ocsp.dcocsp.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash cc7daf8ad2058b437f5b81844f35d0f4
3594e814a931af386325370f4f072c03d7d8682b
ce85d1fa0c69c629d2ffa38f0435a3007d682bdeb455e4d9a809472b96da90dd
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Sat, 10 Jun 2023 12:17:45 GMT
Ali-Swift-Global-Savetime: 1686399466
Via: cache21.l2de2[0,0,200-0,H], cache26.l2de2[1,0], cache1.se1[22,21,200-0,M], cache1.se1[23,0]
Age: 1661
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 10 Jun 2023 12:45:27 GMT
X-Swift-CacheTime: 1939
Timing-Allow-Origin: *
EagleId: 2ff62c9516864011277195071e
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
19 kB URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
IP
ASN #54994 QUANTILNETWORKS
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (731), with CRLF line terminators
Hash 3e17854e00ac6037018feb083d70c45f
618da7bdfd336de78e4e8123d0d14af0254b3d30
c94da6116b6a9086c5ac08354916d8d7aabb488a756533bf533328f20675cf38
Analyzer Verdict Alert openphish Wells Fargo & Company
GET / HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:28 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 18964
Connection: keep-alive
Content-Security-Policy: default-src 'none'; form-action 'self' *.wellsfargo.com *.wellsfargo.com:*; prefetch-src 'self' *.wellsfargo.com *.wellsfargomedia.com; connect-src 'self' https://*.wellsfargo.com https://*.wellsfargo.com:* https://*.schemaapp.com https://*.rlcdn.com https://*.tiktok.com https://*.medallia.com https://*.kampyle.com https://*.adobedc.net https://www.google-analytics.com https://*.doubleclick.net https://*.maxymiser.net https://*.eum-appdynamics.com https://*.demdex.net https://www.sjwoe.com https://www.mczbf.com https://s.yimg.com https://bat.bing.com https://*.nuance.com https://resources.digital-cloud-prem.medallia.com https://www.knotch-cdn.com https://www.units.knotch.it https://*.knotch.it/; img-src 'self' data: https://*.wellsfargomedia.com https://*.wellsfargo.com https://*.wellsfargo.com:* https://*.wfinterface.com https://*.wfinterface.com:* https://*.analytics.yahoo.com https://*.everesttech.net https://*.ads.linkedin.com https://*.g.doubleclick.net https://*.google.com https://*.demdex.net https://*.nuance.com https://*.eum-appdynamics.com https://*.virtualearth.net https://*.maxymiser.net https://*.knotch.it https://www.facebook.com https://cx.atdmt.com https://analytics.twitter.com https://t.co https://track.linksynergy.com https://s.amazon-adsystem.com https://ct.pinterest.com https://trc.taboola.com https://www.linkedin.com https://p.adsymptotic.com https://products.gobankingrates.com https://bttrack.com https://b.videoamp.com https://fcmatch.youtube.com https://www.googleadservices.com https://2549153.fls.doubleclick.net https://ad.doubleclick.net https://www.google-analytics.com https://idsync.rlcdn.com https://s.amazon-adsystem.com https://resources.digital-cloud-prem.medallia.com https://udc-neb.kampyle.com https://wellsfargoprod.prod.fire.glass https://s-a.innovid.com https://bat.bing.com https://www.knotch-cdn.com https://*.mworld.com; object-src 'self' https://*.wellsfargo.com https://*.wellsfargo.com:* https://*.wfinterface.com https://*.wfinterface.com:*; child-src 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.demdex.net https://*.nuance.com https://2549153.fls.doubleclick.net https://*.advanced-web-analytics.com https://www.units.knotch.it; font-src 'self' data: https://*.wellsfargomedia.com https://*.wellsfargo.com https://*.wellsfargo.com:*; style-src 'self' 'unsafe-inline' *.wellsfargo.com *.wellsfargo.com:* https://*.wfinterface.com https://*.wfinterface.com:* https://*.nuance.com; script-src 'nonce-de6ee520-211c-4cb5-9f30-d5f28b45b455' 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://cdn.schemaapp.com https://*.tiktok.com https://*.maxymiser.net https://bat.bing.com https://www.clarity.ms https://snap.licdn.com https://*.ads.linkedin.com https://www.linkedin.com https://s.yimg.com https://sp.analytics.yahoo.com https://p.adsymptotic.com https://*.nuance.com https://www.knotch-cdn.com;media-src 'self' *.wellsfargo.com *.wellsfargomedia.com; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: -1
Content-Language: en-US
X-Akamai-Transformed: 9 18891 0 pmb=mTOE,1
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada; Expires=Sat, 10 Jun 2023 12:45:57 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sat, 10 Jun 2023 12:45:57 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sat, 10 Jun 2023 12:45:57 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:0|i:206894; Expires=Sat, 10 Jun 2023 12:45:57 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:0|i:206894|e:77; Expires=Sat, 10 Jun 2023 12:45:57 GMT; Path=/; Secure; SameSite=Lax; Httponly
CookiesAreEnabled=yes; domain=.wellsfargo.com;path=/; secure=true; HttpOnly; SameSite=Lax
INLANG=EN; domain=.wellsfargo.com;path=/; secure=true; Max-Age=31536000; HttpOnly; SameSite=Lax
wfacookie=11202306100545271060155375; domain=.wellsfargo.com; path=/; expires=7 Jun 2033 12:45:27 GMT; secure=true; SameSite=Lax; HttpOnly
ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; path=/; Httponly; Secure
DCID=JtFtwZ9I9BpG9sDRm%2f3xcslQ5HalHWWW0XYB0y2G650ILo2UiABMP6X+adup9oy3; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:27 GMT;Httponly; Secure
_abck=C90FB292C4B1E191A92CFC825723C1D7~-1~YAAQTpbvUDNfTpqIAQAANRdXpQpJ/7bLg1hUocC4Zecsj6Lycq4RljH3np5U4QVYAK7vZwZD2NYX8BXwcyu6s4HGscBg6/F5JcrSkZ8p/UN6WUFbIe+eXcXeOCAAlid4QGoJDQUSMvrGyR7EIqELN2Xxpt1e/yk3IvI7XKwwmzRvDW4TJN66MpYfV1owZAtzggh33Rh+OwnewrmU6UGYtcqBhlBw8W95EQQwaP33ZGbuPd1jQbWtxL88mZGvRwZgeUTm9+QHm++m8WguNzDBh/pTqxmY3ULGMjnUdniYLnVqQNvn2LyKKCWT7uKYacdtvcwj1XqqFHxpkDQ46ASMjE23oi3qGB1Lids2QqHwt3i/nWpwEGu+rVoUNplmkx15~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:28 GMT; Max-Age=31536000; Secure
bm_sz=554062127BFBC4E1E89DBB9FECA826BE~YAAQTpbvUDRfTpqIAQAANRdXpRS0HX9S/YHeEdwDn4J2ewCqESYvgSHAKGqbTzA0JaOiJJ+0Deh2/zmk6ZUsBAKQFp7YIfCBb2moASmK9f4berHZMyF0BpOMDGxjOB9yM44+puJVUT4hT2S12e/ZYdYZp8WNkrx9RAPLrdJGlm9WvTXf2kFtamL7Tz0YaARU2D5SjR43VHARJMlIT35mUirVe0bKlTchuP0pUZJfaI2hNkkubKXPEWVu0a4Z4DXGZ4q1OOtcTkRvZTDIhcb1x/udK69QDqrMWOcJBFB0p8yYZN3tuPQh~3619128~3619142; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:27 GMT; Max-Age=14399
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-ARN-01XDr43:3 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847067_VM-ARN-01cnE31_22106-12690
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk
201 Created 76 kB URL POST HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
Hash 0d61b4e4742d5251c44efcd5d8166a2c
04189d5a539c1cc84fee87994097919000f3434b
c394010c09ddb06f644c54c2cc3d1c8003f44f5668b7eb1e39f38e051ab7a5c6
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:77; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:28 GMT
Content-Type: application/javascript
Content-Length: 76203
Connection: keep-alive
Stored-Attribute-Sha-Checksum: c394010c09ddb06f644c54c2cc3d1c8003f44f5668b7eb1e39f38e051ab7a5c6
Last-Modified: Wed, 26 Apr 2023 15:12:26 GMT
ETag: "5b60948dc39561fee36fa77d7eef5047a16cbdb8b05e43f4f2fbc918f19cea08"
Content-Encoding: gzip
Cache-Control: max-age=21600
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=eUdDBeoLbsHEWMf3DAP6PQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
_abck=02A528FE925AADAD1271A2CC049B4333~-1~YAAQTpbvUDZfTpqIAQAAHhhXpQp9EOf09FNOXmdgGZp4ihZvHzrzXJ04RbTiqdontkU2MiNGqF2VYtWW4qsIKvR3p9zBqJ/Y5M00czJvbkNmTPufK7xXykfcTLEZ3o3OuCk4+1F7L+0qOn9xJc1//IPULMGuwzxrcM679oCAVOY46GjAWgfcf1A/485P2jQ6fDMCOPnBkhuYTkMIVAIuuqI2RYVKGWznQ9Opf3+tXw0FY5XdRuz1Z10ySjP6OmSUD9kH0kbo1j5VGia2DU8eUax+4IEQIvWdxVU+YMgQH1qettvVs0T8tUgPiW+I0CFZV1GJfoYqMs1qyCaVMLT7CQTXNlQ3i/NovV2jrzIhCj50DCRNsCA/eYxzPCNHvtpG~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:28 GMT; Max-Age=31536000; Secure
bm_sz=89319349B96366F3DF73A1B9B47A3007~YAAQTpbvUDdfTpqIAQAAHhhXpRS3cdkXn54HS7rJxmG+5vGOKLXemWEUI/j795C5mE9/hMVUWFHbKSjXpudjmz6tIccMsWoiUIa2RNjuSDyYznlAo1oBk7gOcZdp18oR6mMu1qxjkwqqoXlAgLJm890J84bYUu8pLOY1d7lIG81u+BSWmlVlIvfmw9nqJFwNUV2TKZQ8gCO0M5NfxSDuPKRoILu1XnlJE/MJPFKSshApjrzrEf83Tj+fb4LYOu+FRwsL8syxmaZmk/Pe11lsc7lFGFK05OZI6LCtCLEhsW59j/j6INoB~4469561~3687481; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:28 GMT; Max-Age=14400
X-Via: 1.1 VM-ARN-01XDr43:4 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847068_VM-ARN-01cnE31_22213-14601
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/ui/javascript/homepage-ui/homepage_iaoffer.js
200 OK 19 kB URL GET HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/ui/javascript/homepage-ui/homepage_iaoffer.js
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (33363), with NEL line terminators
Hash 1f9ca16f9fc2bfd6185aa57f8e9e1996
9a32e9cd41b9f7e4ebf0cb2364a333414f1f3e52
f1f5d2d31133a2c5bd964ef6422e45e1d1c5741d98b605d6a2cbf7257092d1ab
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /ui/javascript/homepage-ui/homepage_iaoffer.js HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:77; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:28 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 19159
Connection: keep-alive
Expires: Sat, 10 Jun 2023 06:13:56 GMT
Last-Modified: Tue, 16 May 2023 18:56:42 GMT
ETag: W/"6463d1ea-e805"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01hzl162:0 (Cdn Cache Server V2.0), 1.1 VM-ARN-01XDr43:4 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847068_VM-ARN-01cnE31_22169-7504
static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js
901 B URL static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1952), with no line terminators
Hash e7cf4c458b327ab7ed31e0936ccd404f
970bf05073f91ad6b8f21521f7c9886f71f2af1d
52b687a685d2239142be0db5335c5710951ba8c2b39a44431a40f156b4d9312d
GET /assets/js/wfui/appdynamics/appdEUMConfig.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 20 Jan 2022 02:38:25 GMT
Vary: Accept-Encoding
ETag: W/"61e8cb21-7a0"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 901
Date: Sat, 10 Jun 2023 12:45:28 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=HGpI5NYLJI3QlnJ%2fe9fwIA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www17.wellsfargomedia.com/assets/images/rwd/choice-privileges-card-79x50.png
1.4 kB URL www17.wellsfargomedia.com/assets/images/rwd/choice-privileges-card-79x50.png
IP
File type ISO Media, AVIF Image\012- data
Hash 723ea3757b670b62e78a271262f7a226
0eaa5d0a1bde4446a39f3d9c60a2719581c38837
ce9903039a68a570fa3787c621e9ea79efd40f4b24afd194c4025d085d48abed
GET /assets/images/rwd/choice-privileges-card-79x50.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "64396a1c-1f52"
last-modified: Thu, 20 Apr 2023 01:30:29 GMT
server: Akamai Image Manager
content-length: 1441
content-type: image/avif
cache-control: private, no-transform, max-age=477770
expires: Fri, 16 Jun 2023 01:28:18 GMT
date: Sat, 10 Jun 2023 12:45:28 GMT
X-Firefox-Spdy: h2
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/ui/javascript/homepage-ui/ps-homepage.js
200 OK 59 kB URL GET HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/ui/javascript/homepage-ui/ps-homepage.js
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65500), with no line terminators
Hash a933fdd4ac4b1b509156b6d8e5a3f6f8
333f8eeb5ea0eb2f178eb84e2f05889ae6003d24
6097c62137472315d46a883ed1c7f75f8f3ca70dab8a485f39a02a0ab92b906d
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /ui/javascript/homepage-ui/ps-homepage.js HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:77; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:28 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 58984
Connection: keep-alive
Expires: Sat, 10 Jun 2023 06:13:57 GMT
Last-Modified: Tue, 16 May 2023 18:56:42 GMT
ETag: "6463d1ea-2d1ae"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01cV0174:4 (Cdn Cache Server V2.0), 1.1 VM-ARN-01XDr43:2 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847068_VM-ARN-01cnE31_22189-14192
www17.wellsfargomedia.com/assets/images/rwd/wf_logo_220x23.png
1.7 kB URL www17.wellsfargomedia.com/assets/images/rwd/wf_logo_220x23.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c939da49d435a33b6da79639dd7b449e
b5c908f157d240c4b78f1e7a6c0808aa898c9c23
60088561eb43fca42fc2f9c996af43347355642872eabfa97a943d2f28ee474d
GET /assets/images/rwd/wf_logo_220x23.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "61bcfcce-10c2"
last-modified: Thu, 20 Apr 2023 01:30:26 GMT
server: Akamai Image Manager
x-serial: 853
x-check-cacheable: YES
content-length: 1712
content-type: image/webp
cache-control: private, no-transform, max-age=477792
expires: Fri, 16 Jun 2023 01:28:40 GMT
date: Sat, 10 Jun 2023 12:45:28 GMT
X-Firefox-Spdy: h2
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/ui/css/homepage-ui/ps-homepage.css
24 kB URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/ui/css/homepage-ui/ps-homepage.css
IP
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (65536), with no line terminators
Hash 639612224995638b19908ca003c5c27f
8dee285a7b72eff0120b7095f5874ef300155be7
b06999ab5fe0fbfcbae4fcd87dd59688cbdf1cb68023b52fd441f3aefd34db1a
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /ui/css/homepage-ui/ps-homepage.css HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:77; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:28 GMT
Content-Type: text/css
Content-Length: 24054
Connection: keep-alive
Expires: Sat, 10 Jun 2023 06:13:55 GMT
Last-Modified: Tue, 16 May 2023 18:56:42 GMT
ETag: W/"6463d1ea-2b00d"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01hzl162:2 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:2 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847068_VM-ARN-01cnE31_22243-10229
www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_b_mv_0723_3954_b_1700x700.jpg
26 kB URL www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_b_mv_0723_3954_b_1700x700.jpg
IP
File type ISO Media, AVIF Image\012- data
Hash 1f8dadb2c78b667abbb3e1869fb823fd
7ac507de2102b9198b6590d339ed4ebbe5a4db27
c19b0b9b383a1efa5a50fe1c6e48fa46e03512e47666e17cfab1c7bb77c182ef
GET /assets/images/contextual/responsive/hpprimary/wfi_ph_b_mv_0723_3954_b_1700x700.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "62057fd1-14ef3"
last-modified: Thu, 20 Apr 2023 01:31:58 GMT
server: Akamai Image Manager
x-serial: 1294
x-check-cacheable: YES
content-length: 25648
content-type: image/avif
cache-control: private, no-transform, max-age=477979
expires: Fri, 16 Jun 2023 01:31:47 GMT
date: Sat, 10 Jun 2023 12:45:28 GMT
X-Firefox-Spdy: h2
static.wellsfargo.com/assets/js/wfui/container/wfui-container-bottom.js
16 kB URL static.wellsfargo.com/assets/js/wfui/container/wfui-container-bottom.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (45298)
Hash 308e427d5e59a148900bf524ecd5829a
73baa209d84f2d15c88606b28280d2121efd878c
c15cbdeb4d6f20c36afa165203fc74d9ee00c6d77954971b0e1ba2e5ec222b07
GET /assets/js/wfui/container/wfui-container-bottom.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 07 Mar 2023 21:05:06 GMT
Vary: Accept-Encoding
ETag: W/"6407a702-b125"
Cache-Control: max-age=1800
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 15731
Date: Sat, 10 Jun 2023 12:45:28 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=2G9PKF6Iiv7qWXnB13NHRA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?single
4.3 kB URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?single
IP
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (9269)
Hash 1d51a4196f609ef6cfd1a8de675702c5
a193da9b88f3dfb573425789bca062b5d148c453
0610c62c588b059d847fdc7a2325f52399234cf3aa2527fdd3df8d3841f534b8
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /auth/login/static/js/general_alt.js?single HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:77; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:28 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 4280
Connection: keep-alive
Content-Encoding: gzip
Expires: Sat, 10 Jun 2023 12:45:28 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Set-Cookie: WesdAksn=A1UYV6WIAQAAFTE8dsXV6y68U0DwEkDpcF4OVYPNKMpO9gYF9y7AyYp63gMrAaOrhiucuNk0wH8AADQwAAAAAA|1|0|ec38d90635c0bb44af403e6d877619c556d4cdb4; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=lG3iWg060zRAFV+LqCOEJ0HubmzdwXJ1fkrjL16uCZfEjtCscFII7oLyKkEL%2fuMa; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:28 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-ARN-01XDr43:3 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847068_VM-ARN-01cnE31_22106-12694
www17.wellsfargomedia.com/assets/images/sprite/responsive-sprite-v7.png
49 kB URL www17.wellsfargomedia.com/assets/images/sprite/responsive-sprite-v7.png
IP
File type PNG image data, 1187 x 406, 8-bit colormap, non-interlaced\012- data
Hash 4576998e5446061faba47c4c609823e0
3beff60a8beab6ef65403e7bc02f996509c737a2
9730d81c67de0dae104be9a17b43a179e68557cc4a10a81c95fd451630d04b39
GET /assets/images/sprite/responsive-sprite-v7.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 48569
