.750Z","timestamp":1700359251750,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.9.js?utv=ut4.48.202108231941 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Sep 2021 21:00:33 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"614ceaf1-2bba\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 3522\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=6mRpBTo%2fCSVdxBSjyuj0Cw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3237)","md5":"b7d078e49a0d7b507dbff8cf78554ec3","sha1":"89020fd9ed1678f2fd3d97fa6008ba5a5875b1cc","sha256":"34d6af1ed862f62ede259dedabcadba6446c1e9182cd70b19c66cb3acedae93d","sha512":"b2b0124f2d7ab969e80a2b0f10c4d1cce8089191d95946daf48e5dd36550ada1dd59e64aa65452ae5fc9dfe32ed67380a268d45611e9f50cf9d48b33d5d14a74","ssdeep":"192:2bFnNojImVVMwKpTXv161EyzcYr2hjCWCYrQ5+QBHYrQ5rwkxHYrQ5rik/YrQ5rc:2lNsImVVMwKp/oiyzcqTqQ5+8qQ5rwki","tlshash":"1832844cf6f8a53e86f0705c140e4b08b175ba8b19e2494eb9a95c107760cadb5f7b8e","first_seen":"2023-03-07T01:02:38Z","last_seen":"2025-11-11T10:30:37.41875Z","times_seen":23,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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\u0026cid=15%2C8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=lawigr_kbuauxo_m\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.774Z","timestamp":1700359251774,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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\u0026cid=15%2C8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=lawigr_kbuauxo_m\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=YqA4lkb%2fJ2O6257fp617SA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"325cc4a1825eb4ec2b21d5c924d2d8be","sha1":"e224bc441ba54d42cf169caf58b19f8f758e5c1c","sha256":"96d9ec49197257b9c70a5e5a432e0012f294658bfbd80b7bb5acb064594454f2","sha512":"ab65cb5b99a7b11740f55ecb3014f57c033afbeca650a9f457811015d5a57c8a48448df38fe3ef3f5b0fb1e6062a9cf7dd217e1c9e257f046f0f78c18f3fc876","ssdeep":"","tlshash":"fdc012c8e9632ee1d42155006d8a3e55a996c156879544a5328481668f47258cb8b167","first_seen":"2023-11-19T03:01:11Z","last_seen":"2023-11-19T03:01:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":5,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.034Z","timestamp":1700359252034,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Sat, 01 Apr 2023 00:40:10 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"64277d6a-86f1\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 10216\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=teOwXnhDvjsxrFiVbZOqzw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10216,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (4327), with CRLF line terminators","md5":"52ceaa24ff02c7acc2123d516f74ac76","sha1":"854f566a3ded22d56d80856bae40b73185d1dee2","sha256":"8e011261942d9f89c394af6e3ec838beef85c536f43fc8a3d052deed076a5ce7","sha512":"a893536fbf8efb121ccba5c6024db8698f77c9c55ba7e1d639bdbc5c756f6056cb7bb3f1c3d3cf6d1bbe4803185c412de68e9a3755538c0fcf28e39eee884654","ssdeep":"768:EGkqO1zX9zw0pQbNxXMKNkUYTUYsZnER0q4ZVcHDo+CBTR/KKedh1ci:5k/xX9zw0pYNxcKytTtsZER0b3cMTRCl","tlshash":"21f2e80031f8a139c3d171ad544fcf069836b16728f1446aa46c9d88dfa4a0fe5bbfad","first_seen":"2023-05-10T15:11:47Z","last_seen":"2024-08-21T07:37:55.725328Z","times_seen":14,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.15.js?utv=ut4.48.202109220050","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.753Z","timestamp":1700359251753,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.15.js?utv=ut4.48.202109220050 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Sep 2021 21:00:33 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"614ceaf1-ebc\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 1682\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=6BMXfj5YxxV+mnb1q+SbAw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1682,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1142)","md5":"ecc23176aa665855c451bceb08ca718e","sha1":"ad9d1d43415aa1800b2f2c024d07e1e9042cfed6","sha256":"384f41d37d3a9be1a72e761589096fcce4119150ea81ead29ba758514d321e94","sha512":"63a059663ef62a8afca74327224947705777f11af3eb23bf9aa0639f13e3dd51c3834dd9af6d202b10bbd7e8da5734e78ff2dc3cea73834ab1d1a099a37e1d2f","ssdeep":"","tlshash":"bd81630df7e9d12ec5b0f82a1cbe0e246051b01b1ca30866b5c5dc0ea398dbdb975e4e","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.551054Z","times_seen":32,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjIyMCUyMiUyQyUyMmRhdGElMjIlM0ElN0IlMjJkdCUyMiUzQSUyMmdkaWQlMjIlMkMlMjJnJTIyJTNBJTIybDR3bm1iY2Q3a2hla3h2ZGR1ayUyMiUyQyUyMmNpZCUyMiUzQSUyMjIwJTIyJTdEJTdEJTVE\u0026cid=20\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=dklzlamqibulxmua\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.775Z","timestamp":1700359251775,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjIyMCUyMiUyQyUyMmRhdGElMjIlM0ElN0IlMjJkdCUyMiUzQSUyMmdkaWQlMjIlMkMlMjJnJTIyJTNBJTIybDR3bm1iY2Q3a2hla3h2ZGR1ayUyMiUyQyUyMmNpZCUyMiUzQSUyMjIwJTIyJTdEJTdEJTVE\u0026cid=20\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=dklzlamqibulxmua\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=zY%2fV4tAh0WTRSDWiR7SUJg%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"de833ff9a9f791fcc4a3e715fb8b3635","sha1":"463ddac6192d7effc150431aa12020eb87fe6db0","sha256":"1a2fb1a097113f7d905f20f44b2717e0a5a900a1e87b0ff20724e32afa0d897d","sha512":"14254292f5bc84fb3207050bf48f89df69feda5a09083f3f7d6fc38a1f76998dd806e0764b62bbbdb55666986ccd593738a8f32f2e8571767ebbb534dfff2829","ssdeep":"","tlshash":"42c012c8e8632ee1d42155006d8a3a55a996c156839544a5328481668f4b259ca8b167","first_seen":"2023-11-19T03:01:11Z","last_seen":"2023-11-19T03:01:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=esdkbhzwxugbfrfa\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.777Z","timestamp":1700359251777,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=esdkbhzwxugbfrfa\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=WBJEWIEg9PFBr10Brdhc7g%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"72e834feb28bdc51de3b01261dcdff99","sha1":"b3ae9b39048c73f7747de3c0059eb9126b9218ac","sha256":"28d3c2ef33c5011e9dee2aaad0918bb0ee9762b6abf6ada8edbdc93039eeb945","sha512":"b5250f12f4193e0bac3a9ab516f267008c67f9a7ac