r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b720c31d9c036cd2ef10e35fa29f5345
ac625d2e69284e5080bede4b37c31af62c26338b
323b76eceb5d3ad339a1c55bfa7eea4e39741258e08d5005b691f712a9e9c81c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "323B76ECEB5D3AD339A1C55BFA7EEA4E39741258E08D5005B691F712A9E9C81C"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18313
Expires: Sun, 06 Nov 2022 08:12:42 GMT
Date: Sun, 06 Nov 2022 03:07:29 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 72c64df35304c35cd95e4ed6e101e795
a39287987854d644a8da295da536fb31de8b44c1
a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 407
Cache-Control: max-age=109822
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:29 GMT
Etag: "63662d58-1d7"
Expires: Mon, 07 Nov 2022 09:37:51 GMT
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 078950c3ba9ad01927f3da494b1d1de4
443c8a8247e4e3e04c14d21e0227fc4e8f396142
dd5dd09fec51669adf36b3014bbf65d7bff608f72018d037f9ed9b414675037c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD5DD09FEC51669ADF36B3014BBF65D7BFF608F72018D037F9ED9B414675037C"
Last-Modified: Fri, 04 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18269
Expires: Sun, 06 Nov 2022 08:11:58 GMT
Date: Sun, 06 Nov 2022 03:07:29 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 06 Nov 2022 02:43:15 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1454
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qKOmD9lXS+Q7LPYCmPp2zcfiPHKVcpRjSb6bG+a2DK5F+GpkwM2VkpD7o2988FBy3HNmPgTsNeQ=
x-amz-request-id: 6RSFKWG0ASG121XJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 06 Nov 2022 02:10:16 GMT
age: 3433
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 03:07:29 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.dcocsp.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash cbbb5d31b3f6ca9687bd1294540f4aec
a2788e3080d840141dcf60cb325f34becb640e75
22dc525abb2a5845542c145349e4a4b831756811987873be82d7f85b509d4147
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Sun, 06 Nov 2022 02:48:10 GMT
Last-Modified: Sat, 05 Nov 2022 13:24:40 GMT
ETag: "63666418-1d7"
Expires: Mon, 07 Nov 2022 13:24:40 GMT
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1667702890
Via: cache21.l2de2[0,0,304-0,H], cache19.l2de2[0,0], cache1.de3[2,2,200-0,H], cache1.de3[3,0]
Age: 1160
X-Cache: HIT TCP_REFRESH_HIT dirn:13:86983134
X-Swift-SaveTime: Sun, 06 Nov 2022 03:07:30 GMT
X-Swift-CacheTime: 2440
Timing-Allow-Origin: *
EagleId: 4f85b19516677040504471288e
ocsp.digicert.com/
200 OK 471 B IP
Hash db63d54b77502dd6c7bdc792d4fd093e
026ad8186833988279468829c004c6e2a2f2626f
eff89ef67baa622e8a196ffcadc44d29aafff009bb531da3e979a1f47c3b1c36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3114
Cache-Control: max-age=107471
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:30 GMT
Etag: "63661997-1d7"
Expires: Mon, 07 Nov 2022 08:58:41 GMT
Last-Modified: Sat, 05 Nov 2022 08:06:47 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0tFe8wlpOrbL0ERujt5p5g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2ghAQXcCiEztZRZ6Mj2qYFgyfl0=
www--wellsfargo--com--1649329d48d6c.wsipv6.com/
200 OK 21 kB URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/
IP
ASN #54994 QUANTILNETWORKS
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (731), with CRLF line terminators
Hash 5209ecf78d73c70223fc05756b46f71d
964ec61e03f5b037641b0f2f478a245958a4e9db
f45b15a4442f00c6523501ebcbb4dade563766c57bcfa696c502a03efa3e5f1e
Analyzer Verdict Alert openphish Wells Fargo & Company
fortinet Phishing
GET / HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:30 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 21253
Connection: keep-alive
Expires: -1
Cache-Control: no-cache, max-age=0, must-revalidate, no-store
X-XSS-Protection: 1; mode=block
Pragma: no-cache
Content-Security-Policy: default-src https:; img-src https: data:; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; object-src 'self'; font-src https: data:; style-src https: 'unsafe-inline'; script-src 'nonce-827d2119-1955-4de6-b3b2-dc2fb5c3d172' 'self' https://*.wellsfargo.com https://*.wfinterface.com;report-uri https://ort.wellsfargo.com/reporting/csp
Content-Language: en-US
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:0|g:0ea05c63-8ebe-48bb-a62a-930d91911a33; Expires=Sun, 06-Nov-2022 03:08:00 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:0|g:0ea05c63-8ebe-48bb-a62a-930d91911a33|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sun, 06-Nov-2022 03:08:00 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sun, 06-Nov-2022 03:08:00 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:0|i:206894; Expires=Sun, 06-Nov-2022 03:08:00 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:0|i:206894|e:75; Expires=Sun, 06-Nov-2022 03:08:00 GMT; Path=/; Secure; SameSite=Lax; Httponly
CookiesAreEnabled=yes; domain=.wellsfargo.com;path=/; secure=true; HttpOnly; SameSite=Lax
INLANG=EN; domain=.wellsfargo.com;path=/; secure=true; Max-Age=31536000; HttpOnly; SameSite=Lax
wfacookie=11202211052007301344497748; domain=.wellsfargo.com; path=/; expires=3 Nov 2032 03:07:30 GMT; secure=true; SameSite=Lax; HttpOnly
ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; path=/; Httponly; Secure
WesdAksn=A4pT6EqEAQAAPY0NNOMO1IBU14zycwE8AYsqkYxmLoexBytB8l3-VnlDzEwmAaOrg2CcuDv8wH8AAEB3AAAAAA|1|0|881bc62dba37a702c466e1a9ddecaf1a3a8db2b9; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=HSBuYShWLLFKVE9iUB+xacMgRDO1Ftd8OTSun+uWZ6I%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl22:0 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f2_bl22_20426-44023
www--wellsfargo--com--1649329d48d6c.wsipv6.com/ui/javascript/homepage-ui/homepage_iaoffer.js
200 OK 15 kB URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/ui/javascript/homepage-ui/homepage_iaoffer.js
IP
ASN #54994 QUANTILNETWORKS
File type Unicode text, UTF-8 text, with very long lines (47413), with no line terminators
Hash d1e5fd89edcbb31762770b9aa4db17d3
02b0298e3535a594206c5a83cda3529ac9174739
69733e5a5114195358c00daec29c4350e0120c8268996a2d242384e622a40b9e
Analyzer Verdict Alert urlquery Phishing - Wells Fargo
openphish Wells Fargo & Company
fortinet Phishing
GET /ui/javascript/homepage-ui/homepage_iaoffer.js HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:0ea05c63-8ebe-48bb-a62a-930d91911a33|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:75; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:30 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 15025
Connection: keep-alive
Expires: Sun, 06 Nov 2022 02:12:12 GMT
Last-Modified: Thu, 22 Sep 2022 21:44:40 GMT
ETag: "632cd748-b936"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01uY9168:5 (Cdn Cache Server V2.0), 1.1 bl22:6 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f2_bl22_20426-44082
ocsp.digicert.com/
200 OK 471 B IP
Hash 4d4eace08206fdc9ea804029558ae74d
d28da0aaf9097ee894b41222d0bbc858c0103b9a
2948177d7cd65d0eec7f5557b8ff4ea16b405526714e286d0e18af6f4e2ac6b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5860
Cache-Control: max-age=104847
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:31 GMT
Etag: "6366049e-1d7"
Expires: Mon, 07 Nov 2022 08:14:58 GMT
Last-Modified: Sat, 05 Nov 2022 06:37:18 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
www17.wellsfargomedia.com/assets/images/rwd/Reflect-Card-79x50.png
200 OK 712 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/Reflect-Card-79x50.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 856ba11ad61b561850f726f3f9bd8c6b
b50337dec6ee97d505a21bdcaa15f4a0d2bb2571
7867b0f1e4d21ebd684268360f820149578a15141a9128b57a97843c0fcb3b72
GET /assets/images/rwd/Reflect-Card-79x50.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6217f519-1c20"
last-modified: Thu, 14 Jul 2022 02:02:36 GMT
server: Akamai Image Manager
content-length: 712
content-type: image/webp
cache-control: private, no-transform, max-age=1983174
expires: Tue, 29 Nov 2022 02:00:25 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4d4eace08206fdc9ea804029558ae74d
d28da0aaf9097ee894b41222d0bbc858c0103b9a
2948177d7cd65d0eec7f5557b8ff4ea16b405526714e286d0e18af6f4e2ac6b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5860
Cache-Control: max-age=104847
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:31 GMT
Etag: "6366049e-1d7"
Expires: Mon, 07 Nov 2022 08:14:58 GMT
Last-Modified: Sat, 05 Nov 2022 06:37:18 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js
200 OK 901 B URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1952), with no line terminators
Hash 5dcc7c101ced74367609685d577093f6
f0d8214335e3c33b634048b992afd536f5bd3e43
10aab16ccfb5374425dc6ee64453a7fe6d7b6dfa47ab65779f42c7db740da1ef
GET /assets/js/wfui/appdynamics/appdEUMConfig.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 20 Jan 2022 02:38:25 GMT
Vary: Accept-Encoding
ETag: W/"61e8cb21-7a0"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 901
Date: Sun, 06 Nov 2022 03:07:31 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=1DztB9RxerQwO8KycDfv8A%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www17.wellsfargomedia.com/assets/images/rwd/wf_logo_220x23.png
200 OK 1.7 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/wf_logo_220x23.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c5f6eb132665afa77e8ac7a1a707e951
70d65ab0dcfaace4c1d8bbb772af4fd7c6f66c80
0d7727e08780a04f9c86fca16ed264664eea2b161744cfb70836880bf04fc1ac
GET /assets/images/rwd/wf_logo_220x23.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61bcfcce-10c2"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
x-serial: 853
x-check-cacheable: YES
content-length: 1710
content-type: image/webp
cache-control: private, no-transform, max-age=1812760
expires: Sun, 27 Nov 2022 02:40:11 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/h.com_card_79x50.png
200 OK 2.3 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/h.com_card_79x50.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 54a0dd5862244507f56e176ecde59056
2d8f7d7e00316c6811ce2552e608260481303898
749d47078866f2ebe0c2b692de339996ede393b570c7f73418ac0ed9a6882539
GET /assets/images/rwd/h.com_card_79x50.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6217f519-23fc"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 2286
content-type: image/webp
cache-control: private, no-transform, max-age=1648404
expires: Fri, 25 Nov 2022 05:00:55 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/bilt_card_79x50.png
200 OK 1.3 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/bilt_card_79x50.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 20395535ccb9d64fc541151586d860d7
791003e66d20380a1925d19a9bb3c4cbaf451073
5220e2267bf1d52810fa37112ed26e7d0d6a6f8cfaaa7d36c032b68562030d05
GET /assets/images/rwd/bilt_card_79x50.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6217f519-1be6"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
x-serial: 961
x-check-cacheable: YES
content-length: 1348
content-type: image/webp
cache-control: private, no-transform, max-age=1853533
expires: Sun, 27 Nov 2022 13:59:44 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
static.wellsfargo.com/assets/js/wfui/container/wfui-container-bottom.js
200 OK 11 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/container/wfui-container-bottom.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (31790)
Hash 6d79a0dbc6ea2602aa38bbf53e43124e
8b53e45df3e4aea81cbfaa90081f6795bcfe39fc
d2aa003ecdd6c31e12964104bd23498a60e94fa2d163c6d1ff285db59f61bb6a
GET /assets/js/wfui/container/wfui-container-bottom.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 12 Feb 2022 17:58:28 GMT
Vary: Accept-Encoding
ETag: W/"6207f544-7c61"
Cache-Control: max-age=1800
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 11076
Date: Sun, 06 Nov 2022 03:07:31 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=0+a%2fs1RR0Pn1QxP9+pGG4g%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www--wellsfargo--com--1649329d48d6c.wsipv6.com/ui/javascript/homepage-ui/ps-homepage.js
200 OK 57 kB URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/ui/javascript/homepage-ui/ps-homepage.js
IP
ASN #54994 QUANTILNETWORKS
File type Unicode text, UTF-8 text, with very long lines (65500), with no line terminators
Hash 5683b10b042e0f9ab966afc7981b5fed
edac7ea2959f771bd20441dfdb3f13fefdea8c30
0b35d9aba723d40959a3ffbe7132c6a55b532e1ecc5e1d0a2252e1ec7ba48d7b
Analyzer Verdict Alert urlquery Phishing - Wells Fargo
openphish Wells Fargo & Company
fortinet Phishing
GET /ui/javascript/homepage-ui/ps-homepage.js HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:0ea05c63-8ebe-48bb-a62a-930d91911a33|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:75; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:31 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 56910
Connection: keep-alive
