r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 648bf42163c5d645d8a33cd0a9afebd0
9b9ac85435c4e90647e8379bca54c689058a8929
060757fb4857858d4d01a715824ea6771d0137e73a24bf75e2844d0f346380fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060757FB4857858D4D01A715824EA6771D0137E73A24BF75E2844D0F346380FA"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10703
Expires: Thu, 19 Jan 2023 11:55:23 GMT
Date: Thu, 19 Jan 2023 08:57:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc07d664b5dadee6f9120d54904dfa57
df75a55b0b2019684a6c512bee528c51a2c4a756
14a1bd6315a3256468edafedfd1c02a6ba147914c0f01e8504e7d8cc67781c34
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "14A1BD6315A3256468EDAFEDFD1C02A6BA147914C0F01E8504E7D8CC67781C34"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14686
Expires: Thu, 19 Jan 2023 13:01:46 GMT
Date: Thu, 19 Jan 2023 08:57:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 19 Jan 2023 08:34:32 GMT
content-type: application/json
age: 1349
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c8239f3894cfba54d1f3a9ea1c85db5
a70f2b3bf79f2aa26b0cc0340dd182565c3eb946
64dc0508d3fcea1ec92fb60310e9b3f5454c0b69f61e8453fd443bc46ab9471b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64DC0508D3FCEA1EC92FB60310E9B3F5454C0B69F61E8453FD443BC46AB9471B"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10176
Expires: Thu, 19 Jan 2023 11:46:37 GMT
Date: Thu, 19 Jan 2023 08:57:01 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: T2WyZzCY7YgojVh44pA5PkWn1vYJBU1/8F7VgdM0+MTD86hbgKuRiUKAcHkAUG5GpYULm07i5Lo=
x-amz-request-id: 4S3TWNPRWACV6CYH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 19 Jan 2023 08:17:08 GMT
age: 2393
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.dcocsp.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash cfd77ebe4b7e95da2a9705bc4d3efbb2
808221c062739c9a6ba5307fd2383d04df26805b
1f3ae93f1c693de65af1f7ab7cf0382faf1a6e7a300ac3626ff43aecab24e909
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Thu, 19 Jan 2023 08:46:41 GMT
Ali-Swift-Global-Savetime: 1674118001
Via: cache21.l2de2[0,0,200-0,H], cache5.l2de2[1,0], cache3.se1[0,0,200-0,H], cache3.se1[0,0]
Age: 620
X-Cache: HIT TCP_MEM_HIT dirn:2:73558770
X-Swift-SaveTime: Thu, 19 Jan 2023 08:50:00 GMT
X-Swift-CacheTime: 3401
Timing-Allow-Origin: *
EagleId: 2ff62c9716741186210973326e
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 08:57:01 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
200 OK 8.9 kB URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
IP
ASN #54994 QUANTILNETWORKS
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2109), with CRLF, LF line terminators
Hash 2e22be4c6aa680b8acc6b1bc874fac1a
3f9641b2fe399c979e69b767b96fdb29b9284630
f5e1a7385ab9de8234eab8d45ba72d4538cf44e248d4fd917bf56510d94ef592
Analyzer Verdict Alert openphish Wells Fargo & Company
fortinet Phishing
quad9 Sinkholed
GET /es/mobile/apps/ HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:3$_ss:0$_st:1674120383577$ses_id:1674118201128%3Bexp-session$_pn:3%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:01 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 8942
Connection: keep-alive
Expires: -1
Cache-Control: no-cache, no-store, max-age=0
X-XSS-Protection: 1; mode=block
Pragma: no-cache
Content-Security-Policy: default-src https:; img-src https: data:; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; object-src 'self'; font-src https: data:; style-src https: 'unsafe-inline'; script-src 'nonce-8c431082-0cef-4979-92a9-eeba7f981a9f' 'self' https://*.wellsfargo.com https://*.wfinterface.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://s.yimg.com https://sp.analytics.yahoo.com https://cdn.schemaapp.com https://www.knotch-cdn.com;report-uri https://ort.wellsfargo.com/reporting/csp
Content-Language: en-US
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-Akamai-Transformed: 9 10180 0 pmb=mTOE,1
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d; Expires=Thu, 19-Jan-2023 08:57:31 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 19-Jan-2023 08:57:31 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Thu, 19-Jan-2023 08:57:31 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=FCFA74F84610AD05A06ECF9A5BEE2F9C; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=ES; Domain=.wellsfargo.com; Expires=Fri, 19-Jan-2024 08:57:01 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=1120230119005701509236894; domain=.wellsfargo.com; path=/; expires=16 Jan 2033 08:57:01 GMT; secure=true; SameSite=Lax; HttpOnly
ADRUM_BT1=R:0|i:206924; Expires=Thu, 19-Jan-2023 08:57:31 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:0|i:206924|e:0; Expires=Thu, 19-Jan-2023 08:57:31 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:0|i:206924|e:0|d:19; Expires=Thu, 19-Jan-2023 08:57:31 GMT; Path=/; Secure; SameSite=Lax; Httponly
ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=; path=/; Httponly; Secure
WesdAksn=AzjoPsmFAQAATyNcmBjk3d_x5lGu9ePFgxTy9dAYrsLXfCjjRD9m9pUBwXwYAaOrg2CcuDv8wH8AAEB3AAAAAA|1|0|3f44394726302d7d7dccaf5d13ebaf29e883c11c; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=PWdDcmhZk53R4kHrGUSfo+Aj7Buq8V6bGcINe9X7Vjtf2ZyI%2fwML6rmkJOY1oYOf; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 09:12:01 GMT;Httponly; Secure
_abck=225998277AC4013BB8E367C2EA4A90FC~-1~YAAQHWgRYJPEQcGFAQAA6+g+yQlp9lSTg0/DmNOpZa0bFWdKW3hhHD00kKnMaeKHP8td75WhIaVUu7e4CeI4h0kuZYdFaMpRgxTPau2Jju3yQS7odabj+xCs8a9AzWSYEcrTPeGGnp2tCR3sBY4VAS0/8l2RUXsgb0qtPwL7/1YABlj9S9nh3lMGQIajW5umQUunao9OaESKdd37C5UwXGi/huk2NJ9pIlGMVTAHxCou2PyemM8y6k1e8Gokxby59ctZtPQk/iQVAEpv1EyHF/JygQQD1+cB8vhkPc2Mtw5g7bp/MuVEmWs6iHHT7YlTcmA4yIOhYYMWrLF/ajkHUoJZtMQmI+lTCfESKm8R5aEOvVDtnR50gwFrPQ0aLjJX8g==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 19 Jan 2024 08:57:01 GMT; Max-Age=31536000; Secure
bm_sz=DD6E2284DE2A11B4BE97451D63FF2F49~YAAQHWgRYJTEQcGFAQAA6+g+yRJTd0Z1/c/hwgAMo+hD5Td2zw2ZzMxoQDdPplnBHapaJfsECzMwXrISEWxLVOlg27K2L5ocL7a399loNd7I2kNMXoxajstr2dZe6BrWZ4jho6W3YxgmoOaAxKc/OTeNQLu3/do+1BSIcaDKByDjfFUCW4pqdIj/SmPHDcFmYvnCpt/8aBW6T06mftpcp+vUUMGRJq31ZEu25P2SzmfaS+uPgbtDA3z1YbvxaoZ+7VmawCmx07P3geVKfI02xkOU02pT3yMxmWLHGTsuJJ1OLp1vJBPl~3160388~4600630; Domain=.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 12:57:01 GMT; Max-Age=14400
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Link: <https://www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk>; rel=preload; as=script
X-Via: 1.1 bl22:2 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905dd_bl21_13481-47635
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 19 Jan 2023 08:17:26 GMT
age: 2375
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www01.wellsfargomedia.com/assets/images/css/template/homepage/homepage-horz-logo.svg
200 OK 2.0 kB URL HTTP/2 www01.wellsfargomedia.com/assets/images/css/template/homepage/homepage-horz-logo.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4948)
Hash e56e5d0c3a6c91daa9c9e3cb35de49ec
1ac827e855541f5059c9122c624f7b5144c5faa8
6d046903ea56f94f8a7d998d662f03035b015d3019c57d88e091f16d1bd175e8
GET /assets/images/css/template/homepage/homepage-horz-logo.svg HTTP/1.1
Host: www01.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
accept-ranges: bytes
content-encoding: br
etag: "15b8-5895bfcbfa2c0"
last-modified: Mon, 24 May 2021 14:15:37 GMT
server: Akamai Resource Optimizer
strict-transport-security: max-age=31536000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 1977
unused62: 8096267
cache-control: max-age=8059985
expires: Sat, 22 Apr 2023 15:50:06 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www04.wellsfargomedia.com/assets/images/css/template/homepage/homepage-lock.svg
200 OK 668 B URL HTTP/2 www04.wellsfargomedia.com/assets/images/css/template/homepage/homepage-lock.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash de6fd1f7ffea13b855770b5dc54daf72
0e4ab6e3433c7607280e977fd9e9c5442eb30344
deab472180f1d0240b8f200d69c896d68ddf08eba1928ef3d2f2fbd4beefbbfa
GET /assets/images/css/template/homepage/homepage-lock.svg HTTP/1.1
Host: www04.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
accept-ranges: bytes
content-encoding: br
etag: "596d0953-6f8"
last-modified: Thu, 24 Mar 2022 05:49:40 GMT
server: Akamai Resource Optimizer
strict-transport-security: max-age=31536000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 668
unused62: 8096267
cache-control: max-age=8059985
expires: Sat, 22 Apr 2023 15:50:06 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6188ed01e5ca17c61503971a13a99d89
e33db95b5e85a83182f4275eb857e687b1912ee1
4165617eba82ac3871c03c6fec1df4aba7ddcb897ff3a8bf37d31ee7ffd50244
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4187
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:01 GMT
Last-Modified: Thu, 19 Jan 2023 07:47:14 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash f2ee88d253515ec02853090542e56e2e
640a432682caaee096fc07632e2d957046629bef
24c2776cc7b6b36cf1d40709812a279cc042205efdc3316f72141fa814e31931
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4683
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:01 GMT
Last-Modified: Thu, 19 Jan 2023 07:38:58 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash f2ee88d253515ec02853090542e56e2e
640a432682caaee096fc07632e2d957046629bef
24c2776cc7b6b36cf1d40709812a279cc042205efdc3316f72141fa814e31931
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4421
Cache-Control: max-age=86045
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:01 GMT
Etag: "63c7a1b5-1d7"
Expires: Fri, 20 Jan 2023 08:51:06 GMT
Last-Modified: Wed, 18 Jan 2023 07:37:25 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 6188ed01e5ca17c61503971a13a99d89
e33db95b5e85a83182f4275eb857e687b1912ee1
4165617eba82ac3871c03c6fec1df4aba7ddcb897ff3a8bf37d31ee7ffd50244
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4187
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:01 GMT
Last-Modified: Thu, 19 Jan 2023 07:47:14 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash f2ee88d253515ec02853090542e56e2e
640a432682caaee096fc07632e2d957046629bef
24c2776cc7b6b36cf1d40709812a279cc042205efdc3316f72141fa814e31931
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4683
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:01 GMT
Last-Modified: Thu, 19 Jan 2023 07:38:58 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
www.wellsfargo.com/css/template/global.css
200 OK 34 kB URL HTTP/1.1 www.wellsfargo.com/css/template/global.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (8261)
Hash bde2c1be77c92f84fb05e75fb791ced3
6fa898da825712388a330c5a55341f1bc6ea841f
bdfa97725a18f7ef601a99479f2ffc4db97c661e432dbb8c5318748edeabd71b
GET /css/template/global.css HTTP/1.1
Host: www.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Expires: Thu, 19 Jan 2023 09:10:23 GMT
Last-Modified: Wed, 19 Oct 2022 17:24:22 GMT
ETag: "635032c6-2d449"
Cache-Control: max-age=1800
Content-Type: text/css
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Content-Length: 33875
Date: Thu, 19 Jan 2023 08:57:01 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=tMxg39QlnKQkk3X8X40z1g%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www17.wellsfargomedia.com/assets/images/icons/227x140/Mobile_Biometric_IconImage_227x140.png
200 OK 994 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/227x140/Mobile_Biometric_IconImage_227x140.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash eb441c128f04c9fb38132a1c7d23b26d
3d05caf10e2658a97f0a9ec047a8fa48482ef7d2
9623e51d02d819502565e29ca3801afa0a3536eb2864ef9662fde76875301d89
GET /assets/images/icons/227x140/Mobile_Biometric_IconImage_227x140.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61eb2f03-b37"
last-modified: Tue, 04 Oct 2022 20:08:42 GMT
server: Akamai Image Manager
x-serial: 343
x-check-cacheable: YES
content-length: 994
content-type: image/webp
cache-control: private, no-transform, max-age=381565
expires: Mon, 23 Jan 2023 18:56:26 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 79af32d8e279b4cfec147ab51cb6fcb3
d726903292bd1e08a6d9fe0719d2cd5b33dc5fe6
bfcb2d8f14d89736ac6b771f1618a8fc5e707691d60807a574fb719c8e9393ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 141
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:01 GMT
Last-Modified: Thu, 19 Jan 2023 08:54:40 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
static.wellsfargo.com/assets/js/wfui/container/wfui-container-top.js
200 OK 17 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/container/wfui-container-top.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (48287)
Hash a75fd8e10b107df2ef26038f1783ac4e
b27d8fc62fd83f944d638b93140ec05bd050ded4
9baeb568dd185db9aeaefd009c3778e3fe04b59acfa6c04fe96bdf608c8f2299
GET /assets/js/wfui/container/wfui-container-top.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 13 Aug 2022 13:50:11 GMT
Vary: Accept-Encoding
ETag: W/"62f7ac13-bcef"
Cache-Control: max-age=1800
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 16778
Date: Thu, 19 Jan 2023 08:57:01 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=LscS3%2fjAVortpKUAsYdOUg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/container/wfui-container-bottom.js
200 OK 11 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/container/wfui-container-bottom.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (31790)
Hash 6d79a0dbc6ea2602aa38bbf53e43124e
8b53e45df3e4aea81cbfaa90081f6795bcfe39fc
d2aa003ecdd6c31e12964104bd23498a60e94fa2d163c6d1ff285db59f61bb6a
GET /assets/js/wfui/container/wfui-container-bottom.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 12 Feb 2022 17:58:28 GMT
Vary: Accept-Encoding
ETag: W/"6207f544-7c61"
Cache-Control: max-age=1800
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 11076
Date: Thu, 19 Jan 2023 08:57:01 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=DoC%2flfIOa36vEpCgHvwSbA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js
200 OK 901 B URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1952), with no line terminators
Hash 5dcc7c101ced74367609685d577093f6
f0d8214335e3c33b634048b992afd536f5bd3e43
10aab16ccfb5374425dc6ee64453a7fe6d7b6dfa47ab65779f42c7db740da1ef
GET /assets/js/wfui/appdynamics/appdEUMConfig.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 20 Jan 2022 02:38:25 GMT
Vary: Accept-Encoding
ETag: W/"61e8cb21-7a0"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 901
Date: Thu, 19 Jan 2023 08:57:01 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=vwhWe16ZsUF0T85I6gfhxA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk
200 OK 80 kB URL HTTP/1.1 www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk
IP
ASN #20940 Akamai International B.V.
