{"report_id":"c757959c-e094-4e96-8a45-0d069de44c70","version":6,"status":"done","tags":[],"date":"2023-12-04T13:24:59Z","url":{"schema":"http","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.2.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"title":"Sign On to View Your Personal Accounts | Wells Fargo"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:12:05Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"static.wellsfargo.com","ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1993-04-28","domain_rank":12306,"first_seen":"2015-03-14 23:03:25","last_seen":"2023-11-18 10:23:46","alert_count":0,"request_count":18,"received_data":309932,"sent_data":9596,"comment":"","tags":null,"fingerprints":null},{"fqdn":"connect.secure.wellsfargo.com","ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1993-04-28","domain_rank":11812,"first_seen":"2017-01-31 16:32:35","last_seen":"2023-11-18 10:23:49","alert_count":0,"request_count":28,"received_data":64138,"sent_data":25402,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www10.wellsfargomedia.com","ip":{"addr":"104.110.9.46","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2009-06-25","domain_rank":35571,"first_seen":"2017-01-30 09:35:44","last_seen":"2023-11-15 03:00:40","alert_count":0,"request_count":2,"received_data":627803,"sent_data":997,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www15.wellsfargomedia.com","ip":{"addr":"96.6.19.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2009-06-25","domain_rank":20573,"first_seen":"2019-09-12 21:28:23","last_seen":"2023-11-30 15:45:02","alert_count":0,"request_count":3,"received_data":72683,"sent_data":1724,"comment":"","tags":null,"fingerprints":null},{"fqdn":"resources.digital-cloud-prem.medallia.com","ip":{"addr":"151.101.85.230","port":443,"asn":54113,"as":"FASTLY","country":"Sweden","country_code":"SE"},"domain_registered":"2000-06-28","domain_rank":21249,"first_seen":"2020-05-14 22:27:20","last_seen":"2023-11-18 20:21:54","alert_count":0,"request_count":1,"received_data":2597,"sent_data":551,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsps.ssl.com","ip":{"addr":"34.237.184.165","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1997-05-23","domain_rank":14517,"first_seen":"2018-11-21 11:22:19","last_seen":"2023-12-03 18:36:54","alert_count":0,"request_count":2,"received_data":4376,"sent_data":674,"comment":"","tags":null,"fingerprints":null},{"fqdn":"udc-neb.kampyle.com","ip":{"addr":"35.241.45.82","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-04-10","domain_rank":3039,"first_seen":"2015-12-24 10:52:27","last_seen":"2023-12-03 19:27:55","alert_count":0,"request_count":2,"received_data":1153,"sent_data":2784,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","ip":{"addr":"104.18.3.