Expires: Sun, 06 Nov 2022 02:12:23 GMT
Last-Modified: Thu, 22 Sep 2022 21:44:40 GMT
ETag: W/"632cd748-2b456"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01cV0174:5 (Cdn Cache Server V2.0), 1.1 bl21:7 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f3_bl22_20426-44088
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b-wf_icon_house_gradient_64x64.png
200 OK 1.0 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b-wf_icon_house_gradient_64x64.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2700367e62982f99dbdb7efa2e11328c
7db153f43a4bc9d95eb94e0d07404440b92ec129
8e16030cdf2d91809d0540f79aa3a3be4b83e4a9bf13bd91def3962f1484406f
GET /assets/images/contextual/responsive/smlprimary/wfi000_ic_b-wf_icon_house_gradient_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61a93697-f60"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
x-serial: 131
x-check-cacheable: YES
content-length: 1004
content-type: image/webp
cache-control: private, no-transform, max-age=1914295
expires: Mon, 28 Nov 2022 06:52:26 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b-wf_icon_check_mark_gradient_64x64.png
200 OK 1.3 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b-wf_icon_check_mark_gradient_64x64.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 20cf7cbf9f523ea23270f0140672e57d
61c40fed4a85b0ff069f6361f87ee77ff4207c2d
9d7f1fe0833268a6a9468b9fc19436ffe00b8596c67131b09361467deaed1b76
GET /assets/images/contextual/responsive/smlprimary/wfi000_ic_b-wf_icon_check_mark_gradient_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61a93697-12d2"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 1344
content-type: image/webp
cache-control: private, no-transform, max-age=1517358
expires: Wed, 23 Nov 2022 16:36:49 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b-wf_icon_ui_card_gradient_64x64.png
200 OK 562 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b-wf_icon_ui_card_gradient_64x64.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash dffe59af45e3b6e5d78ffcb4a1a5386a
f273b4eded463939c9a9ec7944a892d2a3921ed2
9bd4d77dfdadd6574d42e469c1968fffce0422134f4487f1d785367752743f96
GET /assets/images/contextual/responsive/smlprimary/wfi000_ic_b-wf_icon_ui_card_gradient_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61a93697-769"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 562
content-type: image/webp
cache-control: private, no-transform, max-age=1930488
expires: Mon, 28 Nov 2022 11:22:19 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/first_time_experience-account_summary.png
200 OK 2.5 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/first_time_experience-account_summary.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e3dfb8e67322de6a7be8c293043e69e1
9c2339e0b48afdfdcd908f78777be88c133d2aef
ea103ea932d2ebdd8e57887e4beabb394c21b6f260f49adfa8be4772cb61faec
GET /assets/images/rwd/first_time_experience-account_summary.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "618287e9-14da"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 2496
content-type: image/webp
cache-control: private, no-transform, max-age=1983177
expires: Tue, 29 Nov 2022 02:00:28 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/wf_autograph_card_79x50.jpg
200 OK 1.1 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/wf_autograph_card_79x50.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 79x50, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8fc4a7236687f00978c3d3d9c679fa7d
5d7bcfc23ba4a4b58f22f497b214e7b427916b05
c2f04b9277e2158e498ea44ff61a651461ac7bcf0eed712b78fa8e21ae6eabfb
GET /assets/images/rwd/wf_autograph_card_79x50.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6286a22a-81c"
last-modified: Thu, 14 Jul 2022 19:31:27 GMT
server: Akamai Image Manager
x-serial: 2010
x-check-cacheable: YES
content-length: 1118
content-type: image/webp
cache-control: private, no-transform, max-age=2046145
expires: Tue, 29 Nov 2022 19:29:56 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_b_mv_0723_3954_b_1700x700.jpg
200 OK 35 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_b_mv_0723_3954_b_1700x700.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x423, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b4461eb744601a2ca1764ee8245185fe
8666c2c62e249f94da9721df78c7ce0cfbb587b5
e04eef1b087076cfd56ee5728e50ef2993dc739f5d1934c3196c7bf88019d386
GET /assets/images/contextual/responsive/hpprimary/wfi_ph_b_mv_0723_3954_b_1700x700.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62057fd1-14ef3"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 35078
content-type: image/webp
cache-control: private, no-transform, max-age=1983076
expires: Tue, 29 Nov 2022 01:58:47 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/lpromo/wfi_ph_g_1199830824_1600x700.jpg
200 OK 52 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/lpromo/wfi_ph_g_1199830824_1600x700.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x502, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 67a063a06589a4e40465cffe34adf460
83bd779eab37f708db097c28d9eb4295c3ebdc13
e037cf255bed27ebd83c682b368532fc925848a9ff0e42d97132ac995e43bbdf
GET /assets/images/contextual/responsive/lpromo/wfi_ph_g_1199830824_1600x700.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61a7e46d-172e2"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 51474
content-type: image/webp
cache-control: private, no-transform, max-age=1827983
expires: Sun, 27 Nov 2022 06:53:54 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www--wellsfargo--com--1649329d48d6c.wsipv6.com/ui/css/homepage-ui/ps-homepage.css
200 OK 23 kB URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/ui/css/homepage-ui/ps-homepage.css
IP
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (65536), with no line terminators
Hash 19f61e85117c7c4ff7a38d2d410c1ab5
42f7a8a432f23f0b46e7204bdbeadb0fe4fc4400
984774298af70e8451e8a9c443be83358e7e9896d731c70d9bec44d7be987e98
Analyzer Verdict Alert urlquery Phishing - Wells Fargo
openphish Wells Fargo & Company
GET /ui/css/homepage-ui/ps-homepage.css HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:0ea05c63-8ebe-48bb-a62a-930d91911a33|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:75; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:31 GMT
Content-Type: text/css
Content-Length: 23297
Connection: keep-alive
Expires: Sun, 06 Nov 2022 02:12:18 GMT
Last-Modified: Thu, 22 Sep 2022 21:44:40 GMT
ETag: "632cd748-292a4"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:5 (Cdn Cache Server V2.0), 1.1 bl21:4 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f3_bl22_19394-52468
connect.secure.wellsfargo.com/auth/login/static/js/general_alt.js?single
200 OK 4.3 kB URL HTTP/1.1 connect.secure.wellsfargo.com/auth/login/static/js/general_alt.js?single
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (9269)
Hash f525c1ec2f393393fac7694879e33de3
8682208b16451a45ed06912d00baf50932c12063
a3646413370d32be7e4493bfab919fd3d70479fa9e5a30633862559f1efb909f
GET /auth/login/static/js/general_alt.js?single HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Encoding: gzip
Content-Length: 4308
Vary: Accept-Encoding
Date: Sun, 06 Nov 2022 03:07:31 GMT
Connection: keep-alive
Set-Cookie: WesdAksn=A9tV6EqEAQAA1T4UY5FwqK3r58RHAUiiWsDJQQZsHvNMHaLcYWuPhym3gSVYAVtaKpqcuDv8wH8AAEB3AAAAAA|1|0|670d6c2ae3a1f5ffc5a5dd332aedb520e0b7c5f1; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=FhRmKav+EkgPbkFEUpKXHFodZAShCybIXT2nU5%2f+Bvo%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
www17.wellsfargomedia.com/assets/images/sprite/responsive-sprite-v7.png
200 OK 49 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/sprite/responsive-sprite-v7.png
IP
File type PNG image data, 1187 x 406, 8-bit colormap, non-interlaced\012- data
Hash 4576998e5446061faba47c4c609823e0
3beff60a8beab6ef65403e7bc02f996509c737a2
9730d81c67de0dae104be9a17b43a179e68557cc4a10a81c95fd451630d04b39
GET /assets/images/sprite/responsive-sprite-v7.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 48569
last-modified: Thu, 21 Jul 2022 20:04:58 GMT
etag: "62d9b16a-bdb9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
cache-control: max-age=10458737
expires: Tue, 07 Mar 2023 04:19:48 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2
200 OK 22 kB URL HTTP/2 www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22424, version 1.13107\012- data
Hash 0a1639ebe9fab396657a62aa5233c832
9b58164729ad918dd7255e4856f9da7f3a90bfde
631f3b6267a831a8d67c45e480b5d5a2601f10ff8708bcf3a45a41b377a129cc
Analyzer Verdict Alert urlquery Phishing - Wells Fargo
GET /assets/fonts/wellsfargosans-rg.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22424
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-5798"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=4599587
expires: Thu, 29 Dec 2022 08:47:18 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-sbd.woff2
200 OK 23 kB URL HTTP/2 www17.wellsfargomedia.com/assets/fonts/wellsfargosans-sbd.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22600, version 1.13107\012- data
Hash 83df8749c013f13019fa8e0912041759
2bbffcf012a59e47661c0a37edda0fc772992ae7
ab9d8c97b35ed86b6224aca911aa304a0d7dbcbd28e00a4c6585b96e28ed30ba
Analyzer Verdict Alert urlquery Phishing - Wells Fargo
GET /assets/fonts/wellsfargosans-sbd.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22600
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-5848"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=4509446
expires: Wed, 28 Dec 2022 07:44:57 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2
200 OK 22 kB URL HTTP/2 www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22172, version 1.13107\012- data
Hash f0307736c3a6ef356722f1dc3e9fa3f4
e29ea90ba786f0e08caa770dcfdfe923f619bebd
6bc7e16d4b6822a6867d7dd9f9d29f5fd77cd803750b0fe38a92309d9eb00704
GET /assets/fonts/wellsfargosans-bd.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22172
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-569c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=4576381
expires: Thu, 29 Dec 2022 02:20:32 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-lt.woff2
200 OK 22 kB URL HTTP/2 www17.wellsfargomedia.com/assets/fonts/wellsfargosans-lt.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21636, version 1.13107\012- data
Hash 1a2740c8df445989e4ee5f5396b6474c
a3f8545619fdd5b2a481952cd9e2c7b169bb43a6
63673faef8532b2789dee1ac7534f87b1a6a249590acc7da8644beda141794fc
GET /assets/fonts/wellsfargosans-lt.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 21636
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-5484"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=4509166
expires: Wed, 28 Dec 2022 07:40:17 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
static.wellsfargo.com/tracking/hp/utag.js
200 OK 55 kB URL HTTP/1.1 static.wellsfargo.com/tracking/hp/utag.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (15536), with CRLF line terminators
Hash a2ab4b46ad30f60866211f2fe5de68a3
125c39f1a776161eb319a742ae7ce621f4c38933
11f666b297e903717f7f8fb577dca1beb1db6bff324a2a99b4dc0c639f883452
GET /tracking/hp/utag.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 22 Sep 2022 20:06:35 GMT
Vary: Accept-Encoding
ETag: W/"632cc04b-32229"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 54746
Date: Sun, 06 Nov 2022 03:07:31 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=bE659fYiuzSyrKs1cv2I5w%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
connect.secure.wellsfargo.com/auth/login/static/js/general_alt.js?1js
200 OK 306 kB URL HTTP/1.1 connect.secure.wellsfargo.com/auth/login/static/js/general_alt.js?1js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65356)
Size 306 kB (305866 bytes)
Hash 0a73606e47133a2d2a13f7b5e1750e3c
8faaf759f275f0b66491df1c5077939099282044
cadbb05fc74ea8549b09ebed74da9dddf5499847acbcfaf7775b67a48abfc1ed
GET /auth/login/static/js/general_alt.js?1js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Cache-Control: public, max-age=3600, immutable
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 06 Nov 2022 03:07:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Set-Cookie: DCID=q9Gd0kQtyHy33%2fCjc2nR8Sez7urZYXmZdjqC%2fq2NP18%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
www17.wellsfargomedia.com/assets/images/icons/icon-hires_192x192.png
200 OK 1.6 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/icon-hires_192x192.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b9d2c719de3d6701349f1134e129defe
703a51a2f72672f6b34a3dcf8d07c351143f9151
95ae72a8f3b1f5794802b2704b74bef2f29fe1b8da1f06c97a8e7ab2acb5e435
GET /assets/images/icons/icon-hires_192x192.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6116f9a6-dcf"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 1636
content-type: image/webp