458b8a7801e3f2604595a8a7b1d83621cbf9f1793f8616c1ec011f58e88fdbe8ef081befeff30112d37f20","ssdeep":"","tlshash":"ccc080c9ec733ee5d42155006dca3f55ed96c15683d644f53280c1678f4725dcacb157","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=zpuevxekebkkqzyz\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.778Z","timestamp":1700359251778,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=zpuevxekebkkqzyz\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=hgjeZ4CTj7WrH8FKHL6iOA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"00dc8c76f2c432959ce9d5a6b43bbe36","sha1":"b193e10113da1d788d2cafbc21cf7f0d7ecb7179","sha256":"58356d1da1d7b25f74a354f838691eaf03b0659a281ed37bb0859c32db7c2411","sha512":"baa015665e0722da1c3fc67f75a71f4585e48a30dc918ba1551220bce5e27c0e119cd9e6ff7c74beaff32da019bfd86a66b9109a5aa71f80e672f2a8f07ebeab","ssdeep":"","tlshash":"cec022c8e8632ee0c02004002c8a3e40e8a2c212838140b0328081628f07248ca8b113","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www10.wellsfargomedia.com/auth/static/images/COB-BOB-IRT-enroll_balloons.jpg","fqdn":"www10.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.9.46","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.030Z","timestamp":1700359252030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www10.wellsfargomedia.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Feb 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"01:8C:11:B0:3A:3C:49:43:DF:06:F0:63:93:3D:DD:18:5A:6F:B1:13","sha256":"F5:50:C1:11:46:7C:02:00:F7:70:30:CE:8F:C8:3C:A8:6B:ED:89:B3:CF:27:7B:8D:B4:24:D8:74:0D:47:35:52"}}},"request":{"raw":"GET /auth/static/images/COB-BOB-IRT-enroll_balloons.jpg HTTP/1.1\r\nHost: www10.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 625433\r\nlast-modified: Mon, 31 Jul 2023 21:07:59 GMT\r\netag: \"64c822af-98b19\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-security-policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp\r\naccess-control-allow-methods: POST\r\nallow: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: Mon, 18 Mar 2024 02:00:50 GMT\r\ndate: Sun, 19 Nov 2023 02:00:50 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 2400x1600, components 3\\012- data","md5":"a7beec55acf059f8f2e69b35fd93a671","sha1":"e3c3d2cc20962e77be670f7f7e9f08d855f9feba","sha256":"b8325d272c72a041414d9fb349e9d4bca5e7fc8ad66f47a719e491960afa5683","sha512":"61438965afbde68b9ee7655887e1b55d190b1826585dd678efa4d460b7b85442522f7cd5481adabf4b66a2fd5f4b7df7cb398bb0a7e2cbe0afe6fbe20a116b6e","ssdeep":"12288:zG54feLIvIn0l5o3ZEczyUA1LOhJLzEg8w0Czs6jACo50HO6f+nweTVN:zGymEgpvJ9LQghXo6j3mWOeef","tlshash":"bcd4234156d225f0efe872b4003a896a9973bfcd20c9ae5d070ff81876de695fe845b0","first_seen":"2023-05-10T08:35:51Z","last_seen":"2026-05-05T15:43:09.298283Z","times_seen":140,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":10,"connect":2,"send":0,"wait":2,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/stylesheets/wfui.5d3fa5b6daab852c2a31.chunk.css","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.712Z","timestamp":1700359251712,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/static/ui/loginaltsignon/public/stylesheets/wfui.5d3fa5b6daab852c2a31.chunk.css HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nContent-Length: 16482\r\nLast-Modified: Wed, 08 Jun 2022 01:32:21 GMT\r\nVary: Accept-Encoding\r\nETag: \"629ffc25-4062\"\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp\r\nCache-Control: max-age=10368000\r\nAccess-Control-Allow-Methods: POST\r\nAllow: GET, POST, OPTIONS\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=AQBzi5QUibERmokBQ1q%2fHg%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16482,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7eacd065e8320eabb4f66e807ba3b9ce","sha1":"a0f64e27a7cb68015959154fadde15ab85a08c1d","sha256":"fea85638d902b7d705d72aa9776531c035371a16774f0e52be50c0638c6eb110","sha512":"0aa922afc5b96cb79f83d9994c3455b7df449d0357ba6aa324cab50629af00324151c0bf74f210f25798a0f7f92b75281a1769c6d7c7dca01fad6c3c139eea76","ssdeep":"3072:+VqqJrgVxzDUDE4Q/G/C/MIQPGPCPMgQeGeCeMQQPGPCPM7LOjF7wW4dRrmSxWMl:EgVxzDUDE4Q/G/C/MIQPGPCPMgQeGeCy","tlshash":"2aa3c8f56e0a5d39d037943ff183f8449e37c7216a253f6afda1a86483c3291572638a","first_seen":"2023-04-24T07:46:10Z","last_seen":"2025-04-08T11:32:03.947177Z","times_seen":58,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":144,"receive":1,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/stylesheets/main.b3b5f355e18c2c42a801.chunk.css","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.714Z","timestamp":1700359251714,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/static/ui/loginaltsignon/public/stylesheets/main.b3b5f355e18c2c42a801.chunk.css HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nContent-Length: 2005\r\nLast-Modified: Wed, 08 Jun 2022 01:52:18 GMT\r\nVary: Accept-Encoding\r\nETag: \"62a000d2-7d5\"\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp\r\nCache-Control: max-age=10368000\r\nAccess-Control-Allow-Methods: POST\r\nAllow: GET, POST, OPTIONS\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=F169IXg+GMyXDvLvLAZSCQ%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2005,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11856), with no line terminators","md5":"89c57e64334b3c479c26cf0dd1971fad","sha1":"259db957ed72c84154021c09ba48ceaa8c49de7a","sha256":"5e68ea9ca9cce32f91979f88142e963f0ff950cc1f1b6c3246eaaaf2f3091c58","sha512":"7325e5b5f7c56b46469f091a37104b380eb9e02be6898123ecfcdb7cc417b9ec8f8bd38f205163d84add06c3318c5090824281347d84908a8dbcc6191f7ca387","ssdeep":"192:2Ba5xoAJtcubCMuWbn6OiF94LH7dhqbz+FcWRsgd93K79C3URJK9Rvg762tpDd6k:2Ba5xjtcubCMFbn6OiF94LH7d79Zu","tlshash":"963252eb8b8102dccc3b8c8f74c3d4456c1f681efa8a149ee9da69a09bd71451631fd2","first_seen":"2023-04-24T07:46:10Z","last_seen":"2025-04-08T11:32:03.941068Z","times_seen":64,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":7,"connect":13,"send":0,"wait":143,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=stdgds_icz__zvhk\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.780Z","timestamp":1700359251780,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=stdgds_icz__zvhk\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=tZATPJDqopqU+HVobm+nZQ%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"92d81edcde007331452972054903e895","sha1":"a9861b924af63a3750cbef393989b29a79ac7d00","sha256":"1a24c90ed0ea9a12cab3c0d8a129f54bb5c500a05cdb7ceae761165201b770aa","sha512":"da4c8dc7b872c8c6d1b3a7ec3026cda5a5cb532de083890924d2d156c02b154a9c1850fe30fa03ac0801b822b4d519d3d9d7042e989d5cdfd1f499dad2c8b3d2","ssdeep":"","tlshash":"dec080c8ec732ee1d42155406dca3f55fd96c15683d544b53280c2678f4765ccacb257","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":210,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=tmhuhxuddiamtoys\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.819Z","timestamp":1700359251819,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=tmhuhxuddiamtoys\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=lc30wojDHTN3o9LlAtlqlw%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"f50a0953d09410edf27c48a86def2996","sha1":"87862074e954548c2baa29a92202a5bd600bc49d","sha256":"d7967aacdfb25e7d49afd9d6bd1e125e45b6a022803017b122b9600b0e49c141","sha512":"39f79b768a6dada67a08d097ade16dd9fae248479eb86a722dc5d544189710cad271ead8f9be18aade95044bcd6ccf9d1e5fb6b806685232f672925fc99baada","ssdeep":"","tlshash":"9ac012c8e8632ee5d42155006d8a3a55a996c156839544a53281c16b8f4b258ca8b157","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=lqrrtixbvptwrupv\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.017Z","timestamp":1700359252017,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=lqrrtixbvptwrupv\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=jxVztFxWHLL34H+BCI%2fBuA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"12920539205a332b19a87504c5697eb8","sha1":"bf0b73efda9d559f7defdde1818a6c98f62b546a","sha256":"993433125e850fde71f7a7443c3d52c75d060dc3de976489b2d1fee1af526675","sha512":"876c85bbd53668dea65aed5a031cd19e0023a91a13a55012e82a2aa155b1d3daa590569c556a78d5a7a803037cb27d992240ef5a135767dc1b9fe00ac5c82ad6","ssdeep":"","tlshash":"11c012c8e8632ee1d42155006d8a3a55ad96d156839554a5328081668f4725cca8b157","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=pgvvbn_cpqputmas\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.019Z","timestamp":1700359252019,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMmNpZCUyMiUzQSUyMjglMjIlMkMlMjJ1JTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZjb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbSUyRmF1dGglMkZsb2dpbiUyRnByZXNlbnQlM0ZvcmlnaW4lM0Rjb2IlMjZMT0IlM0RDT05TJTIyJTJDJTIyciUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGY29ubmVjdC5zZWN1cmUud2VsbHNmYXJnby5jb20lMkZhdXRoJTJGbG9naW4lMkZwcmVzZW50JTNGb3JpZ2luJTNEY29iJTI2TE9CJTNEQ09OUyUyMiUyQyUyMnBpZCUyMiUzQTQ0NzkyNDc3MCUyQyUyMmZjJTIyJTNBMSUyQyUyMmNudW0lMjIlM0E5JTJDJTIydHMlMjIlM0ExNjU2MzI5NjUyNDM0JTJDJTIydCUyMiUzQSU3QiUyMnQlMjIlM0ElMjJsb2dpbiUyMiU3RCUyQyUyMnJhbmQlMjIlM0E4OTg1OTclN0QlN0QlNUQ%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=pgvvbn_cpqputmas\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=AL6gBD8m+fUr5iqBuBP1Yw%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"67fa41767295fa59f7026ea75b05b4b4","sha1":"a0853a82980b7d71d9c2286a69d55f21ca1bc2f6","sha256":"942bf3fc7785c53fa1ad070c569d20128765e89596498f7db1b9180c249f4ceb","sha512":"0b5d23b333308381f7911f257e0b89f2798aec8f046f106da5510950d77932d00ca04971c1c3f6676f6479099fe71259bfd542fb351179f6c18c4b70c1c9be92","ssdeep":"","tlshash":"3cc012c8e8632ee1d42155006d8a3a55a996d15687d554a5328081a68f47258ca8b157","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=fpkngzkdahnngdzl\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.021Z","timestamp":1700359252021,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMmNpZCUyMiUzQSUyMjglMjIlMkMlMjJ1JTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZjb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbSUyRmF1dGglMkZsb2dpbiUyRnByZXNlbnQlM0ZvcmlnaW4lM0Rjb2IlMjZMT0IlM0RDT05TJTIyJTJDJTIyciUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGY29ubmVjdC5zZWN1cmUud2VsbHNmYXJnby5jb20lMkZhdXRoJTJGbG9naW4lMkZwcmVzZW50JTNGb3JpZ2luJTNEY29iJTI2TE9CJTNEQ09OUyUyMiUyQyUyMnBpZCUyMiUzQTQ0NzkyNDc3MCUyQyUyMmZjJTIyJTNBMCUyQyUyMmNudW0lMjIlM0ExMCUyQyUyMnRzJTIyJTNBMTY1NjMyOTY1NTg3NyUyQyUyMnQlMjIlM0ElN0IlMjJ0JTIyJTNBJTIybG9naW4lMjIlN0QlMkMlMjJyYW5kJTIyJTNBMzM2Mjk2JTdEJTdEJTVE\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=fpkngzkdahnngdzl\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=OG74iI7mcMDTGw5LajJovg%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"654d0b1139f455e44625be8b993fd4dc","sha1":"8357479740783d9ef7e4b0ad0618e81623cfdb3e","sha256":"a8059d859b489a55afca72b0967167b44783119050ae601ea1d8b2fbb0261d61","sha512":"81e72ed2af3a571b7b03b6cda0a5d8a5d443861cdb611f35760afd9134cc291a720e9363c16e151948db732d47feb66c847cc328dc388aaf1e806048d0a27191","ssdeep":"","tlshash":"fdc022c8e8632ee0c02044006c8a3a44a892c152838140a0328081628f47208ca8b123","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=mkelibaqu_rvuwbv\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.022Z","timestamp":1700359252022,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=mkelibaqu_rvuwbv\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=RJFhR8kZDkFL+aB7z03rQA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"47e2ac982134bb74ee2f600da2088f67","sha1":"bf31ea5ee58e68336e7341ddde03cfe0cb0bb7c8","sha256":"ff72668b590abde2c79e8fae3221c8ed8c51f030b6e93293021c49f1bb7d5c83","sha512":"6a6b17bd17392bbd3384661b02052f0c52af3cec32d37a66f939bbfc252375a0f3380b41bae799be752dd4bd81ebd78624410aedbc203bb4796e2b897326bebe","ssdeep":"","tlshash":"bac080c9ec733ee1d42155406dca3b95fd96c16683d644b532c0c1678f4725ccacb257","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMmNpZCUyMiUzQSUyMjglMjIlMkMlMjJ1JTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZjb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbSUyRmF1dGglMkZsb2dpbiUyRnByZXNlbnQlM0ZvcmlnaW4lM0Rjb2IlMjZMT0IlM0RDT05TJTIyJTJDJTIyciUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGY29ubmVjdC5zZWN1cmUud2VsbHNmYXJnby5jb20lMkZhdXRoJTJGbG9naW4lMkZwcmVzZW50JTNGb3JpZ2luJTNEY29iJTI2TE9CJTNEQ09OUyUyMiUyQyUyMnBpZCUyMiUzQTQ0NzkyNDc3MCUyQyUyMmZjJTIyJTNBMCUyQyUyMmNudW0lMjIlM0ExMiUyQyUyMnRzJTIyJTNBMTY1NjMyOTY4NzIyMiUyQyUyMnQlMjIlM0ElN0IlMjJ0JTIyJTNBJTIybG9naW4lMjIlN0QlMkMlMjJyYW5kJTIyJTNBNjc0MDk1JTdEJTdEJTVE\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=prbrcxwatzwqdxwq\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.023Z","timestamp":1700359252023,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=prbrcxwatzwqdxwq\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=6sd8Y48QR18H2uys8BxxeQ%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"41b28f7b8f95f9f098fdc91bc500cd9b","sha1":"425e47de4d9cd68d8c93f0cc88de6ab2961c3b34","sha256":"ce0695e0bb8feaee8f7207dc2aa24d64ed9dfd3dd6a2d4508516e405a34a16b5","sha512":"3705c7b3c3c47d0fb4239e0d52b739a0128aa50780cbc2e99ea73bb3a9c337d9d7a88489cdbbad166b98223bd2156d76acf493b9515a82c28fcc04a4cdc2ecf8","ssdeep":"","tlshash":"d8c012c9e8632ee1d42155006d8a3a55e996c156839644a53280c1668f47258cacb157","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=zlhbpoezzaimha_l\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.028Z","timestamp":1700359252028,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=zlhbpoezzaimha_l\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=XcSKFTNa4BzPf%2fWniUYqYA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"50c4d8befe1f09a0eb5ea774970581dd","sha1":"210029f4a35d11e97df56d9f1d731e75df9cff53","sha256":"2113388f35498d7fc4d8799e60a774def9be63eb8a6205ab41eb3484f863cca2","sha512":"038bac7663538a45dc681f5ce0848d4f31a9c47d722f4c28fa3a499911fa7d3e2911d047f71f05337a6adb54ccedf6414317c4b5303955e086bc3ec0fafbaf5b","ssdeep":"","tlshash":"ffc0c0c8ec732ef0d02014002cca3b40eca2c15283c140b032c0c1638f0328ccbcb113","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/js/wfui.11759b41ee721f527bba.chunk.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.031Z","timestamp":1700359252031,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/static/ui/loginaltsignon/public/js/wfui.11759b41ee721f527bba.chunk.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=+H2xgGb+3n1eGlD1Rw%2fbjA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"e89f793712ddf8902b1027ad541b8d67","sha1":"902984c5a145cf2b374d2aa8b5ba7e3b88db40ca","sha256":"ab7449838d8044e7a6c9bb6b3abdbc4cd4d021d60cb451195df56fb96ea1f18d","sha512":"f4e2bd873a6d1a8589f43c64e3cab9309e45673a6881e974e0bfa899a4fc9b6e5ba9429bcbaf8b265e06f2721af230e63033f29ea8fba516ba1073e0128b0a4b","ssdeep":"","tlshash":"2dc012c9e8632ee1d4215504ad8a3a55e9a6c156839584a5328081669f47298ca8b157","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/js/main.2c70436e78e79e8ed3b8.chunk.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.033Z","timestamp":1700359252033,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/static/ui/loginaltsignon/public/js/main.2c70436e78e79e8ed3b8.chunk.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=JUtWn6a0IHbGok1Qfiar8Q%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"a66ef926c8e536c92362b92a0d61efa9","sha1":"ffc80fa0a9c2ab1cb1b0eb51add28c2d3ce1d53f","sha256":"3201d9c2cba9f6b5861acb6c0fe381b2ed821daaf9b0ed410bbbf9485a2221d1","sha512":"c3f9689bff273bcf5bd1635278756d1b4e0045b2c9adcd9026e6c959931b17aae621b8ddc72ff103e0a7eceecbd624d76329c2ce6e51d98316aa3f59122ab8fe","ssdeep":"","tlshash":"6cc080c8ec732ee1d42155006dca3f55ed96c16683d544b572c0c1a78f4725dcacb577","first_seen":"2023-11-19T03:01:12Z","last_seen":"2023-11-19T03:01:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=hsxdfhsfonvcksrz\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.783Z","timestamp":1700359251783,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=hsxdfhsfonvcksrz\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Sun, 19 Nov 2023 02:00:50 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=YgwUH7KVAkrmAv0HJ%2fivKsPy8G7SW9jhKcSdLiSpbn%2fI2J+F9H0Qxd33cM9bh1Ey; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 19 Nov 2023 02:15:50 GMT;Httponly; Secure\n_abck=20D01F3E84D819AE677D4D236A96DB68~-1~YAAQHk8kF67KedyLAQAA2iNP5QrlBZD6biyPvx+byybHH3w3keG/vimpyGx9Oi0z0ZsrRGN7PA0RkCCAqw7KxOo6r1Uuxaa/uMN9OQeyZrrjvtpx3UAW74u+HsuCjKUdVgKt4ynIL5Kd9Q0st7xsKomN238KT97V9b0Y32GUoGNCkJcfdfAcKKH8YVjS5tqxwEe3PnxkX77jwVQnJapbCNVLx20upEIQS+DDcofinp/d9qldlut1aR56ZzoNBKFGx9FpjPP5YfmhbPdnE+x8ItQNIFnAjRrPkK45koPniyTfDdgXK964MjTrjXSs2oqI60Q6KHlVIB2d37ACuVRTgIsK4fSaHuM7P/z2Cc6TWZkzir8mSrcDCVK/UJj/NK8z~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Mon, 18 Nov 2024 02:00:50 GMT; Max-Age=31536000; Secure\nbm_sz=5C6BFFB73175C90A4A2C3982C4F89483~YAAQHk8kF6/KedyLAQAA2iNP5RX5gOZbA/+qlrylmhEbV+65HGnaxYbgjhvGWfMzSsjPt+lJ3uViH3iqfVDMj5s0XfAcDEjqUfh25WSf+NyURemMbcFoeq4a7Z+Vi4h6DRsZiF3+iXXTNcWoREz89S4tWzF8XAj72w17knJiS4iKkxWxbe2O/71KKHlLVDMXOmq5wZMghk/UUGNyCX8H+Wgj+IL2Xra/bqdMDV7KNI0BnguBfOfu20F6cG7XAoTCXFDDrDnZH8kyjUlb5HZmSpLiESj+AjwR2QK8MgrETj2bEOnl0UJa~4538693~3355960; Domain=.wellsfargo.com; Path=/; Expires=Sun, 19 Nov 2023 06:00:50 GMT; Max-Age=14400\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/login/static/js/general_alt.js?async\u0026seed=AIB30aSBAQAAaON8e0THKEG-EABBQKIADdpWWv5DyTHstHopwQkaHgNyXtDA\u0026X-G2Q3kxs3--z=q","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.708Z","timestamp":1700359251708,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/login/static/js/general_alt.js?async\u0026seed=AIB30aSBAQAAaON8e0THKEG-EABBQKIADdpWWv5DyTHstHopwQkaHgNyXtDA\u0026X-G2Q3kxs3--z=q HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 0\r\nExpires: Sun, 19 Nov 2023 02:00:51 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sun, 19 Nov 2023 02:00:51 GMT\r\nConnection: keep-alive\r\nSet-Cookie: DCID=EMNl0Ug7i%2fGEg2LsmIUxTQJuJPJ%2fkMyQOhTk%2fJkY7P3OyTKOiltIJwF76lGnDxHD; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 19 Nov 2023 02:15:51 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":587,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/glu.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.725Z","timestamp":1700359251725,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/glu.