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2023-11-18 19:39:08","last_seen":"2023-11-21 18:23:36","alert_count":2,"request_count":2,"received_data":29089,"sent_data":1017,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"Wells Fargo \u0026 Company","trigger":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","verdict":"phishing","severity":"medium","comment":"Wells Fargo \u0026 Company","link":"https://openphish.com","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":[{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-11-19","alert":"Wells Fargo","trigger":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","verdict":"phishing","severity":"medium","comment":"Wells Fargo","link":"http://phishtank.com","meta":null}]},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/ga_conversion_async.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a40602db7616a31c9da4548ee920190","sha1":"878e01cb0c90cb247aabc137327655a6fcffcbd5","sha256":"6c771bd1c269646a76015f2f6410a40c031e5adea88f665bfe9ae15a972ab6ab","sha512":"f300ef35835ccfa6cde375b24bd2dcfc8374d6e698e857431bed0404d5dd3634e09c92a0efa7f2015b92a80831c06ae7363f2ebf8407854e04d2970b8363eb48","ssdeep":"384:y8QkSSXI2OCj27cj1Dfo2Y2rJLO+Pv5H9AeHAmvApNkStktL5/CohDAI5jUWZ1V0:y8/Sip1g+zAL1NkW01jZUT0dX2knK","tlshash":"3ef209caba45b06bc3a3a1a4217f4907f37e9d96a888d4d0d941d4807d34bdd02b7fad","size":35889,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-02-25T12:49:52.55026Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.3.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3ca36a997a7e2eb1c22d306f354a391","sha1":"3d04f6cbfc5dc22ff7c2dedde66b2ed345049b19","sha256":"4d5a95c5fb6ddc7fbf700cb2de740be804070d72121dd44db9fcb3cc43b59e30","sha512":"e51ffac54b7fdfdb3987952f652a47f65626fae424f654968df2431c897de08f7088caddac671e947e864c61429b7faa0691693d8d955c4641e57a846e9e67b4","ssdeep":"","tlshash":"80c012b7b3c135303ae6153a862051e9202f0c826c5855f69c1994301026edc13b7478","size":186,"data":"","first_seen":"2023-03-07T12:07:14Z","last_seen":"2026-04-07T02:00:19.807598Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/ATADUN/2.2/w/w-642409/init/js/?q=NDX%3A%25pR%20Z*d%20UcHG4Pt6k%3F%22KmP%3Ck%3B0G%3A.y7xpE%3DG%3CAp39dLl%25N%3EKJ%60%5D%27sX5rJ!u%25%3Fr%5E8p.%5ErA4m!3mC5%3E1%3D-h%2C9LL%23lK%3E%7D2eH%3Ca4L1ozMnA%23jQ%5Ec%7B%3A%25%40u%20pC%3E%22%22hlFg%40TuXBp55t%5D)z%23XnOmGPSF7L%2BF%3DnClfQsD6%7D%25)Pu%5Cd-r%27OD0f79j%22c%3CS%5E%7BG(_9vX%25qE7A%7B%3Db%3BX9t5%3Bn9N%2FbLlHQ%3B%60uN)EgyY_t0V%3A%3C%7D%5EKE%5Er4%3A%27g%3Bg%5C%407imewVcr%25teRf_hebAfazc9N%20(Zn49Kbx%60%607%2BcfRwO-zVD%5DD9Q%22%7CzFw%5E%5C9Rdkl0fCT%7D8%2B%7DTMeZ.zW%5CzR%2Bb%3D%27aG9!1-%3Bn3L%5D%5EGn5i%3C%5Bk%5B%20SI%5Bp%5C%22iCzH7J%3EKY!%24J1i%2C%2Fg%24a(F%3CiS%2B%2F%7CMcu%40auRzp.%27P6%40z%24RvL%22%2BWuNGn%3CH1j_Ux4%404%3Cs%20-qB86j6uO3Mw9q9Q2s2lEDh%5B05%3E%20.dBfSHg!%2CfOU%5EV%7DG5y%3Ak1b*3.RB7WS%26JAL%7D%5DcIpX%7D6a%7BCB%2FR%23","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"70270f7167160c2f75e3644a91eb6c9a","sha1":"0de1e531dd7291491829d0c482f0687e32cab187","sha256":"9d03350007b40b5d9c4777c6e59c751ee3931042e02fcb9a51c3d4bed277cf82","sha512":"84b7176b21ce6c40019d2a78d785dfbf2e1c8b444bb7a3be421f9ed055e60a669e53fb97f48fbdaec4e37ebec9b416c14128999d96ccba8bd2c13debaefb5084","ssdeep":"","tlshash":"95f020b18e0c48988c361d40e316b1300e58b93952073fac92b25c851eec1ce69641cf","size":541,"data":"","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/glu.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/generic1697649041190.