cache-control: private, no-transform, max-age=1824797
expires: Sun, 27 Nov 2022 06:00:48 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/icons/ico/favicon.ico
200 OK 9.2 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/ico/favicon.ico
IP
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash cd112f1acb59ef6e59e09c0effd8ce2a
bc104cd92adc32a8f695300d2b0cc69c2776f6af
6780d0b2bc67397895ef7b8845261eee7b9b22610b026835362128942da5fb7c
GET /assets/images/icons/ico/favicon.ico HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 9198
last-modified: Fri, 17 Dec 2021 21:10:38 GMT
etag: "61bcfcce-23ee"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=23931
expires: Sun, 06 Nov 2022 09:46:22 GMT
date: Sun, 06 Nov 2022 03:07:31 GMT
X-Firefox-Spdy: h2
www--wellsfargo--com--1649329d48d6c.wsipv6.com/target/offers/conversations
200 OK 2.0 kB URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/target/offers/conversations
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with very long lines (9841), with no line terminators
Hash 5bc84bd018e253326e11c07e3c594039
7a04926472b934572a21ce2cff6de5eff5055ef4
cba973df98f9c1f08aa2ff1d19ef67ccbe24fd7464ce49d528ebc4c6f07652a4
Analyzer Verdict Alert openphish Wells Fargo & Company
fortinet Phishing
POST /target/offers/conversations HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 105
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:0ea05c63-8ebe-48bb-a62a-930d91911a33|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:75; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:31 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 1988
Connection: keep-alive
Content-Security-Policy: default-src https:; img-src https: data:; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; object-src 'self'; font-src https: data:; style-src https: 'unsafe-inline'; script-src 'nonce-0c8be3c3-176d-44ac-8643-60cc7f2b9339' 'self' https://*.wellsfargo.com https://*.wfinterface.com;report-uri https://ort.wellsfargo.com/reporting/csp
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: -1
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:0|g:0ea05c63-8ebe-48bb-a62a-930d91911a33|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:0|i:206894|e:75; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52; Expires=Sun, 06-Nov-2022 03:08:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sun, 06-Nov-2022 03:08:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sun, 06-Nov-2022 03:08:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893; Expires=Sun, 06-Nov-2022 03:08:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893|e:153; Expires=Sun, 06-Nov-2022 03:08:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
CookiesAreEnabled=yes; domain=.wellsfargo.com;path=/; secure=true; HttpOnly; SameSite=Lax
INLANG=EN; domain=.wellsfargo.com;path=/; secure=true; Max-Age=31536000; HttpOnly; SameSite=Lax
wfacookie=11202211052007311587359250; domain=.wellsfargo.com; path=/; expires=3 Nov 2032 03:07:31 GMT; secure=true; SameSite=Lax; HttpOnly
wcmcookiehp=26BBE90E2F4CC61C913C2766CE988C0A; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
DCID=wgjK31Pxo2fsJNzKu4KZ2bESyQgFyVIK2ORG9RCQ+aY%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl22:0 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f3_bl22_20426-44098
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19036
Expires: Sun, 06 Nov 2022 08:24:47 GMT
Date: Sun, 06 Nov 2022 03:07:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19036
Expires: Sun, 06 Nov 2022 08:24:47 GMT
Date: Sun, 06 Nov 2022 03:07:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19036
Expires: Sun, 06 Nov 2022 08:24:47 GMT
Date: Sun, 06 Nov 2022 03:07:31 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F148837ad-b0cd-4864-94a6-8a95f3af1c20.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F148837ad-b0cd-4864-94a6-8a95f3af1c20.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 28381a10095fbc871cbd32f02e2c49be
ba8a552ca0d40c6e879ba451ef95ae85aeabc1ce
e5abdd27c7c75a5bd55f88ad933eb4bbfa8c72887307ad2e0918b4216c347ec3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F148837ad-b0cd-4864-94a6-8a95f3af1c20.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8918
x-amzn-requestid: 05695d8b-6915-4647-98bf-a699f35ed25a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabcHDjoAMFyVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77c-71d6d6223d1e8e006a8e2593;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: yv9L2i0EF6xcmBLnn7Jp-_vCHog1TGZ4lh5K1nMrWfDz761n8xh-yQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:46:01 GMT
age: 19290
etag: "ba8a552ca0d40c6e879ba451ef95ae85aeabc1ce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3fDf4aoep5tTAusisXhIdAf0A6SbpM5fYtYaiXtNSb0-VRJo5nu8Vg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 06:27:59 GMT
age: 74372
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb26ee664-ca5b-4d85-9acd-1f5d9b755457.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb26ee664-ca5b-4d85-9acd-1f5d9b755457.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf5fa6c2a0228b86251e7cf557948194
f21241449dfd7c14d091d6c84d2beb9ead3000a5
f581a7b794f520146ed48596477d01a97bb3228480b6f93f7d02f2167b7c682b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb26ee664-ca5b-4d85-9acd-1f5d9b755457.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9549
x-amzn-requestid: 4c6413aa-828d-41d9-af41-f0d7c6232ce1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabcElWoAMFp0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77c-7935b38c7c8edcaf27a9f04b;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tMIo2s2d1ys6ONGHl6Fk3f1kr9Vxv7y1LL2Tc4CoATSwgaRLI7Ittw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 22:08:11 GMT
age: 17960
etag: "f21241449dfd7c14d091d6c84d2beb9ead3000a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d394a65-12f0-45e6-af37-57a983997faa.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d394a65-12f0-45e6-af37-57a983997faa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 886f94a2b6bfa041d40943e14fee4a18
deba663d6b38f0c151032b2d5b5b5d54f7dd78b0
620c1c5ae68bbbddf31b43bf51161b06d1a3da6b6872643637c057f05cceec6b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d394a65-12f0-45e6-af37-57a983997faa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9787
x-amzn-requestid: fbeabde7-9e76-468d-b945-a3ee931e5f74
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabbHUPoAMFg_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77c-1c372f9206e5923d360e9ed6;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UiyazpCisGgn3fc1ZqqIrF3pUpXHrPZqca5x7wINK-H_cP1ck1Pa8Q==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:48:58 GMT
age: 19113
etag: "deba663d6b38f0c151032b2d5b5b5d54f7dd78b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5cee1982-fead-41ba-9720-19ae491d0af1.webp
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5cee1982-fead-41ba-9720-19ae491d0af1.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3929fb3c2f0dad9409e9b247ab891518
b8f906e9e3c3addf73e2d387c7238dc1ffe0bb28
64822bf90b140698a0043ea76542823a55daf3bb6ad1b6b3ba972c7fbb256bb5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5cee1982-fead-41ba-9720-19ae491d0af1.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8309
x-amzn-requestid: 377e4474-c2ee-4477-be4b-18d264ca9aa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJbgwH23IAMF3kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d937-7692bcd1131d9749085800b0;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:44:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: JK-yLq7PeMFrcv4opjTjHprEUQ8IIBuHPzhz0ttxQx9GYdBY1EauBA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 22:17:07 GMT
age: 17425
etag: "b8f906e9e3c3addf73e2d387c7238dc1ffe0bb28"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc334794-344c-42b8-b888-09ae1b980b8f.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc334794-344c-42b8-b888-09ae1b980b8f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7eee78125f913e293f72d50cad14750
b67641e46a68d65f072afc70a8adcfe2e3aac6e4
1146c775722166bb64066ef8ec12aeed842a89dd9cbae011eba9e2cf952fc5e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc334794-344c-42b8-b888-09ae1b980b8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8972
x-amzn-requestid: ef054daa-06ba-4c49-a9cf-18ff2123c400
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabaGl3oAMF5Jw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77b-7fed4c2a447c3daa4ed6f9f2;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: JuHIea1omMu1inQPB5VfHb6R1r6xCyyq811JiW38QFqTXTMTmC-i_w==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:59:57 GMT
etag: "b67641e46a68d65f072afc70a8adcfe2e3aac6e4"
content-type: image/jpeg
age: 18455
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_557715963_616x353.jpg
200 OK 22 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_557715963_616x353.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 338cfc728ba1dbb6840c74558c5b9d9e
16d3653d467c5e8f80600b924a91fc19d3bf416f
dcc2606ff287abd984b9e619a55adb02716c387721e5482b604503b0602e3cd0
GET /assets/images/contextual/responsive/smlpromo/wfi000_ph_g_557715963_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "635162e0-ce5a"
last-modified: Mon, 31 Oct 2022 17:02:20 GMT
server: Akamai Image Manager
x-serial: 60
x-check-cacheable: YES
content-length: 22174
content-type: image/webp
cache-control: private, no-transform, max-age=2123774
expires: Wed, 30 Nov 2022 17:03:46 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_1200094303_616x353.jpg
200 OK 46 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_1200094303_616x353.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 616x353, components 3\012- data
Hash dcf7437b7a206b67e8a55258ceea28ae
88e53c53f0878df1b91a66feaaa14fd8fae4af48
360a07438b52ee265a76b81e252fa33b85d462168d6998b6e35df8df2899e9d3
GET /assets/images/contextual/responsive/smlpromo/wfi000_ph_g_1200094303_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "63505819-d82f"
last-modified: Thu, 20 Oct 2022 21:37:57 GMT
server: Akamai Image Manager
x-serial: 1019
x-check-cacheable: YES
content-length: 46359
content-type: image/jpeg
cache-control: private, no-transform, max-age=1189846
expires: Sat, 19 Nov 2022 21:38:18 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/reflect_card_only_hppb_1700x700.jpg
200 OK 4.4 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/reflect_card_only_hppb_1700x700.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x423, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dc1423f2c7cc45f6f97be3757b8f8b52
93d350e9d1e93dd8c0340e803f675bfa7f59ae6b
b407a56b8cbd9727341490868500a4bcff59fd2e939a8d37a7d176e84634fd53
GET /assets/images/contextual/responsive/hpprimary/reflect_card_only_hppb_1700x700.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "632c7aa6-1455f"
last-modified: Mon, 26 Sep 2022 21:16:21 GMT
server: Akamai Image Manager
content-length: 4398
content-type: image/webp
cache-control: private, no-transform, max-age=1341186
expires: Mon, 21 Nov 2022 15:40:38 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b_creditcard_color-gradient_64x64.png
200 OK 1.1 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b_creditcard_color-gradient_64x64.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f1bc1104011416dfe46e6a148f6f9515
574980010589cdf51f07081e6c7ee06de1e063f4
eda705920b82d0bef5bf2b041ee4e37537017cabac01cea7c7a3f89a40765e6a
GET /assets/images/contextual/responsive/smlprimary/wfi000_ic_b_creditcard_color-gradient_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6318b389-c10"
last-modified: Fri, 16 Sep 2022 20:24:35 GMT
server: Akamai Image Manager
x-serial: 806
x-check-cacheable: YES
content-length: 1118
content-type: image/webp
cache-control: private, no-transform, max-age=402760
expires: Thu, 10 Nov 2022 19:00:12 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_1345111232_616x353.jpg
200 OK 24 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_1345111232_616x353.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 51ee4423bd7473f82847570bb6f10f88
5665cca6ad63f3cf35b07de9f3534c8e94cfe698
79117776265cb8f5638233611d20d12eb5af668b2b7a0228eaa6d15d190e6890
GET /assets/images/contextual/responsive/smlpromo/wfi000_ph_g_1345111232_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6350582a-e73f"
last-modified: Tue, 01 Nov 2022 15:13:52 GMT
server: Akamai Image Manager
content-length: 23618
content-type: image/webp
cache-control: private, no-transform, max-age=2203672
expires: Thu, 01 Dec 2022 15:15:24 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/lpromo/wfi_ph_b_mv_0723_3954_b_1600x700.jpg
200 OK 57 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/lpromo/wfi_ph_b_mv_0723_3954_b_1600x700.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x502, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8e01286a77c42c8aebfc80b3b90ccf1d