last-modified: Thu, 21 Jul 2022 20:05:23 GMT
etag: "62d9b183-bdb9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
cache-control: max-age=15086399
expires: Sat, 02 Dec 2023 03:25:27 GMT
date: Sat, 10 Jun 2023 12:45:28 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2
22 kB URL www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22424, version 1.13107\012- data
Hash 0a1639ebe9fab396657a62aa5233c832
9b58164729ad918dd7255e4856f9da7f3a90bfde
631f3b6267a831a8d67c45e480b5d5a2601f10ff8708bcf3a45a41b377a129cc
GET /assets/fonts/wellsfargosans-rg.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22424
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-5798"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=15090281
expires: Sat, 02 Dec 2023 04:30:09 GMT
date: Sat, 10 Jun 2023 12:45:28 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-sbd.woff2
23 kB URL www17.wellsfargomedia.com/assets/fonts/wellsfargosans-sbd.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22600, version 1.13107\012- data
Hash 83df8749c013f13019fa8e0912041759
2bbffcf012a59e47661c0a37edda0fc772992ae7
ab9d8c97b35ed86b6224aca911aa304a0d7dbcbd28e00a4c6585b96e28ed30ba
GET /assets/fonts/wellsfargosans-sbd.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22600
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-5848"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
cache-control: max-age=14982569
expires: Thu, 30 Nov 2023 22:34:57 GMT
date: Sat, 10 Jun 2023 12:45:28 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2
22 kB URL www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22172, version 1.13107\012- data
Hash f0307736c3a6ef356722f1dc3e9fa3f4
e29ea90ba786f0e08caa770dcfdfe923f619bebd
6bc7e16d4b6822a6867d7dd9f9d29f5fd77cd803750b0fe38a92309d9eb00704
GET /assets/fonts/wellsfargosans-bd.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22172
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-569c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=15091163
expires: Sat, 02 Dec 2023 04:44:51 GMT
date: Sat, 10 Jun 2023 12:45:28 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-lt.woff2
22 kB URL www17.wellsfargomedia.com/assets/fonts/wellsfargosans-lt.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21636, version 1.13107\012- data
Hash 1a2740c8df445989e4ee5f5396b6474c
a3f8545619fdd5b2a481952cd9e2c7b169bb43a6
63673faef8532b2789dee1ac7534f87b1a6a249590acc7da8644beda141794fc
GET /assets/fonts/wellsfargosans-lt.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 21636
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-5484"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=14982573
expires: Thu, 30 Nov 2023 22:35:01 GMT
date: Sat, 10 Jun 2023 12:45:28 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk
201 Created 18 B URL POST HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d9e31441c04c32264c6821f4ec958ca5
8516f62844b4264d3ccaab00350323d07b9c50ef
fcd6acab1a311e89ae1aef024707e986871eff4071c584de3e93970c5fc4a23d
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2117
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:77; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 201 Created
Date: Sat, 10 Jun 2023 12:45:28 GMT
Content-Type: application/json
Content-Length: 18
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=OZcjevBPUUFPyPMmwE2cOQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
DCID=OZcjevBPUUFPyPMmwE2cOQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
_abck=EA672E5C286D05C5DDDCB762986B4996~-1~YAAQTpbvUDlfTpqIAQAAARpXpQqVqvqIPfnPn760S4jtHjHwhgF8WBAXCvD4KSWT0l3fVrjQK7A2kbKh9CtjApcRjYq0273uWJWk+yyfJxcVN1rTf7B0/mlMVXzt3wA7u6GSxe1SReWeGPia7y/7ulTddIVrkDyTGKbBjBjmAJQ6+OH7Lp85vUNAJLsY+R6vj9PbbQLFQT5EYDXeo5s7vBL4e93/frKTUsIHXDtaf32iRICaGqWPSDCG9IkcEOGoGyjjNof/pVTZANstQrVv2q1FYdx9AbJxXfMsL3cO6xzeFt9v0sBRWG/JoxHJTzbKYt1BxRX/GqamnP4Q6fBCW77Cf5ikik+Zxw4V1ZCwobAfSgryZW7TJU7JXc6kboQf~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:28 GMT; Max-Age=31536000; Secure
bm_sz=9B2AAC90B6885DC9D0730294816ED29A~YAAQTpbvUDpfTpqIAQAAARpXpRRNc4+L0Xmo4IGX5yeS4hJ/j2Z+6qwMzx2FgRi+OCHZWJrQ7lLBfHNRGoVH7y32JJyT4im+t6bTPMATlX5vfErFshZ5FjHkEjrCCW0NY+uBfeMAEyWilL2HxocSHLNeLsfnt362zpcc5qqHiijBPZZBaOo6suTwt03JwgoLHIOrwytFXoPsFITX7vPNI8nm46Q6iB1xxA8t9cg0FlN+iFD6ueVD/uINAeo9rZVUOU35oQspb2xJuAgnmUztZidG3GbFu02YdxDIgE0luNb5K1d8JXo2~4469561~3687481; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:28 GMT; Max-Age=14400
X-Via: 1.1 VM-ARN-01XDr43:4 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847068_VM-ARN-01cnE31_22169-7511
c1.wfinterface.com/tracking/hp/utag.js
200 OK 55 kB URL GET HTTP/1.1 c1.wfinterface.com/tracking/hp/utag.js
IP
ASN #20940 Akamai International B.V.
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectc1.wfinterface.com
FingerprintCC:19:D6:44:13:12:B1:50:FD:1F:D0:A3:0E:BA:0D:69:80:6C:7D:4C
ValidityMon, 17 Oct 2022 00:00:00 GMT - Tue, 17 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (14989)
Hash 9c21270445d8d24ac6f6cd64ba2d2b87
9b6efc3ccfdefe0993369d64c73d1adb15420700
d0a902bf3de91f273513b56ce62fff64de0a89e4c8e05446546c99ab4a1910b9
GET /tracking/hp/utag.js HTTP/1.1
Host: c1.wfinterface.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 28 Mar 2023 20:08:18 GMT
Vary: Accept-Encoding
ETag: W/"64234932-31f01"
Content-Security-Policy: default-src https: 'unsafe-inline'; object-src 'self'; img-src https: data: 'unsafe-inline'; frame-ancestors 'self' https://*.wellsfargo.com:* https://*.wellsfargo.com https://www.wellsfargo.com https://*.abbotdowning.com:* https://*.abbotdowning.com https://www.abbotdowning.com; script-src https: 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: POST
Allow: GET, POST
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 54703
Date: Sat, 10 Jun 2023 12:45:29 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=vpoxfxIj2GaB7BHnfzxbAw%3d%3d; Domain=c1.wfinterface.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?async&seed=AEDtSKWIAQAAg_eQ7w7J7ezXIFOEiXBwpcjQxhU9bvVyi4rbGIs_ULDDJlIR&X-G2Q3kxs3--z=q
200 OK 150 kB URL GET HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?async&seed=AEDtSKWIAQAAg_eQ7w7J7ezXIFOEiXBwpcjQxhU9bvVyi4rbGIs_ULDDJlIR&X-G2Q3kxs3--z=q
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 150 kB (149722 bytes)
Hash 6bab54714f7332dc0b4d55594144fe42
5ffbfbd258c32e777ef8f6715b130f052475c255
fa9d6735bab7fe68247aadddd429999335166266b1e2be65f7256cdfdf088528
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /auth/login/static/js/general_alt.js?async&seed=AEDtSKWIAQAAg_eQ7w7J7ezXIFOEiXBwpcjQxhU9bvVyi4rbGIs_ULDDJlIR&X-G2Q3kxs3--z=q HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:77; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
Expires: Sat, 10 Jun 2023 12:45:29 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Set-Cookie: WesdAksn=A4gZV6WIAQAAMrbYwQgNAuqhfMKmjxXy67t8fYSNmFcng0qqQeXy-Dq1Bw0NAaOrhiucuNk0wH8AADQwAAAAAA|1|0|ac8521e2af21092b1beea1564c59827939689f22; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=IoKauTJr9oDLv6p1YfupeWP9NSqMYAtylbLHTC%2fWl%2fI%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:28 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-ARN-01XDr43:3 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847068_VM-ARN-01cnE31_22213-14602
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?1js
313 kB URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?1js
IP
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (65357)
Size 313 kB (313270 bytes)
Hash 86b0428bd52fbfeaf6fc736f21b79f1e
357a952f524df35ccf680ecc30ed8764444266bb
fe4623c9de643567800b8518f0a5163d4d6d634f87d93ab792b221834592d5ab
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /auth/login/static/js/general_alt.js?1js HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:77; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
Expires: Sat, 10 Jun 2023 12:45:29 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Set-Cookie: DCID=bTvfos9bQhqlRXAtjtkQZbB7OsHvT6zFCo77vNCLyh4%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:28 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-ARN-01XDr43:3 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847068_VM-ARN-01cnE31_22189-14195
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/target/offers/conversations
200 OK 2.1 kB URL POST HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/target/offers/conversations
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (10649), with no line terminators
Hash 8d103c35a4e191df8582a6a64d6f9ae9
9ccd03f2d6329a8a3770c2307bcb64d507dd6045
a1506ebeb70decea9e0a77917621a6a811db8929231084ad2bf33ac89e7b2d60
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /target/offers/conversations HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 105
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206894|e:77; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:29 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 2103
Connection: keep-alive
Content-Security-Policy: default-src 'none'; form-action 'self' *.wellsfargo.com *.wellsfargo.com:*; prefetch-src 'self' *.wellsfargo.com *.wellsfargomedia.com; connect-src 'self' https://*.wellsfargo.com https://*.wellsfargo.com:* https://*.schemaapp.com https://*.rlcdn.com https://*.tiktok.com https://*.medallia.com https://*.kampyle.com https://*.adobedc.net https://www.google-analytics.com https://*.doubleclick.net https://*.maxymiser.net https://*.eum-appdynamics.com https://*.demdex.net https://www.sjwoe.com https://www.mczbf.com https://s.yimg.com https://bat.bing.com https://*.nuance.com https://resources.digital-cloud-prem.medallia.com https://www.knotch-cdn.com https://www.units.knotch.it https://*.knotch.it/; img-src 'self' data: https://*.wellsfargomedia.com https://*.wellsfargo.com https://*.wellsfargo.com:* https://*.wfinterface.com https://*.wfinterface.com:* https://*.analytics.yahoo.com https://*.everesttech.net https://*.ads.linkedin.com https://*.g.doubleclick.net https://*.google.com https://*.demdex.net https://*.nuance.com https://*.eum-appdynamics.com https://*.virtualearth.net https://*.maxymiser.net https://*.knotch.it https://www.facebook.com https://cx.atdmt.com https://analytics.twitter.com https://t.co https://track.linksynergy.com https://s.amazon-adsystem.com https://ct.pinterest.com https://trc.taboola.com https://www.linkedin.com https://p.adsymptotic.com https://products.gobankingrates.com https://bttrack.com https://b.videoamp.com https://fcmatch.youtube.com https://www.googleadservices.com https://2549153.fls.doubleclick.net https://ad.doubleclick.net https://www.google-analytics.com https://idsync.rlcdn.com https://s.amazon-adsystem.com https://resources.digital-cloud-prem.medallia.com https://udc-neb.kampyle.com https://wellsfargoprod.prod.fire.glass https://s-a.innovid.com https://bat.bing.com https://www.knotch-cdn.com https://*.mworld.com; object-src 'self' https://*.wellsfargo.com https://*.wellsfargo.com:* https://*.wfinterface.com https://*.wfinterface.com:*; child-src 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.demdex.net https://*.nuance.com https://2549153.fls.doubleclick.net https://*.advanced-web-analytics.com https://www.units.knotch.it; font-src 'self' data: https://*.wellsfargomedia.com https://*.wellsfargo.com https://*.wellsfargo.com:*; style-src 'self' 'unsafe-inline' *.wellsfargo.com *.wellsfargo.com:* https://*.wfinterface.com https://*.wfinterface.com:* https://*.nuance.com; script-src 'nonce-81bc2360-740b-4432-92a8-d2ac3363aba5' 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://cdn.schemaapp.com https://*.tiktok.com https://*.maxymiser.net https://bat.bing.com https://www.clarity.ms https://snap.licdn.com https://*.ads.linkedin.com https://www.linkedin.com https://s.yimg.com https://sp.analytics.yahoo.com https://p.adsymptotic.com https://*.nuance.com https://www.knotch-cdn.com;media-src 'self' *.wellsfargo.com *.wellsfargomedia.com; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: -1
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:0|g:1cfb95b3-784e-4a84-941d-e74429074ada|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:0|i:206894|e:77; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22; Expires=Sat, 10 Jun 2023 12:45:59 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sat, 10 Jun 2023 12:45:59 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sat, 10 Jun 2023 12:45:59 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893; Expires=Sat, 10 Jun 2023 12:45:59 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893|e:145; Expires=Sat, 10 Jun 2023 12:45:59 GMT; Path=/; Secure; SameSite=Lax; Httponly
CookiesAreEnabled=yes; domain=.wellsfargo.com;path=/; secure=true; HttpOnly; SameSite=Lax
INLANG=EN; domain=.wellsfargo.com;path=/; secure=true; Max-Age=31536000; HttpOnly; SameSite=Lax
wfacookie=112023061005452981035750; domain=.wellsfargo.com; path=/; expires=7 Jun 2033 12:45:29 GMT; secure=true; SameSite=Lax; HttpOnly
wcmcookiehp=61A2091322B6819001DB8160B33148CC; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
DCID=g6KzFtOpQk4ONoJtEPBtvTSi1%2fdTJFHnzN0gqw1rcA0%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:28 GMT;Httponly; Secure
_abck=31B0EE947579E5B8D713E63C4DE64796~-1~YAAQTpbvUDtfTpqIAQAAjhtXpQotE8Jo2rpgREMnQ1Vy07jwSLvjqJaeAXI5a3cpZCgL+8sNokLr4vOH2uIoeIyGG80Nok1Yjm+9gMKDBNi9yxkoEpgm7p3un3+PERPp7/sxr7xffSDjJODXpZPDQ4okiCmotHb9rTAohSqDRy2mOiy3O1fGyrblDQZMQnPl8SNyNoa65TkP7KG3OUrFxVSDE9zKjIlEjyZSj90ZagZn232CejiGHoD0gXAApV4P+kGD/HgJ57dDRTShavMPjhEVMavLooUd2SDY9LSn9Lj7uOfU41t0FVJ51HwX1AwXwC/A6FFUGbEqX1EDH9MguFuDQz/B6o7AxwAgB99ZVjBjsK+8A99WjWzGMXV4Y5l1~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:29 GMT; Max-Age=31536000; Secure
bm_sz=052D3F70E7DEE1BC1802C371BD81A689~YAAQTpbvUDxfTpqIAQAAjhtXpRS5z0goB9KgwGphBUpc26yPFtCXP3ecPBc/XrTKxMSmYrLINPGU2XWb8vcwfkWVsZmLfKCgkAXP7WoXu6WDih3dW+i0Xpmd2wHOMFynTtcoXIpjBmDt7ml9HAvftcv+icOOaCC0G9PwgaL/VkWFk3i7H/pgOA2OsScVlgOsfeHweU/926WtvEFfLPearPeoeSiN5AyPeXUKtQI/i382nYe01YYrosm3k3ZWlG1lUSRHep93oodz6Pk8PuEmeFHsSVik2OXBUBKdFPVxPDAY6b2x/246~4469561~3687481; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:28 GMT; Max-Age=14399
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-ARN-01XDr43:0 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847068_VM-ARN-01cnE31_22243-10232
www17.wellsfargomedia.com/assets/images/icons/ico/favicon.ico
9.2 kB URL www17.wellsfargomedia.com/assets/images/icons/ico/favicon.ico
IP
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash cd112f1acb59ef6e59e09c0effd8ce2a
bc104cd92adc32a8f695300d2b0cc69c2776f6af
6780d0b2bc67397895ef7b8845261eee7b9b22610b026835362128942da5fb7c
GET /assets/images/icons/ico/favicon.ico HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 9198
last-modified: Fri, 17 Dec 2021 21:10:38 GMT
etag: "61bcfcce-23ee"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=15935
expires: Sat, 10 Jun 2023 17:11:04 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/icons/icon-hires_192x192.png
200 OK 964 B URL GET HTTP/2 www17.wellsfargomedia.com/assets/images/icons/icon-hires_192x192.png
IP
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectwww17.wellsfargomedia.com
Fingerprint34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1
ValidityFri, 14 Apr 2023 00:00:00 GMT - Sat, 13 Apr 2024 23:59:59 GMT
File type ISO Media, AVIF Image\012- data
Hash 7f9f34586bf809f8eb21ceb6b46045d7
90691768aff809a00ce2b33df7e37e34dcdbcbe0
dca86ff9007564cbcb0515ec84dfc727fd8648005a8f12eb0bf5a3278431d6e0
GET /assets/images/icons/icon-hires_192x192.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "6116f9a6-dcf"
last-modified: Thu, 20 Apr 2023 01:32:50 GMT
server: Akamai Image Manager
content-length: 964
content-type: image/avif
cache-control: private, no-transform, max-age=477965
expires: Fri, 16 Jun 2023 01:31:34 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk
201 Created 18 B URL POST HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d9e31441c04c32264c6821f4ec958ca5
8516f62844b4264d3ccaab00350323d07b9c50ef
fcd6acab1a311e89ae1aef024707e986871eff4071c584de3e93970c5fc4a23d
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2152
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:1$_ss:1$_st:1686402928553$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 201 Created
Date: Sat, 10 Jun 2023 12:45:29 GMT
Content-Type: application/json
Content-Length: 18
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=8AcT4XJHKKmpb5pDixk%2feQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
DCID=8AcT4XJHKKmpb5pDixk%2feQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
_abck=2C3BCED2573ECA1F32CA4D72543E6820~-1~YAAQTpbvUD1fTpqIAQAAgBxXpQrRN0PR/I/o1+tPDeYNBWgyAmgCVyCjU6xKa1ecmKVOwoP3FHiTkE9rnSmpmpgYe5EW3YnI5gZn12UFcImLkgIK10IBnIJMdHUN3iXUuFBT/07ytivXVuU4cH84roLKeC8zrCM5lDBUJzpvB6Zc6UMHRwpec82Frkqx3z82EgAgD6RhQHw4HIIBdiWsV73NPjFErgZOB8626ZP557ntbaOSLW7JUnXs9XJXiSQ4xU+WAm7lcNPq36iLqxvHZ3zlvu1ann5dw3iJqvfu66hh/g56f8XQq20CjY0fCTuX0Ha0ZBRP9OaEC/2dgYv3M+9MDaM/9jIFm455dbhS8LQWQ6RKMMi01ZE4UhjVr1b6~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:29 GMT; Max-Age=31536000; Secure