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"073be3890e20fbdcfcd85ed26864de52","sha1":"92cb3cbeb2e9dd170b716689cb47f433c904918d","sha256":"889a7d5363b778aa5a9ef66112c4da95363031ca6d1909133ef0691d268f7971","sha512":"4467152230b6dcf3a9e143e99e8d0b745b6429c33237081386072e48602aca22961dd34de08272bace9c78a1558795d7b1c6399ca5b8d68660792cfc3a59cbf6","ssdeep":"6144:HFAk6rgSZItMlN7hA1YzTEre/qozC8myMVCm:HFSrgPtMlN7hEYoe/qozCZ","tlshash":"7174f9843fd63128624b176e14af530a2c3732597dd1f588ebadc98030ac9cb7d6bb65","size":364535,"data":"","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-08-20T18:51:20.750835Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/jenny/nd","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b15ddca010ee5c41e06efb93cd7485","sha1":"f4ec75bcdf4bb60fcc01f6e2ba296184859ae45f","sha256":"d104c8e44eed5f3a334d124a55658c3a4bdd8005b68d47e1c43d487a341fedd4","sha512":"a18f160617cb262c0eaeb8ab7b716b2ec623e7033b7a8fd314ddc87d8a084f1f5adf0d35c1c8bc8c67c7d94dcfd951211a02737bfbb16183bb8ca38a3fb582da","ssdeep":"768:tnTWzoeNyFVo/nrj36oCvF1pvms5JO7O/oBWRo1bcJwQfkq/oLpQBfMu+M:tnTWAorDbYOsTenbcJ/f2Afn+M","tlshash":"60331a9a3275343948f5197a203f110f72765f6b78a8e8c0e659ecb02eb458f112bf9d","size":54413,"data":"","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?id=AW-984436569","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","size":106326,"data":"","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.9.js?utv=ut4.48.202108231941","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7d078e49a0d7b507dbff8cf78554ec3","sha1":"89020fd9ed1678f2fd3d97fa6008ba5a5875b1cc","sha256":"34d6af1ed862f62ede259dedabcadba6446c1e9182cd70b19c66cb3acedae93d","sha512":"b2b0124f2d7ab969e80a2b0f10c4d1cce8089191d95946daf48e5dd36550ada1dd59e64aa65452ae5fc9dfe32ed67380a268d45611e9f50cf9d48b33d5d14a74","ssdeep":"192:2bFnNojImVVMwKpTXv161EyzcYr2hjCWCYrQ5+QBHYrQ5rwkxHYrQ5rik/YrQ5rc:2lNsImVVMwKp/oiyzcqTqQ5+8qQ5rwki","tlshash":"1832844cf6f8a53e86f0705c140e4b08b175ba8b19e2494eb9a95c107760cadb5f7b8e","size":11194,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2025-11-11T10:30:37.41875Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.3.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c7210e255f49e5a52b3329d4721295f","sha1":"c5f2fb55ed5146916a6a264b2135514fa7fe87e9","sha256":"c8fd3530e490ccc6f03c7744856abd35b4da057c38a95fe85e7302b5ab3e1e5e","sha512":"bb64bc01096956e9e203a501d4ac82486e093b20e273dfd80cfa934dab0345926f5ed1c5ae202d8cb9ae6b2d5b0a76e7a54cac5bfa734c32d119ce3d7778bccb","ssdeep":"","tlshash":"b5019cb668785a2399279c77c31fa7187c195fe75845c831bacca704bf81887ec8e54c","size":742,"data":"","first_seen":"2023-03-10T21:19:09Z","last_seen":"2025-04-08T11:32:03.966105Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.3.