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Sun, 19 Nov 2023 02:00:51 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=27HyImJoIBS3vz7TL7QLZyM31w1eSh22lq5cKJBn1XvMlpbHoQKi7QTAMgvIICsm; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 19 Nov 2023 02:15:51 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":-1,"dns":7,"connect":13,"send":0,"wait":592,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMmNpZCUyMiUzQSUyMjglMjIlMkMlMjJ1JTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZjb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbSUyRmF1dGglMkZsb2dpbiUyRnByZXNlbnQlM0ZvcmlnaW4lM0Rjb2IlMjZMT0IlM0RDT05TJTIyJTJDJTIyciUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGY29ubmVjdC5zZWN1cmUud2VsbHNmYXJnby5jb20lMkZhdXRoJTJGbG9naW4lMkZwcmVzZW50JTNGb3JpZ2luJTNEY29iJTI2TE9CJTNEQ09OUyUyMiUyQyUyMnBpZCUyMiUzQTQ0NzkyNDc3MCUyQyUyMmZjJTIyJTNBMSUyQyUyMmNudW0lMjIlM0E2JTJDJTIydHMlMjIlM0ExNjU2MzI5NDI0NDA5JTJDJTIydCUyMiUzQSU3QiUyMnQlMjIlM0ElMjJsb2dpbiUyMiU3RCUyQyUyMnJhbmQlMjIlM0ExNzE5NzUlN0QlN0QlNUQ%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=hronhtcntiapovlh\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.806Z","timestamp":1700359251806,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=hronhtcntiapovlh\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Sun, 19 Nov 2023 02:00:51 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=wYwrIBbjnMUCP%2fSlsjA+F5iyg1POLTok3IN+kCNPgCzai7zSbDnE3+Q39hUS3LeE; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 19 Nov 2023 02:15:51 GMT;Httponly; Secure\n_abck=6EB64274321DB3494139BD45704E0FFF~-1~YAAQHk8kF7TKedyLAQAAPyVP5Qr8TB3pLRLCM7kti04s2UFGNaaGyCxOMSXAnLPAJpNREWezEHmvRiHzx7JPKAX7dGl4BKHftlzz7YQcTk7e6UroXOu4s3u1hn2XXVFzk2bcBGVxjJUExdin/87PWq3/pwphWurFW6AdmtlepNMMmSkfmApuZWPbxLhT2y8xXbkDKzj0ag4oF6B5wu9GdgjCC60mCanyODxwL4YjSmvwkZGaYndtk9ssOviw0ZUw6/QwzESE3sHoWSzElJrj3/Qfgolw3nY+GHvVxRs91RW/7LJRY0S6jh8YXhndV8qZEiMSUMumY679vaCvgwu7zfXXdQNZEX5PP+1pXd6Fxic8Wu5r/fnQrOvuC7A9jt8a~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Mon, 18 Nov 2024 02:00:51 GMT; Max-Age=31536000; Secure\nbm_sz=E605614CF5CE7BC1BF0D58314FA6F8CC~YAAQHk8kF7XKedyLAQAAPyVP5RXa64Wd88eznY/K7kRLrzjZmjRmxVkt9r3iM1Kja36wk2bnmAufOk8T1KIlAqQRvpi+njzQtD4r2V3E1dkbL0mbdfL2YBVRCN9XOdZIIZ2EIGljdqjy3Vlm42lyU4cToyG9gNAxrRSzP+3IhY6Vmc/MxMIVf/r9pc7YCTETK+mm9TWu8ZxnHNRmty44ebXeatk+VF1lc7JfvVh+snmy0kqRRc40LEdjGXJstLWxMIol7JEDR+yW2+34VqGCOQ873r5wUtPUNFFPtOdWSNzogcfTqZy1~4538693~3355960; Domain=.wellsfargo.com; Path=/; Expires=Sun, 19 Nov 2023 06:00:50 GMT; Max-Age=14399\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":186,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/jenny/nd","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.704Z","timestamp":1700359251704,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /jenny/nd HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nVary: accept-encoding\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript;charset=ISO-8859-1\r\nContent-Length: 17816\r\nDate: Sun, 19 Nov 2023 02:00:51 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ADRUM_BTa=R:52|g:85e065a0-bdfe-49de-976c-580af1eaebf5; Expires=Sun, 19 Nov 2023 02:01:21 GMT; Path=/; Secure\nADRUM_BTa=R:52|g:85e065a0-bdfe-49de-976c-580af1eaebf5|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sun, 19 Nov 2023 02:01:21 GMT; Path=/; Secure\nSameSite=None; Expires=Sun, 19 Nov 2023 02:01:21 GMT; Path=/; Secure\nADRUM_BT1=R:52|i:302812; Expires=Sun, 19 Nov 2023 02:01:21 GMT; Path=/; Secure\nADRUM_BT1=R:52|i:302812|e:3; Expires=Sun, 19 Nov 2023 02:01:21 GMT; Path=/; Secure\nISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=Hs%2faAtCkYUI1hiFIHMFBHhD7RStmDmGFD5vBy4h9cAcg4LjqYFjBxOPd0EROCYwd; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 19 Nov 2023 02:15:51 GMT;Httponly; Secure\n_abck=28990346B06F069343061B29F83FD073~-1~YAAQHk8kF7fKedyLAQAAlSVP5QpYHojpwZEPuUYCQTq03AGhheT4OXZougK52DX474uNHBiCw5YiOpiIsOdF+2BPEh/Skg4Nh8pGIPHxUMGeOJCSQFa0xPve5m+QuV0Gvxk5EiaS3LNudQz46osDCJ28MNkiVxgIRg3p7puj1i4KpvjOHg7C+LzVgKEXZDz6DnAmjgwNUbJdc5bXVkfXEdgrTA1Yh+58oB0ylGZxcG1oSy1jGY7rWyrREOlDzlnZVGLrZ53/2gVp7sRLJrxcGL3JlnhMe15p4ybcEq7LIcUn9i55E/rGof4Bd0ub2thH1ly79ZO3a//yQX9+YVBz17OjhzlsTKFe2RLgtZ8S6eYjlPD/o4C25nCch7ZvlvnZ~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Mon, 18 Nov 2024 02:00:51 GMT; Max-Age=31536000; Secure\nbm_sz=3E380916DEAC5825BC97F2A1156103F8~YAAQHk8kF7jKedyLAQAAlSVP5RVeS9epa8fVQ9akuqCFLF5P1SOc0PN7t47WaUHyagRllKmBOW7VNBl8+Ow4Vzm2hg7Ti4stmc8EjgMYpYyQ1OxqcKOdWjJthvU14lyVVj1ubVAiji8B0gcUuhrLP2KrSp2wRfDKiH1D2zSGhvVh6z3kpocRimnYbn5+agid6T8cU/tfuIeFxgP1F8rdfhT/WNGJ7PK0QYiUJAzwkYBOvLiiDs9JcD5SiJN6cgJrbYKquGFnKR71RrjleV+7WFgp1+zu7bAyIFj8HR0YQ4BG5zDOyMIO~4538693~3355960; Domain=.wellsfargo.com; Path=/; Expires=Sun, 19 Nov 2023 06:00:50 GMT; Max-Age=14399\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17816,"size_decoded":0,"mime_type":"application/javascript; charset=ISO-8859-1","magic":"ASCII text, with very long lines (2293)","md5":"e405921d7d55bd84212096d960c67262","sha1":"5ed60be3a05a8dd5a880a1e428742eb9c7934aa6","sha256":"c93ca8d7881a6ddec256992493310b290916f48d38da504e089a8a7fe17d2a6b","sha512":"6f42cf4ec14f8ebbf68d4a8181947c09b1fe662382eac285aaba7f50be0ea82a6983fb8e610e042a30461d2990d14902c1515bb5bd7cd7def7a358dfa5b935ae","ssdeep":"768:6PxFCUcPQPGPnaZkGjUPlxluPoP5PW9P7fUkbzfyvaPWPxP5P9HLwPh0/6BWueHB:kFCU8xLkvkHLoc/escIXt+M","tlshash":"ca333c893675783948f61979403f220b72765f9b78f8e480d699ec702eb898f0117f69","first_seen":"2023-11-19T03:00:52Z","last_seen":"2023-11-19T03:01:12Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1091,"timings":{"blocked":143,"dns":4,"connect":2,"send":0,"wait":791,"receive":1,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/reporting/ttms.gif?capability=LiveRamp\u0026appId=loginapp\u0026wfaCookie=11202206270424411143497415\u0026error=timeout\u0026pageId=LOGIN\u0026pageType=BROWSER\u0026deviceType=DESKTOP\u0026c_t=","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.035Z","timestamp":1700359252035,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/reporting/ttms.gif?capability=LiveRamp\u0026appId=loginapp\u0026wfaCookie=11202206270424411143497415\u0026error=timeout\u0026pageId=LOGIN\u0026pageType=BROWSER\u0026deviceType=DESKTOP\u0026c_t= HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nLast-Modified: Thu, 16 Jan 2020 21:55:22 GMT\r\nETag: \"5e20dbca-2b\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nAccess-Control-Allow-Methods: POST\r\nAllow: GET, POST, OPTIONS\r\n$host: wellsfargo.com\r\nCache-Control: max-age=3600\r\nAccept-Ranges: bytes\r\nDate: Sun, 19 Nov 2023 02:00:51 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=z%2ftg5LpYxCeqT9TBIMvhpA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-05-07T10:47:08.809984Z","times_seen":83070,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":603,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff2","fqdn":"www15.