bm_sz=0054F6103DD08FA1818CA58CF44C02CA~YAAQTpbvUD5fTpqIAQAAgBxXpRSh+KfSQ7P169uEi6qDxARHQqCp/7t+mfjoPYOt/A6/XhjmTlAhA/cWbFyIaRpG2px8cK3fmRqYyRu9TJKlgrjAwPC0JkKhpziLlRmAubfhqJM6QwbnpXc2fSMvMJeOmKmEdUphyaX+qlwZZHJZse3f9eXnnmCd+8dzDK2ilx8wKHBdZ1UfLvzwl8bzkfqA/FtZcomtwA6WxIASEDokaNoK0RNeSoZXuuKHN5wKkkcVpJQWiyFTsWAc+pQF/5ia50VcohXbykD1071x8TpvCoDEMzV3~3225414~4535363; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:29 GMT; Max-Age=14400
X-Via: 1.1 VM-ARN-01XDr43:4 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847069_VM-ARN-01cnE31_22189-14202
www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_active-cash-card_1700x700.jpg
3.5 kB URL www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_active-cash-card_1700x700.jpg
IP
File type ISO Media, AVIF Image\012- data
Hash d1b1a3360bdd72738e293e52317421be
959dd982844853f38ab34579ad4738ee17b263d4
e03095c638618279cc642e7a7e10d962f3d7161eb34a25c9a2407045fead2391
GET /assets/images/contextual/responsive/hpprimary/wfi_ph_active-cash-card_1700x700.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "61a7e46d-e1c7"
last-modified: Thu, 20 Apr 2023 01:30:27 GMT
server: Akamai Image Manager
content-length: 3542
content-type: image/avif
cache-control: private, no-transform, max-age=477792
expires: Fri, 16 Jun 2023 01:28:41 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_135975483_616x353.jpg
39 kB URL www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_135975483_616x353.jpg
IP
File type ISO Media, AVIF Image\012- data
Hash 5d115cb30ce945de0d431748aa0b6073
e1af15a87872a93c56598fe21c82c252a7c82345
8f0441ba6cd327f630ce1653262816ae3fb9abf2db73b70c50be3e66c51dfd8f
GET /assets/images/contextual/responsive/smlpromo/wfi000_ph_g_135975483_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "63505859-e2ce"
last-modified: Thu, 20 Apr 2023 01:30:34 GMT
server: Akamai Image Manager
content-length: 39415
content-type: image/avif
cache-control: private, no-transform, max-age=477914
expires: Fri, 16 Jun 2023 01:30:43 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b_piggy-bank_color-gradient_64x64.png
1.4 kB URL www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b_piggy-bank_color-gradient_64x64.png
IP
File type ISO Media, AVIF Image\012- data
Hash 965f76605b195f4ccfe05353f99ec406
7cc5b65bebc32a1835e778bf984d202fe472bd30
7bb20bbccd8f33fc25b907e8fcbefb0d73b1a9ae7076f8e688fc633f09690de6
GET /assets/images/contextual/responsive/smlprimary/wfi000_ic_b_piggy-bank_color-gradient_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "64501bd4-10f8"
last-modified: Tue, 16 May 2023 13:54:43 GMT
server: Akamai Image Manager
content-length: 1420
content-type: image/avif
cache-control: private, no-transform, max-age=436253
expires: Thu, 15 Jun 2023 13:56:22 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_111661701_616x353.jpg
44 kB URL www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_111661701_616x353.jpg
IP
File type ISO Media, AVIF Image\012- data
Hash 9534a04615e76afcd0a4dda5cdf8dd7e
516d3a11907386abf70170a54409523592c068aa
d7579baa6c30dad3cc501d73364183349ac085fcfea7c2af16aaa11532bc5907
GET /assets/images/contextual/responsive/smlpromo/wfi000_ph_g_111661701_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "63505837-def7"
last-modified: Thu, 20 Apr 2023 01:40:39 GMT
server: Akamai Image Manager
content-length: 43802
content-type: image/avif
cache-control: private, no-transform, max-age=478553
expires: Fri, 16 Jun 2023 01:41:22 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/lpromo/wfi_ph_o_enjoysp300_1600x700.jpg
200 OK 2.3 kB URL GET HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/lpromo/wfi_ph_o_enjoysp300_1600x700.jpg
IP
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectwww17.wellsfargomedia.com
Fingerprint34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1
ValidityFri, 14 Apr 2023 00:00:00 GMT - Sat, 13 Apr 2024 23:59:59 GMT
File type ISO Media, AVIF Image\012- data
Hash 3ce78d6dc48322da6961f79a42940dab
528dce02a84b67925d3e41632eaa418f0de7ad23
a137906477e02c4e3a756f805d90072a0c2e5c0d50290f0932de573ab29de76f
GET /assets/images/contextual/responsive/lpromo/wfi_ph_o_enjoysp300_1600x700.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "641a0e62-1da30"
last-modified: Thu, 20 Apr 2023 01:31:14 GMT
server: Akamai Image Manager
content-length: 2317
content-type: image/avif
cache-control: private, no-transform, max-age=328479
expires: Wed, 14 Jun 2023 08:00:08 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b_cash-stack_color-gradient_64x64.png
1.1 kB URL www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b_cash-stack_color-gradient_64x64.png
IP
File type ISO Media, AVIF Image\012- data
Hash 1be95b0b232926a8f3015e422dc7d26a
9d9c8a27b6a0a5fceaf3a36da19296e9822b4b2f
8351da32a7b86365880337290fee8d5d3c3bf9f6b0bdc7ae8c8991930c63dbae
GET /assets/images/contextual/responsive/smlprimary/wfi000_ic_b_cash-stack_color-gradient_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "63617b6e-da1"
last-modified: Thu, 20 Apr 2023 01:30:33 GMT
server: Akamai Image Manager
content-length: 1083
content-type: image/avif
cache-control: private, no-transform, max-age=477921
expires: Fri, 16 Jun 2023 01:30:50 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b_graduation-hat_color-gradient_64x64.png
1.1 kB URL www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b_graduation-hat_color-gradient_64x64.png
IP
File type ISO Media, AVIF Image\012- data
Hash 89a0759ff4f79071f11a1f90bffd9337
2d734cb1eda293788a673c1fae36b2c1d7e92bae
2223c16db671322ea90112c50128563ee80413e33769d718bd92b99da094712c
GET /assets/images/contextual/responsive/smlprimary/wfi000_ic_b_graduation-hat_color-gradient_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "633eedd3-e69"
last-modified: Thu, 20 Apr 2023 01:30:30 GMT
server: Akamai Image Manager
content-length: 1131
content-type: image/avif
cache-control: private, no-transform, max-age=477838
expires: Fri, 16 Jun 2023 01:29:27 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_900217040_616x353.jpg
200 OK 24 kB URL GET HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_900217040_616x353.jpg
IP
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectwww17.wellsfargomedia.com
Fingerprint34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1
ValidityFri, 14 Apr 2023 00:00:00 GMT - Sat, 13 Apr 2024 23:59:59 GMT
File type ISO Media, AVIF Image\012- data
Hash 87b3f9d652a18e74ea8ef53a99b251d6
8773c9b3a11fb9247039d731888724ccfb74bb5d
86e522c61649a3fd7b76ea8d8304d88fa1b86d029a349c64a2e4ee3683d019c4
GET /assets/images/contextual/responsive/smlpromo/wfi000_ph_g_900217040_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "63cb7c49-e902"
last-modified: Thu, 20 Apr 2023 01:30:31 GMT
server: Akamai Image Manager
content-length: 23508
content-type: image/avif
cache-control: private, no-transform, max-age=477862
expires: Fri, 16 Jun 2023 01:29:51 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/homepage/position-1-bg-gradient.png
463 B URL www17.wellsfargomedia.com/assets/images/homepage/position-1-bg-gradient.png
IP
File type ISO Media, AVIF Image\012- data
Hash 4ba6a57b8c9f52ede1b958bd4b63700b
22a693eb43a2a76ab994782bc50cc262f986a240
c13a85df86fed8e3d77b952a59a1736743127f1422873b47b4d0a59092c62de2
GET /assets/images/homepage/position-1-bg-gradient.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "61619278-9f2c"
last-modified: Thu, 20 Apr 2023 01:30:38 GMT
server: Akamai Image Manager
content-length: 463
content-type: image/avif
cache-control: private, no-transform, max-age=477917
expires: Fri, 16 Jun 2023 01:30:46 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/homepage/position-2-bg-gradient.png
831 B URL www17.wellsfargomedia.com/assets/images/homepage/position-2-bg-gradient.png
IP
File type ISO Media, AVIF Image\012- data
Hash 026f5e731899c436dbbec268e870905a
160ed7b7fe9a30e81aae6f1136db6ce939113a7e
2a242450947c5c9d9496cd2d4acb67d50b269f5ce36070c3b98c4f88db3307db
GET /assets/images/homepage/position-2-bg-gradient.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "61619278-cf3e"
last-modified: Thu, 20 Apr 2023 01:33:02 GMT
server: Akamai Image Manager
x-serial: 1447
x-check-cacheable: YES
content-length: 831
content-type: image/avif
cache-control: private, no-transform, max-age=478105
expires: Fri, 16 Jun 2023 01:33:54 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/homepage/position-3-bg-gradient.png
405 B URL www17.wellsfargomedia.com/assets/images/homepage/position-3-bg-gradient.png
IP
File type ISO Media, AVIF Image\012- data
Hash 08e3eec615bb3f7d07a95e1e79f96189
c05ef7184eedcb31aee442ad8c474ff306b1d473
89026cd6ac7b7314c1a5b075471d09a9b672ac011254541c9d2b521b90c6cb3e
GET /assets/images/homepage/position-3-bg-gradient.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "61619278-7b35"
last-modified: Thu, 20 Apr 2023 01:33:39 GMT
server: Akamai Image Manager
content-length: 405
content-type: image/avif
cache-control: private, no-transform, max-age=478220
expires: Fri, 16 Jun 2023 01:35:49 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/Active-Cash-Card-79x50.png
840 B URL www17.wellsfargomedia.com/assets/images/rwd/Active-Cash-Card-79x50.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6ec98f68003e2c6714282b232614e8d1
2e159a3a6e6796d1cc201770ac015f96f905ef56
f9c237c7739705ea404e9682f13e557a1d984f2493f6f619bdfce44c9a71445d
GET /assets/images/rwd/Active-Cash-Card-79x50.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "636fb74d-1d25"
last-modified: Thu, 20 Apr 2023 01:31:18 GMT
server: Akamai Image Manager
x-serial: 1153
x-check-cacheable: YES
content-length: 840
content-type: image/webp
cache-control: private, no-transform, max-age=477933
expires: Fri, 16 Jun 2023 01:31:02 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/wf_autograph_card_79x50.jpg
962 B URL www17.wellsfargomedia.com/assets/images/rwd/wf_autograph_card_79x50.jpg
IP
File type ISO Media, AVIF Image\012- data
Hash 699a91c4d536a60f1a4bd48622194f70
91b303fbf65778043ddd2fe6f39f4798f207f320
8c456a47b3f97fa54853761f544146ab5b5277a11603a18f080947d76e31d54a
GET /assets/images/rwd/wf_autograph_card_79x50.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "636fb74d-81c"
last-modified: Thu, 20 Apr 2023 01:32:43 GMT
server: Akamai Image Manager
content-length: 962
content-type: image/avif
cache-control: private, no-transform, max-age=372710
expires: Wed, 14 Jun 2023 20:17:19 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/Reflect-Card-79x50.png
200 OK 712 B URL GET HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/Reflect-Card-79x50.png
IP
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectwww17.wellsfargomedia.com
Fingerprint34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1
ValidityFri, 14 Apr 2023 00:00:00 GMT - Sat, 13 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 89489c444f1ee92b133eb97304e31020
62ea0737595301aabcda8a6dbe95184ba9a75558
e06b14ec84ac8651fc009b444e0560a78c1919f45df8106a9c14cd708d5b804e
GET /assets/images/rwd/Reflect-Card-79x50.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "636fb74d-1c20"
last-modified: Thu, 20 Apr 2023 01:30:55 GMT
server: Akamai Image Manager
x-serial: 1166
x-check-cacheable: YES
content-length: 712
content-type: image/webp
cache-control: private, no-transform, max-age=477795
expires: Fri, 16 Jun 2023 01:28:44 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/bilt_card_79x50.png
1.1 kB URL www17.wellsfargomedia.com/assets/images/rwd/bilt_card_79x50.png
IP
File type ISO Media, AVIF Image\012- data
Hash 21385ee55bb1e5a680bb48257446fb86
9639eb9d1c5805fa350013eaa2f11c08835459e0
cfcc50571ad947e067c5a0853534d3016eaaef2fd98ffdb9b0d4d3c1bdda0273
GET /assets/images/rwd/bilt_card_79x50.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "636fc445-1be6"
last-modified: Thu, 20 Apr 2023 01:31:08 GMT
server: Akamai Image Manager
content-length: 1083
content-type: image/avif
cache-control: private, no-transform, max-age=477921
expires: Fri, 16 Jun 2023 01:30:50 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/Native_App_Phone_Personal_v8.png
200 OK 7.4 kB URL GET HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/Native_App_Phone_Personal_v8.png
IP
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectwww17.wellsfargomedia.com
Fingerprint34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1
ValidityFri, 14 Apr 2023 00:00:00 GMT - Sat, 13 Apr 2024 23:59:59 GMT
File type ISO Media, AVIF Image\012- data
Hash c885a0955f4f35b25bceca71830f266d
4bbdc15de0149dee5e6feae4fb32a520a983a1ca
5c18c7230c1e013e39d16af91a84fdedd4a6cb5874e26729f0883978c4ba229e
GET /assets/images/rwd/Native_App_Phone_Personal_v8.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "6328cc17-9829"
last-modified: Thu, 20 Apr 2023 01:39:11 GMT
server: Akamai Image Manager
x-serial: 7
x-check-cacheable: YES
content-length: 7363
content-type: image/avif
cache-control: private, no-transform, max-age=478078
expires: Fri, 16 Jun 2023 01:33:27 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/first_time_experience-account_summary.png
1.7 kB URL www17.wellsfargomedia.com/assets/images/rwd/first_time_experience-account_summary.png
IP
File type ISO Media, AVIF Image\012- data
Hash e218a28576f6620622d48155284b5551
d189e371b0ce3dac93f0b9e660c426d932da9274
f990b81e77666bac79e3f1f9399b7763ca7eb64b1d70acea21cbe954413cc0c3
GET /assets/images/rwd/first_time_experience-account_summary.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "618287e9-14da"
last-modified: Thu, 20 Apr 2023 01:30:31 GMT
server: Akamai Image Manager
content-length: 1662
content-type: image/avif
cache-control: private, no-transform, max-age=477797
expires: Fri, 16 Jun 2023 01:28:46 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/volunteers_cars_616x353.jpg
20 kB URL www17.wellsfargomedia.com/assets/images/rwd/volunteers_cars_616x353.jpg
IP
File type ISO Media, AVIF Image\012- data
Hash 87490ccdfd428eee95e906fbce88432a
e1c384061e5aaf77bcf202341510db8cdc2ae350
936c825f599809216670e9444d31e555e587b6f9943a89681cfef3621c5b0843
GET /assets/images/rwd/volunteers_cars_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "618017dd-cd21"
last-modified: Thu, 20 Apr 2023 01:30:41 GMT
server: Akamai Image Manager
content-length: 19628
content-type: image/avif
cache-control: private, no-transform, max-age=477815
expires: Fri, 16 Jun 2023 01:29:04 GMT
date: Sat, 10 Jun 2023 12:45:29 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/women-in-greenhouse_616x353.png
31 kB URL www17.wellsfargomedia.com/assets/images/rwd/women-in-greenhouse_616x353.png
IP
File type ISO Media, AVIF Image\012- data
Hash 6e75964fb01ae452f65c9fa41cd3326e
1a0909cc3f5290bb291f4d35abdc4df63767ef9e
417df9b440b214aa81b429a205291afb424c1ae8a3c9143dd22e17befaada5e2
GET /assets/images/rwd/women-in-greenhouse_616x353.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-frame-options: SAMEORIGIN
etag: "6410d4f7-b51b"
last-modified: Thu, 20 Apr 2023 01:30:32 GMT
server: Akamai Image Manager
x-serial: 1698
x-check-cacheable: YES
content-length: 30860
content-type: image/avif
cache-control: private, no-transform, max-age=477762
expires: Fri, 16 Jun 2023 01:28:12 GMT
date: Sat, 10 Jun 2023 12:45:30 GMT
X-Firefox-Spdy: h2
c1.wfinterface.com/tracking/gb/detector-dom.min.js
138 kB URL c1.wfinterface.com/tracking/gb/detector-dom.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subjectc1.wfinterface.com
FingerprintCC:19:D6:44:13:12:B1:50:FD:1F:D0:A3:0E:BA:0D:69:80:6C:7D:4C
ValidityMon, 17 Oct 2022 00:00:00 GMT - Tue, 17 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65434)
Size 138 kB (138549 bytes)
Hash c71e354b6a3fbb7e60e42b5cd392761e
b0abcc1cda4144fb29550225f7c3dd0342d11fbf
c5efd80b0945674f1ffbb895395fb45f44b6030a3d2c6380b03202e667c51923
GET /tracking/gb/detector-dom.min.js HTTP/1.1
Host: c1.wfinterface.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 28 Mar 2023 20:08:12 GMT
Vary: Accept-Encoding
ETag: W/"6423492c-7049c"
Content-Security-Policy: default-src https: 'unsafe-inline'; object-src 'self'; img-src https: data: 'unsafe-inline'; frame-ancestors 'self' https://*.wellsfargo.com:* https://*.wellsfargo.com https://www.wellsfargo.com https://*.abbotdowning.com:* https://*.abbotdowning.com https://www.abbotdowning.com; script-src https: 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: POST
Allow: GET, POST
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 138549
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=rZC3SIZwU8pQhRTYW%2fwWxw%3d%3d; Domain=c1.wfinterface.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
connect.secure.wellsfargo.com/accounts/static/7M/accounts/short/accounts-cache.js
571 B URL connect.secure.wellsfargo.com/accounts/static/7M/accounts/short/accounts-cache.js
IP
ASN #20940 Akamai International B.V.