287926659bbfbacad8d19a53d898dfc1dc72849d
763d0bd81cbd64de88b68a828a3568c8744e60e19e89f921a5c6c2dc681d2554
GET /assets/images/contextual/responsive/lpromo/wfi_ph_b_mv_0723_3954_b_1600x700.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62057fd1-1737b"
last-modified: Thu, 14 Jul 2022 02:02:36 GMT
server: Akamai Image Manager
x-serial: 542
x-check-cacheable: YES
content-length: 56918
content-type: image/webp
cache-control: private, no-transform, max-age=1839877
expires: Sun, 27 Nov 2022 10:12:09 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/homepage/position-1-bg-gradient.png
200 OK 2.3 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/homepage/position-1-bg-gradient.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash cd43a2d200f1b8eec84495408eb299f0
2eb173b0af9b49b634e0645a96931f5fdf6e3ab3
659ec8c02bafa9c286c39731fb1d2d382a7a8dd2ee8cc4132146558dbe27b6a8
GET /assets/images/homepage/position-1-bg-gradient.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61619278-9f2c"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
x-serial: 858
x-check-cacheable: YES
content-length: 2330
content-type: image/webp
cache-control: private, no-transform, max-age=1944240
expires: Mon, 28 Nov 2022 15:11:32 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/homepage/position-2-bg-gradient.png
200 OK 2.3 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/homepage/position-2-bg-gradient.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2f9e97870725142046712437d067b97f
bf8db685193835edea05ac95e5671b24e0f49467
50ce7b0d954443e5fd62e3cd003bc7124bda0b30dd58d6a66485c72be96959c0
GET /assets/images/homepage/position-2-bg-gradient.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61619278-cf3e"
last-modified: Thu, 14 Jul 2022 02:02:39 GMT
server: Akamai Image Manager
content-length: 2340
content-type: image/webp
cache-control: private, no-transform, max-age=1795140
expires: Sat, 26 Nov 2022 21:46:32 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/homepage/position-3-bg-gradient.png
200 OK 2.1 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/homepage/position-3-bg-gradient.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bf02d082705f06162b2e73f68602e79e
219dbb45081fa5d8663bad2f96e9066e7f17aa6e
10c22e3b130204065c1a61e7995a9defe21f0408801e8b442035a03f8d16ad64
GET /assets/images/homepage/position-3-bg-gradient.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61619278-7b35"
last-modified: Thu, 14 Jul 2022 02:02:36 GMT
server: Akamai Image Manager
x-serial: 416
x-check-cacheable: YES
content-length: 2092
content-type: image/webp
cache-control: private, no-transform, max-age=1975672
expires: Mon, 28 Nov 2022 23:55:24 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/Native_App_Phone_Personal_v8.png
200 OK 9.7 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/Native_App_Phone_Personal_v8.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8b4c65145c9e79c9856c52e2ce603d3b
438a74f7b0422772484641c478e42249dfe67b02
768a1f0d67ab6d887d220ae8500265022bc019d8076b815c8ca7b009556be135
GET /assets/images/rwd/Native_App_Phone_Personal_v8.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6328cc17-9829"
last-modified: Tue, 11 Oct 2022 18:46:18 GMT
server: Akamai Image Manager
content-length: 9652
content-type: image/webp
cache-control: private, no-transform, max-age=401868
expires: Thu, 10 Nov 2022 18:45:20 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/volunteers_cars_616x353.jpg
200 OK 29 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/volunteers_cars_616x353.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1368994cfb46c8ae169c749459365581
49af26a99885e645354f7b26e123655cdeee159b
a5bcbe6002a1fbae84d43160b1f45c3686d5c35e7fda458e9f4b3fd2dacfe3e5
GET /assets/images/rwd/volunteers_cars_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "618017dd-cd21"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 29240
content-type: image/webp
cache-control: private, no-transform, max-age=1823412
expires: Sun, 27 Nov 2022 05:37:44 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/woman_in_office_616x353.jpg
200 OK 32 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/woman_in_office_616x353.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7b5816c180aaf51a1142bd41e53a6ed3
f8dfd3ec8e0fb88ecef0a4b07acda06d280741ab
d7651b47c8d449b7311d15e9625df3514e7c0278ff059392189e608b5a9113a1
GET /assets/images/rwd/woman_in_office_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "618017dd-d06e"
last-modified: Thu, 14 Jul 2022 02:02:36 GMT
server: Akamai Image Manager
content-length: 31450
content-type: image/webp
cache-control: private, no-transform, max-age=1983323
expires: Tue, 29 Nov 2022 02:02:55 GMT
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
static.wellsfargo.com/tracking/gb/detector-dom.min.js
200 OK 132 kB URL HTTP/1.1 static.wellsfargo.com/tracking/gb/detector-dom.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65434)
Size 132 kB (131829 bytes)
Hash 73ad7a8f8ccda765b898b038f90d8274
756ac35ad2422d93a0b327dfeff7fe9200695883
60ccc38cf175aba7cbe63bf1ec6319b5c1648d9a52014dfefa6ec718476a17b7
GET /tracking/gb/detector-dom.min.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 22 Sep 2022 20:03:51 GMT
Vary: Accept-Encoding
ETag: W/"632cbfa7-6b8d3"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 131829
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=3RuUIySspLKC+VKLGPnk0Q%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/ga/gtag.js?id=UA-107148943-1
200 OK 45 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?id=UA-107148943-1
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65508)
Hash f0bce3a74e635ab88b299b1f625c99a4
345faf01029820b11abc73022ece8fb8e51cc321
faebd8dced2c15d37da85427c6e60aecb6a1a5f75e888280d447e93e64102c8e
GET /tracking/ga/gtag.js?id=UA-107148943-1 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-1ca73"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45086
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=DoqbxCtIqWoirFsSO5YMug%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
connect.secure.wellsfargo.com/accounts/static/7M/accounts/short/accounts-cache.js
200 OK 573 B URL HTTP/1.1 connect.secure.wellsfargo.com/accounts/static/7M/accounts/short/accounts-cache.js
IP
ASN #20940 Akamai International B.V.
Hash c9c1dd0b5080304df848781e567df9a7
6ebb0fce3ee1a15e7745bd0b9563c6b84aed5f54
ab48fca72c13f29457a23857b6bc5d2ab6b5b733bf97665fc3198b0deed9ce37
GET /accounts/static/7M/accounts/short/accounts-cache.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Mon, 10 Oct 2022 07:35:32 GMT
Vary: Accept-Encoding
ETag: W/"6343cb44-497"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Content-Length: 573
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=NoB7Xyo8GeDRrX6HJbk+%2f1hSs8bBCoznMrz4z5H9JhkOqbmstbO3mA7zyBUa1%2fv%2f; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:32 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
ocsp.digicert.com/
200 OK 471 B IP
Hash d53c9b96691b127b62a68514afd188b7
bc9e4bc823a7578c9aa8b92f70cea05c4e50bfed
8833bc593b7eaf853029862bdd25c5f13227d530a9c6b307cc0e71bb36255e25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4355
Cache-Control: max-age=97915
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:32 GMT
Etag: "6365ef6c-1d7"
Expires: Mon, 07 Nov 2022 06:19:27 GMT
Last-Modified: Sat, 05 Nov 2022 05:06:52 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/stylesheets/main.1cf952c0f491ea68bbcb.chunk.css
200 OK 22 kB URL HTTP/1.1 connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/stylesheets/main.1cf952c0f491ea68bbcb.chunk.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 552a721cc80d5c43520bfc0f7e676a6d
bc0b9c8d241e1a9358bfbf573b7af72af5361a88
20d03b625f81f0641adf6ba55137ebb3824540d8a60be3a738f5bc24aba46b07
GET /accounts/static/7M/accounts/public/stylesheets/main.1cf952c0f491ea68bbcb.chunk.css HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 21452
Last-Modified: Mon, 10 Oct 2022 07:35:32 GMT
Vary: Accept-Encoding
ETag: "6343cb44-53cc"
Content-Encoding: gzip
Access-Control-Allow-Origin: https://www.wellsfargo.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET POST
Access-Control-Allow-Headers: User-Agent,Keep-Alive,Content-Type
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Allow: GET, POST, OPTIONS
Cache-Control: max-age=10368000
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=teWZ4eLekLP6JWDj1k7yBw%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/stylesheets/wfui.cbc3f985065fa5be5a6e.chunk.css
200 OK 37 kB URL HTTP/1.1 connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/stylesheets/wfui.cbc3f985065fa5be5a6e.chunk.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7c13f150789d64d7f93128102477d77b
4cda69da13d60c4ce46f36a42f786846a7484a22
32c68059f2b349eb1e3be3aac73129807d4fe70f5a86a2de6233bddf902a920a
GET /accounts/static/7M/accounts/public/stylesheets/wfui.cbc3f985065fa5be5a6e.chunk.css HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 37010
Last-Modified: Mon, 10 Oct 2022 07:35:32 GMT
Vary: Accept-Encoding
ETag: "6343cb44-9092"
Content-Encoding: gzip
Access-Control-Allow-Origin: https://www.wellsfargo.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET POST
Access-Control-Allow-Headers: User-Agent,Keep-Alive,Content-Type
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Allow: GET, POST, OPTIONS
Cache-Control: max-age=10368000
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=QHNU4wN2bZ2i4B72QGUNOA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
connect.secure.wellsfargo.com/dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA
200 OK 175 B URL HTTP/1.1 connect.secure.wellsfargo.com/dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash e80c599f429a906e6f8f73af578f0d89
8f2cfeea1d092ef7904efc1dd416f2a0ac43c08d
8248309b1ead59eed4eeeba19c8c877c6fe839731cb5df93784db46afb9f4871
POST /dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Content-Type: multipart/form-data; boundary=---------------------------12188455093558822123657750991
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Content-Length: 169
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 175
Access-Control-Allow-Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Vary: Origin, Accept-Encoding
x-envoy-decorator-operation: ingress DeviceCategoryPost4
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=1wcqkbL3RIz0UkCq6hM7wyxEATstjbpw%2fnmSBwxUkz1EFQrjCzp5W5QJO7xpcqAf; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:32 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_coop_unsafe=1&ts=1667704050287
200 OK 319 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_coop_unsafe=1&ts=1667704050287
IP
File type JSON data\012- , ASCII text, with very long lines (382), with no line terminators
Hash 84d2ec3707363cf13b19ecb7d27ea0ca
188df0690f96219f2ddfd71a66ab2922b0de8ad4
b14bb0a59cb446e9fe467643bd331fe32a90938c98b70f08bbe5cab3e2b3bbb1
GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_coop_unsafe=1&ts=1667704050287 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcscanary-prod-irl1-1-v052-0f73f706c.edge-irl1.demdex.com 1 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=44201967441641655990137962107402964544; Max-Age=15552000; Expires=Fri, 05 May 2023 03:07:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: 2oIOS14wRPU=
Content-Length: 319
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 8b80428e51ec2da248e9f2a4277e1934
765298a22ddc8b42fce92badd8015a970e59ba04
0a6cfe9dcab898be302d880673ea2e64292515e70e3109c721881e04be86afc4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 06 Nov 2022 01:42:55 GMT
Expires: Sun, 13 Nov 2022 01:42:54 GMT
Etag: "765298a22ddc8b42fce92badd8015a970e59ba04"
Cache-Control: max-age=599121,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 765a9e9748451c0a-OSL
connect.secure.wellsfargo.com/auth/static/prefs/login-userprefs.min.js
200 OK 3.6 kB URL HTTP/1.1 connect.secure.wellsfargo.com/auth/static/prefs/login-userprefs.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7300), with no line terminators
Hash 4e465286f2760561180766374ed2cd79
bbab70295d66ac43d143e4e312129c869e549a1d
0d92fdeebe1141b900a97ce98ec2219e415001ba4142b63ce9202d0f434e73c3
GET /auth/static/prefs/login-userprefs.min.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
X-XSS-Protection: 1; mode=block
Pragma: no-cache
Content-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/reporting/csp
Allow: GET, POST, OPTIONS
Access-Control-Allow-Methods: POST
X-Frame-Options: SAMEORIGIN
ETag: W/"6358926b-172f"
Last-Modified: Wed, 26 Oct 2022 01:50:35 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sun, 06 Nov 2022 03:07:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