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"96.6.19.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.879Z","timestamp":1700359252879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www15.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 27 Sep 2023 00:00:00 GMT","end":"Thu, 26 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"DC:E4:44:A1:3F:E4:8F:5F:29:7D:F0:E0:17:49:BA:51:7E:2A:A5:65","sha256":"E6:87:85:20:F4:1C:8D:5D:8D:6B:51:34:3E:BB:9B:2E:E6:A4:6C:2E:96:63:03:31:69:6B:5A:81:22:C1:8E:B4"}}},"request":{"raw":"GET /wfui/css/fonts/wellsfargoserif-rg.woff2 HTTP/1.1\r\nHost: www15.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connect.secure.wellsfargo.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 26708\r\nlast-modified: Mon, 11 Mar 2019 20:52:01 GMT\r\netag: \"5c86ca71-6854\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Mon, 18 Nov 2024 02:00:51 GMT\r\ndate: Sun, 19 Nov 2023 02:00:51 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26708, version 1.13107\\012- data","md5":"885d42ab7ffcffc42ed29816c3ce9727","sha1":"3d84cb41ddfb5bf8627e2b9dc867237bea47baad","sha256":"aeb7b3bfc4281d35b02dfde05ac7a6c0d3daa7f3123b35a9cbd4b5a8e3f3c310","sha512":"1b64ea9a7598a69dc5837f70af7eb702171fb55dfc58aa071a5efe70522676da4cbc1d3af054ab3b8f325143479d484388917e015e9ab61b5b7322077461fb11","ssdeep":"768:NqcUCwKb4mdzrl3vUSwXTRoji0iG6dlLsCPlT:NqrCwkTlLwV0izRPZ","tlshash":"c4c2e2c8099724dedb6d81eea692155e3f01c2df861a009a419ecc4c0c9dcdc9b9337e","first_seen":"2023-04-12T09:13:55Z","last_seen":"2026-04-17T11:36:14.862838Z","times_seen":224,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":14,"dns":2,"connect":1,"send":0,"wait":2,"receive":2,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff2","fqdn":"www15.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"96.6.19.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.892Z","timestamp":1700359252892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www15.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 27 Sep 2023 00:00:00 GMT","end":"Thu, 26 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"DC:E4:44:A1:3F:E4:8F:5F:29:7D:F0:E0:17:49:BA:51:7E:2A:A5:65","sha256":"E6:87:85:20:F4:1C:8D:5D:8D:6B:51:34:3E:BB:9B:2E:E6:A4:6C:2E:96:63:03:31:69:6B:5A:81:22:C1:8E:B4"}}},"request":{"raw":"GET /wfui/css/fonts/wellsfargosans-rg.woff2 HTTP/1.1\r\nHost: www15.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connect.secure.wellsfargo.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 22424\r\nlast-modified: Tue, 26 Feb 2019 19:38:34 GMT\r\netag: \"5c7595ba-5798\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Mon, 18 Nov 2024 02:00:51 GMT\r\ndate: Sun, 19 Nov 2023 02:00:51 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22424,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22424, version 1.13107\\012- data","md5":"0a1639ebe9fab396657a62aa5233c832","sha1":"9b58164729ad918dd7255e4856f9da7f3a90bfde","sha256":"631f3b6267a831a8d67c45e480b5d5a2601f10ff8708bcf3a45a41b377a129cc","sha512":"a3786f7c1188bcbddcabe54e40dfbc77d842b1a19d2cca56cedaeb3c1a8126b3c203ac8b6297268c94aedf270be2b822aa8ac0de9e1e5c6d42bc7866324d8128","ssdeep":"384:ZWomH3hR7XCKb7GSa5mSWAmtXnCe83/17wdTgm6keJR60vqy:ZWDL7va5mSWbn4cdEmhJvy","tlshash":"cda2e16e1fb4ae24ec1c3bb164a5d0ed75c744750470c45fa331a0d626c5d4c9d86ef9","first_seen":"2023-04-12T09:13:55Z","last_seen":"2026-05-06T05:38:13.631216Z","times_seen":839,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-sbd.woff2","fqdn":"www15.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"96.6.19.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.962Z","timestamp":1700359252962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www15.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 27 Sep 2023 00:00:00 GMT","end":"Thu, 26 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"DC:E4:44:A1:3F:E4:8F:5F:29:7D:F0:E0:17:49:BA:51:7E:2A:A5:65","sha256":"E6:87:85:20:F4:1C:8D:5D:8D:6B:51:34:3E:BB:9B:2E:E6:A4:6C:2E:96:63:03:31:69:6B:5A:81:22:C1:8E:B4"}}},"request":{"raw":"GET /wfui/css/fonts/wellsfargosans-sbd.woff2 HTTP/1.1\r\nHost: www15.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connect.secure.wellsfargo.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 22600\r\nlast-modified: Tue, 26 Feb 2019 19:38:34 GMT\r\netag: \"5c7595ba-5848\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Mon, 18 Nov 2024 02:00:51 GMT\r\ndate: Sun, 19 Nov 2023 02:00:51 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22600, version 1.13107\\012- data","md5":"83df8749c013f13019fa8e0912041759","sha1":"2bbffcf012a59e47661c0a37edda0fc772992ae7","sha256":"ab9d8c97b35ed86b6224aca911aa304a0d7dbcbd28e00a4c6585b96e28ed30ba","sha512":"60ef81e9500e9b33e9d799d4bd56f8ef4df5dfdc88a42d5739c3da65733cfaedd42aa0dc623d46b370dc750c693cbe0c473c92e6c4c2a7bed2c7da33b8bcee84","ssdeep":"384:X4TnfMKBnolaid+tMKsLZqy+1EooqFdf8THOgmFtI2ErNX0sAZwk+pcHgXvCdFPh:XWXBolb+tMKoc1E1qFdgHOujisY+pcHt","tlshash":"5ba2d0f0681f37b4473b083c3472a3ca80f69516eaea19951b3d123e699ada5934c37d","first_seen":"2023-04-13T05:35:56Z","last_seen":"2026-05-05T15:43:09.306161Z","times_seen":713,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/sub.png","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.2.