Hash 6497c4493a39dde646c25ba77769bdff
a274bf8eeb1162704dffb48a94fa7984257d5bb0
87539e9903c436b134e3eedeb2fba22286fbca83cfd766afd62e6de9d10167aa
GET /accounts/static/7M/accounts/short/accounts-cache.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 10 May 2023 20:52:18 GMT
Vary: Accept-Encoding
ETag: W/"645c0402-497"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Content-Length: 571
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=Z255kF2j6%2fn+EDlUYZhvxV4JfxY3fvtiOSW308HalrxXjbEdT68sV73KNAHVJVHS; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
connect.secure.wellsfargo.com/auth/static/prefs/login-userprefs.min.js
152 kB URL connect.secure.wellsfargo.com/auth/static/prefs/login-userprefs.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Size 152 kB (151578 bytes)
Hash c0619305edc26bb7272ef1492bfd481b
b3ab6d25348372110e976728e9a20c9c1e52e93d
38698dd4e132f296d94fc1e0b191f9e99fa1cbc49d33e1bbe3dc76242c775895
GET /auth/static/prefs/login-userprefs.min.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
X-XSS-Protection: 1; mode=block
Pragma: no-cache
Content-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp
Allow: GET, POST, OPTIONS
Access-Control-Allow-Methods: POST
X-Frame-Options: SAMEORIGIN
ETag: W/"645d3f60-1854"
Last-Modified: Thu, 11 May 2023 19:17:52 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sat, 10 Jun 2023 12:45:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
WesdAksn=A04eV6WIAQAAcY4s-SpZkV2plC__zUSQlgtwaVbqqXMGUCzyYUP9RcigiYPaAVtaKpqcuNk0wH8AADQwAAAAAA|1|0|9b09144da842bda156eba6532ae8cec7dd95a35b; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=ax786rdG8TejKOc9LW3cr8mpkGlO4vTgdsQHpkxGo9rI3zbeQlrKYTjxh4FzX0d4; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA
175 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash 3173b549e3633369913019c92d3d7f89
7236ead98044589b88b409b402cd238e62081f62
e00e32684a07212b324e0bfda319b41e5b2ba9072789cd4e422b20502b03d97e
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Content-Type: multipart/form-data; boundary=---------------------------244174063241676299651092808257
Content-Length: 171
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:1$_ss:1$_st:1686402928553$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:30 GMT
Content-Type: application/json
Content-Length: 175
Connection: keep-alive
Access-Control-Allow-Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
x-envoy-decorator-operation: ingress DeviceCategoryPost4
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=FRcHvNQlN9IijKiktf0W15%2foKU%2fgBiCyiws0oq60+eA%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
_abck=8D64F290597C16BAE276DF4F47732D5E~-1~YAAQVZbvUAg1252IAQAA9x5XpQpYndWfX/8rf65ZYYJRv04q7DHpSz4PkMuraDyszPhzKerBETQj8hay9DoUemP2ONM6QvvBd+INehPT8sBB7HMM/W9+ICdzlpGudwPXIvBRQbMZScjvzmIRX8nEmNKlv3+Llgoj8teys5UBdW8qz06gx/+Umw4gogIT4GsKjH8mKwMw1gyXqNPX0FPp2wg15IVos3GYtjR9TRn1jpSULYK389/6bWfhEr2iej4Hd/g4y4BS/tk2yh5LfbqhkFiRMH9LCQJxk9sDY2Nc0fxhgDEYRSIn+UDf/RF1G6/vT6wsdVr4+5X/M//mcaThTqF0wfLlG3vEqSRmk+z7UHRoIeQQ8gXKtQvSI+kkBhST~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:30 GMT; Max-Age=31536000; Secure
bm_sz=D4CC10CD748FEDFE19BA067746089C88~YAAQVZbvUAk1252IAQAA9x5XpRQCx2TDbYY2UvwLK7foO9PbEW2ZUiIils9dgY1QpAdLW+Ty2v2Pwz4TZmN0clqIUtvVCnfphpMGlWMW57Vygu9XEx3Yf0w05+hFZSxe9K4MsNd97D1eImDz5rvvXzxu9fVTocCNMa+XGtUzmobuDh8OCZaNuaBzTdV0wbU+ZstnLMzMNg75D+zReSE/ALw8LVOWgo3FrPpP/Xl9i4TFcVJzOaD6evKh5SU1ZzJLDJ4tEUxw3gCAJq9dg37MGkLRX22Z0E3G1Fwn/Dwh/obt83eh7uAr~3749689~3354932; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:30 GMT; Max-Age=14400
X-Via: 1.1 VM-ARN-01XDr43:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847069_VM-ARN-01cnE31_22189-14207
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk
201 Created 18 B URL POST HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d9e31441c04c32264c6821f4ec958ca5
8516f62844b4264d3ccaab00350323d07b9c50ef
fcd6acab1a311e89ae1aef024707e986871eff4071c584de3e93970c5fc4a23d
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /v_EygJB5GsknpaWTvIAAC_C7oUg/YObaNrDwN6h9S1/dzldXmhnIQk/byJnF3V/sWSk HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2683
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:1$_ss:1$_st:1686402928553$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 201 Created
Date: Sat, 10 Jun 2023 12:45:30 GMT
Content-Type: application/json
Content-Length: 18
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=UNoB7ZiBjhrzRCvexHIbFQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
DCID=UNoB7ZiBjhrzRCvexHIbFQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
_abck=1F3998E9CAC7AEDA9438A4142BFE8FD8~-1~YAAQTpbvUEBfTpqIAQAAHh9XpQpu1ElXEjiLdUWrEQ9s4augSK1OT8oGno9gglnIk0ihF5rZe1yq3R9fIr4wQHJyMUuIPrdNFeEjSc9wjaEwM1BM686YsIhCFDrPk7CJ2FHJF/IONoPKBvxn5cGBvY0H9rtg0lUPJCOj28HRMGHRQEjz9uhHvbMDPQPBGFyKW8xAahpAt7belVx33zAw1fP3myEU2tMokPNu4inT8R7MkoSbs0/r1TpMFU1G68wAplr9cPrQNC6T6LRQBEAKGPl727wARLhtovGzgMB65XsPFN9OG4nirb4LEfeZg6hoDIcMI5Huefv95zS1jhganiTtTSw9Yp1PI/Bu0J5sF35gp3HPnTO9odt4tou4/IZl~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:30 GMT; Max-Age=31536000; Secure
bm_sz=3419A5EE7B5F256AE8E086E7DECEA183~YAAQTpbvUEFfTpqIAQAAHh9XpRRCmi4Zu8QGuI6w62KIz4iC/mjM5dW5saF24FGNx+m/6jdPICwfL6LGpOKxXPBQ5k9MsJt3aY3Rx2meFx7zU8AVHudJ020hrgedAq3oOkBCLZQe51+beGFDEp+T5EvxzI7uExWn5/jDM1A7UPepJKKm7Ncro4KwgNVIbzHRFQ7Lto/Qmgq2uxCI2GJFVgU3bmFOQd+jomK9wpui+Q1ScUUaXUTWV21otzPlSjOKdEGqbh9y/yIw9RADMTxv+EofbfoJgHAfRJhGTq/MhnCffSVp+r99~3749689~3354932; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:30 GMT; Max-Age=14400
X-Via: 1.1 VM-ARN-01XDr43:4 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22189-14216
c1.wfinterface.com/tracking/ga/gtag.js?id=UA-107148943-1
45 kB URL c1.wfinterface.com/tracking/ga/gtag.js?id=UA-107148943-1
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subjectc1.wfinterface.com
FingerprintCC:19:D6:44:13:12:B1:50:FD:1F:D0:A3:0E:BA:0D:69:80:6C:7D:4C
ValidityMon, 17 Oct 2022 00:00:00 GMT - Tue, 17 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65507), with CRLF line terminators
Hash 91c536ff4d2c8db1822702f866e60b08
3370d3721e28923f099da1985f718a88015975aa
d4798dd02d76bdfa96287f2d4bf3a0bd0e82c0e0dda34c6db7766fae3b2da78a
GET /tracking/ga/gtag.js?id=UA-107148943-1 HTTP/1.1
Host: c1.wfinterface.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 06 Dec 2022 21:04:42 GMT
Vary: Accept-Encoding
ETag: W/"638fae6a-1ca3a"
Content-Security-Policy: default-src https: 'unsafe-inline'; object-src 'self'; img-src https: data: 'unsafe-inline'; frame-ancestors 'self' https://*.wellsfargo.com:* https://*.wellsfargo.com https://www.wellsfargo.com https://*.abbotdowning.com:* https://*.abbotdowning.com https://www.abbotdowning.com; script-src https: 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: POST
Allow: GET, POST
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45055
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=ePyRazvbImhrWAeQ49GPUg%3d%3d; Domain=c1.wfinterface.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.js
200 OK 14 kB URL GET HTTP/1.1 static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.js
IP
ASN #20940 Akamai International B.V.
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectstatic.wellsfargo.com
Fingerprint2E:FA:45:0C:2B:B4:91:CC:76:B1:F9:EF:4A:58:03:FF:95:E3:A2:CD
ValidityWed, 12 Oct 2022 00:00:00 GMT - Thu, 12 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (32088), with CRLF line terminators
Hash 5f310e2e2a558d76b916e137aee73462
c7ff0190c9c2c414321211f3863e9e27f32b713e
385196f0fce7cea80c2c99d971780ecb73df9dea6e5b2d95d19df3aa849c7b1f
GET /assets/js/wfui/appdynamics/adrum-ext.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 09 Mar 2021 18:36:55 GMT
Vary: Accept-Encoding
ETag: W/"6047c047-b11c"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 14304
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=YAIMFcKyvRFICtUlHKhpdQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/stylesheets/main.6f78b5133f378c92c1b9.chunk.css
200 OK 24 kB URL GET HTTP/1.1 connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/stylesheets/main.6f78b5133f378c92c1b9.chunk.css
IP
ASN #20940 Akamai International B.V.
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectconnect.secure.wellsfargo.com
Fingerprint3F:43:1B:FB:A6:51:FA:27:D5:EE:CF:C1:23:76:C7:04:BF:40:DB:BD
ValidityTue, 11 Oct 2022 00:00:00 GMT - Wed, 11 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7761c210936c5ffbc16bf3a859c5c649
30b0294e872a612bbb44fef185397b20839a6a7f
5b306356aae0365e64f0f2aeb36e88aaebcfad3cede0791f87a2cd3d8fbbe9af
GET /accounts/static/7M/accounts/public/stylesheets/main.6f78b5133f378c92c1b9.chunk.css HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 23979
Last-Modified: Wed, 10 May 2023 20:52:18 GMT
Vary: Accept-Encoding
ETag: "645c0402-5dab"
Content-Encoding: gzip
Access-Control-Allow-Origin: https://www.wellsfargo.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET POST
Access-Control-Allow-Headers: User-Agent,Keep-Alive,Content-Type
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Allow: GET, POST, OPTIONS
Cache-Control: max-age=10368000
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=iL0HueDCFy3IyxjUHaks0g%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/stylesheets/wfui.df910294345cedd2922e.chunk.css
200 OK 39 kB URL GET HTTP/1.1 connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/stylesheets/wfui.df910294345cedd2922e.chunk.css
IP
ASN #20940 Akamai International B.V.