Hash af1f70353b2c8e0057baad1653ffd634
a222c82b460cc27a321f4dbf2799b7eb11882b19
cbed358b5e0b723eb519ae7eea9305f55dbd21a24a4443dbbe4c531f3df07c72
GET /z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk HTTP/1.1
Host: www.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Mon, 05 Dec 2022 18:21:48 GMT
ETag: "f87792cec9bfe86c111ba01b814ab039951c47f0e045a400aa73a95aabe7f406"
Content-Type: application/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 79935
Date: Thu, 19 Jan 2023 08:57:01 GMT
Connection: keep-alive
Cache-Control: max-age=21600
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Link: <https://www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk>; rel=preload; as=script
Set-Cookie: DCID=V0hKVX7b0XsrkrlAMrk+dQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
_abck=D8FE14E9C4CB9F21EA2A518E16FFA242~-1~YAAQtwplX5h4AbeFAQAACuo+yQn4QeVSM5AIMIn9lVonl9OvRAm0yPwvMl4w366J9zu26kuhb7eD3oUe5Z7nXtSol8plzSVykLG7iOxy68aU91pzLhoClSiYCV2dnhuOllHdaQlvA0EG+vMAjJgOypPJldmeEOObdBTLxlfGR3+HIsmu92EiUOjoeea2gdBrp2kxgwve3J2aIoeRSmqY9HKM7uqGmvCbjImM/XYDVH5slzOyEcN6cJB8Uf2IXmFZxksvY31ax3c58bK1kufWmI56skwbFy1FzRqYzIEg3M76WsT//pM+gCHXo11thWAv8OKRoRY7yfKDa96Q0gYDuXfBEUh9gsi5ItwfmJFUtW0vo81n9rxL7e88YTdCDmeNCA==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 19 Jan 2024 08:57:01 GMT; Max-Age=31536000; Secure
bm_sz=52D06CAD0F2D406A59EE066AF694145A~YAAQtwplX5l4AbeFAQAACuo+yRJoAHchuq8yz5el51KG1ZPS/oYDJ3YubV3pHeQbHynR/dJuilU6eMyBsbs3MbZE8+2xoWL831kYAGXNCfKagxblerPcuqkokNMxGUwP7Rl5UZfpgXmBs9OXGFdB/b5StXiFbfqS5hvAq6eUjhjzQtWbAnyq8BdRveZUcisJ/vGVRJ3FgTtQKZZCbzSR6VSCLb9OSkvptEKDEJCHbTTvaV1lGgLtwoJm7zYc3qrip28tNIR84lIVtwAjmH/eKR0Lo0ARyrp6PNYKU89k4X0sG4dFNBGs~3160388~4600630; Domain=.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 12:57:01 GMT; Max-Age=14400
www.wellsfargo.com/css/template/ui-lightness/jquery-ui.custom.css
200 OK 3.5 kB URL HTTP/1.1 www.wellsfargo.com/css/template/ui-lightness/jquery-ui.custom.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7443)
Hash bd26fea19f8cd25a2f0e7049bfbf20e5
bef14c1fd36f7c5038c88ce6c9942477ef673634
28e648cccfc26b07acdebac605f7b16d9de18e0fc4bfae55da3d2e2196c79df2
GET /css/template/ui-lightness/jquery-ui.custom.css HTTP/1.1
Host: www.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Expires: Tue, 15 Nov 2022 17:57:27 GMT
Last-Modified: Wed, 19 Oct 2022 17:24:22 GMT
ETag: "635032c6-47e3"
Cache-Control: max-age=1800
Content-Type: text/css
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Content-Length: 3484
Date: Thu, 19 Jan 2023 08:57:01 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=WCgT6HYNs5SFPWs%2fyUpyZA%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www17.wellsfargomedia.com/assets/images/icons/70x70/biometrics-icon.png
200 OK 682 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/70x70/biometrics-icon.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash cd497091126523db4eff566a3b98e4ab
10d64475ef9207e5f173a71001679477ac44897c
537aa33f3c8de00cec9cbefee2ca9f74db815655ab791c23c6714723017190f1
GET /assets/images/icons/70x70/biometrics-icon.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "5f60f9d2-68b"
last-modified: Tue, 04 Oct 2022 20:08:43 GMT
server: Akamai Image Manager
x-serial: 971
x-check-cacheable: YES
content-length: 682
content-type: image/webp
cache-control: private, no-transform, max-age=349080
expires: Mon, 23 Jan 2023 09:55:01 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/icons/469x140/app-store-badge_469x140.jpg
200 OK 1.9 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/469x140/app-store-badge_469x140.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 469x140, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e5dd65cd6fdda0cfdc64b523041f037d
b3a801ddfce2a9620dd14b757ec310c73532b651
97f5986810acb0528c2ce49dda9ae4cc02c887edab8391ebbbd46fa70d8c41ce
GET /assets/images/icons/469x140/app-store-badge_469x140.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62fbb361-1c6b"
last-modified: Tue, 04 Oct 2022 20:08:42 GMT
server: Akamai Image Manager
x-serial: 1283
x-check-cacheable: YES
content-length: 1870
content-type: image/webp
cache-control: private, no-transform, max-age=386297
expires: Mon, 23 Jan 2023 20:15:18 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/icons/469x140/google-play-badge_469x140.jpg
200 OK 2.1 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/469x140/google-play-badge_469x140.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 469x140, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8d2d644cb4f027997885d06dd946fd1d
c42d7f6096f6a28e4ad8fb0205c7f36d655da80d
c3b54bcec7c83734f01ce5bb6fa303252dd187c4a344c5bebf1bea6e2e8b5cd6
GET /assets/images/icons/469x140/google-play-badge_469x140.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62fbb361-1d89"
last-modified: Tue, 04 Oct 2022 20:14:52 GMT
server: Akamai Image Manager
x-serial: 197
x-check-cacheable: YES
content-length: 2052
content-type: image/webp
cache-control: private, no-transform, max-age=386702
expires: Mon, 23 Jan 2023 20:22:03 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/icons/227x140/Mobile_Check_Deposit_IconImage_227x140.png
200 OK 684 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/227x140/Mobile_Check_Deposit_IconImage_227x140.png
IP
File type PNG image data, 227 x 140, 8-bit colormap, non-interlaced\012- data
Hash 4ddd12b62d626253008431f7ee61c97c
ab5c4ef42ce25bfbbbb3ef1f8155a3114554a548
3800bef34e102acb639de4259cd11a8ee09f4e0b3d387ddb2e6530bdc7ae73b9
GET /assets/images/icons/227x140/Mobile_Check_Deposit_IconImage_227x140.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61eb2f03-81f"
last-modified: Tue, 04 Oct 2022 20:08:42 GMT
server: Akamai Image Manager
content-length: 684
content-type: image/png
cache-control: private, no-transform, max-age=377915
expires: Mon, 23 Jan 2023 17:55:36 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/photography/lifestyle/413x185/man-on-the-bridge-holding-phone-413x185.jpg
200 OK 8.7 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/photography/lifestyle/413x185/man-on-the-bridge-holding-phone-413x185.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 413x185, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7ee1716a95baf5916ea228c057d9bdc4
f14951c72e1ac191d6329e63b91657abdb263899
b0b68a3bfdd6723fae815494acd520e80d3fd9ae75bac4f4e3f4d4dfd01ab2cd
GET /assets/images/photography/lifestyle/413x185/man-on-the-bridge-holding-phone-413x185.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "5f60f9d2-6c2a"
last-modified: Tue, 04 Oct 2022 20:09:48 GMT
server: Akamai Image Manager
content-length: 8738
content-type: image/webp
cache-control: private, no-transform, max-age=381621
expires: Mon, 23 Jan 2023 18:57:22 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/icons/70x70/secure-technology-icon.png
200 OK 888 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/70x70/secure-technology-icon.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 71c4686d6c092635f163c43ec8ac63eb
1e4a9e79f8644412c9859a46db51307e0e90b75d
30d48747a584dec1b5aefc055a0e0f79bf8334db7fa021b860c660c6ba1ab319
GET /assets/images/icons/70x70/secure-technology-icon.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "5f60f9d2-7c9"
last-modified: Tue, 04 Oct 2022 20:08:43 GMT
server: Akamai Image Manager
x-serial: 1565
x-check-cacheable: YES
content-length: 888
content-type: image/webp
cache-control: private, no-transform, max-age=312272
expires: Sun, 22 Jan 2023 23:41:33 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/icons/227x140/Mobile_TransferPay_IconImage_227x140.png
200 OK 1.2 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/227x140/Mobile_TransferPay_IconImage_227x140.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0f1d3c63d0ee17428d1d18405435c1c6
25a1deff3b5e968c42a71642754014b2deeb3cb2
4b82af7ce20546a3ab2766f9d6999fdc2edfc9cec415f491402f4d18a7a2cd16
GET /assets/images/icons/227x140/Mobile_TransferPay_IconImage_227x140.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61eb2f03-fd7"
last-modified: Tue, 04 Oct 2022 20:08:43 GMT
server: Akamai Image Manager
x-serial: 1687
x-check-cacheable: YES
content-length: 1180
content-type: image/webp
cache-control: private, no-transform, max-age=364502
expires: Mon, 23 Jan 2023 14:12:03 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/icons/227x140/Mobile_Account_Alert_IconImage_227x140.png
200 OK 785 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/227x140/Mobile_Account_Alert_IconImage_227x140.png
IP
File type PNG image data, 227 x 140, 8-bit colormap, non-interlaced\012- data
Hash bf2ecbc6d2640d699085e2d4863dd3af
f8990648290931fcd96caa33b6e27f6888a88ab3
a65040647041108e73cb56e3b3c05d78dec706eeaa63d51f8d616dd63779582b
GET /assets/images/icons/227x140/Mobile_Account_Alert_IconImage_227x140.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61eb2f03-8a0"
last-modified: Tue, 04 Oct 2022 20:08:42 GMT
server: Akamai Image Manager
x-serial: 1533
x-check-cacheable: YES
content-length: 785
content-type: image/png
cache-control: private, no-transform, max-age=386104
expires: Mon, 23 Jan 2023 20:12:05 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/js/frameworks/slick01.js
200 OK 14 kB URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/js/frameworks/slick01.js
IP
ASN #54994 QUANTILNETWORKS
File type Unicode text, UTF-8 text, with very long lines (8157)
Hash f3b4fe3b70d7879d03983a1f0c7bfb02
d9e7bd3d0fafdf62a785057f98585e3aee716888
e42bf212ab8bc25a50408cfc448b8fd27ab21553564e866699a808e880390435
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/frameworks/slick01.js HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:3$_ss:0$_st:1674120383577$ses_id:1674118201128%3Bexp-session$_pn:3%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:01 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 13861
Connection: keep-alive
Expires: Thu, 19 Jan 2023 09:27:01 GMT
Last-Modified: Wed, 19 Oct 2022 17:24:16 GMT
ETag: "635032c0-f651"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01hzl162:6 (Cdn Cache Server V2.0), 1.1 bl21:6 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905dd_bl21_13647-25295
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?single
200 OK 4.3 kB URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?single
IP
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (9269)
Hash 0d068f24c67ce5f710b257e8e0ba1a0e
64ca71e37f36ff1277ac49d1e96b3802c382adc1
f1afbe38fe6e5fdee80942f11ee09b53b1736eec485d7e6dceed52b9267e2160
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /auth/login/static/js/general_alt.js?single HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:3$_ss:0$_st:1674120383577$ses_id:1674118201128%3Bexp-session$_pn:3%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:01 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 4282
Connection: keep-alive
Content-Encoding: gzip
Expires: Thu, 19 Jan 2023 08:57:01 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Set-Cookie: WesdAksn=A_7pPsmFAQAAPRvSm9y1hsU9P9CcfcjMnK14USupZXlRZIWB3WIp-WEtt5uNAaOrg1-cuDv8wH8AAEB3AAAAAA|1|0|3978e93fcf2a961ea585d854b04c39d87afccd9b; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=jB5UgcKZE5mleFY9nJCDgy5%2f+KZDzki7rwd24Z4VQvvnhhbOj8yBedCPtWOiWqvo; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 09:12:01 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl21:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905dd_bl21_13481-47670
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/js/global/global.js
200 OK 56 kB URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/js/global/global.js
IP
ASN #54994 QUANTILNETWORKS
File type HTML document, Unicode text, UTF-8 text, with very long lines (8155)
Hash d0253771456b71a6ca943ad59e6516fe
bd781c59e9d24153ba546f984b036c956c971893
836cde488243fca46e117784671e82b6544a87467710d625817ef49344f3622d
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/global/global.js HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:3$_ss:0$_st:1674120383577$ses_id:1674118201128%3Bexp-session$_pn:3%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:01 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 56017
Connection: keep-alive
Expires: Thu, 19 Jan 2023 09:27:01 GMT
Last-Modified: Wed, 19 Oct 2022 17:24:22 GMT
ETag: "635032c6-38587"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VMdgflkfFRA2wp48:5 (Cdn Cache Server V2.0), 1.1 bl22:0 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905dd_bl21_12590-7129
www.wellsfargo.com/css/template/print.css
200 OK 280 B URL HTTP/1.1 www.wellsfargo.com/css/template/print.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (570), with no line terminators
Hash 0bedbeb280ad7fe4984c41a5310dcf5d
21437c76f6acfc98cb62e778521229a95f520ea0
a58b9ecd2517292e12277596f941bd00a57ea10a884f0b02063a60386ca9a50e
GET /css/template/print.css HTTP/1.1
Host: www.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Expires: Tue, 29 Nov 2022 15:09:37 GMT
Last-Modified: Wed, 19 Oct 2022 17:24:22 GMT
ETag: "635032c6-23a"
Cache-Control: max-age=1800
Content-Type: text/css
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Content-Length: 280
Date: Thu, 19 Jan 2023 08:57:01 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=iiuI5xgukczNTsD19vh+RA%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/js/vendor/jquery.min.js
200 OK 33 kB URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/js/vendor/jquery.min.js
IP
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (8077)
Hash 168e3db9aed10d5a534287cbff2304e0
169ff7955da23134626a75db6337232feeebef4a
1140ecb834e6e1aa2a5ec74793e9a5ce3d6a1c47b384b63f7a61646ca0b54618
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/vendor/jquery.min.js HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:3$_ss:0$_st:1674120383577$ses_id:1674118201128%3Bexp-session$_pn:3%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:01 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 33308
Connection: keep-alive
Expires: Thu, 19 Jan 2023 09:27:01 GMT
Last-Modified: Wed, 19 Oct 2022 17:24:16 GMT
ETag: "635032c0-17d5c"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VMdgflkfFRA2wp48:5 (Cdn Cache Server V2.0), 1.1 bl22:10 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905dd_bl21_13647-25308
www17.wellsfargomedia.com/assets/images/css/template/homepage/homepage-magnifying-glass.png
200 OK 236 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/css/template/homepage/homepage-magnifying-glass.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8cf6735df721c60affadb70ad95732eb
ae8a42ebbd6b60630e2c612e924c4fd66a4aca33
8dc5436dce4423f0e53e85904b6dc0552c1c8bbde0dd4ec1c929a1c272201c4c
GET /assets/images/css/template/homepage/homepage-magnifying-glass.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.wellsfargo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "59c2114b-12e"
last-modified: Sat, 23 Jul 2022 13:52:11 GMT
server: Akamai Image Manager
content-length: 236
content-type: image/webp
cache-control: private, no-transform, max-age=879399
expires: Sun, 29 Jan 2023 13:13:40 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/js/frameworks/jq/jquery-ui.js
200 OK 80 kB URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/js/frameworks/jq/jquery-ui.js
IP
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (8185)
Hash 9ff54c8cd2a89ba19317dc2d21dd7b70
c72ce00b74f7e5f79b20127d3fdf2f27e9f695f6
f9fe644ca857fecf364b2560911254ab12d934588c4aa8bab0b1ffcc76ad8f12
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/frameworks/jq/jquery-ui.js HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:3$_ss:0$_st:1674120383577$ses_id:1674118201128%3Bexp-session$_pn:3%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:01 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 80063
Connection: keep-alive
Expires: Thu, 19 Jan 2023 09:27:01 GMT
Last-Modified: Wed, 19 Oct 2022 17:24:16 GMT
ETag: W/"635032c0-52ce2"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VMdgflkfFRA2wp48:3 (Cdn Cache Server V2.0), 1.1 bl22:9 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905dd_bl21_13244-16937
www17.wellsfargomedia.com/assets/images/css/template/chevron-right-grey.png
200 OK 82 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/css/template/chevron-right-grey.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 8x9, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8a64ca48888869867604fec4ca5a2300
05ecffa2687820e76c82f487d0347a5120615dd1
fb39d6b03e532d8c65acd85e6be42ac3fd7d781451a4bb1c616286a231c80cfa
GET /assets/images/css/template/chevron-right-grey.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.wellsfargo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "519fc766-3ed"
last-modified: Sat, 23 Jul 2022 13:52:12 GMT
server: Akamai Image Manager
x-serial: 612
x-check-cacheable: YES
content-length: 82
content-type: image/webp
cache-control: private, no-transform, max-age=879746
expires: Sun, 29 Jan 2023 13:19:27 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/css/template/img_print.png
200 OK 98 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/css/template/img_print.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 14x12, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dbe4baa4fabf22f2030bedd4b77cf124
49be649c1a5572d2ed0cd43561066c747395fa95
60e215de6e3f74e07a38051e5c810b9de9aa0f683c8b3eab3ffe9678c77f3efd
GET /assets/images/css/template/img_print.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.wellsfargo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "55209ab9-407"
last-modified: Mon, 25 Jul 2022 21:08:46 GMT