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:52.836Z","timestamp":1700359252836,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Oct 2023 17:13:53 GMT","end":"Tue, 09 Jan 2024 17:13:52 GMT"},"fingerprint":{"sha1":"91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF","sha256":"F3:D6:02:91:4C:11:83:7C:7C:FD:D0:A3:86:08:75:A0:37:A4:08:AF:67:24:48:AE:14:4D:D0:BA:8D:6A:19:A9"}}},"request":{"raw":"GET /sub.png HTTP/1.1\r\nHost: pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 19 Nov 2023 02:00:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 1690\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"c1b8aa525681adce2d99b2452838b5d9\"\r\nLast-Modified: Sat, 18 Nov 2023 15:23:07 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8284dcaa3f0bb50b-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 176 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"c1b8aa525681adce2d99b2452838b5d9","sha1":"fca07525dfd5724a30718590287a8fdb57d1efaa","sha256":"85f39a9e87ea01745f1ac1475b364af858780a16798712130d27ef5741ad4431","sha512":"f8982a9fc20101876b28dcaf50988b5e39c3e9bffbeb3a3ed74fb1087c24c84cf12b45dde67e38cdf3322999192752a2baa2f23d8bbae8c4658cad5744a3d4b0","ssdeep":"","tlshash":"3431daa4be41550faa144735147c2eb35885119ccfed9a4bd8f417b90edc9a32b15b13","first_seen":"2023-11-19T03:00:53Z","last_seen":"2025-04-08T11:32:03.956441Z","times_seen":14,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/login/static/js/general_alt.js?async\u0026seed=AIB30aSBAQAAaON8e0THKEG-EABBQKIADdpWWv5DyTHstHopwQkaHgNyXtDA\u0026X-G2Q3kxs3--z=q","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:51.708Z","timestamp":1700359251708,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/login/static/js/general_alt.js?async\u0026seed=AIB30aSBAQAAaON8e0THKEG-EABBQKIADdpWWv5DyTHstHopwQkaHgNyXtDA\u0026X-G2Q3kxs3--z=q HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 0\r\nExpires: Sun, 19 Nov 2023 02:00:51 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sun, 19 Nov 2023 02:00:51 GMT\r\nConnection: keep-alive\r\nSet-Cookie: DCID=ErLQm1ek4YXMhIFhT9P30f6odA5UZ9lU+9nEqzqLJLSBpv3OgqKAX0hmzhczYfWA; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 19 Nov 2023 02:15:51 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":587,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.21.js?utv=ut4.49.202210132016","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:53.056Z","timestamp":1700359253056,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.21.js?utv=ut4.49.202210132016 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 14 Nov 2023 21:04:47 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6553e0ef-11d0\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 1896\r\nDate: Sun, 19 Nov 2023 02:00:51 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=AXTeYxGGIZfvqdgUt6vKtw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1896,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1090)","md5":"389a2b5df08337c70ed0ec2795effdf5","sha1":"169cda9ef1fc39d810d2b4d99d9621a13c1da795","sha256":"050e2aa89c3945fa04373c714347297146adebc89effa9e41c0df8090ba0ed51","sha512":"b9e91f5140bfe2becd680b4cf017bcb85f9212fd05c539e93def2188a9eebe5f951617b7560cb3edb7fe2c850cbcbfd84374dca21287bce4733d452373182bbb","ssdeep":"96:HN6taeIpB/yj8yjyVypxuujFnL3Hv3Geq+rk0E04/BDJ/mH+eH+Ca/:HNYXIpstGspxuQFn6x+rkV3PCC","tlshash":"82a1424d7a88e13ec9b0d112493f0e7820557a171993886275849c4eb328d7de966f4e","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-09-19T21:40:36.16441Z","times_seen":16,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www10.wellsfargomedia.com/favicon.ico","fqdn":"www10.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.9.46","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:53.073Z","timestamp":1700359253073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www10.wellsfargomedia.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Feb 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"01:8C:11:B0:3A:3C:49:43:DF:06:F0:63:93:3D:DD:18:5A:6F:B1:13","sha256":"F5:50:C1:11:46:7C:02:00:F7:70:30:CE:8F:C8:3C:A8:6B:ED:89:B3:CF:27:7B:8D:B4:24:D8:74:0D:47:35:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www10.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Thu, 05 Oct 2023 01:28:28 GMT\r\netag: \"651e113c-47e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccess-control-allow-methods: POST\r\nallow: GET, POST, OPTIONS\r\n$host: wellsfargo.com\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: Mon, 18 Mar 2024 02:00:51 GMT\r\ndate: Sun, 19 Nov 2023 02:00:51 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\\012- data","md5":"11e6b612207abf064158e69540c16e24","sha1":"9e3912485514553b2e17b578c8340986f1172b4d","sha256":"8670da3c95c03b59b091eac882b67e0b59b765c455b8d871abd2e55d4618573b","sha512":"2a1257c597a985ae9da8a029a2bab00e2cda2106026578ac382c7319f4754d42c47e51f59a3f45f1228e4e036b00707a9b087d6dbf18821327f187e4e79ea24f","ssdeep":"","tlshash":"93214200430423acdcabd273f6027b69044f2d2ed9c5613f634038d5a4aff7608e3648","first_seen":"2023-05-08T02:46:24Z","last_seen":"2026-04-25T02:41:38.789599Z","times_seen":318,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:53.092Z","timestamp":1700359253092,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 14 Nov 2023 21:11:03 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6553e267-7a0\"\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 827\r\nDate: Sun, 19 Nov 2023 02:00:51 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=X91mxWoGcMfEl0rJbw9QPw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":827,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (720), with CRLF line terminators","md5":"28118b10e976acfd04c408fd5b2bf75f","sha1":"602467c73559091d2a290028566d92599e85b12b","sha256":"c096151906e12dab59a9ef244248a08b30021d778fd538394bead31aff29d21d","sha512":"a6083f4c573af70a31e4b1658b2a4a7de26a9dc22ed3d393983f384f94ea7c446c7e5129090abc59e0197cd1b63b25825f49739c7fae607c89c428514b5264e0","ssdeep":"","tlshash":"284111ba7e4ae4115113259b2b5bdb09262b60d71c44d68195f8ce90b031b4bdd3bccc","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-08-20T18:51:20.749418Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/generic1697649041190.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:53.137Z","timestamp":1700359253137,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/medallia/wdcusprem/57907/onsite/generic1697649041190.