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectconnect.secure.wellsfargo.com
Fingerprint3F:43:1B:FB:A6:51:FA:27:D5:EE:CF:C1:23:76:C7:04:BF:40:DB:BD
ValidityTue, 11 Oct 2022 00:00:00 GMT - Wed, 11 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1415f9572acbb3f9c9b735caa721379c
b028e1c6270ffbbeaaad4df08669a519dabef72c
38526f61faf9a7f3f0612e909fb6f786a7ffba9b899c4d37ee66a7f08dd8f69d
GET /accounts/static/7M/accounts/public/stylesheets/wfui.df910294345cedd2922e.chunk.css HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 39080
Last-Modified: Wed, 10 May 2023 20:52:18 GMT
Vary: Accept-Encoding
ETag: "645c0402-98a8"
Content-Encoding: gzip
Access-Control-Allow-Origin: https://www.wellsfargo.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET POST
Access-Control-Allow-Headers: User-Agent,Keep-Alive,Content-Type
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Allow: GET, POST, OPTIONS
Cache-Control: max-age=10368000
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=Mq9TuuA4cLmAclNJXijBqA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/runtime.0b407b6e491f76ce3813.js
3.8 kB URL connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/runtime.0b407b6e491f76ce3813.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7626), with no line terminators
Hash 376eecf5abc22210cbcec8dc18f21cf6
be2406fc2ef24c86c85eb04a9c36559ef1fa3d7b
a56f4f80c32f2fd3a8d47679dfd0456765d23a853a0f12c5bdf7e8bae4c65a20
GET /accounts/static/7M/accounts/public/js/runtime.0b407b6e491f76ce3813.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 10 May 2023 20:52:18 GMT
Vary: Accept-Encoding
ETag: W/"645c0402-1dca"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET POST
Access-Control-Allow-Headers: User-Agent,Keep-Alive,Content-Type
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Allow: GET, POST, OPTIONS
Access-Control-Allow-Origin: connect.secure.wellsfargo.com
Cache-Control: max-age=10368000
Content-Encoding: gzip
Content-Length: 3788
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=PaPoz7FBbkINZmzswvXM5K59cgPYcr1TnwUnQMbV8I+wRm0YSRelSLYNge%2fUFm6e; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=223ed0b6-909f-4232-814e-b8693c492d8d%3A0&_cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8&pv=2&f_cls_s=true
1.1 kB URL rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=223ed0b6-909f-4232-814e-b8693c492d8d%3A0&_cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8&pv=2&f_cls_s=true
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (4589), with no line terminators
Hash cac3042b521b22a369e99c2a5d90caca
278b638620f6c75bdd1387cd72c7376eee74460d
62acde4f82b527e50643e192558c099957c7159b71794aa1aaa76d7f7434aebd
GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=223ed0b6-909f-4232-814e-b8693c492d8d%3A0&_cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8&pv=2&f_cls_s=true HTTP/1.1
Host: rubicon.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/json
Access-Control-Allow-Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Content-Length: 1144
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: origin, Accept-Encoding
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Set-Cookie: _cls_cfgver=32a3f9ce; Secure; SameSite=None;HttpOnly;Secure
_cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0; Secure; SameSite=None;HttpOnly;Secure
_cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; Secure; SameSite=None;HttpOnly;Secure
ROUTEID=.cligate1; path=/;HttpOnly;Secure
ISD_GB_COOKIE=!eRycTmUExollZknpnNE5eVRfS7HzYyYA9Qrv3OfpSZmYdd8z3sroirxymhl5Jk5rp77zjsKprviOpg==; path=/; Httponly; Secure
DCID=szPwowbwhiqKJ4WGMaxj8RauRNu5Bu95PhknLNEqZFe68UBSMY%2f6TwCTfWoip+Xq; Domain=rubicon.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
connect.secure.wellsfargo.com/auth/static/prefs/atadun.js
200 OK 607 B URL GET HTTP/1.1 connect.secure.wellsfargo.com/auth/static/prefs/atadun.js
IP
ASN #20940 Akamai International B.V.
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectconnect.secure.wellsfargo.com
Fingerprint3F:43:1B:FB:A6:51:FA:27:D5:EE:CF:C1:23:76:C7:04:BF:40:DB:BD
ValidityTue, 11 Oct 2022 00:00:00 GMT - Wed, 11 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 566dda94252f1860a7a28665c715b530
6aa0455dc8ea41441b1f3a733985758dc40af736
43dd833f33570535401d009e6b6f9cde54bdac4e210fc6c89cfdcfcbaa9fc903
GET /auth/static/prefs/atadun.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 11 May 2023 19:12:37 GMT
Vary: Accept-Encoding
ETag: W/"645d3e25-4a0"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp
Content-Encoding: gzip
Content-Length: 607
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=Op1JawB6+qGIwZq9OWRjPYvO%2fZKH9PMv6MyTw3IN%2f+wwSfa1F2sOx%2fSJbnW7P6tg; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js
16 kB URL static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (599)
Hash aeccb854b0a76aa9f478e466c8011b29
625d31cbeb8978cf2419f58d14bba92a42dbb45c
7f0d10bc282c3d7b0eb4d7527303490f8d3b86a1c65e293c2d9f0793006441e6
GET /assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 03 Mar 2021 23:46:24 GMT
Vary: Accept-Encoding
ETag: W/"60401fd0-bbed"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 15970
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=B0As0nwuOpffi47CryP+nQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
c1.wfinterface.com/tracking/ga/gtag.js?t=DC-2549153
45 kB URL c1.wfinterface.com/tracking/ga/gtag.js?t=DC-2549153
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subjectc1.wfinterface.com
FingerprintCC:19:D6:44:13:12:B1:50:FD:1F:D0:A3:0E:BA:0D:69:80:6C:7D:4C
ValidityMon, 17 Oct 2022 00:00:00 GMT - Tue, 17 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65507), with CRLF line terminators
Hash 91c536ff4d2c8db1822702f866e60b08
3370d3721e28923f099da1985f718a88015975aa
d4798dd02d76bdfa96287f2d4bf3a0bd0e82c0e0dda34c6db7766fae3b2da78a
GET /tracking/ga/gtag.js?t=DC-2549153 HTTP/1.1
Host: c1.wfinterface.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 06 Dec 2022 21:04:42 GMT
Vary: Accept-Encoding
ETag: W/"638fae6a-1ca3a"
Content-Security-Policy: default-src https: 'unsafe-inline'; object-src 'self'; img-src https: data: 'unsafe-inline'; frame-ancestors 'self' https://*.wellsfargo.com:* https://*.wellsfargo.com https://www.wellsfargo.com https://*.abbotdowning.com:* https://*.abbotdowning.com https://www.abbotdowning.com; script-src https: 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: POST
Allow: GET, POST
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45055
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=zuf+TbAivvXqZDyv7%2fuOKw%3d%3d; Domain=c1.wfinterface.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
c1.wfinterface.com/tracking/ga/gtag.js?t=UA-107148943-1
45 kB URL c1.wfinterface.com/tracking/ga/gtag.js?t=UA-107148943-1
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subjectc1.wfinterface.com
FingerprintCC:19:D6:44:13:12:B1:50:FD:1F:D0:A3:0E:BA:0D:69:80:6C:7D:4C
ValidityMon, 17 Oct 2022 00:00:00 GMT - Tue, 17 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65507), with CRLF line terminators
Hash 91c536ff4d2c8db1822702f866e60b08
3370d3721e28923f099da1985f718a88015975aa
d4798dd02d76bdfa96287f2d4bf3a0bd0e82c0e0dda34c6db7766fae3b2da78a
GET /tracking/ga/gtag.js?t=UA-107148943-1 HTTP/1.1
Host: c1.wfinterface.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 06 Dec 2022 21:04:42 GMT
Vary: Accept-Encoding
ETag: W/"638fae6a-1ca3a"
Content-Security-Policy: default-src https: 'unsafe-inline'; object-src 'self'; img-src https: data: 'unsafe-inline'; frame-ancestors 'self' https://*.wellsfargo.com:* https://*.wellsfargo.com https://www.wellsfargo.com https://*.abbotdowning.com:* https://*.abbotdowning.com https://www.abbotdowning.com; script-src https: 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: POST
Allow: GET, POST
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45055
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=n8GW+iOOWS3Qt4WjOTPnag%3d%3d; Domain=c1.wfinterface.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130061&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP
43 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130061&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130061&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:30 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:30 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=sTFKakYU4C+0mGEU2zDJsxsxbZ2FcfHaCvNwjisSHSdxJN7eCxYnxJTSJlCXS%2fLF; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22189-14228
connect.secure.wellsfargo.com/AIDO/mint.js?dt=login&r=0.38478826307092384
204 No Content 0 B URL GET HTTP/1.1 connect.secure.wellsfargo.com/AIDO/mint.js?dt=login&r=0.38478826307092384
IP
ASN #20940 Akamai International B.V.
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectconnect.secure.wellsfargo.com
Fingerprint3F:43:1B:FB:A6:51:FA:27:D5:EE:CF:C1:23:76:C7:04:BF:40:DB:BD
ValidityTue, 11 Oct 2022 00:00:00 GMT - Wed, 11 Oct 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AIDO/mint.js?dt=login&r=0.38478826307092384 HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Content-Length: 0
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=R9atDKuusdwRq4kIamM62g5fkSHNeeRel1zFA3GXs+p4WHpT7oW14CyBm2ore20S; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130083&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A402-227175-16%7Etcm%3A91-223657-32
200 OK 43 B URL GET HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130083&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A402-227175-16%7Etcm%3A91-223657-32
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130083&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A402-227175-16%7Etcm%3A91-223657-32 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:30 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:30 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=hlsixJLEny4wzOHkjuFMXTilLW5WQCkoZB6NkqMFGOHE0EQ1TPJ+yK+UvO%2fyJq3+; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22106-12724
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130075&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A84-226512-16%7Etcm%3A91-226306-32
200 OK 43 B URL GET HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130075&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A84-226512-16%7Etcm%3A91-226306-32
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130075&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A84-226512-16%7Etcm%3A91-226306-32 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:30 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:30 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=9QUDAsDoyvYlvmM9UdG+JR2JOZI7i7kkzFlN7J1U+PFDmsKGb427ivcnVXNdC13B; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22243-10261
connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/wfui.77e559b79db575fffbe9.chunk.js
184 kB URL connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/wfui.77e559b79db575fffbe9.chunk.js
IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, max compression, from Unix\012- data
Size 184 kB (183664 bytes)
Hash 6fe3cde1f89b05348accb646cd2edef3
8c9c37298c25d08a86faa54d2ad5aa9b63131e1b
911b39f7274e66a29df1e393d2dacaa0f92088e0b2b1bf77ed407a1b7da5e6eb
GET /accounts/static/7M/accounts/public/js/wfui.77e559b79db575fffbe9.chunk.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Content-Length: 331228
Last-Modified: Wed, 10 May 2023 20:52:18 GMT
Vary: Accept-Encoding
ETag: "645c0402-50ddc"
Content-Encoding: gzip
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET POST
Access-Control-Allow-Headers: User-Agent,Keep-Alive,Content-Type
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Allow: GET, POST, OPTIONS
Access-Control-Allow-Origin: connect.secure.wellsfargo.com
Cache-Control: max-age=10368000
Date: Sat, 10 Jun 2023 12:45:30 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=VD0Onjf8vEoJfdgxa8I4lL2SczMckE8zQ4uLfDBZlKIhtKokX3igAmz79NopJnPs; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130079&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-224415%7Etcm%3A83-2046-8
200 OK 43 B URL GET HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130079&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-224415%7Etcm%3A83-2046-8
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130079&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-224415%7Etcm%3A83-2046-8 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:30 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:30 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=8z+oRVD+9MxWPw+P73z8dSvEL26RyUJEeyeXv9%2f9Wyi8Dtr2tVXgxEzN4SbDy0eR; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22169-7541
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130088&offerType=iaRendered&slotId=WF_CON_HP_PRIMARY_BNR&offerId=C_ccd_tk1activecashtestarspv_hpprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-227175-16%7Etcm%3A91-223657-32
43 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130088&offerType=iaRendered&slotId=WF_CON_HP_PRIMARY_BNR&offerId=C_ccd_tk1activecashtestarspv_hpprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-227175-16%7Etcm%3A91-223657-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130088&offerType=iaRendered&slotId=WF_CON_HP_PRIMARY_BNR&offerId=C_ccd_tk1activecashtestarspv_hpprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-227175-16%7Etcm%3A91-223657-32 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:30 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:30 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=jCVWvGuI+7keTEyQS5dIdXut3buC%2fywTTkq97j1uKckH+dmMO3FXojnNtdnMmLMa; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22106-12725
connect.secure.wellsfargo.com/AIDO/glu.js
204 No Content 0 B URL GET HTTP/1.1 connect.secure.wellsfargo.com/AIDO/glu.js
IP
ASN #20940 Akamai International B.V.
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subjectconnect.secure.wellsfargo.com
Fingerprint3F:43:1B:FB:A6:51:FA:27:D5:EE:CF:C1:23:76:C7:04:BF:40:DB:BD
ValidityTue, 11 Oct 2022 00:00:00 GMT - Wed, 11 Oct 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AIDO/glu.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Content-Length: 0
Date: Sat, 10 Jun 2023 12:45:31 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=zysVm%2fS8UIqwqL9ZbNVIfaH4yDVpIXA78ejx+wHrMtfwSAgZS23ZwbOLYlo2HbCs; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:30 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
c1.wfinterface.com/tracking/ga/gtag.js?t=AW-984436569
45 kB URL c1.wfinterface.com/tracking/ga/gtag.js?t=AW-984436569
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subjectc1.wfinterface.com
FingerprintCC:19:D6:44:13:12:B1:50:FD:1F:D0:A3:0E:BA:0D:69:80:6C:7D:4C
ValidityMon, 17 Oct 2022 00:00:00 GMT - Tue, 17 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65507), with CRLF line terminators
Hash 91c536ff4d2c8db1822702f866e60b08
3370d3721e28923f099da1985f718a88015975aa
d4798dd02d76bdfa96287f2d4bf3a0bd0e82c0e0dda34c6db7766fae3b2da78a
GET /tracking/ga/gtag.js?t=AW-984436569 HTTP/1.1
Host: c1.wfinterface.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 06 Dec 2022 21:04:42 GMT
Vary: Accept-Encoding
ETag: W/"638fae6a-1ca3a"
Content-Security-Policy: default-src https: 'unsafe-inline'; object-src 'self'; img-src https: data: 'unsafe-inline'; frame-ancestors 'self' https://*.wellsfargo.com:* https://*.wellsfargo.com https://www.wellsfargo.com https://*.abbotdowning.com:* https://*.abbotdowning.com https://www.abbotdowning.com; script-src https: 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: POST
Allow: GET, POST
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45055
Date: Sat, 10 Jun 2023 12:45:31 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=nzpleciXBMZZZjKD3gshiA%3d%3d; Domain=c1.wfinterface.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
c1.wfinterface.com/tracking/ga/ga.js
20 kB URL c1.wfinterface.com/tracking/ga/ga.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subjectc1.wfinterface.com
FingerprintCC:19:D6:44:13:12:B1:50:FD:1F:D0:A3:0E:BA:0D:69:80:6C:7D:4C
ValidityMon, 17 Oct 2022 00:00:00 GMT - Tue, 17 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (49163)
Hash 8402e9ebdf9290c018b0617018227681
2d840fcd6c3008d9aca747ba0ce056b496db8e1b
0b2af045acafbdf14516bf55f310568036ace959946d16edb1acebcd58029d22
GET /tracking/ga/ga.js HTTP/1.1
Host: c1.wfinterface.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-c025"