WesdAksn=A2hZ6EqEAQAAQXtnpUGzm_V86nmL8OSVLJqViCbeHu7OhbNxUwqiFWMd7BW_AVtaKpqcuDv8wH8AAEB3AAAAAA|1|0|d28a11065a9913c21dce247cfb679ff0445c468d; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=ZL7q%2f+6O5xnWUwa0ilb7htTZuQhHnfFt02Xny1uyG8o%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:32 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
api.rlcdn.com/api/identity/idl?pid=1317
451 Unavailable For Legal Reasons 0 B URL HTTP/2 api.rlcdn.com/api/identity/idl?pid=1317
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/identity/idl?pid=1317 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 451 Unavailable For Legal Reasons
date: Sun, 06 Nov 2022 03:07:32 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_mid=44210487637581654520137124656547476563&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=wfacookieidsync%0111202211052007301344497748%011&ts=1667704050637
200 OK 320 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_mid=44210487637581654520137124656547476563&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=wfacookieidsync%0111202211052007301344497748%011&ts=1667704050637
IP
File type JSON data\012- , ASCII text, with very long lines (382), with no line terminators
Hash 242eda550c5f734954a93a8a9e8ebd15
9418328f3b6a018e5aa6306a6a0f22c9f0b521e4
adea19b7148a669bc941425267be8e8d2faf0b3154f44a2a945610eafde0d3a5
GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_mid=44210487637581654520137124656547476563&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=wfacookieidsync%0111202211052007301344497748%011&ts=1667704050637 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v045-0b398da67.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=74238936835931697280954407565897673402; Max-Age=15552000; Expires=Fri, 05 May 2023 03:07:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: a8q/Y+OYSpU=
Content-Length: 320
Connection: keep-alive
connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/wfui.90f03c36c03268998a70.chunk.js
200 OK 309 kB URL HTTP/1.1 connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/wfui.90f03c36c03268998a70.chunk.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65446)
Size 309 kB (308951 bytes)
Hash f40373dc46a1eebfc65e4b60509cecf9
ba723c4e80a4df1d9706162f2e1c08102f6cad3e
a427f7fff2534ecd20d5537d0ab7d1011aa49b4edfcc10f3a739d52fd1adbd88
GET /accounts/static/7M/accounts/public/js/wfui.90f03c36c03268998a70.chunk.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 308951
Last-Modified: Mon, 10 Oct 2022 07:35:32 GMT
Vary: Accept-Encoding
ETag: "6343cb44-4b6d7"
Content-Encoding: gzip
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET POST
Access-Control-Allow-Headers: User-Agent,Keep-Alive,Content-Type
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Allow: GET, POST, OPTIONS
Access-Control-Allow-Origin: connect.secure.wellsfargo.com
Cache-Control: max-age=10368000
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=K4pD8r4thcuOlii2%2fX%2fZQGP+J65Hz0wUOFE8gGOGY44%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:32 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.js
200 OK 14 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (32088), with CRLF line terminators
Hash 3aebe41731e9656c48b87e8e8b2d1177
43369d1732f4ad8a5e7a1e9a3e133d96945afe02
6cf0cd136cefa8b4cce2da6ead22c33b83af4af3e87d7e4e9589b60f6ce4e395
GET /assets/js/wfui/appdynamics/adrum-ext.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 09 Mar 2021 18:36:55 GMT
Vary: Accept-Encoding
ETag: W/"6047c047-b11c"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 14304
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=IHbG+NNcp+3xOPmj7HOCQg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1
200 OK 45 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65508)
Hash f0bce3a74e635ab88b299b1f625c99a4
345faf01029820b11abc73022ece8fb8e51cc321
faebd8dced2c15d37da85427c6e60aecb6a1a5f75e888280d447e93e64102c8e
GET /tracking/ga/gtag.js?t=UA-107148943-1 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-1ca73"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45086
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=sDYNVf7ltThRIuRn5W3AYw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/ga/gtag.js?t=DC-2549153
200 OK 45 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?t=DC-2549153
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65508)
Hash f0bce3a74e635ab88b299b1f625c99a4
345faf01029820b11abc73022ece8fb8e51cc321
faebd8dced2c15d37da85427c6e60aecb6a1a5f75e888280d447e93e64102c8e
GET /tracking/ga/gtag.js?t=DC-2549153 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-1ca73"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45086
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=fKCk0qjuP0Ps%2fxnJEIUvog%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsp.sectigo.com/
200 OK 471 B IP
Hash 8b80428e51ec2da248e9f2a4277e1934
765298a22ddc8b42fce92badd8015a970e59ba04
0a6cfe9dcab898be302d880673ea2e64292515e70e3109c721881e04be86afc4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 06 Nov 2022 01:42:55 GMT
Expires: Sun, 13 Nov 2022 01:42:54 GMT
Etag: "765298a22ddc8b42fce92badd8015a970e59ba04"
Cache-Control: max-age=599121,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 765a9e98186f1c0a-OSL
static.wellsfargo.com/tracking/ga/gtag.js?t=AW-984436569
200 OK 45 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?t=AW-984436569
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65508)
Hash f0bce3a74e635ab88b299b1f625c99a4
345faf01029820b11abc73022ece8fb8e51cc321
faebd8dced2c15d37da85427c6e60aecb6a1a5f75e888280d447e93e64102c8e
GET /tracking/ga/gtag.js?t=AW-984436569 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-1ca73"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45086
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=Zf4qgIRYqAKBwturqeOYoA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
wellsfargobankna.demdex.net/event?d_dil_ver=9.5&_ts=1667704050293
200 OK 321 B URL HTTP/1.1 wellsfargobankna.demdex.net/event?d_dil_ver=9.5&_ts=1667704050293
IP
File type JSON data\012- , ASCII text, with very long lines (596), with no line terminators
Hash a15678e405281ceef9187e3540d8f85a
f4fd1ad5c89a75a567b209b6d55e22cfbbe616b5
4c64b1b86aa3deeb9320c35203786b7235e51a3ed17f458d4347eb402233563a
POST /event?d_dil_ver=9.5&_ts=1667704050293 HTTP/1.1
Host: wellsfargobankna.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 431
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-0227c85fb.edge-irl1.demdex.com 4 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=44201967441641655990137962107402964544; Max-Age=15552000; Expires=Fri, 05 May 2023 03:07:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: YyFK10piQJI=
Content-Length: 321
Connection: keep-alive
rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f%3A0&_cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2&pv=2&f_cls_s=true
200 OK 76 B URL HTTP/1.1 rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f%3A0&_cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2&pv=2&f_cls_s=true
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 90cbbc4457381b76e7b19cf79bf74d3d
6506bd77a60b516c6320135c100094b81e6690b5
4189d290e12921822dd25816f4ae92bb5c7f5dfdddbeb72bb0bd90061e9cc2f3
GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f%3A0&_cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2&pv=2&f_cls_s=true HTTP/1.1
Host: rubicon.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Access-Control-Allow-Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Content-Length: 76
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: origin, Accept-Encoding
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Set-Cookie: _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; Secure; SameSite=None;HttpOnly;Secure
_cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; Secure; SameSite=None;HttpOnly;Secure
ROUTEID=.cligate1; path=/;HttpOnly;Secure
ISD_GB_COOKIE=!69uH60X1IDEs2+DNm6glvWWF2ZIYlZREDMBLgdXpEalxihmW96jJ8rf2xDNi9S3WKcGa8PKi4gS8yQ==; path=/; Httponly; Secure
DCID=pNnKwDJbhjPmnM8+vsMvr7nqUyI%2fdeC9DsNAGALsaOyqzk9hZ+YQlWpcExkAp3%2fv; Domain=rubicon.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:32 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
connect.secure.wellsfargo.com/auth/static/prefs/atadun.js
200 OK 607 B URL HTTP/1.1 connect.secure.wellsfargo.com/auth/static/prefs/atadun.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash 00c66df208db2e1ba86a1bf44853001c
703b030e21167b9bbb52ae54bca96921a886c2dc
ab1989dd07ba1ed256db9131647ea9cb1b3735fac736fd27fb73b4b44c6e45b9
GET /auth/static/prefs/atadun.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 26 Oct 2022 02:08:25 GMT
Vary: Accept-Encoding
ETag: W/"63589699-4a0"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/reporting/csp
Content-Encoding: gzip
Content-Length: 607
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=a0kNFPC1jFVhncFgmUqehORDMUFsxgTW%2fHQgceenMqI%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:32 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
static.wellsfargo.com/tracking/ga/ga.js
200 OK 20 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/ga.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (49163)
Hash d76c07f3794667edfb1c8ac0df3aac66
23e1915175dad06223c692b49c7b3c2aad1a5820
e0a246ff71144016a26e53493b8275a3a02b9386c690a169801840072851136b
GET /tracking/ga/ga.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-c025"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 19477
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=eRHMiWrOOqMVGvIR4GfZ1g%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
connect.secure.wellsfargo.com/AIDO/glu.js
200 OK 34 kB URL HTTP/1.1 connect.secure.wellsfargo.com/AIDO/glu.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash e17fef37d776a80c9077ca260cbf7e75
fc0fbc524f7ec54de0509b8f4359c048bb3b3e1a
560d69d4dc8f0cb40b4c4bce2511c3cad0a48dad4165a21f203817ad42a1e416
GET /AIDO/glu.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 34011
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, OPTIONS
max-age: 0
Expires: -1
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
PICS-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) "http://www.icra.org/ratingsv02.html" l r (nz 0 vz 0 lz 0 oz 0 cz 0) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0))
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Content-Encoding: gzip
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=QtTmVvHBdn5mK238XYwUid8xpoedulz+F5H3A4bQC5edGpxsrxAfQof+ZENtbSV7; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:32 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
static.wellsfargo.com/tracking/ga/ga_conversion_async.js
200 OK 14 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/ga_conversion_async.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (35846)
Hash 42c817a7b5f9583b2bc70f742dc950c9
ff75711716f8605860abe551b0235f7194e4348e
881b430ac699f32b3b5234582494d1f4fc0d22be1e6ac797847d66bc5ebc250f
GET /tracking/ga/ga_conversion_async.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-8c31"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 13593
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=68NzqFy8m2goGGGTdee26A%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsp.digicert.com/
200 OK 471 B IP
Hash 243a69bd8d356d81bde8ec490bd98764
c0f3e3f5ffa8290320453045e02920ce858ae790
ffea261e024417e07d6483681f3badd05377c2ce0fcd1bd58c8abaf22c681b10
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3105
Cache-Control: max-age=90531
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:32 GMT
Etag: "6365d776-1d7"
Expires: Mon, 07 Nov 2022 04:16:23 GMT
Last-Modified: Sat, 05 Nov 2022 03:24:38 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
www.facebook.com/tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0
200 OK 0 B URL HTTP/2 www.facebook.com/tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 06 Nov 2022 03:07:32 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e20220595764996da3b132db809444b2
7b5e25e40df30de11e8bd6088f59b7131a2702db
b2f5ca6be41e0113663f5f75edc856f49297cd40700043080f3e27c1cce3a185
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 243a69bd8d356d81bde8ec490bd98764
c0f3e3f5ffa8290320453045e02920ce858ae790
ffea261e024417e07d6483681f3badd05377c2ce0fcd1bd58c8abaf22c681b10
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3105
Cache-Control: max-age=90531
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:32 GMT
Etag: "6365d776-1d7"
Expires: Mon, 07 Nov 2022 04:16:23 GMT
Last-Modified: Sat, 05 Nov 2022 03:24:38 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=2858024003625;gtm=2od8g0;auiddc=770345790.1667704051;u1=11202211052007301344497748;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F?