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 14 Nov 2023 21:11:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6553e266-58ff7\"\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 81992\r\nDate: Sun, 19 Nov 2023 02:00:51 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=sJgx8trzoLTSelOQCTnuzQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81992,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (12654), with CRLF line terminators","md5":"073be3890e20fbdcfcd85ed26864de52","sha1":"92cb3cbeb2e9dd170b716689cb47f433c904918d","sha256":"889a7d5363b778aa5a9ef66112c4da95363031ca6d1909133ef0691d268f7971","sha512":"4467152230b6dcf3a9e143e99e8d0b745b6429c33237081386072e48602aca22961dd34de08272bace9c78a1558795d7b1c6399ca5b8d68660792cfc3a59cbf6","ssdeep":"6144:HFAk6rgSZItMlN7hA1YzTEre/qozC8myMVCm:HFSrgPtMlN7hEYoe/qozCZ","tlshash":"7174f9843fd63128624b176e14af530a2c3732597dd1f588ebadc98030ac9cb7d6bb65","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-08-20T18:51:20.750835Z","times_seen":8,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.digital-cloud-prem.medallia.com/wdcusprem/57907/onsite/onsiteData.json","fqdn":"resources.digital-cloud-prem.medallia.com","domain":"medallia.com","tld":"com"},"ip":{"addr":"151.101.245.230","port":443,"asn":54113,"as":"FASTLY","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:53.220Z","timestamp":1700359253220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.digital-cloud-prem.medallia.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 01 Nov 2023 16:47:43 GMT","end":"Sun, 01 Dec 2024 16:47:43 GMT"},"fingerprint":{"sha1":"6A:E8:BF:DD:88:2C:23:7D:14:CF:AA:17:C6:DE:EE:02:C1:B6:89:51","sha256":"DA:8E:F9:9E:16:6D:A6:09:B0:6F:28:2A:7D:15:88:2C:24:17:51:CB:36:4A:8A:25:16:DB:9C:58:52:1A:EF:26"}}},"request":{"raw":"GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1\r\nHost: resources.digital-cloud-prem.medallia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: Q/vp4z4Gg1Cwwvh2M77/SvsH8R5wSbBeCpIQOdBQzr85Nn0GJUHrtGulvLA7yRRuGJjeGZdkmhE=\r\nx-amz-request-id: VA372VN1909RCTSM\r\nlast-modified: Tue, 14 Nov 2023 22:16:16 GMT\r\netag: \"922979d099fe26f40e5c5011622d2710\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: rPjWA7owhVwjjUArb5KuSGg_fynafZOi\r\ncontent-type: application/json\r\nserver: AmazonS3\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0,must-revalidate\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sun, 19 Nov 2023 02:00:51 GMT\r\nvia: 1.1 varnish\r\nage: 261635\r\nx-served-by: cache-hel1410034-HEL\r\nx-cache: HIT\r\nx-cache-hits: 318\r\nx-timer: S1700359252.993026,VS0,VE0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1817\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1817,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with very long lines (2056)","md5":"922979d099fe26f40e5c5011622d2710","sha1":"413f2feaf95a9154f9e46e2a5e90ed256c8dc538","sha256":"6d74d2e75f9d22b8028268de2b0f6b21a7ea2ddad52c64d8d549b90adb1cf5f4","sha512":"4eb09ac4a57487083908ade19933efc8bdb30a44fc986469f21739d2c2cd248387a0ba633b73efe769f61c9b08a9fd56b02af55305b8798ae540b5212695f598","ssdeep":"384:26DVG2N2WSxmK16DVGN2N2WSx156DVGN2N2WSxm2KncVGN2N2WSx1KcVGN2N2WSV:0vcLjCYW3yQ4u","tlshash":"15c2eb4ef461dca4d0052d1e79bf0e73282ada6386d0265cf354e7098b2e53d93e176e","first_seen":"2023-11-19T03:00:53Z","last_seen":"2023-12-04T14:25:01Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":52,"dns":20,"connect":13,"send":0,"wait":13,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"udc-neb.kampyle.com/v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track","fqdn":"udc-neb.kampyle.com","domain":"kampyle.com","tld":"com"},"ip":{"addr":"35.241.45.82","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:53.309Z","timestamp":1700359253309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kampyle.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 29 Mar 2023 06:23:12 GMT","end":"Wed, 28 Feb 2024 06:23:12 GMT"},"fingerprint":{"sha1":"38:12:16:65:B3:E4:74:2C:F1:56:DE:7C:79:BF:9A:16:8D:D9:0D:27","sha256":"EE:BD:8C:78:AD:C5:39:0B:6E:B0:E3:DE:B2:BE:46:61:67:76:24:46:8E:A1:C8:5F:A9:BA:30:AD:DD:5A:E0:CE"}}},"request":{"raw":"POST /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1\r\nHost: udc-neb.kampyle.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 2184\r\nOrigin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Nov 2023 02:00:52 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: X-Requested-With, Origin, Content-Type, Accept\r\naccess-control-max-age: 1800\r\nx-me: prod-instance-gatewayservice-green-bdqt\r\nx-application-context: application:9090\r\ncontent-type: text/plain;charset=ISO-8859-1\r\ncontent-length: 59\r\nserver: Jetty(9.2.11.v20150529)\r\nvia: 1.1 google\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59,"size_decoded":0,"mime_type":"text/plain; charset=ISO-8859-1","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"0ab969c512ad71613832d03710eadde2","sha1":"f64271cfa7e4b386fed80e18a958a90ffd1e3893","sha256":"cbc1399b82e42018fbc8b8b9277200665d6367c9134ead9308ea5e568b00e459","sha512":"4af677314013020fcae2b96f756d8e6411453810a489323fbe1c550e7f34a36f1f307d95c728cf26b4742e09bba4694c1cb142a10315523cf2ecca4930db043c","ssdeep":"","tlshash":"fba002c1150250729d574b297710ab739b7015e6290912d011ed2ca505604e4d10a44a","first_seen":"2023-04-05T03:07:27Z","last_seen":"2025-01-09T02:30:16.643488Z","times_seen":693,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":30,"dns":1,"connect":8,"send":0,"wait":107,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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","fqdn":"udc-neb.kampyle.com","domain":"kampyle.com","tld":"com"},"ip":{"addr":"35.241.45.82","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-11-19T02:00:53.324Z","timestamp":1700359253324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kampyle.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 29 Mar 2023 06:23:12 GMT","end":"Wed, 28 Feb 2024 06:23:12 GMT"},"fingerprint":{"sha1":"38:12:16:65:B3:E4:74:2C:F1:56:DE:7C:79:BF:9A:16:8D:D9:0D:27","sha256":"EE:BD:8C:78:AD:C5:39:0B:6E:B0:E3:DE:B2:BE:46:61:67:76:24:46:8E:A1:C8:5F:A9:BA:30:AD:DD:5A:E0:CE"}}},"request":{"raw":"GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1\r\nHost: udc-neb.kampyle.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Nov 2023 02:00:52 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: X-Requested-With, Origin, Content-Type, Accept\r\naccess-control-max-age: 1800\r\nx-me: prod-instance-gatewayservice-green-10l7\r\nx-application-context: application:9090\r\ncontent-type: image/gif; charset=UTF-8\r\ncontent-length: 0\r\nserver: Jetty(9.2.11.v20150529)\r\nvia: 1.1 google\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}