Content-Security-Policy: default-src https: 'unsafe-inline'; object-src 'self'; img-src https: data: 'unsafe-inline'; frame-ancestors 'self' https://*.wellsfargo.com:* https://*.wellsfargo.com https://www.wellsfargo.com https://*.abbotdowning.com:* https://*.abbotdowning.com https://www.abbotdowning.com; script-src https: 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: POST
Allow: GET, POST
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 19477
Date: Sat, 10 Jun 2023 12:45:31 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=0OXftDkJSBwSFwvWJJlywA%3d%3d; Domain=c1.wfinterface.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130091&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-263973-16%7Etcm%3A91-228643-32
200 OK 43 B URL GET HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130091&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-263973-16%7Etcm%3A91-228643-32
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130091&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-263973-16%7Etcm%3A91-228643-32 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:31 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=VIP9CuUbpSuEUG0w8N+xEZaPYgL4NVO6Eis8wH9FaiESfDS055i11VJiVdSxAdRq; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22189-14231
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130110&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_oth_collegestepsrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-254087-16%7Etcm%3A91-228643-32&promoSlot=3
43 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130110&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_oth_collegestepsrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-254087-16%7Etcm%3A91-228643-32&promoSlot=3
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130110&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_oth_collegestepsrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-254087-16%7Etcm%3A91-228643-32&promoSlot=3 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:31 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=8LfYAQKsq88a9xmh49rr5zVpZMbqqjJrk0nwDrjdsQX6zjXOcMaSCt2WZlTMPIa4; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22106-12728
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130094&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_sav_savingsprospectrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-263973-16%7Etcm%3A91-228643-32&promoSlot=1
43 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130094&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_sav_savingsprospectrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-263973-16%7Etcm%3A91-228643-32&promoSlot=1
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130094&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_sav_savingsprospectrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-263973-16%7Etcm%3A91-228643-32&promoSlot=1 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:31 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=+I4sR0VfpSAb3ZvJZ0UtnL+Fnd6urcCAME3Ar8X4Vp4XjDRQVCJD4akQfUYIzi0O; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22106-12727
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130105&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-254087-16%7Etcm%3A91-228643-32
43 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130105&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-254087-16%7Etcm%3A91-228643-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130105&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-254087-16%7Etcm%3A91-228643-32 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:31 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=KHRGGJKsBhh9BYST6pnws5zI8ZgkGPcwnj+wG%2fzrIRDUn6upKibu%2frtkuVoj7vgu; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22169-7545
connect.secure.wellsfargo.com/PIDO/pic.js?r=0.46880249704596477
0 B URL connect.secure.wellsfargo.com/PIDO/pic.js?r=0.46880249704596477
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /PIDO/pic.js?r=0.46880249704596477 HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Content-Length: 0
Date: Sat, 10 Jun 2023 12:45:31 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=4TGtd2vcArTu9nFlX6ROSNznOumbA7%2fSrFLehM4jIw3q2a6smvmO+NezmQJIYd8s; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.78B156&_cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0&_cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8&pid=c2f38bff-13e9-4222-bfc9-05a5fc418876&sn=1&cfg&pv=2&aid=
1.1 kB URL rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.78B156&_cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0&_cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8&pid=c2f38bff-13e9-4222-bfc9-05a5fc418876&sn=1&cfg&pv=2&aid=
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (4589), with no line terminators
Hash cac3042b521b22a369e99c2a5d90caca
278b638620f6c75bdd1387cd72c7376eee74460d
62acde4f82b527e50643e192558c099957c7159b71794aa1aaa76d7f7434aebd
POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.78B156&_cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0&_cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8&pid=c2f38bff-13e9-4222-bfc9-05a5fc418876&sn=1&cfg&pv=2&aid= HTTP/1.1
Host: rubicon.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2802
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: _cls_cfgver=32a3f9ce; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/json
Access-Control-Allow-Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Content-Length: 1144
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: origin, Accept-Encoding
Date: Sat, 10 Jun 2023 12:45:31 GMT
Connection: keep-alive
Set-Cookie: _cls_cfgver=32a3f9ce; Secure; SameSite=None;HttpOnly;Secure
ROUTEID=.cligate1; path=/;HttpOnly;Secure
ISD_GB_COOKIE=!QUEOog31nC9iylnpnNE5eVRfS7HzY8ch4wf+AeqIIIK7TVRWr/Y0RtDah3AYjvtdlUJeN/8IeFbvzg==; path=/; Httponly; Secure
DCID=fV1xJiPun8aqiXP9s4xXkv+jOEdokTZBbOqCFX3h2cxcveoyP%2fKmRS62D03aF0QL; Domain=rubicon.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130098&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-251513-16%7Etcm%3A91-228643-32
43 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130098&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-251513-16%7Etcm%3A91-228643-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130098&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-251513-16%7Etcm%3A91-228643-32 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:31 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=69T1VqrjpG3X7XcJiwi3ySbTApbbsDAR%2frgq3sCxUGvMz%2f8M8jNhtn%2fJhGxzeRHE; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22243-10264
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130102&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_chk_digitalcashbonusrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-251513-16%7Etcm%3A91-228643-32&promoSlot=2
43 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130102&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_chk_digitalcashbonusrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-251513-16%7Etcm%3A91-228643-32&promoSlot=2
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130102&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_chk_digitalcashbonusrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-251513-16%7Etcm%3A91-228643-32&promoSlot=2 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:31 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=9Rg2bEH5CzFW5fT6QF7uHFSxQM7K%2fPrSGFbVxNU4cmSuXdGL0GThTikYbFXahpqA; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706a_VM-ARN-01cnE31_22213-14631
connect.secure.wellsfargo.com/jenny/nd
18 kB URL connect.secure.wellsfargo.com/jenny/nd
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2293)
Hash 09db06635b5109a65c2185e27857932f
38195b9525ffb672088061dbb53f105a94a3f7fa
b10c5fb8fa8b0a2655f18977ab811df0a1328aa803fb87dd7a62a7ca3f83cb47
GET /jenny/nd HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript;charset=ISO-8859-1
Content-Length: 17921
Date: Sat, 10 Jun 2023 12:45:31 GMT
Connection: keep-alive
Set-Cookie: ADRUM_BTa=R:55|g:2d9667f4-5174-40d5-8bca-7d7125b582d7; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
ADRUM_BTa=R:55|g:2d9667f4-5174-40d5-8bca-7d7125b582d7|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
SameSite=None; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
ADRUM_BT1=R:55|i:302812; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
ADRUM_BT1=R:55|i:302812|e:3; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=WFl5+G2mIacUfKWBlrnyKVxKxCtKmPPFmKQcUcxkYaT0YsKXAMBzwHg5KBj8DnZT; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
_abck=1F27CD931FBA926B0E8715B39DB1CC59~-1~YAAQHk8kFy/yo56IAQAATyNXpQq5ZZHJkRP6c482hoYWN3IrkdQRWePqmH7U8QntkQ5G/0rSxl/O+4jfEO/yMYOYI5Fe7PFd+USfrlEstDR7mSNjIrfsghtNGuUFWi3D6kMJAbir07wnBEktROFeYXgrAFHzpmXLy6lKyP4k2GdWrcDFVUAo50blxat/psclRHrknuV8I0+/1OvPWk1pXsWAVNf+JCMn+nUI5T7m9VVmggHeebSd7lQhPzMSgQqCSZE+T5cO5tBBLXwmczIRb3PdYNbyX0w7/WbbTJc0/ZdIqH4R59+LwNjEHmAHDDRwMnS5X8Z1KVX6CNvQoaLpK2hbAW0X+JkE304Dai+bTj4z3K3P9A7so5DFij/49m/d~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:31 GMT; Max-Age=31536000; Secure
bm_sz=DFC7CFE9C1004251B24D0BF2AFE476EB~YAAQHk8kFzDyo56IAQAATyNXpRQoI5+1Pp/udqYV+NCdR3gc70G5/mxpB/mBHucGPm9KBAGx3SpFIwkokKL7/G/cw7h3s7wtmN676uhtqKNMdoTLUtHJmBk8Eu3TObs+w7V7Avkz9LdZ651LLpVFxAwqk4rGBNpDeRSxmwyZI6AXYOEE/AsJun5PR5PlNmxgkgt/6S8ycfYte7I7YQjR3Kz6xBfmWxOwAp4McQ/ulMsK6jFo0WrNCu3xhpQp3/xtBbTRMGLiba8eHNyn0vhG7b5cdJlSkW1lsjbXVtgvuaKi+AoYn9FF~4601906~3748163; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:31 GMT; Max-Age=14400
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
c1.wfinterface.com/tracking/ga/ga_conversion_async.js
14 kB URL c1.wfinterface.com/tracking/ga/ga_conversion_async.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subjectc1.wfinterface.com
FingerprintCC:19:D6:44:13:12:B1:50:FD:1F:D0:A3:0E:BA:0D:69:80:6C:7D:4C
ValidityMon, 17 Oct 2022 00:00:00 GMT - Tue, 17 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (35846)
Hash 0a40602db7616a31c9da4548ee920190
878e01cb0c90cb247aabc137327655a6fcffcbd5
6c771bd1c269646a76015f2f6410a40c031e5adea88f665bfe9ae15a972ab6ab
GET /tracking/ga/ga_conversion_async.js HTTP/1.1
Host: c1.wfinterface.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-8c31"
Content-Security-Policy: default-src https: 'unsafe-inline'; object-src 'self'; img-src https: data: 'unsafe-inline'; frame-ancestors 'self' https://*.wellsfargo.com:* https://*.wellsfargo.com https://www.wellsfargo.com https://*.abbotdowning.com:* https://*.abbotdowning.com https://www.abbotdowning.com; script-src https: 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: POST
Allow: GET, POST
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 13593
Date: Sat, 10 Jun 2023 12:45:31 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=mQSf4p5hdjq9jiS+lXihOw%3d%3d; Domain=c1.wfinterface.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
c1.wfinterface.com/tracking/ga/ec.js
1.3 kB URL c1.wfinterface.com/tracking/ga/ec.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subjectc1.wfinterface.com
FingerprintCC:19:D6:44:13:12:B1:50:FD:1F:D0:A3:0E:BA:0D:69:80:6C:7D:4C
ValidityMon, 17 Oct 2022 00:00:00 GMT - Tue, 17 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (2771)
Hash 0ae62a83927125e9b9dfa97f89af9d3f
efb68f49f2b9b6b5567bf26a17015ede289e429d
618688d9849fef712931832c71e01be145d1791d6da917a702ab86a74ce66089
GET /tracking/ga/ec.js HTTP/1.1
Host: c1.wfinterface.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-aed"
Content-Security-Policy: default-src https: 'unsafe-inline'; object-src 'self'; img-src https: data: 'unsafe-inline'; frame-ancestors 'self' https://*.wellsfargo.com:* https://*.wellsfargo.com https://www.wellsfargo.com https://*.abbotdowning.com:* https://*.abbotdowning.com https://www.abbotdowning.com; script-src https: 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: POST
Allow: GET, POST
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1313
Date: Sat, 10 Jun 2023 12:45:31 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=TqsXEUQH6St6jMXFha1jAQ%3d%3d; Domain=c1.wfinterface.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ort.wellsfargo.com/securereporting/reporting/v1/csp
0 B URL ort.wellsfargo.com/securereporting/reporting/v1/csp
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /securereporting/reporting/v1/csp HTTP/1.1
Host: ort.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 3358
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 0
X-Vcap-Request-Id: fb0f5cda-c632-4ac0-44dd-e807553690e9
X-Xss-Protection: 1; mode=block
Date: Sat, 10 Jun 2023 12:45:31 GMT
Connection: keep-alive
Set-Cookie: ADRUM_BTa=R:0|g:8c688852-d8f7-4c84-b4e8-48d2f8c16f48; Max-Age=30; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
ADRUM_BTa=R:0|g:8c688852-d8f7-4c84-b4e8-48d2f8c16f48|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Max-Age=30; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
SameSite=None; Max-Age=30; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
ADRUM_BT1=R:0|i:710766; Max-Age=30; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
ADRUM_BT1=R:0|i:710766|e:5; Max-Age=30; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
ADRUM_BT1=R:0|i:710766|e:5|d:4; Max-Age=30; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure
DCID=kPXdd7%2fEA8UOF8ARvqDSAopRQ7Le9HMBl0zlQa%2f8tKE%3d; Domain=ort.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
_abck=B705480482F1B89FFF66AF8B194EECD8~-1~YAAQtQplX03hD6GIAQAAaCNXpQqI0vWsiWA2DPaNZYDaB/v9v7NaDOTDowTvbcVR04Ayia14113PEa8geYtpccPK1YzzqNYyUNK3ExdISQxah7R2PVsQfJqtKiSS77YdDeo8rVpqOilHxt+5sNndWO7ZEIoPPmAWs4RN492CLoA3XWd8TlhiLMCL5Dwl0uc2VwcFH2SiFnQ897Qjpi6AB7NFjIC07urDUEjze5bpB2XBM3MAJB3IALxilv7s8AfEeXTHHL+5oWkOim+gMwqcLKDQZQ7KnZiw+BpOBP9oa6jTiSxwx+3JtLGJ29poWSix5BqazNxPWSZKhG1oiiiaWFaeIuanN/1fE+/lnz3VRXdrCP9TaXChUs2r59N21VYR~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:31 GMT; Max-Age=31536000; Secure
bm_sz=6074FA5309BFF229FD2AA90BA7FA954E~YAAQtQplX07hD6GIAQAAaCNXpRQmL6781hypgu7j9lW2sg9tZZXaNPaYNS57V04oKOrZdxwo2RMkqFmcJET3U7O9Ejk6A7F/gib/mvkDHae9FviC2ZdK1qgvHPz3ANXJte7xWlfgrhjTwWGA6c/Q/7tVMPRwlEPTiJ4ih/pETSbWMMVY1KtwQsC327VTMFrjDHKbkmaXC7Xoci03eSpk95oNgwGu0Lwl6+4xlRQKtbW819X6bR+IuMK+C+eB+Rc003mvusfDKWsqa5VPRbeEratFqVnzgQBSk3fljzBwk0ASMOeOUjQ+~3617092~3359554; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:31 GMT; Max-Age=14400
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130113&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A182-228910-16%7Etcm%3A91-223671-32
43 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130113&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A182-228910-16%7Etcm%3A91-223671-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert openphish Wells Fargo & Company
GET /assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8t49329d48d6c.wsipv6.com%2F&cb=1686401130113&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A182-228910-16%7Etcm%3A91-223671-32 HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Fri, 09 Jun 2023 12:45:31 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=EDXX9CR8BOUduY0RSKp9%2fJ7zLnOqq7f0MnOdFqiiySwOz9oYKii%2fjYDn6NGZCOi2; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 VM-ARN-01cnE31:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706b_VM-ARN-01cnE31_22189-14233
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/as/target/offers/dispositions
200 OK 968 B URL POST HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/as/target/offers/dispositions
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2434), with no line terminators
Hash d9e1c30ffedfe710a523eea5ae73dd7c
415f52cbed2073ee5ad3fe50ae9599170c68d893
577c5aa106e58b2148d3ea9f558cb9495a7ba5e606bc6db02a6dfd06a9d5d8d1
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /as/target/offers/dispositions HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Content-Type: application/json
Content-Length: 262
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 968
Connection: keep-alive