server: Akamai Image Manager
x-serial: 1046
x-check-cacheable: YES
content-length: 98
content-type: image/webp
cache-control: private, no-transform, max-age=921058
expires: Mon, 30 Jan 2023 00:47:59 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/css/template/chevron-right-blue.png
200 OK 140 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/css/template/chevron-right-blue.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7838430f8f3db208f1791d12275f882c
f099b34e9cd7bb9b8ccfbe0284cf818ef1747a9a
15edc68516d9016f5df0651edcd4eedfd5c2f440d85f932f7a2b973b70d37883
GET /assets/images/css/template/chevron-right-blue.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.wellsfargo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "519fc766-3fc"
last-modified: Mon, 25 Jul 2022 06:04:22 GMT
server: Akamai Image Manager
x-serial: 1189
x-check-cacheable: YES
content-length: 140
content-type: image/webp
cache-control: private, no-transform, max-age=973204
expires: Mon, 30 Jan 2023 15:17:05 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2
200 OK 22 kB URL HTTP/2 www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22172, version 1.13107\012- data
Hash f0307736c3a6ef356722f1dc3e9fa3f4
e29ea90ba786f0e08caa770dcfdfe923f619bebd
6bc7e16d4b6822a6867d7dd9f9d29f5fd77cd803750b0fe38a92309d9eb00704
GET /assets/fonts/wellsfargosans-bd.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www.wellsfargo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22172
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-569c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=11425898
expires: Wed, 31 May 2023 14:48:39 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2
200 OK 22 kB URL HTTP/2 www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22424, version 1.13107\012- data
Hash 0a1639ebe9fab396657a62aa5233c832
9b58164729ad918dd7255e4856f9da7f3a90bfde
631f3b6267a831a8d67c45e480b5d5a2601f10ff8708bcf3a45a41b377a129cc
GET /assets/fonts/wellsfargosans-rg.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www.wellsfargo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22424
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-5798"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=11582721
expires: Fri, 02 Jun 2023 10:22:22 GMT
date: Thu, 19 Jan 2023 08:57:01 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&cb=1674118621311&event=PageLoad&pid=tcm:282-17426-64&ptid=tcm:282-170471-128&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fmobile%2Fapps%2F&clist=283-158303-16~223-4119-32|84-181409-16~91-2049-32|283-200333-16~223-6259-32|283-170735-16~91-1924-32|283-116050-16~91-1924-32|283-164790-16~91-1924-32|283-142296-16~91-1924-32|283-159874-16~91-1924-32|283-212724-16~91-1924-32|283-172233-16~91-1924-32|283-161919-16~91-1924-32|283-148263-16~91-1924-32|283-38072-16~91-1924-32|283-6793-16~91-1924-32|84-230142-16~91-1924-32|84-251208-16~91-1924-32|283-8259-16~302-1865-32|283-36430-16~91-2830-32|283-200317-16~223-122394-32|283-200320-16~223-6249-32|283-200322-16~91-2808-32|283-225355-16~223-3757-32|283-200318-16~223-122394-32|283-158319-16~223-6249-32|283-200319-16~223-122394-32|283-8253-16~91-1866-32
200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&cb=1674118621311&event=PageLoad&pid=tcm:282-17426-64&ptid=tcm:282-170471-128&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fmobile%2Fapps%2F&clist=283-158303-16~223-4119-32|84-181409-16~91-2049-32|283-200333-16~223-6259-32|283-170735-16~91-1924-32|283-116050-16~91-1924-32|283-164790-16~91-1924-32|283-142296-16~91-1924-32|283-159874-16~91-1924-32|283-212724-16~91-1924-32|283-172233-16~91-1924-32|283-161919-16~91-1924-32|283-148263-16~91-1924-32|283-38072-16~91-1924-32|283-6793-16~91-1924-32|84-230142-16~91-1924-32|84-251208-16~91-1924-32|283-8259-16~302-1865-32|283-36430-16~91-2830-32|283-200317-16~223-122394-32|283-200320-16~223-6249-32|283-200322-16~91-2808-32|283-225355-16~223-3757-32|283-200318-16~223-122394-32|283-158319-16~223-6249-32|283-200319-16~223-122394-32|283-8253-16~91-1866-32
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/global/s.gif?log=1&cb=1674118621311&event=PageLoad&pid=tcm:282-17426-64&ptid=tcm:282-170471-128&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fmobile%2Fapps%2F&clist=283-158303-16~223-4119-32|84-181409-16~91-2049-32|283-200333-16~223-6259-32|283-170735-16~91-1924-32|283-116050-16~91-1924-32|283-164790-16~91-1924-32|283-142296-16~91-1924-32|283-159874-16~91-1924-32|283-212724-16~91-1924-32|283-172233-16~91-1924-32|283-161919-16~91-1924-32|283-148263-16~91-1924-32|283-38072-16~91-1924-32|283-6793-16~91-1924-32|84-230142-16~91-1924-32|84-251208-16~91-1924-32|283-8259-16~302-1865-32|283-36430-16~91-2830-32|283-200317-16~223-122394-32|283-200320-16~223-6249-32|283-200322-16~91-2808-32|283-225355-16~223-3757-32|283-200318-16~223-122394-32|283-158319-16~223-6249-32|283-200319-16~223-122394-32|283-8253-16~91-1866-32 HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:3$_ss:0$_st:1674120383577$ses_id:1674118201128%3Bexp-session$_pn:3%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:01 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Wed, 18 Jan 2023 08:57:01 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=nmbOVCwCtj8NvY0wu1X8lBMNx9H%2fXim2Ke%2f4MYZLKF8%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 09:12:01 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905dd_bl21_13647-25303
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk
200 OK 80 kB URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk
IP
ASN #54994 QUANTILNETWORKS
Hash af1f70353b2c8e0057baad1653ffd634
a222c82b460cc27a321f4dbf2799b7eb11882b19
cbed358b5e0b723eb519ae7eea9305f55dbd21a24a4443dbbe4c531f3df07c72
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:3$_ss:0$_st:1674120383577$ses_id:1674118201128%3Bexp-session$_pn:3%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:01 GMT
Content-Type: application/javascript
Content-Length: 79935
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 18:21:48 GMT
ETag: "f87792cec9bfe86c111ba01b814ab039951c47f0e045a400aa73a95aabe7f406"
Content-Encoding: gzip
Cache-Control: max-age=21600
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Link: <https://www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk>; rel=preload; as=script
Set-Cookie: DCID=nOF8COumYoPP6OP4T0sYqw%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
_abck=5E4328DAF17EE03E514A6295352E5512~-1~YAAQHWgRYL/EQcGFAQAA8uo+yQmorM3/ysv25E5QhatKOOk54gco5g7X9I2EVH0Hqh8PPPDGUwfiiSPnlkxH5biRfTjvtv6qNN0iQ5pc/ReIs+Axzk/VibBu7EToEzKGSxMzDfXz0ItXuON8sK4VvG/ddby+4wnjVjvmTNDyywLhagz+giK8HADrYoUNjys8ZbK0rCKdPuXBdYb6bSk8Xea3obASEkk1e8I6nx1dGE65gUVzXttzqYmxCd0KVWOKSd50C6BAg4v3c23ArQ8ZbHXYlFSdqAcG2nXE7TKMxgy0wLGC4HH85I8nqcMYsN4uumQtvYHBjMoLLos9628oVFW4rZJlrJtK/F37h8OHoNBU68C6YXXC+qk4wpKB351I0Q==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 19 Jan 2024 08:57:01 GMT; Max-Age=31536000; Secure
bm_sz=224F4BE01B3E45D96E85C75940FAB62D~YAAQHWgRYMDEQcGFAQAA8uo+yRIc8GWdV1EKege4+wyMH0gCIY4pWFJKKgfvLBsXLlQWnsJaWjXipGUq+rL/gEnzJPOjoBzvgDeTIXMMg129hTZ0seuKuqwtZCi1QPKB7KIjvYf/fZqrB2HyF3v2VFdxkTVWce4TMyTiUbUHa0HKS1uqDdR4Kv3qt8FwYb70wYw4uFnwFvfu2IwfWuzIHm3pOxv4G4bMOImfg3UwdUtvdC1IIaqQ8JC3lH1i2dLgvq53Ca6sDXiYgQcPJN0gpGpdNoUQYuWXMDhlp6MtCmhbY3TuVAnA~3160388~4600630; Domain=.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 12:57:01 GMT; Max-Age=14400
X-Via: 1.1 bl21:7 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905dd_bl21_12670-13758
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dUd8K69X+bOmQkSzPxbc0Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QZroWr40aOkORM9D8E04rLLzmxw=
static.wellsfargo.com/tracking/main/utag.js
200 OK 54 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (21114)
Hash 03d4ee70588acca5346c7c0c9cc9d46b
2059926b580e5c30aebd7c95bd2688c72cae6c1e
efd2188f280f89eb07a14140c17aeb5ba0a97bdfb3c1cdfe54f6474561e9f94d
GET /tracking/main/utag.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 16 Nov 2022 21:08:13 GMT
Vary: Accept-Encoding
ETag: W/"6375513d-4f786"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 53951
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=srsmoo0gueETUjGXdhYWPA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/ndep/websdk/nuance-websdk-loader.js
200 OK 13 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/ndep/websdk/nuance-websdk-loader.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (41881)
Hash 346912f774e106a5ea6f78459c661c4a
71d774577bd02f71c5def49535f88a92bd1b7088
8e7d64f1048594472f76fc1b6796a2b8fe847953a2e5b15636f3862e629ff27b
GET /assets/js/wfui/ndep/websdk/nuance-websdk-loader.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 09 Nov 2022 04:37:54 GMT
Vary: Accept-Encoding
ETag: W/"636b2ea2-a3cb"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Content-Length: 13370
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=lT1VbOuljyTaHV0N1fxjdA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?async&seed=AEArJsmFAQAA2GHUS7V0TTfMe8kR-M7GaqdjGMNm8hEGJ_2Nkf3HbvHOuepY&X-G2Q3kxs3--z=q
200 OK 147 kB URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?async&seed=AEArJsmFAQAA2GHUS7V0TTfMe8kR-M7GaqdjGMNm8hEGJ_2Nkf3HbvHOuepY&X-G2Q3kxs3--z=q
IP
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (65536), with no line terminators
Size 147 kB (146747 bytes)
Hash 87c1fdbe5ab5aa5f729335d70c98ad65
f12b17b4d7335719ff8b2c3422627cebed8f26c9
92f100458e20bb1dcb8b875f61a4a0b020b9733f827b234d1a801675b049dc56
Analyzer Verdict Alert quad9 Sinkholed
GET /auth/login/static/js/general_alt.js?async&seed=AEArJsmFAQAA2GHUS7V0TTfMe8kR-M7GaqdjGMNm8hEGJ_2Nkf3HbvHOuepY&X-G2Q3kxs3--z=q HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:3$_ss:0$_st:1674120383577$ses_id:1674118201128%3Bexp-session$_pn:3%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:02 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 146747
Connection: keep-alive
Content-Encoding: gzip
Expires: Thu, 19 Jan 2023 08:57:02 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Set-Cookie: WesdAksn=A_fqPsmFAQAA9lCRwm8oRCT3dsQC1W9qT4DH-0OzZhm5zxSiawnnllx0OmorAaOrg1-cuDv8wH8AAEB3AAAAAA|1|0|5b6457bec65d86f0a91d301791f70564a8062b8b; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=yWDLG4PSJjwIEA%2fma7W5wzQZcnCMg8CBZc5TGzmUyMo%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 09:12:01 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl21:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905dd_bl21_12590-7139
static.wellsfargo.com/assets/js/wfui/ndep/css/nuance-c2c-button.css
200 OK 2.7 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/ndep/css/nuance-c2c-button.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash 5257c2e188d24ddc00cc92573e5f2cfb
3526eb21d812e9ebfcb3514cc2ff9ad53abe442e
ae7a3a2c2db5a1dc74814e5001e439aeeae648e3b31cdb7474856dc52ea0b223
GET /assets/js/wfui/ndep/css/nuance-c2c-button.css HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 14 Jul 2021 10:08:23 GMT
Vary: Accept-Encoding
ETag: W/"60eeb797-2bb3"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 2671
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=T9wdFEuR8bOh6UmYgGpd4w%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www17.wellsfargomedia.com/assets/images/css/template/img_facebook.png
200 OK 158 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/css/template/img_facebook.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 20x20, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2b29e2ab0a181b675c3a91a5daf2322c
7986adeec12fb7dfb3386f793662f634c842eb66
73b31bddb3e9b9e841725f10be78071daae55db39b60719eb73ffa94186edbbf
GET /assets/images/css/template/img_facebook.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.wellsfargo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "55209ab9-52d"
last-modified: Mon, 17 Oct 2022 04:00:45 GMT
server: Akamai Image Manager
x-serial: 894
x-check-cacheable: YES
content-length: 158
content-type: image/webp
cache-control: private, no-transform, max-age=1450993
expires: Sun, 05 Feb 2023 04:00:15 GMT
date: Thu, 19 Jan 2023 08:57:02 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/css/template/img_twitter.png
200 OK 186 B URL HTTP/2 www17.wellsfargomedia.com/assets/images/css/template/img_twitter.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 20x20, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bf36c83f327f106b40a4a25396f68892
a47a4d66d99520946122236f23ec139c2252cae3
8bda07b34e5b9b98bc5b1609c1cb4327f829ec74484a558ae3873dd19b75953b
GET /assets/images/css/template/img_twitter.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.wellsfargo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "55209ab9-5a4"
last-modified: Mon, 25 Jul 2022 07:26:18 GMT
server: Akamai Image Manager
x-serial: 1787
x-check-cacheable: YES
content-length: 186
content-type: image/webp
cache-control: private, no-transform, max-age=636524
expires: Thu, 26 Jan 2023 17:45:46 GMT
date: Thu, 19 Jan 2023 08:57:02 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/css/template/social_show.png
200 OK 10 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/css/template/social_show.png
IP
File type gzip compressed data, from Unix\012- data
Hash ce12bbf3a384406fb289b746666e5fe2
a88c32b54eae963de046b2cc6387f8da2c1b3183
10968171febbac6bd3f4ca10101e331c5669393eec95c3118ef78fe81fe0feea
GET /assets/images/css/template/social_show.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.wellsfargo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "55209ab9-3ca"
last-modified: Mon, 25 Jul 2022 08:19:23 GMT
server: Akamai Image Manager
content-length: 84
content-type: image/webp
cache-control: private, no-transform, max-age=1035602
expires: Tue, 31 Jan 2023 08:37:04 GMT
date: Thu, 19 Jan 2023 08:57:02 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/icons/icon-hires_192x192.png
200 OK 1.0 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/icon-hires_192x192.png
IP
File type ISO Media, AVIF Image\012- data
Hash 4febe8c61db195a61e1bf6366a2dba1e
6b66fc1349bd2d08b0d9046a2f0c33d1b2925534
964596930b998b90463258b346ce36d991a0f28e7054770a1decfff35a9cda0c
GET /assets/images/icons/icon-hires_192x192.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6116f9a6-dcf"
last-modified: Tue, 17 Jan 2023 06:26:40 GMT
server: Akamai Image Manager
content-length: 1012
content-type: image/avif
cache-control: private, no-transform, max-age=2410095
expires: Thu, 16 Feb 2023 06:25:17 GMT
date: Thu, 19 Jan 2023 08:57:02 GMT
X-Firefox-Spdy: h2
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk
201 Created 18 B URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash d9e31441c04c32264c6821f4ec958ca5
8516f62844b4264d3ccaab00350323d07b9c50ef
fcd6acab1a311e89ae1aef024707e986871eff4071c584de3e93970c5fc4a23d
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
POST /z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2412
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:3$_ss:0$_st:1674120383577$ses_id:1674118201128%3Bexp-session$_pn:3%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 201 Created
Date: Thu, 19 Jan 2023 08:57:02 GMT
Content-Type: application/json
Content-Length: 18
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=Lx5Pk8qthnwfsEc4640smQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
DCID=Lx5Pk8qthnwfsEc4640smQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
_abck=E69B4262F16244930FE1C2B5D5013B03~-1~YAAQHWgRYPPEQcGFAQAASe0+yQluWSFnvuPG1K5nhbffRow+Q37H6vTYD8gvk2dfz06QUj/1djrMxZNQ47q8ucggg/TokjwZt6Iep4+cPexFoKVGs6rYlxlZaHIYP59x+mzEJ/AE9y6rruPX8hxs1ywFkRtitzL8Hm3O5altTC7GK45rCfZROPwr7sZK2vh2V1PuCkHbugXGZD1M+KPXWKrOETHHO1ZZjuvULrCgf0ngvrbwgeD30tSGxAgc4wblVKIPUqB7KcYmLwfrue9jxvwU4juKXaijvuRJdg8gcNGQDwhsp/SAqCiUXt6BJxSKXCYyLDJIDXz8Hqwcs5llalzYHBSuhzWqaX6Y7cNa21+4dBCygEevMslUxsVqyaUDJQ==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 19 Jan 2024 08:57:02 GMT; Max-Age=31536000; Secure
bm_sz=5DD898822AA08BAEF5454FEC79B94C67~YAAQHWgRYPTEQcGFAQAASe0+yRJZ5rOpjevZqa1k/BMxFwjjBFk2OJqekhUNhOqOgXTS4UPzcfHpptzof5UOfEGaozSddOXRQn9Qjp/fz/MvZMm/NLtZf3p6rDSd/PvAdaVxOzjSymFhyi+H2+m5nheygS93YBRwyIq0rHixOI4x+Zzm47qj2fQWYAqY/FrsK2pJVvt2+z6GHmUhMXwwEDsfXkO5piDpXuLx6viBef9XNh8NOH2IZQMEYoNi9s/abS8k/wwcj4CB7lhYySwBY0N2ZcGfuAVkaaQhIQaefY25no6AX98w~3229235~3356226; Domain=.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 12:57:02 GMT; Max-Age=14400
Link: <https://www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk>; rel=preload; as=script
X-Via: 1.1 bl21:7 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905de_bl21_13244-16983
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/favicon.ico
200 OK 3.8 kB URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/favicon.ico
IP
ASN #54994 QUANTILNETWORKS
File type MS Windows icon resource - 1 icon, 48x48, 8 bits/pixel\012- data
Hash fc6d7821d387a8d5e630daa63ec39f10
91d3962918d4caf70de23cdf245f85881883c789
2420e2dd77fbe0494070da2c201f6fcdd613c7652c06d086137e8c41d129f254
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:4$_ss:0$_st:1674120421957$ses_id:1674118201128%3Bexp-session$_pn:4%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:02 GMT
Content-Type: image/x-icon
Content-Length: 3774
Connection: keep-alive
Expires: Fri, 20 Jan 2023 00:15:35 GMT
Last-Modified: Wed, 19 Oct 2022 17:21:12 GMT
ETag: "63503208-ebe"
Cache-Control: max-age=86400
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:0 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905de_bl21_13481-47797
data.schemaapp.com/WellsFargo/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29tL2VzL21vYmlsZS9hcHBzLw