200 OK 309 B URL HTTP/2 2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=2858024003625;gtm=2od8g0;auiddc=770345790.1667704051;u1=11202211052007301344497748;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (546), with no line terminators
Hash d15e6b10872ee06ff83ddd587084d579
e6a03ec05cb5792f3c57d007e9b2bd6971981fee
e75d8f40927015fd844547193e922b1f62aa93ddd57989f9bfb744dbe204b80b
GET /activityi;src=2549153;type=allv40;cat=all_a00;ord=2858024003625;gtm=2od8g0;auiddc=770345790.1667704051;u1=11202211052007301344497748;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F? HTTP/1.1
Host: 2549153.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Nov 2022 03:07:32 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 309
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 06-Nov-2022 03:22:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e20220595764996da3b132db809444b2
7b5e25e40df30de11e8bd6088f59b7131a2702db
b2f5ca6be41e0113663f5f75edc856f49297cd40700043080f3e27c1cce3a185
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.wellsfargo.com/tracking/ga/ec.js
200 OK 1.3 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/ec.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2771)
Hash 8a1d22ba0de1104dcdc02a582b407ed2
e4d90fd13a73c7379c46b197ded523a5d33c69b9
4a44a1a7efd65360f31e0b1842ad06b7fedc7c0373c69c0077c696cd49cc35de
GET /tracking/ga/ec.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-aed"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1313
Date: Sun, 06 Nov 2022 03:07:33 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=vO%2fpprV+Y2grQYsjJcIEGQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js
200 OK 16 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (599)
Hash 18a9dcc7cee831010cf1647c8e39088a
731f39c30835414c6e165dd4687bf4071fe0eb10
1dc439a17ef08f995584c4869ccc397120b2502b57ba40240887df28e347be9b
GET /assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 03 Mar 2021 23:46:24 GMT
Vary: Accept-Encoding
ETag: W/"60401fd0-bbed"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 15970
Date: Sun, 06 Nov 2022 03:07:33 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=DhzvQe7R3wuw3qTbWAZJ%2fA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13e65ad7f6f12300b12d6cd6936d621
575faf606b5c5e39e0fbbef59998bcd3625aa141
10787f99c02b63d52b9b74fcec9497108d67c56c4a9436e0e3c9a7129d727dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j92&aip=1&a=1184012921&t=pageview&_s=1&dl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&ul=en-us&de=UTF-8&dt=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=4GBACUALBAAAAC~&jid=527839224&gjid=474173676&cid=1423518642.1667704051&tid=UA-107148943-1&_gid=1312608589.1667704051&_r=1&cd1=WWW&cd4=n&cd7=DESKTOP&cd8=PRODUCTION&cd9=11202211052007301344497748&cd12=BROWSER&cd22=hp&cd23=4.48.0>m=2ou8g0&cd35=1423518642.1667704051&z=1862942229
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j92&aip=1&a=1184012921&t=pageview&_s=1&dl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&ul=en-us&de=UTF-8&dt=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=4GBACUALBAAAAC~&jid=527839224&gjid=474173676&cid=1423518642.1667704051&tid=UA-107148943-1&_gid=1312608589.1667704051&_r=1&cd1=WWW&cd4=n&cd7=DESKTOP&cd8=PRODUCTION&cd9=11202211052007301344497748&cd12=BROWSER&cd22=hp&cd23=4.48.0>m=2ou8g0&cd35=1423518642.1667704051&z=1862942229
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j92&aip=1&a=1184012921&t=pageview&_s=1&dl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&ul=en-us&de=UTF-8&dt=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=4GBACUALBAAAAC~&jid=527839224&gjid=474173676&cid=1423518642.1667704051&tid=UA-107148943-1&_gid=1312608589.1667704051&_r=1&cd1=WWW&cd4=n&cd7=DESKTOP&cd8=PRODUCTION&cd9=11202211052007301344497748&cd12=BROWSER&cd22=hp&cd23=4.48.0>m=2ou8g0&cd35=1423518642.1667704051&z=1862942229 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
date: Sun, 06 Nov 2022 03:07:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.52B103&_cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0&_cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2&pid=376792f3-57a8-4779-a219-64c6dbee4e58&sn=1&cfg&pv=2&aid=
200 OK 969 B URL HTTP/1.1 rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.52B103&_cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0&_cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2&pid=376792f3-57a8-4779-a219-64c6dbee4e58&sn=1&cfg&pv=2&aid=
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (4597), with no line terminators
Hash f3f62861b191c56cac5d3ad0d5f43e0f
95de5c861ffe75480dd901b006e741a9c5c17680
112a55e6868ee09689b2963f15f03e7eb471623b9c3f8947912a785a70ae5ff4
POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.52B103&_cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0&_cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2&pid=376792f3-57a8-4779-a219-64c6dbee4e58&sn=1&cfg&pv=2&aid= HTTP/1.1
Host: rubicon.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2930
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Cookie: _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Access-Control-Allow-Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Content-Length: 969
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: origin, Accept-Encoding
Date: Sun, 06 Nov 2022 03:07:33 GMT
Connection: keep-alive
Set-Cookie: _cls_cfgver=18d2c6f2; Secure; SameSite=None;HttpOnly;Secure
ROUTEID=.cligate1; path=/;HttpOnly;Secure
ISD_GB_COOKIE=!tTXrld3G+EDuXAjjbMKMZ0gdoDa2ecJXz73dXCWeC1aHop8deGQ3zK+9XrDRA2vAiMXP4RwpQP3J/40=; path=/; Httponly; Secure
DCID=rhHgG%2fCTJRqWCDQUrcRAc1wOD9fWKNal6eAFUdrGKn4%3d; Domain=rubicon.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/main.572aafd7a9d726e75abd.chunk.js
200 OK 196 kB URL HTTP/1.1 connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/main.572aafd7a9d726e75abd.chunk.js
IP
ASN #20940 Akamai International B.V.
Size 196 kB (196465 bytes)
Hash bce32c39cf4127f34f50fb4f6790dbcf
da572c6f9ad437a9feea6237677428e83f312de6
7dbf67726864a59b5fd2b121d40d70ba0c702af2c91a855950b5fbd10a26c101
GET /accounts/static/7M/accounts/public/js/main.572aafd7a9d726e75abd.chunk.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 292116
Last-Modified: Mon, 10 Oct 2022 07:35:32 GMT
Vary: Accept-Encoding
ETag: "6343cb44-47514"
Content-Encoding: gzip
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET POST
Access-Control-Allow-Headers: User-Agent,Keep-Alive,Content-Type
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Allow: GET, POST, OPTIONS
Access-Control-Allow-Origin: connect.secure.wellsfargo.com
Cache-Control: max-age=10368000
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=7TlBrjm82D2dzNiom5A%2fHNTp5Xod%2fYdDB5rL6VLBqBM%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:32 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d2b4c49a0fb79e3d3bc40d2a28b27120
3f53633851cf851451354ccfd2931f2ec7a9e40f
a8a4ca2c09bae5cc3375077e531b357e2c1724693433a085ad038e3e6adfd96b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=2549153;type=allv40;cat=all_a00;ord=2858024003625;gtm=2od8g0;auiddc=770345790.1667704051;u1=11202211052007301344497748;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F
200 OK 310 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=2549153;type=allv40;cat=all_a00;ord=2858024003625;gtm=2od8g0;auiddc=770345790.1667704051;u1=11202211052007301344497748;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (545), with no line terminators
Hash fe8e850f6bbfb3de4faa54ab00d33ea2
ace76fd8796cdc36723e74048b5ae3e58935be23
773c1fed97092bcea4cdbc9a57af3622ebb65071a7e8e68f80118d714353b629
GET /ddm/fls/i/src=2549153;type=allv40;cat=all_a00;ord=2858024003625;gtm=2od8g0;auiddc=770345790.1667704051;u1=11202211052007301344497748;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2549153.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Nov 2022 03:07:33 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 310
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d2b4c49a0fb79e3d3bc40d2a28b27120
3f53633851cf851451354ccfd2931f2ec7a9e40f
a8a4ca2c09bae5cc3375077e531b357e2c1724693433a085ad038e3e6adfd96b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3832eb0418d94ec98c40df1bcf3ce5b
74dd7fa6ff4f9da9324c0772d075da5f42ab5879
cc42acc8dffa6c7f0c4c3a16ffe8c88919daf4859b7524a7a0ffc6e4b169c50d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051396&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051396&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051396&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:33 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:33 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=m7FJ76mttuvRf3aTNXZBAEZlbyjn9J2zSLdzYFGXkAHL6pKOoJwpNJsW%2fHRuarsv; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_20426-44191
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j92&tid=UA-107148943-1&cid=1423518642.1667704051&jid=527839224&gjid=474173676&_gid=1312608589.1667704051&_u=4GBACUAKBAAAAC~&z=2022698149
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j92&tid=UA-107148943-1&cid=1423518642.1667704051&jid=527839224&gjid=474173676&_gid=1312608589.1667704051&_u=4GBACUAKBAAAAC~&z=2022698149
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j92&tid=UA-107148943-1&cid=1423518642.1667704051&jid=527839224&gjid=474173676&_gid=1312608589.1667704051&_u=4GBACUAKBAAAAC~&z=2022698149 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 06 Nov 2022 03:07:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.secure.wellsfargo.com/AIDO/mint.js?dt=login&r=0.1568275960885568
200 OK 35 kB URL HTTP/1.1 connect.secure.wellsfargo.com/AIDO/mint.js?dt=login&r=0.1568275960885568
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash cb3f595a19475078a2d51733edbad9ec
e792d3b33c98abe60f711258e753ea7a244193a1
1718dd6e5ef22c0d85a894a7ace1d683c9ec5b03ceb7ebfbaf7f949a599719c6
GET /AIDO/mint.js?dt=login&r=0.1568275960885568 HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 34686
max-age: 0
Expires: -1
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
PICS-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) "http://www.icra.org/ratingsv02.html" l r (nz 0 vz 0 lz 0 oz 0 cz 0) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0))
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 06 Nov 2022 03:07:33 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=IQJkBKrWKTOjjRtFCZGpLH3yFetJm8znzc68PiwOHDs%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
connect.secure.wellsfargo.com/jenny/nd
200 OK 17 kB URL HTTP/1.1 connect.secure.wellsfargo.com/jenny/nd
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2285)
Hash 646d7dac4af2d0d327a677d5d0bcd577
3d9b52da5ce30d2a4eb495516c02ec3521a427c0
22948b35b050048165f2001518d5fd30bbc4f85d4e3e81d5b1c1019f420e12a0
GET /jenny/nd HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript;charset=ISO-8859-1
Content-Length: 16983
Date: Sun, 06 Nov 2022 03:07:33 GMT
Connection: keep-alive
Set-Cookie: ADRUM_BTa=R:55|g:ad4c3c6a-e793-4299-bc36-c088a4306a5d; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure
ADRUM_BTa=R:55|g:ad4c3c6a-e793-4299-bc36-c088a4306a5d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure
SameSite=None; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure
ADRUM_BT1=R:55|i:302812; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure
ADRUM_BT1=R:55|i:302812|e:2; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure
ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=8%2fDRufo8puas3dEo7YiLYuAYxNJCPBlHs5OfbW2xSas%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3832eb0418d94ec98c40df1bcf3ce5b
74dd7fa6ff4f9da9324c0772d075da5f42ab5879
cc42acc8dffa6c7f0c4c3a16ffe8c88919daf4859b7524a7a0ffc6e4b169c50d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051433&event=DisplayMasthead&eventType=Presented&eventDescription=DisplayMasthead&clist=tcm%3A84-224274-16%7Etcm%3A91-223647-32
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051433&event=DisplayMasthead&eventType=Presented&eventDescription=DisplayMasthead&clist=tcm%3A84-224274-16%7Etcm%3A91-223647-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051433&event=DisplayMasthead&eventType=Presented&eventDescription=DisplayMasthead&clist=tcm%3A84-224274-16%7Etcm%3A91-223647-32 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:33 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:33 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=mRT+x7zJTFVagWU2cr02CL7eUr7UGHM2KdJKEi%2fx4%2fZF5NwiErTt5vMBm66jX0HT; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19360-51533
connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/vendor.5f4f2f240ab8b1537fb5.chunk.js
200 OK 279 kB URL HTTP/1.1 connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/vendor.5f4f2f240ab8b1537fb5.chunk.js
IP
ASN #20940 Akamai International B.V.