Content-Security-Policy: default-src 'none'; form-action 'self' *.wellsfargo.com *.wellsfargo.com:*; connect-src 'self' *.wellsfargo.com *.wellsfargo.com:* https://*.schemaapp.com https://*.rlcdn.com https://*.tiktok.com https://*.medallia.com https://*.kampyle.com https://*.adobedc.net https://www.google-analytics.com https://*.doubleclick.net https://*.maxymiser.net https://*.eum-appdynamics.com https://*.demdex.net https://www.sjwoe.com https://www.mczbf.com https://s.yimg.com https://bat.bing.com https://*.nuance.com https://www.knotch-cdn.com https://*.knotch.it https://*.google.com; img-src 'self' data: *.wellsfargomedia.com *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.yahoo.com https://*.everesttech.net https://*.linkedin.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.google.com https://*.demdex.net https://*.nuance.com https://*.eum-appdynamics.com https://*.virtualearth.net https://*.maxymiser.net https://*.knotch.it https://*.medallia.com https://www.facebook.com https://cx.atdmt.com https://analytics.twitter.com https://t.co https://track.linksynergy.com https://s.amazon-adsystem.com https://ct.pinterest.com https://trc.taboola.com https://p.adsymptotic.com https://products.gobankingrates.com https://bttrack.com https://b.videoamp.com https://fcmatch.youtube.com https://www.googleadservices.com https://www.google-analytics.com https://idsync.rlcdn.com https://s.amazon-adsystem.com https://udc-neb.kampyle.com https://wellsfargoprod.prod.fire.glass https://s-a.innovid.com https://bat.bing.com https://www.knotch-cdn.com https://www.emjcd.com https://cj.dotomi.com https://www.mczbf.com https://*.mktgcdn.com; object-src 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:*; child-src 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.demdex.net https://*.nuance.com https://*.doubleclick.net https://*.advanced-web-analytics.com https://*.knotch.it https://www.knotch-cdn.com; font-src 'self' data: *.wellsfargomedia.com *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:*; style-src 'self' 'unsafe-inline' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.nuance.com; script-src 'nonce-27c8d340-7956-467c-8689-66179dc64e41' 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://cdn.schemaapp.com https://*.tiktok.com https://*.maxymiser.net https://bat.bing.com https://www.clarity.ms https://snap.licdn.com https://*.linkedin.com https://s.yimg.com https://sp.analytics.yahoo.com https://p.adsymptotic.com https://*.nuance.com https://www.knotch-cdn.com;media-src 'self' *.wellsfargo.com *.wellsfargomedia.com; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0
Expires: -1
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893|e:145; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:3111f031-18ce-4531-bfed-f03f96de891b; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:3111f031-18ce-4531-bfed-f03f96de891b|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917|e:18; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=42FA302954EB4309FAF4A8AEE2F8E3BD; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=EN; Domain=.wellsfargo.com; Expires=Sun, 09 Jun 2024 12:45:31 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=1120230610054531729568207; domain=.wellsfargo.com; path=/; expires=7 Jun 2033 12:45:31 GMT; secure=true; SameSite=Lax; HttpOnly
ISD_WCM_COOKIE=!AFQPFFf9j2/0KtAGl7IZxfIs0wroUetUhAUmSB1mz9t0nDNCSUW2hu+D6iGE2QmQa+zt326zFL9KQNY=; path=/; Httponly; Secure
DCID=zEGMLR4K21f3YsUHflHKnHW452FwdDgmJIy79eMxycM%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
_abck=311AAD100837ACD182FF6CD9719E1864~-1~YAAQVZbvUGc1252IAQAABCRXpQqap+7buuvo0JgHCAM2cZSGAHhOGi6+eWNylKDjSozeE3l1eCn0HteSuLJovYxui/6nSBLOzpNawd3tw9DaqShFMSOSKsy16jynt7EkCJ9Gj89bW4rRajwrLSpxXT/+sMJxYPEmFEXRbiSYRMQQOHih+AqTbqjoh2Jctc/LRCA/c4dM2SdpdHyzPxDloqGHkXTSWX5lD49YBUgT+rSobaQwWrvxCyCK/4Fj2erMmIqeNwid7AffCwvKX4Rlh0Qom7m5sDysGz6DqH1Krbw5DSUrSbTAhNXLQzeiIoEXL4RHUQz8TQ1F8cJhQIZx9bUGebScH0c4cBqoMXev4P4Zm1K7nWGFnZc14tmOMCLL~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:31 GMT; Max-Age=31536000; Secure
bm_sz=E43D5413DFA71331934CFC55E98F8918~YAAQVZbvUGo1252IAQAABCRXpRT5aherdJdEcvt41MaEwYhB9mI8azz5eLMPliuqqWIBjTA8P5rVmZIdvBGLVlBPhBlt/G6doTDfOb0TxmNKPLW239onIegCf8yARNC9zE98kGvqG2gzdLuyOFYHLNniUXZU8hOvbStkhaF1AToVPAg+t03G+oG0D99Xmo4ha+HB+86elWGtQSiYR5ovG8c4BH3LHxwX+enKvBQ/iojNMYL2S6FpG6jz+29iAGq1bHHRxlkryHWkPLAXRb8rznYAMPNOs38HlApW6jTGPOKMgp344nwR~3616820~4277572; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:31 GMT; Max-Age=14400
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-ARN-01cnE31:6 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706b_VM-ARN-01cnE31_22243-10268
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/as/target/offers/dispositions
200 OK 968 B URL POST HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/as/target/offers/dispositions
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2438), with no line terminators
Hash 3096650c6758d53c320e64739956aeb9
8381993581d83b93070e671a43f371814bff7301
6e822e8aa5d9c063a4ff0251f5eceb11f4d32b97dd2a8d2f9b9cb89b3b9ffecf
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /as/target/offers/dispositions HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Content-Type: application/json
Content-Length: 265
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 968
Connection: keep-alive
Content-Security-Policy: default-src 'none'; form-action 'self' *.wellsfargo.com *.wellsfargo.com:*; connect-src 'self' *.wellsfargo.com *.wellsfargo.com:* https://*.schemaapp.com https://*.rlcdn.com https://*.tiktok.com https://*.medallia.com https://*.kampyle.com https://*.adobedc.net https://www.google-analytics.com https://*.doubleclick.net https://*.maxymiser.net https://*.eum-appdynamics.com https://*.demdex.net https://www.sjwoe.com https://www.mczbf.com https://s.yimg.com https://bat.bing.com https://*.nuance.com https://www.knotch-cdn.com https://*.knotch.it https://*.google.com; img-src 'self' data: *.wellsfargomedia.com *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.yahoo.com https://*.everesttech.net https://*.linkedin.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.google.com https://*.demdex.net https://*.nuance.com https://*.eum-appdynamics.com https://*.virtualearth.net https://*.maxymiser.net https://*.knotch.it https://*.medallia.com https://www.facebook.com https://cx.atdmt.com https://analytics.twitter.com https://t.co https://track.linksynergy.com https://s.amazon-adsystem.com https://ct.pinterest.com https://trc.taboola.com https://p.adsymptotic.com https://products.gobankingrates.com https://bttrack.com https://b.videoamp.com https://fcmatch.youtube.com https://www.googleadservices.com https://www.google-analytics.com https://idsync.rlcdn.com https://s.amazon-adsystem.com https://udc-neb.kampyle.com https://wellsfargoprod.prod.fire.glass https://s-a.innovid.com https://bat.bing.com https://www.knotch-cdn.com https://www.emjcd.com https://cj.dotomi.com https://www.mczbf.com https://*.mktgcdn.com; object-src 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:*; child-src 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.demdex.net https://*.nuance.com https://*.doubleclick.net https://*.advanced-web-analytics.com https://*.knotch.it https://www.knotch-cdn.com; font-src 'self' data: *.wellsfargomedia.com *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:*; style-src 'self' 'unsafe-inline' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.nuance.com; script-src 'nonce-4e00524e-e290-486b-b18d-3cbcc5c7676b' 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://cdn.schemaapp.com https://*.tiktok.com https://*.maxymiser.net https://bat.bing.com https://www.clarity.ms https://snap.licdn.com https://*.linkedin.com https://s.yimg.com https://sp.analytics.yahoo.com https://p.adsymptotic.com https://*.nuance.com https://www.knotch-cdn.com;media-src 'self' *.wellsfargo.com *.wellsfargomedia.com; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0
Expires: -1
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893|e:145; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:ed8b8d3a-c84c-437f-a108-7183abc6f39d; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:ed8b8d3a-c84c-437f-a108-7183abc6f39d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917|e:64; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=829AECD77F0D1A0CA7EB52348E1EC1F9; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=EN; Domain=.wellsfargo.com; Expires=Sun, 09 Jun 2024 12:45:31 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=1120230610054531839129982; domain=.wellsfargo.com; path=/; expires=7 Jun 2033 12:45:31 GMT; secure=true; SameSite=Lax; HttpOnly
ISD_WCM_COOKIE=!B3fas2OnriFdzNXz2xKqB3cO2dndHvoygBL05XziyXkJZ6OvC8iVLGkyF3bp1Y9oBPPaacKhGoGbwA==; path=/; Httponly; Secure
DCID=W16ARbjhZJB1e7%2fhj8AJP3gUmMOM0%2fCD4sctfwAdLCExDzdP7QyD+L+o2ldjKxGY; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
_abck=6FE0A3CED565D0E6AAB9A6B2B51CC979~-1~YAAQVZbvUGg1252IAQAABCRXpQqLN9hm8YDREab1GdFkQ2DbPibluKbqMQMlp3z2OSz44ZJdG5R9m4XMZrjk/B/ZUXvhaL9IVEswO1rcouGJjIC2Njx2YblZ6bCkHgzL20D83UZUkCP9lmMA5b7lQyd6uYbeLs462FvVr0Ov/a3x2HQwpMdJjU+bfgwdEaiSnYY6jJalZ+uA2cloVIBa9Zb7uHFuDj+7I3zvL2x3ZYB3oxyRRSOks9kLHT9WbNlkKCHJRWTRBd2MtevtBJeEL2KgoLk6cGTI20+kaaPxZ2wzHpOISxdDmwreZuIEbhGhf5tZBKGtrna/b8Fj3XubeOaWlFQxfblkOiJIXAJER3FRcBxx93LBF2qzZt7jHqHl~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:31 GMT; Max-Age=31536000; Secure
bm_sz=F7883B7DA2477B90C8E603D4923A8AB1~YAAQVZbvUGk1252IAQAABCRXpRSm6JEsPxi00Xl9IaA8yrv17TBLmwftm3pjVwyFHWi2lsU3UQUoKmUcGecBeVem6b2nF97MEv3V1PINjkidmDO3/ES1otn8ZQTpzA/3BKTqUewY9MXOFU4D90GIrmWq8KsJdHy+XslhpNgiN0FwctIEDmwtknwBOXJ9ujRGcMO2Dspdbzy6qjc6C40VZ8dBLnemlAdv4qsatbJ0tK55dwC8mfj8haH9uE4gcqVIlmebwJYNO/9kUdaGDRsabDauDsxe2a+Qsn5YqmtQR71n/Nk6xKEA~3616820~4277572; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:31 GMT; Max-Age=14400
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-ARN-01cnE31:6 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706b_VM-ARN-01cnE31_22106-12733
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/as/target/offers/dispositions
200 OK 946 B URL POST HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/as/target/offers/dispositions
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2365), with no line terminators
Hash c2dd2a3992a80052154a9bd62f2cf904
973b22b4681aa2ed2d0aa072300d0e60ded73576
8668640caa117e8219c6d4fc18c528365f5679b8f45f0c62dc513606878750dd
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /as/target/offers/dispositions HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Content-Type: application/json
Content-Length: 267
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 946
Connection: keep-alive
Content-Security-Policy: default-src 'none'; form-action 'self' *.wellsfargo.com *.wellsfargo.com:*; connect-src 'self' *.wellsfargo.com *.wellsfargo.com:* https://*.schemaapp.com https://*.rlcdn.com https://*.tiktok.com https://*.medallia.com https://*.kampyle.com https://*.adobedc.net https://www.google-analytics.com https://*.doubleclick.net https://*.maxymiser.net https://*.eum-appdynamics.com https://*.demdex.net https://www.sjwoe.com https://www.mczbf.com https://s.yimg.com https://bat.bing.com https://*.nuance.com https://www.knotch-cdn.com https://*.knotch.it https://*.google.com; img-src 'self' data: *.wellsfargomedia.com *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.yahoo.com https://*.everesttech.net https://*.linkedin.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.google.com https://*.demdex.net https://*.nuance.com https://*.eum-appdynamics.com https://*.virtualearth.net https://*.maxymiser.net https://*.knotch.it https://*.medallia.com https://www.facebook.com https://cx.atdmt.com https://analytics.twitter.com https://t.co https://track.linksynergy.com https://s.amazon-adsystem.com https://ct.pinterest.com https://trc.taboola.com https://p.adsymptotic.com https://products.gobankingrates.com https://bttrack.com https://b.videoamp.com https://fcmatch.youtube.com https://www.googleadservices.com https://www.google-analytics.com https://idsync.rlcdn.com https://s.amazon-adsystem.com https://udc-neb.kampyle.com https://wellsfargoprod.prod.fire.glass https://s-a.innovid.com https://bat.bing.com https://www.knotch-cdn.com https://www.emjcd.com https://cj.dotomi.com https://www.mczbf.com https://*.mktgcdn.com; object-src 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:*; child-src 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.demdex.net https://*.nuance.com https://*.doubleclick.net https://*.advanced-web-analytics.com https://*.knotch.it https://www.knotch-cdn.com; font-src 'self' data: *.wellsfargomedia.com *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:*; style-src 'self' 'unsafe-inline' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.nuance.com; script-src 'nonce-f458e4a8-12a7-4959-9267-9267d9625a37' 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://cdn.schemaapp.com https://*.tiktok.com https://*.maxymiser.net https://bat.bing.com https://www.clarity.ms https://snap.licdn.com https://*.linkedin.com https://s.yimg.com https://sp.analytics.yahoo.com https://p.adsymptotic.com https://*.nuance.com https://www.knotch-cdn.com;media-src 'self' *.wellsfargo.com *.wellsfargomedia.com; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0
Expires: -1
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893|e:145; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:642a8f80-4b94-4fef-b40c-8a66e12c5d86; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:642a8f80-4b94-4fef-b40c-8a66e12c5d86|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917|e:55; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=C72FD75A523951572E3BCB0B16B99DEE; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=EN; Domain=.wellsfargo.com; Expires=Sun, 09 Jun 2024 12:45:31 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=11202306100545311369729409; domain=.wellsfargo.com; path=/; expires=7 Jun 2033 12:45:31 GMT; secure=true; SameSite=Lax; HttpOnly
ISD_WCM_COOKIE=!TX0jV3lT63RFR+kMntjHYqEj2JIOPM5ZIwSYUko+0olnqQIEkVZtgWLyaMydQHBnUivqHyWf1MPLA8k=; path=/; Httponly; Secure
DCID=CvlqH75FUvRFCm23z27kJYBeIDobYwAf4xa5IebiJkdqaN4360BtgdT9Sqq%2fhuJn; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
_abck=8D3E06D60FF919516416F31CD9A944AE~-1~YAAQTpbvUENfTpqIAQAAICRXpQrny1f/aAAbvurPA78LabXX0r+7W9kNnSV40YjlVLOCV/ImVZtkeV7LL8Bc82b61AUvtgtfPyyBM0d8QDUTIfBdacgd2J3bGpXq3cuLa0hsZ2TCNBQDhU/4K/bSQAAjkubHUOkFGKrwogjGlu/ktSGZd9oExtSI9lOWCyhX7UDfcrwjNvSALCysR5vj1D0Qpade0iZOJYqehUrayKeIudpM+eDMVwGRovS+uuIuFIWuNVCyF0sRcZNE40+YlvT29w+y/lt5zvvATFNrMQeJBetKWujEk+rz33oLnhW11e2fC7DW3k4OONH4E1SOzgq9+3fE0/rY5mO1K5+rjrKs2LdAGfKOJPXA0Fju35w9~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:31 GMT; Max-Age=31536000; Secure
bm_sz=4D0D980017E95D586163176BA76314F9~YAAQTpbvUERfTpqIAQAAICRXpRTxvI9bNfhzmk5fZ6y1nlMGnuYa/AxDTxtGH+u9YO3mje77HEd8gm3bhPkH7TttOajiHLyQfe2G2z22d0CyQF+egwd/BU7jAcWkONzbpxXe+ni++YCnOP5ox1X5+IE7hveDZewFqVXZYFJuZwrfKOm/goPVZ/IZu/N3pqLx30mQnKPrgaWFDTujx10880KAfQIz/SQ0nWyR60oSTXJw99eEOqh5w6EKbGUGDtiT9Lz14GrXBZ6EqewfefT409jzwyhg0mjjeST8AicRh2/N5kUY/ywW~3616820~4277572; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:31 GMT; Max-Age=14400
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-ARN-01cnE31:6 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706b_VM-ARN-01cnE31_22106-12732
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/as/target/offers/dispositions
200 OK 972 B URL POST HTTP/1.1 www--wellsfargo--com--8t49329d48d6c.wsipv6.com/as/target/offers/dispositions
IP
ASN #54994 QUANTILNETWORKS
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.wsipv6.com
Fingerprint06:09:21:92:62:E5:64:6D:8A:00:F1:90:4C:19:0F:D5:04:4A:02:A2
ValidityWed, 29 Jun 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2439), with no line terminators
Hash d51b49c7e52ccdded1da6afe30bf0849
84bf9cf7f64ea2e6979c651d72b0f17896427fc8
45318e031a3b746a1efd43bf44ee77a9d9668f5ade0a1e9c405b8bd0dc68268c
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /as/target/offers/dispositions HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Content-Type: application/json
Content-Length: 266
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206893|e:145; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:31 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 972
Connection: keep-alive