200 OK 0 B URL HTTP/2 data.schemaapp.com/WellsFargo/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29tL2VzL21vYmlsZS9hcHBzLw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /WellsFargo/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29tL2VzL21vYmlsZS9hcHBzLw HTTP/1.1
Host: data.schemaapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-api-key
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Thu, 19 Jan 2023 08:57:03 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-headers: x-api-key
access-control-expose-headers: x-amz-meta-source
access-control-max-age: 3000
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains;
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: biZ8fqKjXXCTyYmNURXqbamXZcOiNZOIPWQPHe1Rq7pLxEJgyAkdRw==
X-Firefox-Spdy: h2
static.wellsfargo.com/assets/js/wfui/ndep/css/nuance-chat.css
200 OK 505 B URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/ndep/css/nuance-chat.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF, LF line terminators
Hash e2966fedd68930d5281a2ed6ea61c0d3
1ede5572cf49f251c212abdbd6f2df4bb48de1fe
c2ef5abb39d304068b5476114ebc952a97c091ea59348c8ba3adeadc715976ad
GET /assets/js/wfui/ndep/css/nuance-chat.css HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Tue, 17 Nov 2020 14:00:34 GMT
Vary: Accept-Encoding
ETag: W/"5fb3d782-52b"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 505
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=+xigaAkrDUsqaQZ5Ec7Dnw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/ndep/js/nuan_websdk_bootstrap.js
200 OK 35 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/ndep/js/nuan_websdk_bootstrap.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (306), with CRLF line terminators
Hash 6b6e25186e12dddab5cfc7e3eaf88138
b10a74c86e7fa78e2c8a7b3797bcfaf7ccc717e7
c626e63ae020f2dff5a3dd67681ef69d4fb334218d325321dabfa5e206586602
GET /assets/js/wfui/ndep/js/nuan_websdk_bootstrap.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 09 Nov 2022 04:37:55 GMT
Vary: Accept-Encoding
ETag: W/"636b2ea3-24709"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 35227
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=YaSNv1pQkew3jgvbeexFmg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/ga/gtag.js?id=UA-107148943-1
200 OK 45 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?id=UA-107148943-1
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65507), with CRLF line terminators
Hash 02c5944802e321a49c191c43a905bfb7
77b4ac5db5c8717754fd2976f88ba2027e458ff4
e987815600381f14afd300d17c4f73646afe42233097d411b75d33ffbc7989c4
GET /tracking/ga/gtag.js?id=UA-107148943-1 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 06 Dec 2022 21:04:34 GMT
Vary: Accept-Encoding
ETag: W/"638fae62-1ca3a"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45055
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=Wsi93DBpY3z1Qx4ypkiohw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.117.js?utv=ut4.48.202112070053
200 OK 1.5 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.117.js?utv=ut4.48.202112070053
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (8097)
Hash 98ea64d15274eed87401b2a479775049
54835f985edf79c1911926f35a454eed5462d672
ca6044266cd44788cd4fa4910c8bcae5bef1bc1c213eafb436c00cea0db2c79b
GET /tracking/main/utag.117.js?utv=ut4.48.202112070053 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 18 Feb 2021 22:15:20 GMT
Vary: Accept-Encoding
ETag: W/"602ee6f8-2166"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1541
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=c51OCENtqcCwk3tI0DPh4g%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.129.js?utv=ut4.48.202207272202
200 OK 2.0 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.129.js?utv=ut4.48.202207272202
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (14899)
Hash 3955ea8eef1163d5a03b223080bb369b
afdc4ffc48f5b5454bec0d211d81bf5a29a88300
773e4bda27c4b159fa2f2ddfc6b0a940fe149e1b2d6e9d68af4798d80f453b94
GET /tracking/main/utag.129.js?utv=ut4.48.202207272202 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 28 Jul 2022 20:08:07 GMT
Vary: Accept-Encoding
ETag: W/"62e2eca7-3bf8"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 2012
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=%2fotgGtb0rsk53iLMLjbPpg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.136.js?utv=ut4.48.202208102110
200 OK 4.3 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.136.js?utv=ut4.48.202208102110
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (55064), with CRLF line terminators
Hash d0411178a32feb6cf283839f7d2adc0f
b48614403124421a7c1072238276d834c8c16fbc
9d4f430c94cc8de26993a0b05eaaedc4c5121f5c69a47aa13cb7ddf44cd1521f
GET /tracking/main/utag.136.js?utv=ut4.48.202208102110 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 11 Aug 2022 20:02:46 GMT
Vary: Accept-Encoding
ETag: W/"62f56066-d8e3"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 4329
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=%2f0RxVFFiXfAxdPxJLPp9ow%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.249.js?utv=ut4.48.202103111723
200 OK 2.0 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.249.js?utv=ut4.48.202103111723
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1280)
Hash 028aad0d319ba7357204d8bc9bfca330
6d391340b147026435eed039b322b297195d976f
8ea1397b96ad59126143e4ce576d94d1193772eefc90ef06acd785fcef164592
GET /tracking/main/utag.249.js?utv=ut4.48.202103111723 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 25 Mar 2021 21:15:30 GMT
Vary: Accept-Encoding
ETag: W/"605cfd72-133d"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1971
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=U5NE32BpNyzwDjPN50sMrA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.166.js?utv=ut4.48.202208100004
200 OK 2.6 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.166.js?utv=ut4.48.202208100004
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13150), with CRLF line terminators
Hash af5ecbbfa71cf9fb1890a16293a849ea
7c3917f40470f704d11d8410be7e975af7f180b0
2e134150a5652a1405756a04815f3cb049d3aac6dd8cc9be842a3455dda567ea
GET /tracking/main/utag.166.js?utv=ut4.48.202208100004 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 11 Aug 2022 20:02:45 GMT
Vary: Accept-Encoding
ETag: W/"62f56065-39d1"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 2600
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=93El2jSZjsbGDwuTlRROvw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.225.js?utv=ut4.48.202208301942
200 OK 2.0 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.225.js?utv=ut4.48.202208301942
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (14389), with CRLF line terminators
Hash 0a1f28ee2d9f4400d8cf7b2084cd75ef
881c3d612b62db99ee20be8dc123976041a99ae8
d0212788e34ae02ba53fcf465c24b34daaa894ea8194255d7c75fbbb1d6e7561
GET /tracking/main/utag.225.js?utv=ut4.48.202208301942 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 11 Aug 2022 20:02:42 GMT
Vary: Accept-Encoding
ETag: W/"62f56062-3ea8"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 2028
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=ClZ6H5WRU20+zhBVQ1YHhQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.381.js?utv=ut4.48.202210041851
200 OK 9.0 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.381.js?utv=ut4.48.202210041851
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (53448)
Hash 55d0b7c0d4ba091a7abb674a6ed46993
673a160eb4c3bfead89633208ee05ccc50f35555
04d50a011fba2c29c729a8f17a6ef16b8672a6d627e3fc77e7764b526a03009d
GET /tracking/main/utag.381.js?utv=ut4.48.202210041851 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 06 Oct 2022 20:01:48 GMT
Vary: Accept-Encoding
ETag: W/"633f342c-17270"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 8954
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=G99x+ZAhVaAOxA9N6fYfzw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.384.js?utv=ut4.48.202208101746
200 OK 4.5 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.384.js?utv=ut4.48.202208101746
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (20219), with CRLF line terminators
Hash 4c0349dd734ccb6d8e8e7623b1f7ae6d
b7b4c964104051333ba40303abf04653021319e7
78cb0c0a2e99cba235f7f99b436f3175f27f45872905afaffbae7a278c53e09b
GET /tracking/main/utag.384.js?utv=ut4.48.202208101746 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 11 Aug 2022 20:02:43 GMT
Vary: Accept-Encoding
ETag: W/"62f56063-74c7"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 4498
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=zlxMJ3stGtKiGb6PIZkysQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.431.js?utv=ut4.48.202107202150
200 OK 1.3 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.431.js?utv=ut4.48.202107202150
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1071)
Hash 6b1893e708596451fe24ba0542af6968
64f6d916c0fa5d4ed53d7af241edc228403f7733
d02ba9b5bff6d6dd10c51121cfa90bee0a178af4fd5bc5b7d2401e4717c2fbc0
GET /tracking/main/utag.431.js?utv=ut4.48.202107202150 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 29 Jul 2021 21:00:40 GMT
Vary: Accept-Encoding
ETag: W/"610316f8-9eb"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1302
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=9DuV0IYyQ1r5wBZ7WOK0%2fQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
cdn.schemaapp.com/highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29t
200 OK 0 B URL HTTP/2 cdn.schemaapp.com/highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29t
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29t HTTP/1.1
Host: cdn.schemaapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-account-id,x-api-key
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Cache-Control: max-age=0
TE: trailers
HTTP/2 200 OK
content-length: 0
date: Thu, 19 Jan 2023 08:57:03 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-headers: x-account-id, x-api-key
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 79lYfUudCTftKLH_Y-nqbN4Z0pNWUkHoK8ZMGKD-bpWVglzHtPZSSQ==
X-Firefox-Spdy: h2
static.wellsfargo.com/tracking/main/utag.319.js?utv=ut4.48.202210071528
200 OK 2.6 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.319.js?utv=ut4.48.202210071528
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2571)
Hash 270dd8154d461df44b468039bd358e3d
75cfff528bf6a5b8cf3f2b186c06bf3facb78538
591ddca6ea1ce23bccb267ca1e5fc99ce9c4a463361905e8dc2ff7d544710c0b
GET /tracking/main/utag.319.js?utv=ut4.48.202210071528 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 22 Sep 2022 20:16:51 GMT
Vary: Accept-Encoding
ETag: W/"632cc2b3-1b84"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 2613
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=yJaWhDzUNfXHzG5rsU56iQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.328.js?utv=ut4.48.202207272202
200 OK 2.2 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.328.js?utv=ut4.48.202207272202
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (15058)
Hash 420683ca7854e6bef9d5433124c6040e
aad1b9f71f2c30deee478658bb6e453c2c7f3a5a
8851d5126d7413e67465c2cb8bc2adaba4dd4b39deac58a33c9dc2e4d53f8268
GET /tracking/main/utag.328.js?utv=ut4.48.202207272202 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 28 Jul 2022 20:08:05 GMT
Vary: Accept-Encoding
ETag: W/"62e2eca5-413e"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 2248
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=EJKLcCT6tJOP89IGbvtnTg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.379.js?utv=ut4.48.202207272202
200 OK 1.1 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.379.js?utv=ut4.48.202207272202
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1071)
Hash be33c3150315d92aaae2dd3f471f7e4e
e8807f0617c3f06b238aec8ebcf93ab846e619af
15ee0686aeb15b05f562cd16166152540f132425c01ed5268d70a53d8a81cb7a
GET /tracking/main/utag.379.js?utv=ut4.48.202207272202 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 28 Jul 2022 20:08:05 GMT
Vary: Accept-Encoding
ETag: W/"62e2eca5-86e"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1132
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=MHkoLZjQbczQCxyeY8C1Ag%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.397.js?utv=ut4.48.202211141950
200 OK 1.9 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.397.js?utv=ut4.48.202211141950
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (9515), with CRLF line terminators
Hash 9ad460cb362098d61cd8467425540995
89b97a0d85d290e2228c3f1d433d34739e37d650
2c8a737d8c35d841e35f8abb0c18b849f00cd651c923e7656b9b1dedd9577712
GET /tracking/main/utag.397.js?utv=ut4.48.202211141950 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 06 Dec 2022 21:04:34 GMT
Vary: Accept-Encoding
ETag: W/"638fae62-2b9e"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1857
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=Yb6HAWVErk658dcIje07BQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.396.js?utv=ut4.48.202211141950
200 OK 1.7 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.396.js?utv=ut4.48.202211141950
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (9150), with CRLF line terminators
Hash d9941d1d68472330aebc926fae7221fa
db78cb1cbf45dad2f618b6adb5a6e9e68725f483
f6505405811105ee7c29b7b1e02d501ccb3c713b94e7099b42aafefc3e90c7f3
GET /tracking/main/utag.396.js?utv=ut4.48.202211141950 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 06 Dec 2022 21:04:34 GMT
Vary: Accept-Encoding
ETag: W/"638fae62-2a31"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1681
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=V9nIJkajrqQhDrz0QB3c%2fQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.403.js?utv=ut4.48.202104051735
200 OK 1.3 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.403.js?utv=ut4.48.202104051735
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1071)
Hash d9e09275c6f22e92f2ba7f907f9d1c31
712ff938b4ae788338fa1d926af874b7fbe7ab58
15c605e2b2babb99517d3b0f36ef52191d80d7a448b0089d0f254ac52559d217
GET /tracking/main/utag.403.js?utv=ut4.48.202104051735 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 15 Apr 2021 21:15:19 GMT
Vary: Accept-Encoding
ETag: W/"6078ace7-a3a"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1298
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=HOqtBdeKOa15WeVJiQbe8Q%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.413.js?utv=ut4.48.202207272202
200 OK 1.4 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.413.js?utv=ut4.48.202207272202
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1317)
Hash 7d2d9e509acf171d299a8fd31ef8ca0d
64cd01f823e796aa972ba0bd3349b21847dee603
c47666bd3cde639619863664b81db5e312723c4e87287993b4ebb1f12af0733c
GET /tracking/main/utag.413.js?utv=ut4.48.202207272202 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 28 Jul 2022 20:08:01 GMT
Vary: Accept-Encoding
ETag: W/"62e2eca1-b91"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1352
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=CrzdKp6Eh6B7pGs9Ix1JKw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.471.js?utv=ut4.48.202209271731
200 OK 2.5 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.471.js?utv=ut4.48.202209271731
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (995)
Hash 5245bcf67d3ef6caa0e9c2185d20c08a
aa2ad19ae558fe7f58b3770873c8683ce91fba4c
343bc115dd405111bb74587ffb571d9c0f7fe4c9da381b88109998c2c7cf5f48
GET /tracking/main/utag.471.js?utv=ut4.48.202209271731 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 04 Oct 2022 20:01:53 GMT
Vary: Accept-Encoding
ETag: W/"633c9131-19fb"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 2457
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=H%2fg4lhs0ZAHA4eUP9hyk+w%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/main/utag.505.js?utv=ut4.48.202209291629
200 OK 2.8 kB URL HTTP/1.1 static.wellsfargo.com/tracking/main/utag.505.js?utv=ut4.48.202209291629
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1430)
Hash b2e03f6d954a4357a7268c29f963c4f0
33e8f489c2444aa2ac08b82d692c995836020fcf
7ed82ca71abf90288110fed75cb12480d77721dca21fc258f21d3e6536df8db8
GET /tracking/main/utag.505.js?utv=ut4.48.202209291629 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 15 Sep 2022 20:12:12 GMT
Vary: Accept-Encoding
ETag: W/"6323871c-197d"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 2760
Date: Thu, 19 Jan 2023 08:57:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=UYmuzt74U1SOau0q3tDJLQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/ndep/js/nuan-c2c.js
200 OK 5.6 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/ndep/js/nuan-c2c.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (928), with CRLF line terminators
Hash 00e6f77045d9c92840a490cfcdc9ff6a
22f273b66fe0c5d43cf747fb9868b0904d5ee4b8
4d144f941f05ff42f2a818328b7524c6d3f2b6efc1fe93a09794af14ad262f6c
GET /assets/js/wfui/ndep/js/nuan-c2c.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 16 Mar 2022 05:41:26 GMT
Vary: Accept-Encoding
ETag: W/"62317886-590b"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 5649
Date: Thu, 19 Jan 2023 08:57:03 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=WkJ5YMia1MPLsLzypGbJ5Q%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsp.sectigo.com/
200 OK 471 B IP
Hash 9a8fd0b3241bcf1ee875873e894dffa5
83b718b8f86a02f2bb2bf07c5ed20d5b267bf1ae
36ef11e6b7f16d416e2adb0b5075adf256ba43997742bd473cf2743d904eb3bc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:03 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 13:42:56 GMT