Size 279 kB (278798 bytes)
Hash 568fd9e4545291a0cd50675ec5d8a1c4
362a973ad041c5a9b5b6e36676d98c46efe4d9d6
e261989b09d6ba86374f99697a2f2af939a6c9e4ccddb923af05b3ca42cba9c4
GET /accounts/static/7M/accounts/public/js/vendor.5f4f2f240ab8b1537fb5.chunk.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 349645
Last-Modified: Mon, 10 Oct 2022 07:35:32 GMT
Vary: Accept-Encoding
ETag: "6343cb44-555cd"
Content-Encoding: gzip
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET POST
Access-Control-Allow-Headers: User-Agent,Keep-Alive,Content-Type
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Allow: GET, POST, OPTIONS
Access-Control-Allow-Origin: connect.secure.wellsfargo.com
Cache-Control: max-age=10368000
Date: Sun, 06 Nov 2022 03:07:32 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=q5rzS%2f302MblfrgTLM8dE+mm2phMEXgZFLkiAD85gEq0pK%2fZ2cm1y%2ff8fJiIkeh2; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:32 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
connect.secure.wellsfargo.com/PIDO/pic.js?r=0.2494451307664045
200 OK 37 kB URL HTTP/1.1 connect.secure.wellsfargo.com/PIDO/pic.js?r=0.2494451307664045
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash dbca05840424eacd592827642ebb6c99
95c97765189efb26314f1b29b7af78acac3ea1fa
b1a2f186257af0405724748c91240b98922f59b30f153d3d6acb6a3ef6e458a8
GET /PIDO/pic.js?r=0.2494451307664045 HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 37327
max-age: 0
Expires: -1
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
PICS-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) "http://www.icra.org/ratingsv02.html" l r (nz 0 vz 0 lz 0 oz 0 cz 0) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0))
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 06 Nov 2022 03:07:33 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=d0gaPRXo7m3unVkOT+dlv87fyZDoLiqSaxuEUtPezYl1xE0RDCeBNICbeytbG1Z0; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
www--wellsfargo--com--1649329d48d6c.wsipv6.com/as/target/offers/dispositions
200 OK 969 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/as/target/offers/dispositions
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with very long lines (2439), with no line terminators
Hash d1e8d33a01ddd4b7e40d2f2aa8657ee7
57c771c47ce5b067925567ccda4db59a359eecdb
2acec62e44ffcacf7316e9746ca423579296b10c8ca24980f534cd9e7c40b411
Analyzer Verdict Alert openphish Wells Fargo & Company
fortinet Phishing
POST /as/target/offers/dispositions HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Content-Type: application/json
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Content-Length: 266
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:33 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 969
Connection: keep-alive
Content-Security-Policy: default-src https:; img-src https: data:; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; object-src 'self'; font-src https: data:; style-src https: 'unsafe-inline'; script-src 'nonce-de660347-850b-44ad-83f6-d5090fdc37e9' 'self' https://*.wellsfargo.com https://*.wfinterface.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://s.yimg.com https://sp.analytics.yahoo.com https://cdn.schemaapp.com;report-uri https://ort.wellsfargo.com/reporting/csp
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0
Expires: -1
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893|e:153; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:da5ec6a1-8822-4e2a-a696-70152f319c9d; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:da5ec6a1-8822-4e2a-a696-70152f319c9d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917|e:58; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=963A7C675CF8890F89E389D6E306ED4B; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=EN; Domain=.wellsfargo.com; Expires=Mon, 06-Nov-2023 03:07:33 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=1120221105200733204952759; domain=.wellsfargo.com; path=/; expires=3 Nov 2032 03:07:33 GMT; secure=true; SameSite=Lax; HttpOnly
ISD_WCM_COOKIE=!eKcQk55+IQtS95WlRSgBVljp+3g9lQ31nooP+M9ChBOeH2FaP26+xUDZ7h2+mI2UevGn9WLCfy3ptwM=; path=/; Httponly; Secure
DCID=gqWnTcFAsyrgftHsx0hd2d3IpgUJJ4Qe+IXxOl2AEpg%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl21:10 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19360-51532
www--wellsfargo--com--1649329d48d6c.wsipv6.com/as/target/offers/dispositions
200 OK 941 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/as/target/offers/dispositions
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with very long lines (2365), with no line terminators
Hash c038b31209f42d834ead3101f9789599
fb715e5a64c73c666115e22dd2cd9d92e9065d64
9eee737c8f25768acff7c551b2432ed24ececaeac732734895595750e027e10f
Analyzer Verdict Alert openphish Wells Fargo & Company
fortinet Phishing
POST /as/target/offers/dispositions HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Content-Type: application/json
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Content-Length: 267
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:33 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 941
Connection: keep-alive
Content-Security-Policy: default-src https:; img-src https: data:; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; object-src 'self'; font-src https: data:; style-src https: 'unsafe-inline'; script-src 'nonce-555016b8-a3b4-4638-91e1-c82bf565cd1e' 'self' https://*.wellsfargo.com https://*.wfinterface.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://s.yimg.com https://sp.analytics.yahoo.com https://cdn.schemaapp.com;report-uri https://ort.wellsfargo.com/reporting/csp
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0
Expires: -1
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893|e:153; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:46ba6f11-e443-4b54-8b83-5325db54e9b0; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:46ba6f11-e443-4b54-8b83-5325db54e9b0|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917|e:58; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=5D13479C74AFA449A10959E63C7A4715; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=EN; Domain=.wellsfargo.com; Expires=Mon, 06-Nov-2023 03:07:33 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=11202211052007331443004187; domain=.wellsfargo.com; path=/; expires=3 Nov 2032 03:07:33 GMT; secure=true; SameSite=Lax; HttpOnly
ISD_WCM_COOKIE=!CUXiPnj0nv2K7walRSgBVljp+3g9lZHXaAtKdogHc9zA6PfY8+jvQBxb6bgKNjk9AdL1w/ffkvEQizE=; path=/; Httponly; Secure
DCID=NIEiCzyi8iERssxWqoJY8%2fl7EZF%2fna%2fFldYCFDdQwlU%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl21:10 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19652-61935
www--wellsfargo--com--1649329d48d6c.wsipv6.com/as/target/offers/dispositions
200 OK 971 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/as/target/offers/dispositions
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with very long lines (2441), with no line terminators
Hash e314a571baa853f4fc8446c309ce2704
7339c6715c08e62b96815b458856a690eff6ac9d
61c6ce1cb639f4ec32e96bffc6b70d6771f3d540546166b046345f06ec9f270e
Analyzer Verdict Alert openphish Wells Fargo & Company
fortinet Phishing
POST /as/target/offers/dispositions HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Content-Type: application/json
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Content-Length: 268
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:33 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 971
Connection: keep-alive
Content-Security-Policy: default-src https:; img-src https: data:; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; object-src 'self'; font-src https: data:; style-src https: 'unsafe-inline'; script-src 'nonce-18357a21-b83f-4d99-adb6-0e6714e12ac2' 'self' https://*.wellsfargo.com https://*.wfinterface.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://s.yimg.com https://sp.analytics.yahoo.com https://cdn.schemaapp.com;report-uri https://ort.wellsfargo.com/reporting/csp
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0
Expires: -1
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893|e:153; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:1983e200-beb0-443f-9fd0-3b566087c200; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:1983e200-beb0-443f-9fd0-3b566087c200|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917|e:63; Expires=Sun, 06-Nov-2022 03:08:03 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=F6D318F6DD0AD85B4A358C05166B5A9D; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=EN; Domain=.wellsfargo.com; Expires=Mon, 06-Nov-2023 03:07:33 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=1120221105200733205391907; domain=.wellsfargo.com; path=/; expires=3 Nov 2032 03:07:33 GMT; secure=true; SameSite=Lax; HttpOnly
ISD_WCM_COOKIE=!AtsMquUMjJyBss6lRSgBVljp+3g9lbbJbyeijboJP+3JmD4J9aAgyimYOE8qUBrHf0/qH/CSO6csq2M=; path=/; Httponly; Secure
DCID=8itn21f0QHOJQbZtPjGHP67dceq1O1sCRPVkHbjcVMs%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl21:10 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19394-52564
ocsp.digicert.com/
200 OK 471 B IP
Hash 73501d05359dcc105b56aefabe05e066
758bd4a7d501dfe940caed5c0b654f1de30f55a2
6dc2bbd5ac37136d212a916efeee54010be2261397e6997f97671be4b7792669
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3294
Cache-Control: max-age=133958
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:33 GMT
Etag: "6366805d-1d7"
Expires: Mon, 07 Nov 2022 16:20:11 GMT
Last-Modified: Sat, 05 Nov 2022 15:25:17 GMT
Server: ECS (amb/6B76)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 73501d05359dcc105b56aefabe05e066
758bd4a7d501dfe940caed5c0b654f1de30f55a2
6dc2bbd5ac37136d212a916efeee54010be2261397e6997f97671be4b7792669
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5643
Cache-Control: max-age=136307
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:33 GMT
Etag: "6366805d-1d7"
Expires: Mon, 07 Nov 2022 16:59:20 GMT
Last-Modified: Sat, 05 Nov 2022 15:25:17 GMT
Server: ECS (amb/6BA0)
X-Cache: HIT
Content-Length: 471
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051453&offerType=iaRendered&slotId=WF_CON_HP_PRIMARY_BNR&offerId=C_ccd_tk1reflectcardtestarspv_hpprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-250163-16%7Etcm%3A91-223657-32
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051453&offerType=iaRendered&slotId=WF_CON_HP_PRIMARY_BNR&offerId=C_ccd_tk1reflectcardtestarspv_hpprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-250163-16%7Etcm%3A91-223657-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051453&offerType=iaRendered&slotId=WF_CON_HP_PRIMARY_BNR&offerId=C_ccd_tk1reflectcardtestarspv_hpprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-250163-16%7Etcm%3A91-223657-32 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:33 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:33 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=t4vQZw4LZ+59xlnQq4z8f95CL0Rhno3U4LEZekAI%2fDIgVZw%2fZqCqJcsjyK9KDAn3; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19360-51545
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051438&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A84-226512-16%7Etcm%3A91-226306-32
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051438&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A84-226512-16%7Etcm%3A91-226306-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051438&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A84-226512-16%7Etcm%3A91-226306-32 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:33 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:33 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=gsm0DMzqlbNBwZEC1oHkwLICpz1%2fTbsNYho6eukQKHs%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_20426-44202
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f522cfb1dc454906f23b71b17ca1afce
65200811b6dead00db7008996571497260968d81
461906f6bfa7f492a4e61faa6d0ba37e7d343a4ef2a1b824ceb35acc89357cf2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=2549153;type=allv40;cat=all_a00;ord=2858024003625;gtm=2od8g0;auiddc=770345790.1667704051;u1=11202211052007301344497748;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=2549153;type=allv40;cat=all_a00;ord=2858024003625;gtm=2od8g0;auiddc=770345790.1667704051;u1=11202211052007301344497748;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=2549153;type=allv40;cat=all_a00;ord=2858024003625;gtm=2od8g0;auiddc=770345790.1667704051;u1=11202211052007301344497748;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Nov 2022 03:07:33 GMT
expires: Sun, 06 Nov 2022 03:07:33 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051448&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A402-250163-16%7Etcm%3A91-223657-32
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051448&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A402-250163-16%7Etcm%3A91-223657-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051448&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A402-250163-16%7Etcm%3A91-223657-32 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:33 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:33 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=dcMsiLKPvpyQGwyn2AtPgP4Q+5OtXjbck3qZKiEqpm2AIJva8QnHrOBeSj2vN862; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19394-52588
connect.secure.wellsfargo.com/AIDO/vyHb?d=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&cid=15%2C16&si=2&e=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com&t=jsonp&c=rvyqyoscvbfhmeec&eu=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F
200 OK 90 B URL HTTP/1.1 connect.secure.wellsfargo.com/AIDO/vyHb?d=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&cid=15%2C16&si=2&e=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com&t=jsonp&c=rvyqyoscvbfhmeec&eu=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with no line terminators
Hash a8eda828914bada974a3806016630b10
0ed7c9b42bbe71d71104fcfaa79427ede71164fc
6efb83f59f50243293930fc712ca5f18256840189d37524e1859934578e41cd3
GET /AIDO/vyHb?d=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&cid=15%2C16&si=2&e=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com&t=jsonp&c=rvyqyoscvbfhmeec&eu=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 90
max-age: 0
Expires: -1
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
PICS-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) "http://www.icra.org/ratingsv02.html" l r (nz 0 vz 0 lz 0 oz 0 cz 0) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0))
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Vary: Accept-Encoding
Date: Sun, 06 Nov 2022 03:07:33 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=ZjdpIWjhvPFd0JoAeqNY6EfOwfZdksrOiYBcNAIYeyJ2HnogvrwC7x1rP1DCEbaO; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f522cfb1dc454906f23b71b17ca1afce
65200811b6dead00db7008996571497260968d81
461906f6bfa7f492a4e61faa6d0ba37e7d343a4ef2a1b824ceb35acc89357cf2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051469&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-228971-16%7Etcm%3A91-228643-32
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051469&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-228971-16%7Etcm%3A91-228643-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051469&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-228971-16%7Etcm%3A91-228643-32 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:33 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:33 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=GYNA4szIZBF39EDKm8xesCbyLSRSDokn+SOsRt8Pz3dT9mtJFIPKtZYMOYl0rztS; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19360-51559
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051474&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_chk_everydaycheckingrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-228971-16%7Etcm%3A91-228643-32&promoSlot=2