Content-Security-Policy: default-src 'none'; form-action 'self' *.wellsfargo.com *.wellsfargo.com:*; connect-src 'self' *.wellsfargo.com *.wellsfargo.com:* https://*.schemaapp.com https://*.rlcdn.com https://*.tiktok.com https://*.medallia.com https://*.kampyle.com https://*.adobedc.net https://www.google-analytics.com https://*.doubleclick.net https://*.maxymiser.net https://*.eum-appdynamics.com https://*.demdex.net https://www.sjwoe.com https://www.mczbf.com https://s.yimg.com https://bat.bing.com https://*.nuance.com https://www.knotch-cdn.com https://*.knotch.it https://*.google.com; img-src 'self' data: *.wellsfargomedia.com *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.yahoo.com https://*.everesttech.net https://*.linkedin.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.google.com https://*.demdex.net https://*.nuance.com https://*.eum-appdynamics.com https://*.virtualearth.net https://*.maxymiser.net https://*.knotch.it https://*.medallia.com https://www.facebook.com https://cx.atdmt.com https://analytics.twitter.com https://t.co https://track.linksynergy.com https://s.amazon-adsystem.com https://ct.pinterest.com https://trc.taboola.com https://p.adsymptotic.com https://products.gobankingrates.com https://bttrack.com https://b.videoamp.com https://fcmatch.youtube.com https://www.googleadservices.com https://www.google-analytics.com https://idsync.rlcdn.com https://s.amazon-adsystem.com https://udc-neb.kampyle.com https://wellsfargoprod.prod.fire.glass https://s-a.innovid.com https://bat.bing.com https://www.knotch-cdn.com https://www.emjcd.com https://cj.dotomi.com https://www.mczbf.com https://*.mktgcdn.com; object-src 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:*; child-src 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.demdex.net https://*.nuance.com https://*.doubleclick.net https://*.advanced-web-analytics.com https://*.knotch.it https://www.knotch-cdn.com; font-src 'self' data: *.wellsfargomedia.com *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:*; style-src 'self' 'unsafe-inline' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://*.nuance.com; script-src 'nonce-098f9996-02a2-4857-b143-8fa935a178ba' 'self' *.wellsfargo.com *.wellsfargo.com:* *.wfinterface.com *.wfinterface.com:* https://cdn.schemaapp.com https://*.tiktok.com https://*.maxymiser.net https://bat.bing.com https://www.clarity.ms https://snap.licdn.com https://*.linkedin.com https://s.yimg.com https://sp.analytics.yahoo.com https://p.adsymptotic.com https://*.nuance.com https://www.knotch-cdn.com;media-src 'self' *.wellsfargo.com *.wellsfargomedia.com; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0
Expires: -1
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:27|g:01b6fe71-c32e-4692-b51b-5520bdaa4f22|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206893|e:145; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:15ec0ddb-3ab1-48ea-b1d0-87462af153b0; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:27|g:15ec0ddb-3ab1-48ea-b1d0-87462af153b0|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:27|i:206917|e:65; Expires=Sat, 10 Jun 2023 12:46:01 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=16519AF1EC3D07012550BF74D94A4859; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=EN; Domain=.wellsfargo.com; Expires=Sun, 09 Jun 2024 12:45:31 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=1120230610054531173039007; domain=.wellsfargo.com; path=/; expires=7 Jun 2033 12:45:31 GMT; secure=true; SameSite=Lax; HttpOnly
ISD_WCM_COOKIE=!sF5iHhWadjzrNwkMntjHYqEj2JIOPAjkOl4Mzp9gu1dOsgqPMITrv1NhEvGN4mPp23jgBLpiz+EP8sA=; path=/; Httponly; Secure
DCID=t5E%2fnwtFxHXZ5a8EbB9Rd56JCpi%2fsXFHOEg%2frer7fmZHi8SPFeZLPIQrMYMVvdYm; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:31 GMT;Httponly; Secure
_abck=50BC1C6773000020816E21E60E4329BC~-1~YAAQTpbvUEVfTpqIAQAAMCRXpQpy9aEvvGUuGqpDyOx00Wmi258XMEBVkkREutGZA7dq66lyFCzEFAZZ4ASpnideSJNlwx4yb6FHwN+5p4gT9+0emqQbHAKUkSkvFuW93s7AWksNWsFGm29r5Ngz6rhulcy9B5FZT5djgourljGLZeVHxjrvWTx2VpK+QCSnpDRnrNeO9VyMwTtLiKZbvYiB1cZsw+8/aUaZRjz+a0QtUuJ8DmuJDfSHsACPfXNhJIAOtbDSbzQnRLt7vGowEKU7WfXM+HihI/snXlGyqGL5v1KWdClM7BBPVeoqiTg+N5tPNLAKxEgTzCI5aUEtK3rJY39HgLLfllBu1LcLHfmHpeOqAmoWErCOuvLstZDw~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:31 GMT; Max-Age=31536000; Secure
bm_sz=400B2D7529EE56D8438F38B48DBE802C~YAAQTpbvUEZfTpqIAQAAMCRXpRSRzzudpAaYTNNkBRjJgXCWgifCcDff8CM7RPxbfvq8oUCg2l5Mk0BXU7PbZW5eQ8cWljl5dF3WZl1EJHo4aXk4plhCPymX7TFo4k6OSOwBGokTG3iYY/v5JDHB1Kn+D+TrTGUjsvaaGepgArKc4AHpNNZ4OzPVAQgh8ss6qTrnakVBnE1T0HM+0U7qZqfaF2zLlD7Yw9TlUiQNP+1rZaYnK7QWtDAhp8JfGSYtfJZQOZ3BuYglq9XDMeNA0Y+NKRJVLyM2XoulAfEaOv4fizGxOCK+~3616820~4277572; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:31 GMT; Max-Age=14400
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-ARN-01cnE31:6 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706b_VM-ARN-01cnE31_22169-7546
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/dti_apg/api/dip/v1/dip
134 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/dti_apg/api/dip/v1/dip
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash 5e3a25e111aed1785b70b46a764ef3e3
d2bd96c04430b21d4f17b255124d29e2b45f0e7b
3068f8edc2a54389d382eeb94ed037d1ed0891281a9f4618cfbc422fac29af23
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /dti_apg/api/dip/v1/dip HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
ADRUM: isAjax:true
Content-Length: 2044
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0; _gcl_au=1.1.182274938.1686401130; _ga=GA1.2.730026468.1686401131; _gid=GA1.2.1585494963.1686401131; _gat_gtag_UA_107148943_1=1; ISD_WCM_COOKIE=!sF5iHhWadjzrNwkMntjHYqEj2JIOPAjkOl4Mzp9gu1dOsgqPMITrv1NhEvGN4mPp23jgBLpiz+EP8sA=; ndsid=ndsag9tt48ak5e7lipzown4; ADRUM_BTa=R:27|g:15ec0ddb-3ab1-48ea-b1d0-87462af153b0|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206917|e:65
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:32 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 134
Connection: keep-alive
Access-Control-Allow-Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
X-Akamai-Transformed: 9 206 0 pmb=mTOE,1
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=xU5OOIEYqwUBbbcWJxgMKvRqiRuHg5eUajs98wgj0TQ%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:32 GMT;Httponly; Secure
_abck=6B1A12321B4EA14077751B69F880D9A5~-1~YAAQTpbvUEpfTpqIAQAAnydXpQq8W+tGL5mWKfUSXcgq3hrBQM4vplaWQyeIBlavBb/kl13smWj86N/ycNk6SWq1V1uIkE7G8VeJmjgAwirjg8pVhJCkyQukXbWndSw1lhy91OphyugaSEwZ1+I3+aR8vpJn0BUctoWBV1dhtZrrKf/Ht6h52W4SGiO7Fp3GsVlfXfpgtiJleexKSefteFr60p1JbOmzGfTnYrMMVRqiuEyuXFnT0goo9md7CY22LnHeE0HDO2CauMBPX882JRWBbWbqa7cC1XOIYcZhG7IqMEXiVvFshlgox0/4tKIlpr6fywGkHHaJ7Xr3tmYBLfqVErrUTWWaHDSDZsGA5MtdyAVagcrViiLJQQjtNOtk~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:32 GMT; Max-Age=31536000; Secure
bm_sz=0C37A2117F34A7EE8080139CBCE6D76E~YAAQTpbvUEtfTpqIAQAAnydXpRQPBdWydZKSAyNReWOnu/8J59+oHZl/9/ivnWTQWjSAKbloZi+BD2tDA8BR2NHmguqr4BHpg3IXcwYDroxaA5G5mJkxB/jGsA32JHcIJs9xqizhgJJ177zWnWNk4epkAHFzmeEotW+GY9Npej/8wJjacJky9zx4EM13DfhqXzC74GN2D7ELicrP/erHpXIpaTrNIO8gErzQteIBrpwg0zleGdFdvAcI9xfVj3D7vQ0EMH18UYnuabgiEx0A5MK5ml6oXEefQWqI+fRyh8p/vErwk/js~4342084~3687732; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:32 GMT; Max-Age=14400
X-Via: 1.1 VM-ARN-01XDr43:4 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706c_VM-ARN-01cnE31_22189-14250
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?m&fq=load
265 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?m&fq=load
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash 78a7380122ead63824ff6e60adbfc750
5f12785d52d1e09a72072907be44cc7a5663ba41
141440607cf50b2b5ec2e71b2780376c980466b88842f63e1ddd768bd9bf4d66
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /dti_apg/api/imp/v1.0/report/?m&fq=load HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
content-type: text/plain;charset=UTF-8
Content-Length: 852
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9%22%2C%22diA%22%3A%22AWxwhGQAAAAAZSXbc3uPoPeIqQ3WAiu3%22%2C%22diB%22%3A%22AcqJRvpzfD724TiLeTUSJCk5Kh9nDZLN%22%2C%22_fr%22%3A10000%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0; _gcl_au=1.1.182274938.1686401130; _ga=GA1.2.730026468.1686401131; _gid=GA1.2.1585494963.1686401131; _gat_gtag_UA_107148943_1=1; ISD_WCM_COOKIE=!sF5iHhWadjzrNwkMntjHYqEj2JIOPAjkOl4Mzp9gu1dOsgqPMITrv1NhEvGN4mPp23jgBLpiz+EP8sA=; ndsid=ndsag9tt48ak5e7lipzown4; ADRUM_BTa=R:27|g:15ec0ddb-3ab1-48ea-b1d0-87462af153b0|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206917|e:65; _imp_di_pc_=AWxwhGQAAAAAZSXbc3uPoPeIqQ3WAiu3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:33 GMT
Content-Type: text/plain
Content-Length: 265
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Allow-Methods: OPTIONS, GET, POST
Access-Control-Allow-Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=SmrQT17gHrfhq0Xe7hP+T8CMrz4biznNAyuf2yEwNQA%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:32 GMT;Httponly; Secure
_abck=1330A9908187B326F55153763C37BEF3~-1~YAAQVZbvUMQ1252IAQAA3ipXpQpuCbld2FPEC/dw+c64SXqHoq4WWm++VhUf1c4DM+5ouwiJDjMSmS16enqi4EDJpqtuWDIsSngemNLvCYF/kmmJB6pBeDfGWm21l577iLUqGy6kolrfrc7AD+Bsw9eFZSVJyEnmJqtvsKahzG4SVfiL7fUlIkXlCHTjgyA+0N4GNGNtYgE9QVaGoSctb4+wfkRr6L3Io5+knMI5GhJ7l+/XFaJJla+TZ9xSfmRuKLR2gWuxPqf+6+AAk+dLzCmkZXj+nr3QrCVVjzmNvwA8doXg0ccveYgpOEPhjPjgD8ruektvw6r26rRSilHMH2rzDjMifsFWHzHEfP7GoGnrzTGpJm7KnrRKSsLa6JMc~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:33 GMT; Max-Age=31536000; Secure
bm_sz=91CB103E0748DDEBAE648D7A56C55B20~YAAQVZbvUMU1252IAQAA3ipXpRQ84Uq0ZlZOSiJtmVu0uufdkC4k4hh7K2fI0T7ZCPkQWU5raTBwc9oB3L3Ct2ftVylDxwYnPezp9ZZA1yFPVnLWRYh9MxigDnNbZB/c/9G6F07YoffNS0J7MtKDyYseI6dFTk6l9QRZJyd+dUmKzYXub2b4TyJ4z9Jc/k1n453wmXY7Dq3UnyBZ6sFkxkq/JGzsypDATwOAOK8eWMSbsEORopZyLnSb29mo48tpu7/0SBswQYE++iXQGVGKasUQim3l4OWjz1TwUf/+x5rb42b+vzrQ~4342084~3687732; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:32 GMT; Max-Age=14399
X-Via: 1.1 VM-ARN-01cnE31:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6484706c_VM-ARN-01cnE31_22189-14255
www--wellsfargo--com--8t49329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?x
0 B URL www--wellsfargo--com--8t49329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?x
IP
ASN #54994 QUANTILNETWORKS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish Wells Fargo & Company
POST /dti_apg/api/imp/v1.0/report/?x HTTP/1.1
Host: www--wellsfargo--com--8t49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
content-type: text/plain;charset=UTF-8
Content-Length: 296
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Cookie: SameSite=None; ISD_WWWAF_COOKIE=!Bf8WwjTIviGoa+Ws0q/LsATxthJGHkzHAbOnJLYY1ISORBl1GgyB64megS98uWMMSBYL0dRN5CUkKA==; utag_main=v_id:0188a5571868001c0e865e99c2ab05046003700900918$_sn:1$_se:2$_ss:0$_st:1686402929720$ses_id:1686401128553%3Bexp-session$_pn:1%3Bexp-session; dti_apg=%7B%22_rt%22%3A%22DQ0Sb5sl1SzF8CmqnxPB26YoBv229wv60WB4n1%2FX8aI%3D%22%2C%22c%22%3A%22MzVONXJqSTU1NGZIMW5JRA%3D%3DVS4FDobNUP1AoYThLesTMG12bO0zLMFd8kYQBSMGQ78pVZH0sfkRlpGBNVfu3bAprZYYgVFzGlho46tWWqXwLJRcrYpQQ8rjUaM%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22_s%22%3A%22Rht1QYh9zyrPZmKjxxEHmX7%2B%22%2C%22diA%22%3A%22AWxwhGQAAAAAZSXbc3uPoPeIqQ3WAiu3%22%2C%22diB%22%3A%22AcqJRvpzfD724TiLeTUSJCk5Kh9nDZLN%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22sk6Mt77hyQLH-9YDZ5Cktg%3D%3DxJOgp_ACBHXsTJL4i9CM5S7T4iJwzqVR3aQGzxz9xTYFQPtZxnOFZe_ZsySGH0aVoT9uxmhinUxOAx1xczriY6aiW5kg3Gv3pViblJaK_SgkUvbGmeoth1BpfmQ_2ZZi6paQBwKNwBbJzxpiw_8uS5ewL-SyWaKoPQ9dh3A2kQ_TFNlFvjdIuAr9%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VeAfac7Rym1H8O80E%3D%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C92009343288865653749121116560563241032%7CMCOPTOUT-1686408329s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0; _gcl_au=1.1.182274938.1686401130; _ga=GA1.2.730026468.1686401131; _gid=GA1.2.1585494963.1686401131; _gat_gtag_UA_107148943_1=1; ISD_WCM_COOKIE=!sF5iHhWadjzrNwkMntjHYqEj2JIOPAjkOl4Mzp9gu1dOsgqPMITrv1NhEvGN4mPp23jgBLpiz+EP8sA=; ndsid=ndsag9tt48ak5e7lipzown4; ADRUM_BTa=R:27|g:15ec0ddb-3ab1-48ea-b1d0-87462af153b0|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:27|i:206917|e:65; _imp_di_pc_=AWxwhGQAAAAAZSXbc3uPoPeIqQ3WAiu3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 12:45:40 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Allow-Methods: OPTIONS, GET, POST
Access-Control-Allow-Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=AuCM4%2fh%2ftY9Y2FG4tKL0JDJmFXsG1hvD4csP3kV2HYg%3d; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:39 GMT;Httponly; Secure
_abck=EBA110DCC925BBC92C78D73047F07F36~-1~YAAQVZbvUAg3252IAQAAm0VXpQocZ9UApKVm7+EkMjKAFir+T75eInBJ+7anWj2kz6i2PdobhKlLiD+eMOZCD0IM/I1P4oUwd/QzFw7qoiXW2rygbMisFxMpTtom2scgCWQEB8izSelw0y5if9/pnn8B+iE4kgPNTd1VhFN0OMbH4b1Xss4LgBjatF4UHY4lEAjsSGmYUpbmMDZNUt/+4C/TOD1Pe56jkyRkMxq8inzsqpqUu2uHrw8KpoS+agwP2kAhR3cFUmJfBEH8k/XXynmQyGipDohVEzPoDbvI9xpxi1pYLWkEKyHliGaMhOyrsK5iryNl37y7zHTzEfZ9rGZd304b2tRkkxk3bBkQT3ZPu6w2zsX4iZcwHuGyeZmY~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 09 Jun 2024 12:45:40 GMT; Max-Age=31536000; Secure
bm_sz=B76A0DBE891406CAA3B3560E851F3C13~YAAQVZbvUAk3252IAQAAm0VXpRRwQJ9fCx5U9DP+OqO81i4IXN1SCwGRvIwH+dBLSFkybK+HC7UgGDoBZRlG7CTUCKgo3jArmHpBEu4obJevDw4A2TnsxS1atQjNwzNoYPlHzsdptIcuniN7qbhYQ3nC9TiNByWTz1Kdg3ek/fV5NOMm/d3aHks+AIkNCo2X3vBmCTft569+ZwORJNWGHsXw42WrCQ69hz+1f/hfJngGQaHnYsYJ+ac8pEWUTjaPy0T7qG83i8NsObGwAu0bVchfG6o1sAhu4eVHeUEAzoUGFaSIYk1c~3355958~4273204; Domain=.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 16:45:39 GMT; Max-Age=14399
X-Via: 1.1 VM-ARN-01cnE31:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 64847073_VM-ARN-01cnE31_22189-14375
rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.78B156&_cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0&_cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8&pid=c2f38bff-13e9-4222-bfc9-05a5fc418876&sn=2&cfg=32a3f9ce&pv=2&aid=
163 B URL rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.78B156&_cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0&_cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8&pid=c2f38bff-13e9-4222-bfc9-05a5fc418876&sn=2&cfg=32a3f9ce&pv=2&aid=
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash f0381830ab78b206a539a792110954d5
c3113766b2cb1c7b8a8d38e6ab61c73400616a5f
bbdb6e51dda02aa4aa268bf6fc75538028dd673475ab7659e9a46cfd39e04281
POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.78B156&_cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0&_cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8&pid=c2f38bff-13e9-4222-bfc9-05a5fc418876&sn=2&cfg=32a3f9ce&pv=2&aid= HTTP/1.1
Host: rubicon.wellsfargo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 34457
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Cookie: _cls_cfgver=32a3f9ce; _cls_s=223ed0b6-909f-4232-814e-b8693c492d8d:0; _cls_v=a3a228aa-f245-49e9-b1be-b1c01994bbd8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/json
Access-Control-Allow-Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Content-Length: 163
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: origin, Accept-Encoding
Date: Sat, 10 Jun 2023 12:45:41 GMT
Connection: keep-alive
Set-Cookie: ROUTEID=.cligate1; path=/;HttpOnly;Secure
ISD_GB_COOKIE=!vl6xSSj/U2754kd54TfMmyz5FQ342V7DVUfR9q/0IUwOXBDhJS0M4cb6y2nEDO4SFlhV2YhXGgUOV4Y=; path=/; Httponly; Secure
DCID=0l%2f8h%2fUks3T58Yj7yfmY9jtq7+tbDNSYE66qnvnq3k0%3d; Domain=rubicon.wellsfargo.com; Path=/; Expires=Sat, 10 Jun 2023 13:00:40 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum
200 OK 163 B URL POST HTTP/2 pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum
IP
Requested by https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Certificate IssuerDigiCert Inc
Subject*.eum-appdynamics.com
FingerprintFC:48:9F:81:33:3D:2B:6F:D9:CA:C8:3B:5F:11:C2:DC:DE:71:48:F5
ValidityTue, 14 Jun 2022 00:00:00 GMT - Sat, 15 Jul 2023 23:59:59 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 1d09a7fbcd98a5f2d34f152ce0c456e3
0ca7a8ae49eef81d3ae7cc6fe858e684c5569375
1fee72535bb9c2402bcc9bd52a08fa64e660a0f2a99d0cd7c54f889da685139f
POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1
Host: pdx-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 1535
Origin: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com
DNT: 1
Connection: keep-alive
Referer: https://www--wellsfargo--com--8t49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Jun 2023 12:45:37 GMT
content-type: text/html
expires: 0
set-cookie: ADRUM_BTa=R:55|g:0f60d3ff-a775-4eb4-b88b-09d8333004c0; Path=/; Expires=Sat, 10-Jun-2023 12:46:07 GMT; Max-Age=30
ADRUM_BTa=R:55|g:0f60d3ff-a775-4eb4-b88b-09d8333004c0|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Sat, 10-Jun-2023 12:46:07 GMT; Max-Age=30
SameSite=None; Path=/; Expires=Sat, 10-Jun-2023 12:46:07 GMT; Max-Age=30; Secure
ADRUM_BT1=R:55|i:559461; Path=/; Expires=Sat, 10-Jun-2023 12:46:07 GMT; Max-Age=30
ADRUM_BT1=R:55|i:559461|e:3; Path=/; Expires=Sat, 10-Jun-2023 12:46:07 GMT; Max-Age=30
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 0
server: envoy
X-Firefox-Spdy: h2
163.171.134.56
104.110.27.78
54.213.92.104