Expires: Wed, 25 Jan 2023 13:42:55 GMT
Etag: "83b718b8f86a02f2bb2bf07c5ed20d5b267bf1ae"
Cache-Control: max-age=534951,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78be5c51a9810b61-OSL
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk
201 Created 18 B URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash d9e31441c04c32264c6821f4ec958ca5
8516f62844b4264d3ccaab00350323d07b9c50ef
fcd6acab1a311e89ae1aef024707e986871eff4071c584de3e93970c5fc4a23d
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
POST /z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2392
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:4$_ss:0$_st:1674120421957$ses_id:1674118201128%3Bexp-session$_pn:4%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 201 Created
Date: Thu, 19 Jan 2023 08:57:03 GMT
Content-Type: application/json
Content-Length: 18
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=cLPUsEBJIFUOHmenrCpRWw%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
DCID=cLPUsEBJIFUOHmenrCpRWw%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
_abck=759D82B2D3312CA61CED8584E27F98AF~-1~YAAQHWgRYBTFQcGFAQAAKO8+yQlBsVXJVH0SyjVM1YRdJkeGDvAD+vtx3KjmNJtyFPnz+BAzcSW4sD/PYj7fY90Ks/yw6kouYvPms0XP/brgkxTqrSmCprEaw6F8aerO17axf8WBaZXT9EPCjJa0ciJtxblzc3XIrjg8DlGz+xhd0rPxhG8w2n2U8nLnXsTzrnQTLmOaAKwIq/qRjPPGaZUKiKPJEEVhWRhM0Ge2JXDYkjTu7xuD1iHurQ9L3bZvrijrgeI7A0HPDcb1derL81l35P9itT9UjpvXkNfOuZ7XLeJ9A/79I5Dt0D1sTDh9PRR8Bvb+kNSt60dG1SvcoxCGXPJnlHFYTCR36CexK/bqSXC+BMytwVjoHWF9iKe12w==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 19 Jan 2024 08:57:03 GMT; Max-Age=31536000; Secure
bm_sz=C2E6830D284D211C06344AC2532FC6E9~YAAQHWgRYBXFQcGFAQAAKO8+yRIq0iVXYSmqbR4Pg5q9/62J3okOKmQyRJ82mmBRGSstIS26RtPbe0v/Dk5KXrqgTTvTSJxQDex5xQp1ti31QFaGxfGrptpVIo5JBw3b7CcDwjBj1CjEjar4uDo691qSFgtKlFfRa3lo2xVbNcnrh2ZCjocuOfMHb4EyOYDddRSv3ghUZ2yiJDl4Sx4cYlK0rN2NjI8jj0+oFK2u9P3maKXhHjGLatWo+vayMFDMDpxsKy03YJni7sTj7ZZIA7G+AHhi/p873vOt3bq8FiFQFg7g0zPM~3556656~3752504; Domain=.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 12:57:03 GMT; Max-Age=14400
Link: <https://www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk>; rel=preload; as=script
X-Via: 1.1 bl21:7 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905de_bl21_13481-47842
static.wellsfargo.com/tracking/gb/detector-dom.min.js
200 OK 132 kB URL HTTP/1.1 static.wellsfargo.com/tracking/gb/detector-dom.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65434)
Size 132 kB (131829 bytes)
Hash 73ad7a8f8ccda765b898b038f90d8274
756ac35ad2422d93a0b327dfeff7fe9200695883
60ccc38cf175aba7cbe63bf1ec6319b5c1648d9a52014dfefa6ec718476a17b7
GET /tracking/gb/detector-dom.min.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 22 Sep 2022 20:03:51 GMT
Vary: Accept-Encoding
ETag: W/"632cbfa7-6b8d3"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 131829
Date: Thu, 19 Jan 2023 08:57:03 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=nngjUNPz8loeGZT22xQBzA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1
200 OK 45 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65507), with CRLF line terminators
Hash 02c5944802e321a49c191c43a905bfb7
77b4ac5db5c8717754fd2976f88ba2027e458ff4
e987815600381f14afd300d17c4f73646afe42233097d411b75d33ffbc7989c4
GET /tracking/ga/gtag.js?t=UA-107148943-1 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 06 Dec 2022 21:04:34 GMT
Vary: Accept-Encoding
ETag: W/"638fae62-1ca3a"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45055
Date: Thu, 19 Jan 2023 08:57:03 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=C6R6H2U7lw%2fT%2fuGwlrwBgA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/alloy/alloy.js
200 OK 25 kB URL HTTP/1.1 static.wellsfargo.com/tracking/alloy/alloy.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65505)
Hash 9a021c3b9dea16b9bedb216b6b195cdd
f767ed7dba6d08b08ffc5b35fb0468eb00c66a25
54b94b3b7c4900d7012f824d21f9fa94928055f6cae6c59c23d88a10eaa79e95
GET /tracking/alloy/alloy.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 25 Aug 2022 20:01:53 GMT
Vary: Accept-Encoding
ETag: W/"6307d531-12d93"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 24609
Date: Thu, 19 Jan 2023 08:57:03 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=FXhaEOmf0lCW3I8uxbUyPg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
data.schemaapp.com/WellsFargo/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29tL2VzL21vYmlsZS9hcHBzLw
200 OK 0 B URL HTTP/2 data.schemaapp.com/WellsFargo/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29tL2VzL21vYmlsZS9hcHBzLw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WellsFargo/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29tL2VzL21vYmlsZS9hcHBzLw HTTP/1.1
Host: data.schemaapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-api-key: XPJKP-GI7DG-FVNWZ-45W51
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: x-amz-meta-source
access-control-max-age: 3000
date: Thu, 19 Jan 2023 08:57:03 GMT
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: max-age=14400
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HKDPDuZA1YPmBAfc-mJy4qcCUBNDX5v4EQ4x-bd9W8BX3c2vucTYcw==
X-Firefox-Spdy: h2
static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js
200 OK 819 B URL HTTP/1.1 static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (720)
Hash 400e574e68b2d11076d96efd5cc087ec
873e23f01b6356fc78aab57cdb1308d458ae6888
454b56cd80b0412a4ec874001dcedaa491e4ca376b3805d1d91dd83071033564
GET /tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 12 Oct 2022 20:08:15 GMT
Vary: Accept-Encoding
ETag: W/"63471eaf-798"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 819
Date: Thu, 19 Jan 2023 08:57:03 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=FhHfArDBeelgvvR+BdVuQA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsp.sectigo.com/
200 OK 471 B IP
Hash 9a8fd0b3241bcf1ee875873e894dffa5
83b718b8f86a02f2bb2bf07c5ed20d5b267bf1ae
36ef11e6b7f16d416e2adb0b5075adf256ba43997742bd473cf2743d904eb3bc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:03 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 13:42:56 GMT
Expires: Wed, 25 Jan 2023 13:42:55 GMT
Etag: "83b718b8f86a02f2bb2bf07c5ed20d5b267bf1ae"
Cache-Control: max-age=534951,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78be5c5239f50b61-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14127
Expires: Thu, 19 Jan 2023 12:52:30 GMT
Date: Thu, 19 Jan 2023 08:57:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7228521-7486-47c0-9c97-8326b753903b.jpeg
200 OK 3.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7228521-7486-47c0-9c97-8326b753903b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a0322b0c1c8ccba218bb838b9a08236b
2019b85538667589467bd7330d5c14e81d0a0219
206ed7eb5ba89c76c42b01a7fbf354b9417dd87d8149847b28dab0cb1c887198
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7228521-7486-47c0-9c97-8326b753903b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3258
x-amzn-requestid: efeaacb9-f9b6-45ea-b457-dd2186113d7a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9704FE2IAMFw9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c8a685-5c761cba0ef3eb1e0849aac1;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 02:10:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ja6gtQbUWud7hCAcoQ5R1zHQROQUC9rQ_LycuQK3BqQT_5GIUz4Q_w==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 02:15:16 GMT
age: 24107
etag: "2019b85538667589467bd7330d5c14e81d0a0219"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b015242ebdda9cc22cfe6741d2e926f1
76072223007cd11c6f7b9fda8f01818ab0fea740
b7a72c737cac91c83c39718de999bc6ff0ec4ede63342e86407190d95e60d9a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6908
x-amzn-requestid: 5f0a0b3b-1d4c-450e-bcd5-481bda79f4e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eq1qQHwYIAMF-IQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1030e-62d053e35c8ab2374fd2fe35;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 07:06:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WdNoHBL4A3J_FHp8V9HLUMNKmEPIw-lstt0OdqYJtcUGfMRZJXPdwQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 11:34:07 GMT
age: 76976
etag: "76072223007cd11c6f7b9fda8f01818ab0fea740"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fdeb7fb495a90bb60b0fc14d7c3e4fab
90078a196e0dc31eca3c71ff1a5e9de80b957e7f
6e4ddcb84618857b7e08574dccf6a26d6ce20052d78f68a299c57931ea816e33
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4148
Cache-Control: max-age=140825
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:03 GMT
Etag: "63c878c4-1d7"
Expires: Sat, 21 Jan 2023 00:04:08 GMT
Last-Modified: Wed, 18 Jan 2023 22:55:00 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60b96714-9b31-441b-a346-5099f350e204.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60b96714-9b31-441b-a346-5099f350e204.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 115c22a4d18aebbb8ffb5fdd8da8c8ba
6f77d73abc59ca903e2a7fd514b559c60931c4d7
74ef77f35165e40f1d9e2c68924a797a8f1b586c325c2d053f830a6f4163ca97
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60b96714-9b31-441b-a346-5099f350e204.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8388
x-amzn-requestid: 01537ac7-e1b1-4fe8-96dd-e6abd92c4a16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9TegGC7IAMF-BQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c865f6-0838524e1f33c0f53b548205;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:34:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NZT00_07uZ3G_UzocOal5svr6-nDGY-NtN7E7BrJXOMQ-qRUe1I9Xg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:55:56 GMT
age: 39667
etag: "6f77d73abc59ca903e2a7fd514b559c60931c4d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dc15588-7ab3-449b-841e-1b44848c69ff.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dc15588-7ab3-449b-841e-1b44848c69ff.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6ac1e9ae8dfefbc1932d060052188c0b
73e01cd7b75bb0768df616c1a0ebf02df8de5443
bdfbd218becc507160f4e4a162e345300b49aaf0a05effa900b15f757f0ccb3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dc15588-7ab3-449b-841e-1b44848c69ff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11511
x-amzn-requestid: 8f92a31a-a233-4f35-9aac-b7b60a105021
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3vgjF9MIAMFlpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c62c69-7844213f4c220b0b140cabe0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 05:04:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J47HGWXY_9L6cigfbvLdt3dsls43-MMW38eXFkWPVGJW34-dOFZfYA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:48:30 GMT
age: 40113
etag: "73e01cd7b75bb0768df616c1a0ebf02df8de5443"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg
200 OK 3.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1b47910c4f71976f73a884bcae6f9bc
26c0d42fddb2a02d9878c34a76874710c92a9d30
9c5ce4945939b126cd36202f5afb8009ce790a792270ec31cc22099e4cd12a24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3861
x-amzn-requestid: c8fbb2e1-9ec6-42c0-8030-9be785e8913e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9TegFNEoAMFwqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c865f6-04a9e7db684e88ed69e1bd43;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:34:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: wTiBoiSa1euVzUKPwlAWWZD-fYwMQGxgvRRzr1ALkrFY5VV3zeL9Jg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:52:42 GMT
age: 39861
etag: "26c0d42fddb2a02d9878c34a76874710c92a9d30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa848e8c9-5ea8-4948-a3e7-109001ff6cba.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa848e8c9-5ea8-4948-a3e7-109001ff6cba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13457311f170ebcd637e77aa48873488
a51ef5eb01736824f382541c5a4ad025ae35c09e
f57f95cc9f18b2e41951f1fcd9c278ca0f522e98dbf57aeb4c59b4b59deeb605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa848e8c9-5ea8-4948-a3e7-109001ff6cba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6235
x-amzn-requestid: 919a5e9d-11c0-4b12-a718-f5a256f4fda2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3RXBG8xoAMFW1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5fc2c-2398fc8910eb707e4c15b416;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 01:38:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WwmWT7zXborrCF7_Ul5LFV1EboOT5KBXf9TSATbFi01dpip5BGSQNQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:50:00 GMT
age: 40023
etag: "a51ef5eb01736824f382541c5a4ad025ae35c09e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.wellsfargo.com/tracking/ga/ga_conversion_async.js
200 OK 14 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/ga_conversion_async.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (35846)
Hash 42c817a7b5f9583b2bc70f742dc950c9
ff75711716f8605860abe551b0235f7194e4348e
881b430ac699f32b3b5234582494d1f4fc0d22be1e6ac797847d66bc5ebc250f
GET /tracking/ga/ga_conversion_async.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-8c31"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 13593
Date: Thu, 19 Jan 2023 08:57:03 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=jypCms0tuPLB2MPdwmf9Ig%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/ga/ga.js
200 OK 20 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/ga.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (49163)
Hash d76c07f3794667edfb1c8ac0df3aac66
23e1915175dad06223c692b49c7b3c2aad1a5820
e0a246ff71144016a26e53493b8275a3a02b9386c690a169801840072851136b
GET /tracking/ga/ga.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-c025"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 19477
Date: Thu, 19 Jan 2023 08:57:03 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=Uz87ZMfemw4BgNL5upUBJg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
cdn.schemaapp.com/highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29t
200 OK 2 B URL HTTP/2 cdn.schemaapp.com/highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29t
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3ctLXdlbGxzZmFyZ28tLWNvbS0tdWU0OTMyOWQ0OGQ2Yy53c2lwdjYuY29t HTTP/1.1
Host: cdn.schemaapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
x-account-id: WellsFargo
x-api-key: XPJKP-GI7DG-FVNWZ-45W51
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Tue, 11 Dec 2018 16:01:38 GMT
x-amz-version-id: 4FsmemwQuur.Z0jxvea6XGJagB0M87fi
accept-ranges: bytes
server: AmazonS3
date: Thu, 19 Jan 2023 04:55:27 GMT
etag: "99914b932bd37a50b983c5e7c90ae93b"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Error from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Aqy53dgagb7wuRFDYcefOuUMB-MURHnOFCwOMT5_LPz778tkMpFebg==
age: 14497
X-Firefox-Spdy: h2
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk
201 Created 18 B URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash d9e31441c04c32264c6821f4ec958ca5
8516f62844b4264d3ccaab00350323d07b9c50ef
fcd6acab1a311e89ae1aef024707e986871eff4071c584de3e93970c5fc4a23d
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
POST /z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2266
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:4$_ss:0$_st:1674120421957$ses_id:1674118201128%3Bexp-session$_pn:4%3Bexp-session; __ts_xfdF3__=596732154; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=; _cls_s=1fbb22af-9a97-4a81-8dfe-06c21341950a:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 201 Created
Date: Thu, 19 Jan 2023 08:57:03 GMT
Content-Type: application/json
Content-Length: 18
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=s7C4oBbpEpry9G0UOsVD%2fQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
DCID=s7C4oBbpEpry9G0UOsVD%2fQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
_abck=4F422DB991A6EAC92C7A25AA41D2641F~-1~YAAQHWgRYHLFQcGFAQAA8PA+yQlWhyvNShg+lCTrWt7vs11yBLhYQsgQ1nmmQU8L1DveZhP84o2IbS6A944dSiV1oiqpm/jlt2uJ9X59iiUXZQO7IBJW7V4aHDR32bcMpO8EheW5TYkaK1eLpyJpTxn9SJkj6MXdEiXU4iTGfxGbJNSfJ8gxwZmdHxGGXMf+q3SZr/4VrnItLExxMZdNQnNzjFI6scnzLyOhSS5NHHn77vN9jJzVMcrOP1AcZvH+zWYh6belJWns/2/g/L24une1h2gjMYhSaTigpmmbkSPH3HEBCdHKjj4477VtJdZyMcxfeoeJN5G42tl4ZgI2hfXpoQHhR/1oHdPe3DPOg8CDm2fZfDAU8dD8mQessZQyoQ==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 19 Jan 2024 08:57:03 GMT; Max-Age=31536000; Secure
bm_sz=5273CA54F150B27915634905F10F81BE~YAAQHWgRYHPFQcGFAQAA8PA+yRLDC1sDwn9zYmtSw+XoZabo/XRZlR0821abRhkz2V1Or2XhZrb/9ahPBJws9vZmQwkxSmngNirXKueT1igmx3iBYWTJjjF9tixtrNSZsfsdXH14umf6UqOyJ6ZjCg+SFW9zgJ0pINyQKhv9KWvWpw6z8hOuRdzXBB/ek1/dgZFzJreIT6MzBxDhwgLheW9PruS+eYcOk0urQfDyFrl/Mlzf86HRLMAAP41A+Cp02nM83/y3XsHWLr8cIB4OipRkES4+Zyv9E1ECcQGXmbZEL5z1A63I~3556656~3752504; Domain=.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 12:57:03 GMT; Max-Age=14400
Link: <https://www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk>; rel=preload; as=script
X-Via: 1.1 bl21:7 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905df_bl21_13481-47879
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 783c01fa14ade2316e22ead869b3dbf8
71e20a947b3a9e10cb2bf046e2ca3da294d97f70
9b0aee93ad83dd0c14a106a2514b86ab950b2fc679596fd621841242b5c7e95c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ffc62725eb8d702d9aebcb456457fb2
0b5f6c5f99abfc8cc37016f8b76e19097c3ba294
f0d158f00224cad7d42c75dfdbbbe4f7ab6a4cdb221d3faa5aeb9917d98d4f0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash a6f84922fecdaa49a7bee879cbd91599
61a86a86e7c1483dfeea7db87ff19128642aef39
f9fb4c4c9397dadd8b1acb36d6f1fc5bbcb6e74641f1c1bf0c4e1055cf43e04f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4587
Cache-Control: max-age=167178