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051474&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_chk_everydaycheckingrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-228971-16%7Etcm%3A91-228643-32&promoSlot=2
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051474&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_chk_everydaycheckingrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-228971-16%7Etcm%3A91-228643-32&promoSlot=2 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:33 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:33 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=dIz8XsXs5ZBWDE1dQ0LUvEIL+54JHQNYvZS6VCMYeCnMJ%2fDyprrqltaaYHcAYdkI; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_20426-44220
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051459&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-251698-16%7Etcm%3A91-228643-32
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051459&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-251698-16%7Etcm%3A91-228643-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051459&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-251698-16%7Etcm%3A91-228643-32 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:34 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:33 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=y+jMPq1kVmZ7vvo6T5ngOFxUOlAFOO4kGkKSB5v6+Jk%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19652-61950
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051444&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-224415%7Etcm%3A83-2046-8
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051444&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-224415%7Etcm%3A83-2046-8
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051444&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-224415%7Etcm%3A83-2046-8 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:34 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:33 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=TPQUi0OaWLj3sI8lfrKb66i3chYLYJdan2fK6zae+SA%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19360-51543
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051486&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A182-228910-16%7Etcm%3A91-223671-32
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051486&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A182-228910-16%7Etcm%3A91-223671-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051486&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A182-228910-16%7Etcm%3A91-223671-32 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:34 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:34 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=k4zn29o7iz84V01kPYnupoXJUW4IGRSn+h4sjXEyvv1DpH2Hy9lw9mbBiHOa1gpc; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:34 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_20426-44234
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051464&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ent_collegeaffinityrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-251698-16%7Etcm%3A91-228643-32&promoSlot=1
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051464&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ent_collegeaffinityrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-251698-16%7Etcm%3A91-228643-32&promoSlot=1
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051464&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ent_collegeaffinityrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-251698-16%7Etcm%3A91-228643-32&promoSlot=1 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:34 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:33 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=Rds4uJPTksU6zFn7BlJbBK1tcJB3ihEzdAlkSnmeWvc%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19394-52596
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051482&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_mtg_prequalificationbrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-242226-16%7Etcm%3A91-228643-32&promoSlot=3
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051482&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_mtg_prequalificationbrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-242226-16%7Etcm%3A91-228643-32&promoSlot=3
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051482&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_mtg_prequalificationbrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-242226-16%7Etcm%3A91-228643-32&promoSlot=3 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:34 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:34 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=qGTDg0f6kpRBggu3mMBp7V7TQeQ4XisB3i1bHgY+CyI%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:34 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19360-51569
www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051478&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-242226-16%7Etcm%3A91-228643-32
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--1649329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051478&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-242226-16%7Etcm%3A91-228643-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&cb=1667704051478&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-242226-16%7Etcm%3A91-228643-32 HTTP/1.1
Host: www--wellsfargo--com--1649329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!YbksAtP71X2AAt9XMNwPrdezjbDvKE3VMeulNRS3sm8xIMsri4/RuNygHGXF8YYLKqHy5ltuo1+8IqM=; utag_main=v_id:01844ae85042003415f9f05a1b3c00050003700900918$_sn:1$_se:2$_ss:0$_st:1667705850736$ses_id:1667704049730%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:e66451c6-5064-43bc-bb81-457164044a52|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:153; dti_apg=%7B%22_rt%22%3A%22DQ0zf8o2gAbJ8CmqqQWUqMRQKsy78im1%2BUp4knzS5uo%3D%22%2C%22c%22%3A%22eFFnUGxJdmZITHZnVUNhTQ%3D%3DjsxkX9fY2Lclz51JR5zngDzK2wL_TGFj0qrM1xQ8O73SOBeuy2kp2U7yHgoRrxMDVOm0d2-thrpI077l7sfcUsiZcP-garyERqs%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht7SOlA%22%7D; _cls_v=1cb23c1a-55a7-4d69-8995-4e7e0a0de5c2; _cls_s=628877f6-aea9-485e-a97a-fd03eaf9285f:0; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C44210487637581654520137124656547476563%7CMCAAMLH-1668308850%7C6%7CMCAAMB-1668308850%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-1809265007%7CMCOPTOUT-1667711250s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _gcl_au=1.1.770345790.1667704051; _ga=GA1.2.1423518642.1667704051; _gid=GA1.2.1312608589.1667704051; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiNHlRSjY1dlBLR0RudU9CUjZsQjhVUT09IiwiZSI6ImZ3ZnNCc293NVNxSUtsdk40Z1FDME9rdU5iUUVXNW1NSHUyc1J2RUJjUmYyNlhGa3RxbGxCWXB0aWdlTzhuUTVJdXczTDA5YWxyUHk1QzZ0am1KMUp2RCtnUTBcL1kxNTB1WCtaVHNrXC8xMDQ0Q3p3ZU45NlFCbzlCalZ0Tk1mcUJrOWJlS2RFd1VtWEE3R1hcL2JlT2lsQT09In0%3D.4da83df419d076f6.MDJjMmE2YzNkMDZlZDAyMDJmYjExMzU2MmJhZDlkNGQ2ZGQ4NmFkYjI0NDAyNWIyYzNjYTgwNTljZmQxYzExNQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:07:34 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Sat, 05 Nov 2022 03:07:34 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=6j+9PwDmByrb79478brOF8Y07jvLGgC9OVEDr+lmZWU%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:33 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 636724f5_bl22_19394-52606
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6b72bfaacba486284aa2ecb4bcd8ebba
89fa4ef09e60380fc432c73b7919a29f26117088
fed14b27362ffe0dfbe0b1696e8dab5f6bba3e08b76bec620e75f0f3f213f69b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:07:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=1423518642.1667704051&jid=527839224&_u=4GBACUAKBAAAAC~&z=1431391814
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=1423518642.1667704051&jid=527839224&_u=4GBACUAKBAAAAC~&z=1431391814
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=1423518642.1667704051&jid=527839224&_u=4GBACUAKBAAAAC~&z=1431391814 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Nov 2022 03:07:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/984436569/?random=1667704051320&cv=9&fst=1667704051320&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635471&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&hn=www.google.com&async=1
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/984436569/?random=1667704051320&cv=9&fst=1667704051320&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635471&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&hn=www.google.com&async=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/984436569/?random=1667704051320&cv=9&fst=1667704051320&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635471&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&hn=www.google.com&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Nov 2022 03:07:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/984436569/?random=1667704051320&cv=9&fst=1667703600000&num=1&fmt=3&bg=ffffff&guid=ON&eid=376635471&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--1649329d48d6c.wsipv6.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&random=3916851561&resp=GooglemKTybQhCsO
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 06-Nov-2022 03:22:34 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=1423518642.1667704051&jid=527839224&_u=4GBACUAKBAAAAC~&z=1431391814
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=1423518642.1667704051&jid=527839224&_u=4GBACUAKBAAAAC~&z=1431391814
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=1423518642.1667704051&jid=527839224&_u=4GBACUAKBAAAAC~&z=1431391814 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Nov 2022 03:07:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.secure.wellsfargo.com/dti_apg/api/dip/v1/dip
200 OK 206 B URL HTTP/1.1 connect.secure.wellsfargo.com/dti_apg/api/dip/v1/dip
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash eea972ef5dc8dbf4be9dd72ed96ee6a7
38e4317ee4fca073df956dee6c6bdbb50efaaafa
2c0356ade2ed5abfe22c8e350e34e7517cfde4614f6720bc395e4aed7a876886
POST /dti_apg/api/dip/v1/dip HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 2006
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 206
Access-Control-Allow-Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Vary: Origin, Accept-Encoding
x-envoy-upstream-service-time: 9
Date: Sun, 06 Nov 2022 03:07:34 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=GfSMTx60sRwk1fZVcCWeRnOE4xE3AItNMCVxJfCYdwY%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:34 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum
200 OK 42 B URL HTTP/2 pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1
Host: pdx-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 13010
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 06 Nov 2022 03:07:34 GMT
content-type: text/html
expires: 0
set-cookie: ADRUM_BTa=R:55|g:6f8e088d-0277-4609-adfb-ca8b6df15bb0;Path=/;Expires=Sun, 06-Nov-2022 03:08:04 GMT;Max-Age=30
ADRUM_BTa=R:55|g:6f8e088d-0277-4609-adfb-ca8b6df15bb0|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e;Path=/;Expires=Sun, 06-Nov-2022 03:08:04 GMT;Max-Age=30
SameSite=None;Path=/;Expires=Sun, 06-Nov-2022 03:08:04 GMT;Max-Age=30;Secure
ADRUM_BT1=R:55|i:559461;Path=/;Expires=Sun, 06-Nov-2022 03:08:04 GMT;Max-Age=30
ADRUM_BT1=R:55|i:559461|e:4;Path=/;Expires=Sun, 06-Nov-2022 03:08:04 GMT;Max-Age=30
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 0
server: envoy
X-Firefox-Spdy: h2
connect.secure.wellsfargo.com/dti_apg/api/imp/v1.0/report/?m&fq=load
200 OK 265 B URL HTTP/1.1 connect.secure.wellsfargo.com/dti_apg/api/imp/v1.0/report/?m&fq=load
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash f2b662e0962a7b94b77db5d631ef7847
1f0facfd89b615ac35455adeb5785ea5ece304cc
6241bd6cfd1379c80f1921a86d98f888d19c3b0785825a4e4f789d89aea8b115
POST /dti_apg/api/imp/v1.0/report/?m&fq=load HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
content-type: text/plain;charset=UTF-8
Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Content-Length: 852
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Allow-Methods: OPTIONS, GET, POST
Access-Control-Allow-Origin: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com
Content-Type: text/plain
Content-Length: 265
Vary: Accept-Encoding
Date: Sun, 06 Nov 2022 03:07:35 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=27fCJXqPp%2f3oN5oWIt9JYekXv1GYPLh0ZrX+PPkm2n55kZYlRxuZ6zrZXrEGXohN; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:35 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44419343-1ead-483b-bb26-c35907f5e9b8.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44419343-1ead-483b-bb26-c35907f5e9b8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c92234d28d67355984873ddf7f2bc85c
309a09b99f2419d6c45c271b67f387a6a62abd4a
436c965529e1e01b2b175fd72f45bab799f77028f1671978c16a37c61e267074
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44419343-1ead-483b-bb26-c35907f5e9b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12098
x-amzn-requestid: f8b11dcd-fb4c-4eda-a84d-2c36b08dfd16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJbDWE7SoAMFatw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d87b-386cc0282685a0e8611a24ce;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:41:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: cuSzUxz5mU03--3mUK73KKUGQQVVu6rlF2oBXm-gBhbN9Y-V1YTXOA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 22:12:38 GMT
etag: "309a09b99f2419d6c45c271b67f387a6a62abd4a"
content-type: image/jpeg
age: 17700
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
connect.secure.wellsfargo.com/auth/login/static/js/general_alt.js?async&seed=AIBz4UqEAQAA9wwpnOF12q-xhhSASvMR7pf4g5dOaRRKZUWab4xFsDMnH7p9&X-G2Q3kxs3--z=q
200 OK 0 B URL HTTP/1.1 connect.secure.wellsfargo.com/auth/login/static/js/general_alt.js?async&seed=AIBz4UqEAQAA9wwpnOF12q-xhhSASvMR7pf4g5dOaRRKZUWab4xFsDMnH7p9&X-G2Q3kxs3--z=q
IP
ASN #20940 Akamai International B.V.
GET /auth/login/static/js/general_alt.js?async&seed=AIBz4UqEAQAA9wwpnOF12q-xhhSASvMR7pf4g5dOaRRKZUWab4xFsDMnH7p9&X-G2Q3kxs3--z=q HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Cache-Control: public, max-age=3600, immutable
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 06 Nov 2022 03:07:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Set-Cookie: WesdAksn=A4RW6EqEAQAAhULCYMruse7OsLMNB_eaH58RoPYuG29buRmD7P7S1-TRsBRuAVtaKpqcuDv8wH8AAEB3AAAAAA|1|0|15a1e67b534f033d44fde2dba8765072415a632f; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=pY8juQ9+hbyTnjvrDchpDZ2rrn5v9hIaTszKLGr6e5l0kF30lKUAFQcvkIy6zadI; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sun, 06 Nov 2022 03:22:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51
200 OK 0 B URL HTTP/2 pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51
IP
GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51 HTTP/1.1
Host: pdx-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 06 Nov 2022 03:07:33 GMT
content-type: image/gif
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
expires: 0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 0
server: envoy
X-Firefox-Spdy: h2
pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50
200 OK 0 B URL HTTP/2 pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50
IP
GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50 HTTP/1.1
Host: pdx-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--1649329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 06 Nov 2022 03:07:33 GMT
content-type: image/gif
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
expires: 0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 0
server: envoy
X-Firefox-Spdy: h2
163.171.131.129
34.102.187.140
23.36.79.9
31.13.72.36
104.18.32.68
79.133.177.226
54.76.60.98
93.184.220.29