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:03 GMT
Etag: "63c8ddfe-1d7"
Expires: Sat, 21 Jan 2023 07:23:21 GMT
Last-Modified: Thu, 19 Jan 2023 06:06:54 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ffc62725eb8d702d9aebcb456457fb2
0b5f6c5f99abfc8cc37016f8b76e19097c3ba294
f0d158f00224cad7d42c75dfdbbbe4f7ab6a4cdb221d3faa5aeb9917d98d4f0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/984436569/?random=1674118623156&cv=9&fst=1674118623156&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--ue49329d48d6c.wsipv6.com%2Fes%2Fmobile%2Fapps%2F&ref=null&tiba=App%20de%20Wells%20Fargo%20para%20dispositivos%20Apple%20y%20Android%20%7C%20Wells%20Fargo&hn=www.google.com&async=1
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/984436569/?random=1674118623156&cv=9&fst=1674118623156&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--ue49329d48d6c.wsipv6.com%2Fes%2Fmobile%2Fapps%2F&ref=null&tiba=App%20de%20Wells%20Fargo%20para%20dispositivos%20Apple%20y%20Android%20%7C%20Wells%20Fargo&hn=www.google.com&async=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/984436569/?random=1674118623156&cv=9&fst=1674118623156&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--ue49329d48d6c.wsipv6.com%2Fes%2Fmobile%2Fapps%2F&ref=null&tiba=App%20de%20Wells%20Fargo%20para%20dispositivos%20Apple%20y%20Android%20%7C%20Wells%20Fargo&hn=www.google.com&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 19 Jan 2023 08:57:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/984436569/?random=1674118623156&cv=9&fst=1674115200000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--ue49329d48d6c.wsipv6.com%2Fes%2Fmobile%2Fapps%2F&ref=null&tiba=App%20de%20Wells%20Fargo%20para%20dispositivos%20Apple%20y%20Android%20%7C%20Wells%20Fargo&async=1&is_vtc=1&random=4056081325&resp=GooglemKTybQhCsO
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 19-Jan-2023 09:12:03 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
edge.adobedc.net/ee/irl1/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=98a4c283-cd4b-41b1-b1e4-c424f77f69aa
200 OK 370 B URL HTTP/2 edge.adobedc.net/ee/irl1/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=98a4c283-cd4b-41b1-b1e4-c424f77f69aa
IP
Hash 1363b9e7ccffe98551dc77583929cf89
10714e4c1bec9f4d9755382f349fea8da4da67f2
b9bff0914ce9a2eea2929da8d8fdf0e58f8f1f4e062bc56d2772c29262b355c0
POST /ee/irl1/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=98a4c283-cd4b-41b1-b1e4-c424f77f69aa HTTP/1.1
Host: edge.adobedc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Content-Type: text/plain; charset=UTF-8
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Content-Length: 353
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-request-id: 98a4c283-cd4b-41b1-b1e4-c424f77f69aa
x-rate-limit-remaining: 599
vary: Origin
access-control-allow-origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
access-control-allow-credentials: true
access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID
date: Thu, 19 Jan 2023 08:57:02 GMT
x-konductor: 23.1.36:a827fcb8
x-adobe-edge: IRL1;6
server: jag
content-encoding: deflate
content-type: application/json;charset=utf-8
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 96932e7ee122dfbe89a87a0265f8bf94
a260e5fb88fa73efaedcd7880f4bfea7acf44fbb
e806134fe3187494ab16df5a777bb4d7b8d0a8c400b542a5414b63c7ef3ac3e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 558ca082e2b49b22ae356cf10b191c68
c3956046019b64bc525381a4ab7f0c70002b5b17
862dfa54857c199a1d5450b0b07d8fcc3e2702476e7a0938b3d34e2fab332af3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/984436569/?random=1674118623156&cv=9&fst=1674115200000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--ue49329d48d6c.wsipv6.com%2Fes%2Fmobile%2Fapps%2F&ref=null&tiba=App%20de%20Wells%20Fargo%20para%20dispositivos%20Apple%20y%20Android%20%7C%20Wells%20Fargo&async=1&is_vtc=1&random=4056081325&resp=GooglemKTybQhCsO&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/984436569/?random=1674118623156&cv=9&fst=1674115200000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--ue49329d48d6c.wsipv6.com%2Fes%2Fmobile%2Fapps%2F&ref=null&tiba=App%20de%20Wells%20Fargo%20para%20dispositivos%20Apple%20y%20Android%20%7C%20Wells%20Fargo&async=1&is_vtc=1&random=4056081325&resp=GooglemKTybQhCsO&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/984436569/?random=1674118623156&cv=9&fst=1674115200000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--ue49329d48d6c.wsipv6.com%2Fes%2Fmobile%2Fapps%2F&ref=null&tiba=App%20de%20Wells%20Fargo%20para%20dispositivos%20Apple%20y%20Android%20%7C%20Wells%20Fargo&async=1&is_vtc=1&random=4056081325&resp=GooglemKTybQhCsO&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 19 Jan 2023 08:57:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 558ca082e2b49b22ae356cf10b191c68
c3956046019b64bc525381a4ab7f0c70002b5b17
862dfa54857c199a1d5450b0b07d8fcc3e2702476e7a0938b3d34e2fab332af3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 9d40e7195a960954ecddf306f2c1c2cc
e622817c4799a9abc61c62cad9ebd9979962b718
e284249b454d9eb349e3d739fabb2c087ca9f89e527f53ad5a29f7eddde9530b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4735
Cache-Control: max-age=127021
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:03 GMT
Etag: "63c8408d-1d7"
Expires: Fri, 20 Jan 2023 20:14:04 GMT
Last-Modified: Wed, 18 Jan 2023 18:55:09 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
tag-wellsfargo.nod-glb.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
200 OK 266 B URL HTTP/1.1 tag-wellsfargo.nod-glb.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
IP
ASN #54396 NUANCE-MOBILITY
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a671bc4e541aadc71fd7812d93af15e7
3b8c76ac113e54f3d413e09807f3661c72d0f6b5
ef16255038c7c5847295c3c434243418d898b7b40a9095aeeb65e3ddb7579383
GET /tagserver/nuanceChat.html?UUID=WF_10006005 HTTP/1.1
Host: tag-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Cookie: inqVital_10006005=%7B%22INQ%22%3A%7B%22custID%22%3A%22-4309553653203522519%22%7D%2C%22v%22%3A3%2C%22vcnt%22%3A10%2C%22vtime%22%3A1674118589817%2C%22_acid%22%3A%22-1%22%2C%22_ss%22%3A%22unsold%22%2C%22CHM%22%3A%7B%22lpt%22%3A0%2C%22lastChat%22%3A%7B%7D%2C%22lastCallId%22%3A0%7D%2C%22_is%22%3A1674118589808%2C%22_iID%22%3A%22-43095536532035225191%22%2C%22_ig%22%3A%22CHAT%22%7D; inqSession_10006005=%7B%22tzOf%22%3A28800000%2C%22auu%22%3A0%2C%22_svMs%22%3A-1%2C%22_aTyp%22%3A3%2C%22l%22%3A%5B%5D%2C%22m%22%3A0%2C%22n%22%3A0%2C%22o%22%3A0%2C%22r%22%3A0%2C%22s%22%3A0%2C%22st%22%3A0%2C%22v%22%3A0%2C%22ab%22%3A0%2C%22G%22%3A0%2C%22ss%22%3A0%2C%22T%22%3A0%2C%22U%22%3A0%2C%22ag%22%3A0%2C%22V%22%3A0%2C%22Va%22%3A0%2C%22cA%22%3A2%2C%22cB%22%3A2%2C%22af%22%3A-1%2C%22cnA%22%3A0%2C%22at%22%3A%22WFB-MessengerApp-S%22%2C%22as%22%3A1%2C%22Ac%22%3A0%2C%22sa%22%3A0%2C%22cHn%22%3A0%2C%22hdg%22%3A%22%22%2C%22bcs%22%3A0%2C%22to%22%3A0%2C%22stv%22%3A0%2C%22pi%22%3A%22null%22%2C%22St%22%3A0%2C%22odcr%22%3A0%2C%22scI%22%3A%220%22%2C%22lpb%22%3A0%2C%22ac%22%3A1%2C%22sDLT%22%3A%22%22%2C%22ay%22%3A0%2C%22aya%22%3A0%2C%22f%22%3A0%2C%22j%22%3A0%2C%22ahh%22%3A0%2C%22CDRC%22%3A0%2C%22CHM%22%3A%7B%22pmor%22%3Afalse%7D%2C%22_ssID%22%3A%22-43095536532035225191%22%2C%22rd%22%3A%22www--wellsfargo--com--vq49329d%22%2C%22sest%22%3A%22%22%2C%22_sT%22%3A383%2C%22ltt%22%3A1674118589807%2C%22C2CM%22%3A%7B%7D%7D; inqState_10006005=%7B%22VA%22%3A%5B%5D%2C%22_loy%22%3A1%2C%22_ssQ%22%3A%5B%222023-01-19T08%3A50%3A07.032Z%22%5D%2C%22_slq%22%3A%5B%5D%2C%22_cct%22%3A0%2C%22_sqc%22%3A0%2C%22_slc%22%3A0%2C%22cfl%22%3A9223372036854776000%2C%22t%22%3A28800000%2C%22u%22%3A0%2C%22w%22%3A28800000%2C%22x%22%3A0%2C%22y%22%3A0%2C%22z%22%3A28800000%2C%22aa%22%3A0%2C%22A%22%3A28800000%2C%22LDM%22%3A%7B%22lh%22%3A%5B%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%5D%7D%2C%22CHM%22%3A%7B%7D%2C%22fst%22%3A1674118207032%2C%22lst%22%3A1674118207032%2C%22_ist%22%3A%22ELIGIBLE%22%2C%22_sesT%22%3A383%2C%22C2CM%22%3A%7B%7D%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: max-age=3600
P3P: policyref="http://tag-wellsfargo.nod-glb.nuance.com/w3c/p3p.xml", CP="NON DSP LAW CUR ADMi TAIi PSAi PSD TELi OUR SAMi IND
ETag: "+6ZNxP/6RTk"
Last-Modified: Wed, 18 Jan 2023 03:46:40 GMT
Accept-Ranges: bytes
Content-Type: text/html; charset=utf-8
Content-Length: 266
Date: Thu, 19 Jan 2023 08:57:04 GMT
tag-wellsfargo.nod-glb.nuance.com/tagserver/frame-bridge.js
200 OK 5.9 kB URL HTTP/1.1 tag-wellsfargo.nod-glb.nuance.com/tagserver/frame-bridge.js
IP
ASN #54396 NUANCE-MOBILITY
Hash 0ceb2e3aaf3130b64517eee5e5583179
49fb8fbb16b1585e19a8911f59cd7ea234c5b607
9d486489da6c1ff7c439641bc384a2e0c9e4da32c2ab73f71d1fffc4bacefc5b
GET /tagserver/frame-bridge.js HTTP/1.1
Host: tag-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
Cookie: inqVital_10006005=%7B%22INQ%22%3A%7B%22custID%22%3A%22-4309553653203522519%22%7D%2C%22v%22%3A3%2C%22vcnt%22%3A10%2C%22vtime%22%3A1674118589817%2C%22_acid%22%3A%22-1%22%2C%22_ss%22%3A%22unsold%22%2C%22CHM%22%3A%7B%22lpt%22%3A0%2C%22lastChat%22%3A%7B%7D%2C%22lastCallId%22%3A0%7D%2C%22_is%22%3A1674118589808%2C%22_iID%22%3A%22-43095536532035225191%22%2C%22_ig%22%3A%22CHAT%22%7D; inqSession_10006005=%7B%22tzOf%22%3A28800000%2C%22auu%22%3A0%2C%22_svMs%22%3A-1%2C%22_aTyp%22%3A3%2C%22l%22%3A%5B%5D%2C%22m%22%3A0%2C%22n%22%3A0%2C%22o%22%3A0%2C%22r%22%3A0%2C%22s%22%3A0%2C%22st%22%3A0%2C%22v%22%3A0%2C%22ab%22%3A0%2C%22G%22%3A0%2C%22ss%22%3A0%2C%22T%22%3A0%2C%22U%22%3A0%2C%22ag%22%3A0%2C%22V%22%3A0%2C%22Va%22%3A0%2C%22cA%22%3A2%2C%22cB%22%3A2%2C%22af%22%3A-1%2C%22cnA%22%3A0%2C%22at%22%3A%22WFB-MessengerApp-S%22%2C%22as%22%3A1%2C%22Ac%22%3A0%2C%22sa%22%3A0%2C%22cHn%22%3A0%2C%22hdg%22%3A%22%22%2C%22bcs%22%3A0%2C%22to%22%3A0%2C%22stv%22%3A0%2C%22pi%22%3A%22null%22%2C%22St%22%3A0%2C%22odcr%22%3A0%2C%22scI%22%3A%220%22%2C%22lpb%22%3A0%2C%22ac%22%3A1%2C%22sDLT%22%3A%22%22%2C%22ay%22%3A0%2C%22aya%22%3A0%2C%22f%22%3A0%2C%22j%22%3A0%2C%22ahh%22%3A0%2C%22CDRC%22%3A0%2C%22CHM%22%3A%7B%22pmor%22%3Afalse%7D%2C%22_ssID%22%3A%22-43095536532035225191%22%2C%22rd%22%3A%22www--wellsfargo--com--vq49329d%22%2C%22sest%22%3A%22%22%2C%22_sT%22%3A383%2C%22ltt%22%3A1674118589807%2C%22C2CM%22%3A%7B%7D%7D; inqState_10006005=%7B%22VA%22%3A%5B%5D%2C%22_loy%22%3A1%2C%22_ssQ%22%3A%5B%222023-01-19T08%3A50%3A07.032Z%22%5D%2C%22_slq%22%3A%5B%5D%2C%22_cct%22%3A0%2C%22_sqc%22%3A0%2C%22_slc%22%3A0%2C%22cfl%22%3A9223372036854776000%2C%22t%22%3A28800000%2C%22u%22%3A0%2C%22w%22%3A28800000%2C%22x%22%3A0%2C%22y%22%3A0%2C%22z%22%3A28800000%2C%22aa%22%3A0%2C%22A%22%3A28800000%2C%22LDM%22%3A%7B%22lh%22%3A%5B%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%5D%7D%2C%22CHM%22%3A%7B%7D%2C%22fst%22%3A1674118207032%2C%22lst%22%3A1674118207032%2C%22_ist%22%3A%22ELIGIBLE%22%2C%22_sesT%22%3A383%2C%22C2CM%22%3A%7B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: max-age=3600
P3P: policyref="http://tag-wellsfargo.nod-glb.nuance.com/w3c/p3p.xml", CP="NON DSP LAW CUR ADMi TAIi PSAi PSD TELi OUR SAMi IND
ETag: "+YmUhczVC0A"
Last-Modified: Wed, 18 Jan 2023 03:46:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Content-Length: 5926
Date: Thu, 19 Jan 2023 08:57:04 GMT
static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/generic1661785830759.js
200 OK 78 kB URL HTTP/1.1 static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/generic1661785830759.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (11854)
Hash 2d4114748dd4ba96746b364ddbb90efd
71af87311a51b11de269075c7d5222ac27170efb
c86a5b651313fa185fbb81f5e78f9ec42ae8a466532995e4b6bfda7407f5ac81
GET /tracking/medallia/wdcusprem/57907/onsite/generic1661785830759.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 12 Oct 2022 20:08:15 GMT
Vary: Accept-Encoding
ETag: W/"63471eaf-54d3a"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 78340
Date: Thu, 19 Jan 2023 08:57:04 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=vfSOpodq0JoF7bIJq%2fGpvQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=1fbb22af-9a97-4a81-8dfe-06c21341950a%3A1&_cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b&pv=2&f_cls_s=true
200 OK 76 B URL HTTP/1.1 rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=1fbb22af-9a97-4a81-8dfe-06c21341950a%3A1&_cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b&pv=2&f_cls_s=true
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash f953729e000ea6969a3477cade494c5a
fba817261ee915150b89a5f7980aaf89b6fe629f
b3c4a7b605e9c8d1adb069851e8aa24f90a0af84c85588b4c6d445a580d6f381
GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=1fbb22af-9a97-4a81-8dfe-06c21341950a%3A1&_cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b&pv=2&f_cls_s=true HTTP/1.1
Host: rubicon.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Access-Control-Allow-Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Content-Length: 76
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: origin, Accept-Encoding
Date: Thu, 19 Jan 2023 08:57:04 GMT
Connection: keep-alive
Set-Cookie: _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; Secure; SameSite=None;HttpOnly;Secure
_cls_s=1fbb22af-9a97-4a81-8dfe-06c21341950a:1; Secure; SameSite=None;HttpOnly;Secure
ROUTEID=.cligate1; path=/;HttpOnly;Secure
ISD_GB_COOKIE=!+nVZOJDRPNWm8LTNm6glvWWF2ZIYlYEQTekGX3MOfchRLkwrXcu4zgpkQy9gHbtRsQXd2j9kOX4cXA==; path=/; Httponly; Secure
DCID=wT9vUIPRo6U6%2f9P1SIpw30jGa4wuLDWzcSeDURP5kZHljeuRag%2fp0jEkE%2fZ7WSlG; Domain=rubicon.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 09:12:04 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
edge.adobedc.net/ee/irl1/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=0387da79-6ee6-4db9-ac3d-a0a66d42bf77
200 OK 15 kB URL HTTP/2 edge.adobedc.net/ee/irl1/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=0387da79-6ee6-4db9-ac3d-a0a66d42bf77
IP
Hash 2a0638bb0f6f807c0dce2569dae9e569
880a89b5f02fb1ea6259c96df13489d0970e0b2b
10018cea8a756698db4eed7d0a360587c1a4e569888030855a01c9ca9ef6fa53
POST /ee/irl1/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=0387da79-6ee6-4db9-ac3d-a0a66d42bf77 HTTP/1.1
Host: edge.adobedc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Content-Type: text/plain; charset=UTF-8
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Content-Length: 3924
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-request-id: 0387da79-6ee6-4db9-ac3d-a0a66d42bf77
x-rate-limit-remaining: 599
vary: Origin
access-control-allow-origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
access-control-allow-credentials: true
access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID
date: Thu, 19 Jan 2023 08:57:03 GMT
x-konductor: 23.1.36:a827fcb8
x-adobe-edge: IRL1;6
server: jag
content-encoding: deflate
content-type: application/json;charset=utf-8
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
resources.digital-cloud-prem.medallia.com/wdcusprem/57907/onsite/onsiteData.json
200 OK 1.7 kB URL HTTP/2 resources.digital-cloud-prem.medallia.com/wdcusprem/57907/onsite/onsiteData.json
IP
File type JSON data\012- , ASCII text, with very long lines (2056)
Hash f38ed93e44a5704769b1cde3313fec33
adfefe9525a7a91ce83efac49e842f1459a27152
f1cb60960305c1168163f09cff72c959e78f1ba849182663928062afa4d0a32b
GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1
Host: resources.digital-cloud-prem.medallia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: K9E6Lyn+5zYa02+BxUqOd1Ieh5RKsSyELv7lzKovxEeIMRmFJhuRKBOapqg1hA2HtHbXLhUapfU=
x-amz-request-id: ZVR7KG1BQXVFM2TS
last-modified: Thu, 05 Jan 2023 18:35:58 GMT
etag: "2e8716b6038e3c354a2da4f630551d90"
x-amz-version-id: Opbxz_xndE31tgAdXrS7zLsEpNCLZ9SJ
content-type: application/json
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
cache-control: max-age=0,must-revalidate
accept-ranges: bytes
date: Thu, 19 Jan 2023 08:57:04 GMT
age: 1174866
x-served-by: cache-pao17458-PAO, cache-bma1679-BMA
x-cache: HIT, HIT
x-cache-hits: 9, 6
x-timer: S1674118625.699504,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 1742
X-Firefox-Spdy: h2
tag-wellsfargo.nod-glb.nuance.com/chatskins/launch/inqChatLaunch10006005.js?chatVersion=sdk
200 OK 2.0 kB URL HTTP/1.1 tag-wellsfargo.nod-glb.nuance.com/chatskins/launch/inqChatLaunch10006005.js?chatVersion=sdk
IP
ASN #54396 NUANCE-MOBILITY
File type ASCII text, with very long lines (1087)
Hash 787c2eaac73a20043fe07217d36ddc13
ff01a5d9a3e61f191b8e350780615e9c10058a74
348584c41c564866c9dd8cd3358d7ae006c8cb5932d503d8cf9c80ab8563e035
GET /chatskins/launch/inqChatLaunch10006005.js?chatVersion=sdk HTTP/1.1
Host: tag-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
Cookie: inqVital_10006005=%7B%22INQ%22%3A%7B%22custID%22%3A%22-4309553653203522519%22%7D%2C%22v%22%3A3%2C%22vcnt%22%3A10%2C%22vtime%22%3A1674118589817%2C%22_acid%22%3A%22-1%22%2C%22_ss%22%3A%22unsold%22%2C%22CHM%22%3A%7B%22lpt%22%3A0%2C%22lastChat%22%3A%7B%7D%2C%22lastCallId%22%3A0%7D%2C%22_is%22%3A1674118589808%2C%22_iID%22%3A%22-43095536532035225191%22%2C%22_ig%22%3A%22CHAT%22%7D; inqSession_10006005=%7B%22tzOf%22%3A28800000%2C%22auu%22%3A0%2C%22_svMs%22%3A-1%2C%22_aTyp%22%3A3%2C%22l%22%3A%5B%5D%2C%22m%22%3A0%2C%22n%22%3A0%2C%22o%22%3A0%2C%22r%22%3A0%2C%22s%22%3A0%2C%22st%22%3A0%2C%22v%22%3A0%2C%22ab%22%3A0%2C%22G%22%3A0%2C%22ss%22%3A0%2C%22T%22%3A0%2C%22U%22%3A0%2C%22ag%22%3A0%2C%22V%22%3A0%2C%22Va%22%3A0%2C%22cA%22%3A2%2C%22cB%22%3A2%2C%22af%22%3A-1%2C%22cnA%22%3A0%2C%22at%22%3A%22WFB-MessengerApp-S%22%2C%22as%22%3A1%2C%22Ac%22%3A0%2C%22sa%22%3A0%2C%22cHn%22%3A0%2C%22hdg%22%3A%22%22%2C%22bcs%22%3A0%2C%22to%22%3A0%2C%22stv%22%3A0%2C%22pi%22%3A%22null%22%2C%22St%22%3A0%2C%22odcr%22%3A0%2C%22scI%22%3A%220%22%2C%22lpb%22%3A0%2C%22ac%22%3A1%2C%22sDLT%22%3A%22%22%2C%22ay%22%3A0%2C%22aya%22%3A0%2C%22f%22%3A0%2C%22j%22%3A0%2C%22ahh%22%3A0%2C%22CDRC%22%3A0%2C%22CHM%22%3A%7B%22pmor%22%3Afalse%7D%2C%22_ssID%22%3A%22-43095536532035225191%22%2C%22rd%22%3A%22www--wellsfargo--com--vq49329d%22%2C%22sest%22%3A%22%22%2C%22_sT%22%3A383%2C%22ltt%22%3A1674118589807%2C%22C2CM%22%3A%7B%7D%7D; inqState_10006005=%7B%22VA%22%3A%5B%5D%2C%22_loy%22%3A1%2C%22_ssQ%22%3A%5B%222023-01-19T08%3A50%3A07.032Z%22%5D%2C%22_slq%22%3A%5B%5D%2C%22_cct%22%3A0%2C%22_sqc%22%3A0%2C%22_slc%22%3A0%2C%22cfl%22%3A9223372036854776000%2C%22t%22%3A28800000%2C%22u%22%3A0%2C%22w%22%3A28800000%2C%22x%22%3A0%2C%22y%22%3A0%2C%22z%22%3A28800000%2C%22aa%22%3A0%2C%22A%22%3A28800000%2C%22LDM%22%3A%7B%22lh%22%3A%5B%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%5D%7D%2C%22CHM%22%3A%7B%7D%2C%22fst%22%3A1674118207032%2C%22lst%22%3A1674118207032%2C%22_ist%22%3A%22ELIGIBLE%22%2C%22_sesT%22%3A383%2C%22C2CM%22%3A%7B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: no-cache
ETag: "DmIjl/705ZQ"
Last-Modified: Wed, 18 Jan 2023 04:19:48 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Type: application/javascript
Content-Length: 2006
Date: Thu, 19 Jan 2023 08:57:04 GMT
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA
200 OK 179 B URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash c98afbdc0a7f59a9d7d9a7b726dddf34
c42aeba3cc3c3c70834a2fd4969bc0d5e829e7a7
4c7fa59dc85ba134affd35c6fa97435f107251b286cc228c7f7ba94b898f4df4
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
POST /dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Content-Type: multipart/form-data; boundary=---------------------------159849065737508700382487879748
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Content-Length: 171
Connection: keep-alive
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:4$_ss:0$_st:1674120421957$ses_id:1674118201128%3Bexp-session$_pn:4%3Bexp-session; __ts_xfdF3__=768561158; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22RhtuHP5IyirPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22VzVOUFFSSkI3MER1VHhZaA%3D%3DJV30EgV1kzqh486nKeo0MOeHBu0iS4WbS_AtrbVqoCMiIEw3ka-zrEXZFBxLj8eshEShq-SsRTQ6eS9GYIjEAzGTJL455QHuIW0%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=; _cls_s=1fbb22af-9a97-4a81-8dfe-06c21341950a:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:04 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 179
Connection: keep-alive
Access-Control-Allow-Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
x-envoy-decorator-operation: ingress DeviceCategoryPost4
X-Akamai-Transformed: 9 175 0 pmb=mTOE,1
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Link: <https://www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk>; rel=preload; as=script
Set-Cookie: DCID=bSkAa93GqkVAn5LmBYwh1aqEUZxdJq4n4t9RMtbpjDqjkKyf%2fTDvk+WVCmxI%2filz; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 09:12:04 GMT;Httponly; Secure
_abck=28288A7DE4AE46654FCB153830F56692~-1~YAAQHWgRYPbFQcGFAQAAI/Y+yQlWIAyEs8veZKbn74i1p/VIZmdYYp5AWz3uuYYtNjG3X01e7Q1a3IxFz+xgv5kHs3JbjH37CmpI1QXHkrQnkAv59cjOvDj0hyNv5GbZ1FokVL9eKqcT2UNGc8t+bOv3poUex18i/+NRJ5j8PSokqbJ3/FmPyBn8iFqySCYvymLvWEKDGdpWwSBybae1FDqbZ709RHswd6VzeBEN/9fZIajlMbH/S8Gt8HMijblmeuCrW5dleii8WP1+tOOHXoW09v4fyJcNe9EXURFREVERZrqVKcS464UCq1xG4VrKQyeddH4sl1nW3h8VfAzLKOrQKPIOW1WrkhzzVUPY6rEkZitHnYyZJ8kYOgRrpfc37g==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 19 Jan 2024 08:57:04 GMT; Max-Age=31536000; Secure
bm_sz=C9931F1CD9E11DAC043D874A7A1ECD30~YAAQHWgRYPfFQcGFAQAAI/Y+yRIjiiGiD4dKwI8ozxythSVZyx248ebM5UG3HHO64jhNi1QCqTtx5xPv8YOZ6QsK/vakx2SLRqn1Ecg0UEYkNx6gvs+SCWoDjLRQIcghhNUnzGMqi/iCbXL2/+mMS0hOOlQxwFKfkuBNom8jrdcfDSaCKA8zbQUFwTxZwi58fNS9S0/9nVxtXtexEyrQkZcL+V6ijS1eR/TTKsLu+53lKn70t+W+NQxQ5aMUEXHEXLfjc5ArC55kuwATVZHQywV9JwTinvqK3E34r+ShWaqOOxfmbps0~3355952~3752501; Domain=.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 12:57:04 GMT; Max-Age=14400
X-Via: 1.1 bl21:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905e0_bl21_13481-47968
static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js
200 OK 16 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (599)
Hash 18a9dcc7cee831010cf1647c8e39088a
731f39c30835414c6e165dd4687bf4071fe0eb10
1dc439a17ef08f995584c4869ccc397120b2502b57ba40240887df28e347be9b
GET /assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 03 Mar 2021 23:46:24 GMT
Vary: Accept-Encoding
ETag: W/"60401fd0-bbed"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 15970
Date: Thu, 19 Jan 2023 08:57:04 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=rkONOAJoh69t4XLGXUSAhw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsps.ssl.com/
200 OK 1.8 kB IP
Hash 2ed3f74d3ee6660ed706aae885e416e7
1b89bd21e14afa17104eee239f45019ccae4ee2a
2041dabf7a0c8ffc72fd905309d7c50ec9637f5ee0e35653ee6a037011e75419
POST / HTTP/1.1
Host: ocsps.ssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Jan 2023 08:57:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1810
Connection: keep-alive
Expires: Wed, 25 Jan 2023 16:48:27 GMT
Cache-Control: max-age=86400,public,no-transform,must-revalidate
ETag: "1b89bd21e14afa17104eee239f45019ccae4ee2a"
Last-Modified: Wed, 18 Jan 2023 16:48:28 GMT
X-Proxy-Cache: HIT
ocsps.ssl.com/
200 OK 1.8 kB IP
Hash ad89fa010565cb82c662ef3a6866194d
d51ee94b918fb10318f2608804a3aa4a5ce02b7f
0cbb672418b863f813f202e778c8fe64679920d72a5d18be96107e00d8970fbe
POST / HTTP/1.1
Host: ocsps.ssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Jan 2023 08:57:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1810
Connection: keep-alive
Expires: Wed, 25 Jan 2023 14:17:20 GMT
Cache-Control: max-age=86400,public,no-transform,must-revalidate
ETag: "d51ee94b918fb10318f2608804a3aa4a5ce02b7f"
Last-Modified: Wed, 18 Jan 2023 14:17:21 GMT
X-Proxy-Cache: HIT
udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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
200 OK 0 B URL HTTP/2 udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1
Host: udc-neb.kampyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 08:57:05 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-allow-headers: X-Requested-With, Origin, Content-Type, Accept
access-control-max-age: 1800
x-me: prod-instance-gatewayservice-green-810v
x-application-context: application:9090
content-type: image/gif; charset=UTF-8
content-length: 0
server: Jetty(9.2.11.v20150529)
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
udc-neb.kampyle.com/v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track
200 OK 59 B URL HTTP/2 udc-neb.kampyle.com/v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0ab969c512ad71613832d03710eadde2
f64271cfa7e4b386fed80e18a958a90ffd1e3893
cbc1399b82e42018fbc8b8b9277200665d6367c9134ead9308ea5e568b00e459
POST /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1
Host: udc-neb.kampyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 2073
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 08:57:05 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-allow-headers: X-Requested-With, Origin, Content-Type, Accept
access-control-max-age: 1800
x-me: prod-instance-gatewayservice-green-164g
x-application-context: application:9090
content-type: text/plain;charset=ISO-8859-1
content-length: 59
server: Jetty(9.2.11.v20150529)
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
media-wellsfargo.nod-glb.nuance.com/media/launch/sdkChatLoader.min.js?codeVersion=1674015550273
200 OK 2.3 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/sdkChatLoader.min.js?codeVersion=1674015550273
IP
ASN #54396 NUANCE-MOBILITY
File type ASCII text, with very long lines (7108), with no line terminators
Hash 69248df2e4cd19badf361961108eec5e
86054d9394816797a159f91274bf9c97033a9024
4879bdd8f9d0bd0597e5df3170a4164ca2ca3aaab294b91dd49332db9d36f290
GET /media/launch/sdkChatLoader.min.js?codeVersion=1674015550273 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "6Cu8yUJ1UkL"
Last-Modified: Wed, 18 Jan 2023 03:50:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Content-Length: 2292
Date: Thu, 19 Jan 2023 08:57:05 GMT
media-wellsfargo.nod-glb.nuance.com/media/launch/site_10006005_default_helper.js?codeVersion=1674015550273
200 OK 32 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/site_10006005_default_helper.js?codeVersion=1674015550273
IP
ASN #54396 NUANCE-MOBILITY
File type Unicode text, UTF-8 text, with very long lines (59866)
Hash d37160d20ada9de097bfe1059ac0d098
f83084b91d72fa47ee334af8cdb6fcc2bb411426
71b1ae42106c2bf91f92ac35c1b310131c5623be24e748c4b6776b1f053dab7f
GET /media/launch/site_10006005_default_helper.js?codeVersion=1674015550273 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "7xBH+KVvHIy"
Last-Modified: Wed, 18 Jan 2023 04:19:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Thu, 19 Jan 2023 08:57:05 GMT
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/dti_apg/api/dip/v1/dip
200 OK 129 B URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/dti_apg/api/dip/v1/dip
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash ad0af59af3bcabac5f99651f59cbdf22
984ec29dc9329dc50778345a8eec580ec0eb3146
ac6a029861fc818a83e21ecb55f00204b238333e6d7bff236919871819f569da
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
POST /dti_apg/api/dip/v1/dip HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
ADRUM: isAjax:true
Content-Length: 2062
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:4$_ss:0$_st:1674120421957$ses_id:1674118201128%3Bexp-session$_pn:4%3Bexp-session; __ts_xfdF3__=445905092; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22Rhtue88I3CrPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22YW82SGtZUmlmVXVEeml3Zw%3D%3DNaub5KwZ8qh0IUNl9nuUSJE-rgeJI9lWE3xW4WWVO31N5ZoZ6qyhLl5HwZTaFqFwSeYAnZ2dtoRXpDHgNeq0TcLJC7clNf8K91A%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=; _cls_s=1fbb22af-9a97-4a81-8dfe-06c21341950a:1; mdLogger=false; kampyle_userid=cf22-bf83-fe86-f6c5-9ebe-e926-c873-4258; kampyleUserSession=1674118624475; kampyleSessionPageCounter=1; kampyleUserSessionsCount=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:05 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 129
Connection: keep-alive
Access-Control-Allow-Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
x-envoy-upstream-service-time: 21
X-Akamai-Transformed: 9 164 0 pmb=mTOE,1
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Link: <https://www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk>; rel=preload; as=script
Set-Cookie: DCID=GjVmHlbLq2WxXCwA8PFN1s4VrFDZhIHk+a8KmGJyb6b2z5pee2VgVvPzhe24wZzk; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 09:12:05 GMT;Httponly; Secure
_abck=D5646FC26EE9BEF6A06DA0210F1A5070~-1~YAAQJmgRYIirVKyFAQAAA/o+yQlusTqrMyk3PYJByHCDUmhTrVrAcRoSE7RCEyc76UGDWS/8Uj2LQJm12A2fHrnvqvtTZLaAcod/82aemKOSHx97MB6I61Hc2tZ4/JkfiisTbR8S9X3DtBTPPndHUIvUdwSrKTYBWPm2Nve2nAahJCBQ1fHjT7rPavLGl8JzevatRoMbFtENuEdAUzy/0U9jZLVVRdFoNleAfRpPEEFXIP6TU4Do4sI0bCVcwaby8p4CWutkToB/ytplnalhAtBIeq6nXR0QsNG1jWw5R5l6M7NxmQqHppzKdMTtjxMpq+vUtD6pLCiSX05PptmRRKadmts5fcjDyF6CLMyeG5mjq/31d6hzXHK+j6WXSVIgmQ==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 19 Jan 2024 08:57:05 GMT; Max-Age=31536000; Secure
bm_sz=31C269610B755893DEBE1716513D1EFF~YAAQJmgRYImrVKyFAQAAA/o+yRJLep/JX8w5mRcfRusOWo2WUAnQk8oBoWKTVc0zve0oiP8StNV3TEUunEtS1TyyjpEVKdj17OHPEJBGm+oZmJaFSP51g3Zs5QAMo9KJTvW+EqHrOAta3yiFE8bmzzQLidVIWNemdJgPYFrVaUzg7SVmUsIcYIDNjKUD2agJCzPCwxqJ8cc7o7pcLD0WLWeDu9gV61lfXQ/Ckz3W9HjalOPkBvBPiPOwgD2UKKo4vu9qJkJ+UowbyrJOmKYBhZ0rBNaTQbDsP6p1FTjUBOgKYmP44H2D~4338502~4601400; Domain=.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 12:57:05 GMT; Max-Age=14400
X-Via: 1.1 bl22:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905e1_bl21_13481-48039
media-wellsfargo.nod-glb.nuance.com/media/launch/site_10006005_default_jssdk.js?codeVersion=1674015550273
200 OK 26 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/site_10006005_default_jssdk.js?codeVersion=1674015550273
IP
ASN #54396 NUANCE-MOBILITY
File type ASCII text, with very long lines (5905)
Hash e29cf9b589cdfede37fe89e48b01fa3c
07b00bf2034a4047e44acfa6c0f91e768e888026
8a9e8fb783ee16760d24a6d5232b441a855565f66437eb696e0396ef950940b5
GET /media/launch/site_10006005_default_jssdk.js?codeVersion=1674015550273 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "D0yACs/3act"
Last-Modified: Wed, 18 Jan 2023 04:19:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Thu, 19 Jan 2023 08:57:06 GMT
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?m&fq=load
200 OK 265 B URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?m&fq=load
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash b8bd117b78dee7e6d3f11cfbcef7a2de
8e26dbf30869cfb60d58b3da1d3c20326e841d54
6b588da4313cca5b48b92abbfc7138f7626e9f3f2b1b42089ebc07fd56db625f
Analyzer Verdict Alert quad9 Sinkholed
POST /dti_apg/api/imp/v1.0/report/?m&fq=load HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
content-type: text/plain;charset=UTF-8
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Content-Length: 1464
Connection: keep-alive
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:4$_ss:0$_st:1674120421957$ses_id:1674118201128%3Bexp-session$_pn:4%3Bexp-session; __ts_xfdF3__=528535667; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22Rhtue88I3CrPNiyYgSRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22YW82SGtZUmlmVXVEeml3Zw%3D%3DNaub5KwZ8qh0IUNl9nuUSJE-rgeJI9lWE3xW4WWVO31N5ZoZ6qyhLl5HwZTaFqFwSeYAnZ2dtoRXpDHgNeq0TcLJC7clNf8K91A%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A10000%2C%22fr%22%3A%22RFQaobgBpodJhK6R5gOe2Q%3D%3DS8WG1MetypBHiHrf9KyUXkPIkGHLdrKeHFKlpCNdw5ztcNRsLPgBDxaJh5boloYtojCmpo0po6jX36DPO1TJZMrW2HF2_M4kWSPeboaX7y8BY3SD1C6AvoXSXKgbNFLTzsRpI9zwXtzrDc6St0UC9oJHoYbXZiPk5SGLqTGDNOZJsAy05k8LCH_E%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RGp23IJ9Uk%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=; _cls_s=1fbb22af-9a97-4a81-8dfe-06c21341950a:1; mdLogger=false; kampyle_userid=cf22-bf83-fe86-f6c5-9ebe-e926-c873-4258; kampyleUserSession=1674118624475; kampyleSessionPageCounter=1; kampyleUserSessionsCount=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:06 GMT
Content-Type: text/plain
Content-Length: 265
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Allow-Methods: OPTIONS, GET, POST
Access-Control-Allow-Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Link: <https://www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk>; rel=preload; as=script
Set-Cookie: DCID=tfezHIZEHjVfOxFXC+eXDLoJRIjfkpGLZmk1YbLtXLbcSkoBquIavDP63Nt5tdyW; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 09:12:06 GMT;Httponly; Secure
_abck=C08FBF13BB10EE763CA36C9CC247ADB1~-1~YAAQJmgRYKCrVKyFAQAAr/s+yQnjtMvRU+QI4bRWuiD9HEcJvIzo3yuAslPfJfDed3783ha53GeSi/G3ehNNvdRmYtm3szMRDtAfpsQkvd5q7pvXEnRQKMe6yuBwxiFeXqr0ZEIuEzkrRxWIDfbPgPAabAqMmycs4ulUgZ0hVx0GrwKClngtuVbjODSszUE0oPFrDRSu9yFlfEMKYOnMT4ZWF74pdjVuDW3yqtMx7HnBQMTXMVGJcL7Pouq4qJ6J/gsbIi51mQK6v/BH45wOlpUybel9IexYjsnytA0kkTdV8Sf8U7WE8H83ngcveI1p/j/7O56qqXjI8/5TZwwQvsPvjSSZDqvnRCQUj3OCezwFr2nS2FU4yxqgBeXPC6Gg5g==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 19 Jan 2024 08:57:06 GMT; Max-Age=31536000; Secure
bm_sz=5F12814DE22A5BB976443CAF197C3C3A~YAAQJmgRYKGrVKyFAQAAr/s+yRI0R43w0+2q/HzIXslu8lnHtp+TJ+IiCHILYnCbb5IM5UPZ/Hkg75K+71mlI+VPVGu4Qh8zm6sPhKm1OOQoUmshGMFUMBGJ5rwmS3RTBAwSVw5I8F/G5uxbLPbczG9JacnzitJzF1H6O5c5wwxezXJ6G0cNQkpNUiIqj0TH+HvGY8J7XITAXTOlGk0UTpzDA5ZwVAJynQROIT5HywcBhINFWDBuVNYy9F76JVx2145Rs91J42pnEgUtcs7F7yIbEzQlhlqIu3zF5a+7MqD1clzgMDmY~4338502~4601400; Domain=.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 12:57:05 GMT; Max-Age=14399
X-Via: 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905e1_bl21_13481-48076
ocsp.digicert.com/
200 OK 471 B IP
Hash daae0b671ef30cc5bc1fd024dd55db4d
ff1ceb82727fbcad53f5c4872078b087260665da
2f7f100606b6abc597fdcd26251a009fa4468e59445937454349a48eba2e671c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1141
Cache-Control: max-age=114434
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:06 GMT
Etag: "63c81d6f-1d7"
Expires: Fri, 20 Jan 2023 16:44:20 GMT
Last-Modified: Wed, 18 Jan 2023 16:25:19 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash daae0b671ef30cc5bc1fd024dd55db4d
ff1ceb82727fbcad53f5c4872078b087260665da
2f7f100606b6abc597fdcd26251a009fa4468e59445937454349a48eba2e671c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4550
Cache-Control: max-age=117843
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 08:57:06 GMT
Etag: "63c81d6f-1d7"
Expires: Fri, 20 Jan 2023 17:41:09 GMT
Last-Modified: Wed, 18 Jan 2023 16:25:19 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
media-wellsfargo.nod-glb.nuance.com/media/launch/all_10006005.json?codeVersion=1674015550273
200 OK 139 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/all_10006005.json?codeVersion=1674015550273
IP
ASN #54396 NUANCE-MOBILITY
File type Unicode text, UTF-8 text, with very long lines (327)
Size 139 kB (138822 bytes)
Hash 94471e930ecccb9ab022d921c615ee85
ee117009fbdecde41694b5979e2483d29dcf9adc
004c8e06ea86947a1098505eb2eabfe6631907a7bfcdf74ab8d2e54d3dd8a158
GET /media/launch/all_10006005.json?codeVersion=1674015550273 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tag-wellsfargo.nod-glb.nuance.com
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "9l+6MXWqmIf"
Last-Modified: Wed, 18 Jan 2023 04:19:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/json
Transfer-Encoding: chunked
Date: Thu, 19 Jan 2023 08:57:06 GMT
media-wellsfargo.nod-glb.nuance.com/media/launch/tcFramework_jssdk.min.js?codeVersion=1674015550273
200 OK 136 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/tcFramework_jssdk.min.js?codeVersion=1674015550273
IP
ASN #54396 NUANCE-MOBILITY
File type ASCII text, with very long lines (65536), with no line terminators
Size 136 kB (136175 bytes)
Hash 59e567c38c35acd8b88471a66cdc80a3
d0479127e1529468017258a6f4464d2ecdff445f
b166b99ff9c03efd887510e4aa8a8491e5bb9992da38c2af2c46b3cd3838448f
GET /media/launch/tcFramework_jssdk.min.js?codeVersion=1674015550273 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "G5Y6vw0fr2n"
Last-Modified: Wed, 18 Jan 2023 03:50:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Thu, 19 Jan 2023 08:57:07 GMT
tag-wellsfargo.nod-glb.nuance.com/tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1674015550273
200 OK 6.5 kB URL HTTP/1.1 tag-wellsfargo.nod-glb.nuance.com/tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1674015550273
IP
ASN #54396 NUANCE-MOBILITY
File type HTML document text\012- HTML document text\012- HTML document text\012- Java source text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (807)
Hash 92c92a14d7348502d53a96ffb124e505
541bcbda5db19216712a37552092329b09a6301e
9f86b1cce23c8debd8f30ae3d4284689d83fe289f2e006e623e62eb0f90cbf67
GET /tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1674015550273 HTTP/1.1
Host: tag-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
Cookie: inqVital_10006005=%7B%22INQ%22%3A%7B%22custID%22%3A%22-4309553653203522519%22%7D%2C%22v%22%3A3%2C%22vcnt%22%3A10%2C%22vtime%22%3A1674118589817%2C%22_acid%22%3A%22-1%22%2C%22_ss%22%3A%22unsold%22%2C%22CHM%22%3A%7B%22lpt%22%3A0%2C%22lastChat%22%3A%7B%7D%2C%22lastCallId%22%3A0%7D%2C%22_is%22%3A1674118589808%2C%22_iID%22%3A%22-43095536532035225191%22%2C%22_ig%22%3A%22CHAT%22%7D; inqSession_10006005=%7B%22tzOf%22%3A28800000%2C%22auu%22%3A0%2C%22_svMs%22%3A-1%2C%22_aTyp%22%3A3%2C%22l%22%3A%5B%5D%2C%22m%22%3A0%2C%22n%22%3A0%2C%22o%22%3A0%2C%22r%22%3A0%2C%22s%22%3A0%2C%22st%22%3A0%2C%22v%22%3A0%2C%22ab%22%3A0%2C%22G%22%3A0%2C%22ss%22%3A0%2C%22T%22%3A0%2C%22U%22%3A0%2C%22ag%22%3A0%2C%22V%22%3A0%2C%22Va%22%3A0%2C%22cA%22%3A2%2C%22cB%22%3A2%2C%22af%22%3A-1%2C%22cnA%22%3A0%2C%22at%22%3A%22WFB-MessengerApp-S%22%2C%22as%22%3A1%2C%22Ac%22%3A0%2C%22sa%22%3A0%2C%22cHn%22%3A0%2C%22hdg%22%3A%22%22%2C%22bcs%22%3A0%2C%22to%22%3A0%2C%22stv%22%3A0%2C%22pi%22%3A%22null%22%2C%22St%22%3A0%2C%22odcr%22%3A0%2C%22scI%22%3A%220%22%2C%22lpb%22%3A0%2C%22ac%22%3A1%2C%22sDLT%22%3A%22%22%2C%22ay%22%3A0%2C%22aya%22%3A0%2C%22f%22%3A0%2C%22j%22%3A0%2C%22ahh%22%3A0%2C%22CDRC%22%3A0%2C%22CHM%22%3A%7B%22pmor%22%3Afalse%7D%2C%22_ssID%22%3A%22-43095536532035225191%22%2C%22rd%22%3A%22www--wellsfargo--com--vq49329d%22%2C%22sest%22%3A%22%22%2C%22_sT%22%3A383%2C%22ltt%22%3A1674118589807%2C%22C2CM%22%3A%7B%7D%7D; inqState_10006005=%7B%22VA%22%3A%5B%5D%2C%22_loy%22%3A1%2C%22_ssQ%22%3A%5B%222023-01-19T08%3A50%3A07.032Z%22%5D%2C%22_slq%22%3A%5B%5D%2C%22_cct%22%3A0%2C%22_sqc%22%3A0%2C%22_slc%22%3A0%2C%22cfl%22%3A9223372036854776000%2C%22t%22%3A28800000%2C%22u%22%3A0%2C%22w%22%3A28800000%2C%22x%22%3A0%2C%22y%22%3A0%2C%22z%22%3A28800000%2C%22aa%22%3A0%2C%22A%22%3A28800000%2C%22LDM%22%3A%7B%22lh%22%3A%5B%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%5D%7D%2C%22CHM%22%3A%7B%7D%2C%22fst%22%3A1674118207032%2C%22lst%22%3A1674118207032%2C%22_ist%22%3A%22ELIGIBLE%22%2C%22_sesT%22%3A383%2C%22C2CM%22%3A%7B%7D%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: max-age=3600
P3P: policyref="http://tag-wellsfargo.nod-glb.nuance.com/w3c/p3p.xml", CP="NON DSP LAW CUR ADMi TAIi PSAi PSD TELi OUR SAMi IND
ETag: "AN7QOU24IDr"
Last-Modified: Wed, 18 Jan 2023 03:46:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Content-Length: 6470
Date: Thu, 19 Jan 2023 08:57:08 GMT
tag-wellsfargo.nod-glb.nuance.com/tagserver/init/isTrustedDomain
200 OK 0 B URL HTTP/1.1 tag-wellsfargo.nod-glb.nuance.com/tagserver/init/isTrustedDomain
IP
ASN #54396 NUANCE-MOBILITY
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /tagserver/init/isTrustedDomain HTTP/1.1
Host: tag-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 70
Origin: https://tag-wellsfargo.nod-glb.nuance.com
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1674015550273
Cookie: inqVital_10006005=%7B%22INQ%22%3A%7B%22custID%22%3A%22-4309553653203522519%22%7D%2C%22v%22%3A3%2C%22vcnt%22%3A10%2C%22vtime%22%3A1674118589817%2C%22_acid%22%3A%22-1%22%2C%22_ss%22%3A%22unsold%22%2C%22CHM%22%3A%7B%22lpt%22%3A0%2C%22lastChat%22%3A%7B%7D%2C%22lastCallId%22%3A0%7D%2C%22_is%22%3A1674118589808%2C%22_iID%22%3A%22-43095536532035225191%22%2C%22_ig%22%3A%22CHAT%22%7D; inqSession_10006005=%7B%22tzOf%22%3A28800000%2C%22auu%22%3A0%2C%22_svMs%22%3A-1%2C%22_aTyp%22%3A3%2C%22l%22%3A%5B%5D%2C%22m%22%3A0%2C%22n%22%3A0%2C%22o%22%3A0%2C%22r%22%3A0%2C%22s%22%3A0%2C%22st%22%3A0%2C%22v%22%3A0%2C%22ab%22%3A0%2C%22G%22%3A0%2C%22ss%22%3A0%2C%22T%22%3A0%2C%22U%22%3A0%2C%22ag%22%3A0%2C%22V%22%3A0%2C%22Va%22%3A0%2C%22cA%22%3A2%2C%22cB%22%3A2%2C%22af%22%3A-1%2C%22cnA%22%3A0%2C%22at%22%3A%22WFB-MessengerApp-S%22%2C%22as%22%3A1%2C%22Ac%22%3A0%2C%22sa%22%3A0%2C%22cHn%22%3A0%2C%22hdg%22%3A%22%22%2C%22bcs%22%3A0%2C%22to%22%3A0%2C%22stv%22%3A0%2C%22pi%22%3A%22null%22%2C%22St%22%3A0%2C%22odcr%22%3A0%2C%22scI%22%3A%220%22%2C%22lpb%22%3A0%2C%22ac%22%3A1%2C%22sDLT%22%3A%22%22%2C%22ay%22%3A0%2C%22aya%22%3A0%2C%22f%22%3A0%2C%22j%22%3A0%2C%22ahh%22%3A0%2C%22CDRC%22%3A0%2C%22CHM%22%3A%7B%22pmor%22%3Afalse%7D%2C%22_ssID%22%3A%22-43095536532035225191%22%2C%22rd%22%3A%22www--wellsfargo--com--vq49329d%22%2C%22sest%22%3A%22%22%2C%22_sT%22%3A383%2C%22ltt%22%3A1674118589807%2C%22C2CM%22%3A%7B%7D%7D; inqState_10006005=%7B%22VA%22%3A%5B%5D%2C%22_loy%22%3A1%2C%22_ssQ%22%3A%5B%222023-01-19T08%3A50%3A07.032Z%22%5D%2C%22_slq%22%3A%5B%5D%2C%22_cct%22%3A0%2C%22_sqc%22%3A0%2C%22_slc%22%3A0%2C%22cfl%22%3A9223372036854776000%2C%22t%22%3A28800000%2C%22u%22%3A0%2C%22w%22%3A28800000%2C%22x%22%3A0%2C%22y%22%3A0%2C%22z%22%3A28800000%2C%22aa%22%3A0%2C%22A%22%3A28800000%2C%22LDM%22%3A%7B%22lh%22%3A%5B%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%5D%7D%2C%22CHM%22%3A%7B%7D%2C%22fst%22%3A1674118207032%2C%22lst%22%3A1674118207032%2C%22_ist%22%3A%22ELIGIBLE%22%2C%22_sesT%22%3A383%2C%22C2CM%22%3A%7B%7D%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: https://tag-wellsfargo.nod-glb.nuance.com
Vary: Origin
Access-Control-Allow-Credentials: true
P3P: policyref="http://tag-wellsfargo.nod-glb.nuance.com/w3c/p3p.xml", CP="NON DSP LAW CUR ADMi TAIi PSAi PSD TELi OUR SAMi IND
Content-Type: text/html; charset=utf-8
Content-Length: 0
Date: Thu, 19 Jan 2023 08:57:08 GMT
tag-wellsfargo.nod-glb.nuance.com/tagserver/init/initFramework
200 OK 212 B URL HTTP/1.1 tag-wellsfargo.nod-glb.nuance.com/tagserver/init/initFramework
IP
ASN #54396 NUANCE-MOBILITY
File type JSON data\012- , ASCII text, with no line terminators
Hash b2a73bf298f96d74a6a8974a1cfe7f08
392fcc81b780837104b4001c2e29b2509ca71591
e0ae5af4b7efdf493425d3ddf5b11c9289f6cdfafbbbc667b1254699285be5aa
POST /tagserver/init/initFramework HTTP/1.1
Host: tag-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 181
Origin: https://tag-wellsfargo.nod-glb.nuance.com
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1674015550273
Cookie: inqVital_10006005=%7B%22INQ%22%3A%7B%22custID%22%3A%22-4309553653203522519%22%7D%2C%22v%22%3A3%2C%22vcnt%22%3A10%2C%22vtime%22%3A1674118589817%2C%22_acid%22%3A%22-1%22%2C%22_ss%22%3A%22unsold%22%2C%22CHM%22%3A%7B%22lpt%22%3A0%2C%22lastChat%22%3A%7B%7D%2C%22lastCallId%22%3A0%7D%2C%22_is%22%3A1674118589808%2C%22_iID%22%3A%22-43095536532035225191%22%2C%22_ig%22%3A%22CHAT%22%7D; inqSession_10006005=%7B%22tzOf%22%3A28800000%2C%22auu%22%3A0%2C%22_svMs%22%3A-1%2C%22_aTyp%22%3A3%2C%22l%22%3A%5B%5D%2C%22m%22%3A0%2C%22n%22%3A0%2C%22o%22%3A0%2C%22r%22%3A0%2C%22s%22%3A0%2C%22st%22%3A0%2C%22v%22%3A0%2C%22ab%22%3A0%2C%22G%22%3A0%2C%22ss%22%3A0%2C%22T%22%3A0%2C%22U%22%3A0%2C%22ag%22%3A0%2C%22V%22%3A0%2C%22Va%22%3A0%2C%22cA%22%3A2%2C%22cB%22%3A2%2C%22af%22%3A-1%2C%22cnA%22%3A0%2C%22at%22%3A%22WFB-MessengerApp-S%22%2C%22as%22%3A1%2C%22Ac%22%3A0%2C%22sa%22%3A0%2C%22cHn%22%3A0%2C%22hdg%22%3A%22%22%2C%22bcs%22%3A0%2C%22to%22%3A0%2C%22stv%22%3A0%2C%22pi%22%3A%22null%22%2C%22St%22%3A0%2C%22odcr%22%3A0%2C%22scI%22%3A%220%22%2C%22lpb%22%3A0%2C%22ac%22%3A1%2C%22sDLT%22%3A%22%22%2C%22ay%22%3A0%2C%22aya%22%3A0%2C%22f%22%3A0%2C%22j%22%3A0%2C%22ahh%22%3A0%2C%22CDRC%22%3A0%2C%22CHM%22%3A%7B%22pmor%22%3Afalse%7D%2C%22_ssID%22%3A%22-43095536532035225191%22%2C%22rd%22%3A%22www--wellsfargo--com--vq49329d%22%2C%22sest%22%3A%22%22%2C%22_sT%22%3A383%2C%22ltt%22%3A1674118589807%2C%22C2CM%22%3A%7B%7D%7D; inqState_10006005=%7B%22VA%22%3A%5B%5D%2C%22_loy%22%3A1%2C%22_ssQ%22%3A%5B%222023-01-19T08%3A50%3A07.032Z%22%5D%2C%22_slq%22%3A%5B%5D%2C%22_cct%22%3A0%2C%22_sqc%22%3A0%2C%22_slc%22%3A0%2C%22cfl%22%3A9223372036854776000%2C%22t%22%3A28800000%2C%22u%22%3A0%2C%22w%22%3A28800000%2C%22x%22%3A0%2C%22y%22%3A0%2C%22z%22%3A28800000%2C%22aa%22%3A0%2C%22A%22%3A28800000%2C%22LDM%22%3A%7B%22lh%22%3A%5B%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%2C%7B%22id%22%3A-1%2C%22cg%22%3A%5B%5D%7D%5D%7D%2C%22CHM%22%3A%7B%7D%2C%22fst%22%3A1674118207032%2C%22lst%22%3A1674118207032%2C%22_ist%22%3A%22ELIGIBLE%22%2C%22_sesT%22%3A383%2C%22C2CM%22%3A%7B%7D%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: https://tag-wellsfargo.nod-glb.nuance.com
Vary: Origin
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
P3P: policyref="http://tag-wellsfargo.nod-glb.nuance.com/w3c/p3p.xml", CP="NON DSP LAW CUR ADMi TAIi PSAi PSD TELi OUR SAMi IND
Content-Language: en-US
Content-Type: application/json; charset=UTF-8
Content-Length: 212
Date: Thu, 19 Jan 2023 08:57:08 GMT
media-wellsfargo.nod-glb.nuance.com/media/launch/ci/InqFrameworkService.js?codeVersion=1674015550273
200 OK 92 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/ci/InqFrameworkService.js?codeVersion=1674015550273
IP
ASN #54396 NUANCE-MOBILITY
File type Unicode text, UTF-8 text, with very long lines (39886), with NEL line terminators
Hash 4aa18006012fd1607c61ee057d338075
01e01b5ae8f170f65fb4cd56c1311ea65ec1da2f
7ffdb6e298ff49bd4f8f663cc10801a074e0ac55a6ae01ced74951dd385efeae
GET /media/launch/ci/InqFrameworkService.js?codeVersion=1674015550273 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "66K7NpaQ3Wx"
Last-Modified: Wed, 18 Jan 2023 03:50:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Thu, 19 Jan 2023 08:57:08 GMT
www--wellsfargo--com--ue49329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?x
200 OK 0 B URL HTTP/1.1 www--wellsfargo--com--ue49329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?x
IP
ASN #54994 QUANTILNETWORKS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
POST /dti_apg/api/imp/v1.0/report/?x HTTP/1.1
Host: www--wellsfargo--com--ue49329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/es/mobile/apps/
content-type: text/plain;charset=UTF-8
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Content-Length: 316
Connection: keep-alive
Cookie: utag_main=v_id:0185c9387f28001a8d7b45c5fb7b00050004600900918$_sn:1$_se:4$_ss:0$_st:1674120421957$ses_id:1674118201128%3Bexp-session$_pn:4%3Bexp-session; __ts_xfdF3__=299268251; dti_apg=%7B%22_rt%22%3A%22DTATcqNHlBnK8Cmqo1D6mOMQA4q7sAvy2UwCwyWXhqs%3D%22%2C%22_s%22%3A%22Rhtue88I3CrPMRangyRQmH7%2BF%2BOk6x2n0X0P%2FwmPr4cf%22%2C%22c%22%3A%22YW82SGtZUmlmVXVEeml3Zw%3D%3DNaub5KwZ8qh0IUNl9nuUSJE-rgeJI9lWE3xW4WWVO31N5ZoZ6qyhLl5HwZTaFqFwSeYAnZ2dtoRXpDHgNeq0TcLJC7clNf8K91A%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22B6OvCW42bsaWEpSaBMZynA%3D%3DD48n18Zy2PMPP31lnkWB4ljAHt4Y6flp6zz1AKCe32NUNX668iY1HPZFe0FP3FWdMCz-wAhR_Q6QHKsSvlIvoV2kFe2S6e19oVp8GKMF_6bxhIOtfBh8k3pJj-mKhTjuZ8BJtIow-EZ-SEhPBLN3P6WidUFO81UOVXDZSCWfZNxqMqEG-ZBtSxw8%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRDPGY5RKg0HoE9k4%3D%22%7D; _cls_v=1fd015b7-1d8b-4b5f-bd33-6aa268602c6b; _gcl_au=1.1.80551207.1674118203; _ga=GA1.2.1735027059.1674118203; _gid=GA1.2.1754299344.1674118203; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity=CiY0NzM5MDIyNTg3MjA2OTcyNTM1MzgzOTQ3MTUzMjAxMTg3MjYxMlIRCMGL4sncMBABGAEqBElSTDHwAcGL4sncMA==; kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_cluster=irl1; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=MCMID|47390225872069725353839471532011872612; _imp_di_pc_=ATsEyWMAAAAAM3NWavtOrdPvt1zcqD4U; _gat_gtag_UA_107148943_1=1; ADRUM_BTa=R:0|g:c2cb7086-ce62-4051-ba78-5e249580af7d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:206924|e:0|d:19; ISD_WCM_COOKIE=!2Aq4mleRs4iBpMxM7jMSAF8jYk3iBsVSU+iiNRDGcn+/1J3WGo8TISRVT92taBi8RY8rS4IGOzq2W2k=; _cls_s=1fbb22af-9a97-4a81-8dfe-06c21341950a:1; mdLogger=false; kampyle_userid=cf22-bf83-fe86-f6c5-9ebe-e926-c873-4258; kampyleUserSession=1674118624475; kampyleSessionPageCounter=1; kampyleUserSessionsCount=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 08:57:09 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Allow-Methods: OPTIONS, GET, POST
Access-Control-Allow-Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Link: <https://www.wellsfargo.com/z_Z_YL0Hg0RP/4_CNUBrikq/je/3X3VwrrbJi/WQBtVw/BjA3/T3w_BWk>; rel=preload; as=script
Set-Cookie: DCID=F+ZbxAdK3t1aryXFnM98GDgrkM5J3BK1eYdumC2UZdTCoyWgWtqpELXWV8iCjZcJ; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 09:12:09 GMT;Httponly; Secure
_abck=C6DE03894A3008CF896F45A922D4609B~-1~YAAQJmgRYJSsVKyFAQAAsAk/yQmlnk5yXlP9vKpAdE/+L22tQMnqwRuNJ3+iK5whsT+XkRE0b0ecge9tPs8S9Y/Gqo2xdah8Js+KFeVsRbFidU2yiaJd03I2+XPnzhBani+tsgwc2/TSHlcD/TUR0bxnjJdUvXqjcnTCUDhu4dTuL5bnNNAvUa/eC1vU2od+xGhgOR833L+nWJ1ZsF5kVsW+2yf9LMvy00l0N9LB9cFGkZ8Mo3GPc0qatS+YlCBkoQYvFHzgP57gbf2+Svm8xAPCQWuMzP3KUUmwv9T1PcIpdBOUPPDocCeXZpy/BNjN2HUZfo7z8ov9REu9gYoTw9TvTniKY6V/fUs6L+j3lEi9n+VVXW75Gw5cteVS1pUjqg==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 19 Jan 2024 08:57:09 GMT; Max-Age=31536000; Secure
bm_sz=452F92A4698C1276195238A57A0C166B~YAAQJmgRYJWsVKyFAQAAsAk/yRJtYtRTFnkotaYqixQtX21eCj8sKIu0WeJw1DkygRwOfV7sA7g+DQ1gR+de+NCBuBeorXKyz63HUyZwFemq8AHaYbv3AjAngqWpbwKyfxuoVy0ZMhWyUsvqxSQGMMILETiQ/1GAHAx1CP9OZTzEafZZ08Zu3OfPw0Uz1o5J2zFWJwJA6j+MNPlUGLk0Hdql+Ml9LGET1o8eiQ6/4yQdrexUCmLlsVfTarD3k9vuND2m2Nf3YwHJ4tR403pvWbiRwiXtVK6lAEaMraIKZ6QhQCcwPgqJ~4403769~4535860; Domain=.wellsfargo.com; Path=/; Expires=Thu, 19 Jan 2023 12:57:09 GMT; Max-Age=14400
X-Via: 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 63c905e5_bl21_13481-48421
cdn.schemaapp.com/javascript/schemaFunctions.min.js
200 OK 0 B URL HTTP/2 cdn.schemaapp.com/javascript/schemaFunctions.min.js
IP
GET /javascript/schemaFunctions.min.js HTTP/1.1
Host: cdn.schemaapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 17 Jan 2023 19:12:03 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 17 Jan 2023 19:11:21 GMT
etag: W/"5741fc61fef7abd96093e31deb82a719"
x-amz-server-side-encryption: AES256
cache-control: max-age=699840
x-amz-version-id: huMlRne1MhGiqovFaqw_hwjVNww3m8Jd
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hfayKLXoi1kIvWHVO3oLWfwQmkCAmQ31xf4k98fvVf11OZbgq5rJ0A==
age: 135900
X-Firefox-Spdy: h2
static.wellsfargo.com/tracking/ga/gtag.js?t=DC-2549153
200 OK 0 B URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?t=DC-2549153
IP
ASN #20940 Akamai International B.V.
GET /tracking/ga/gtag.js?t=DC-2549153 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 06 Dec 2022 21:04:34 GMT
Vary: Accept-Encoding
ETag: W/"638fae62-1ca3a"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45055
Date: Thu, 19 Jan 2023 08:57:03 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=J%2fRyGGBvy6Jk2k6I%2fhtJ4w%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50
200 OK 0 B URL HTTP/2 pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50
IP
GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50 HTTP/1.1
Host: pdx-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 08:57:06 GMT
content-type: image/gif
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
expires: 0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 0
server: envoy
X-Firefox-Spdy: h2
pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51
200 OK 0 B URL HTTP/2 pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51
IP
GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51 HTTP/1.1
Host: pdx-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 08:57:06 GMT
content-type: image/gif
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
expires: 0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 0
server: envoy
X-Firefox-Spdy: h2
pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum
200 OK 0 B URL HTTP/2 pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum
IP
POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1
Host: pdx-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 14609
Origin: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--ue49329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 08:57:06 GMT
content-type: text/html
expires: 0
set-cookie: ADRUM_BTa=R:55|g:01969078-efb0-4398-a77b-109d8bebc146; Path=/; Expires=Thu, 19-Jan-2023 08:57:36 GMT; Max-Age=30
ADRUM_BTa=R:55|g:01969078-efb0-4398-a77b-109d8bebc146|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 19-Jan-2023 08:57:36 GMT; Max-Age=30
SameSite=None; Path=/; Expires=Thu, 19-Jan-2023 08:57:36 GMT; Max-Age=30; Secure
ADRUM_BT1=R:55|i:559461; Path=/; Expires=Thu, 19-Jan-2023 08:57:36 GMT; Max-Age=30
ADRUM_BT1=R:55|i:559461|e:5; Path=/; Expires=Thu, 19-Jan-2023 08:57:36 GMT; Max-Age=30
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 0
server: envoy
X-Firefox-Spdy: h2
163.171.131.129
47.246.44.228
95.101.10.187
35.241.9.150
93.184.220.29
0.0.0.0