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5eb5b18af13283537df9c3278aaaa605","sha1":"0623a7f2e7c2102be998df1011a3e77d759d6a8b","sha256":"29b991e2c67037dcbe9658c3e0299476f16273d1367ab8fac398e7816379e536","sha512":"d9a421f813ad48afcf7e957c55921ca2dd60862f60c0d3ba4bf7857e49c6954f3a4dfc20dda22bbd5bc8cf131fca7d9cf96c57f34595368453d4b9b576dde99c","ssdeep":"","tlshash":"d9d05e3410a397b8ea9a0458f22997ea3fbade30b86731101d9f2a010451d0f911c9b0","size":256,"data":"","first_seen":"2023-03-10T21:19:09Z","last_seen":"2025-04-08T11:32:03.966642Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.4.js?utv=ut4.48.202108231941","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"15bd844e81d95845c29b50ec9f3e100c","sha1":"b4694ab4ad0384db500c155b371df093790f01f6","sha256":"d05c6eece255484babbedeb74b3a5b19daaa9763049e08362b82cfdf1fc8bfbe","sha512":"3a2f98e778fa0f19261cbc75972fa2c0c85d4723239d853ed44a27c82b9bff98327f811fa2303211043bb549ce19047d200d070e12a283807b0470baa1ca6451","ssdeep":"96:LNTJ2taeIpB/jLvoYrFooYrKaoYrkPEoYrlKXoYrKYrQbfYrQ5Z5YrQ5rikJYrQD:LNTaXIppvoYrFooYrKaoYrMEoYrlCoYM","tlshash":"88c10250f5f97361abb0b4bc284a8e2894de814329f15e9ef079c455863cc2986ff78c","size":5856,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.530515Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"52ceaa24ff02c7acc2123d516f74ac76","sha1":"854f566a3ded22d56d80856bae40b73185d1dee2","sha256":"8e011261942d9f89c394af6e3ec838beef85c536f43fc8a3d052deed076a5ce7","sha512":"a893536fbf8efb121ccba5c6024db8698f77c9c55ba7e1d639bdbc5c756f6056cb7bb3f1c3d3cf6d1bbe4803185c412de68e9a3755538c0fcf28e39eee884654","ssdeep":"768:EGkqO1zX9zw0pQbNxXMKNkUYTUYsZnER0q4ZVcHDo+CBTR/KKedh1ci:5k/xX9zw0pYNxcKytTtsZER0b3cMTRCl","tlshash":"21f2e80031f8a139c3d171ad544fcf069836b16728f1446aa46c9d88dfa4a0fe5bbfad","size":34545,"data":"","first_seen":"2023-05-10T15:11:47Z","last_seen":"2024-08-21T07:37:55.725328Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.3.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfc1337a01154745a17ad96b4baee655","sha1":"007b6453f60b4e73948ca5ca6846e8c4b243f90f","sha256":"12d1d59b16c4a29e8903cc4a04b87a367c6c57e6f034aedbba2d3475b5dee8e0","sha512":"62d435d3f4ea496206bea9b61a802cd5f0bdea59fabc668b1b29fa77e110c2374d9d71f2ca38b4f2171913169f13332bc1544fd9df4850154746457f30bbe7db","ssdeep":"768:OYFs3n2BfYfIDfw1vbA8hUOiwMuoKZfrryNtgugPJ:OkDBomw1vUOVMunrGNtg9PJ","tlshash":"f04361cbf2ced5e582020f6c975e1455b7618048c1d86cd2cce9c29abebde0db63e259","size":59818,"data":"","first_seen":"2023-11-19T03:00:52Z","last_seen":"2025-04-08T11:32:03.967202Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.5.js?utv=ut4.48.202202030106","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd4bf818c99ff83fc9ce2156c6be55f","sha1":"26927a92d9bc8ba2b63af7e05eee77578703245d","sha256":"08d354755dc9adefb41c59c46592115a5c76ccd543108ce7c6ab2fb7617a908f","sha512":"c2d7bb5fc0c7516f566f3e7b4c4c382a4eddc794033383af66e0363850cb4d6bf95770d55b1a835044bdee2b2c8e96de8871c691c11a8cadd7cb08d7a40a32ae","ssdeep":"96:lN6taeIpB/yjRdB1OsHML3Hv5G+r904/BDJ/mHq+9gHq+9o4:lNYXIpsVj1DHMo+r9d+B+O4","tlshash":"4cd1938d3d4cf03ec8e4e193d8bf0e741101761349875862a594ae8ea36cdfd9926b0f","size":6096,"data":"","first_seen":"2023-05-10T15:11:47Z","last_seen":"2024-08-21T08:24:40.47658Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.15.js?utv=ut4.48.202109220050","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc23176aa665855c451bceb08ca718e","sha1":"ad9d1d43415aa1800b2f2c024d07e1e9042cfed6","sha256":"384f41d37d3a9be1a72e761589096fcce4119150ea81ead29ba758514d321e94","sha512":"63a059663ef62a8afca74327224947705777f11af3eb23bf9aa0639f13e3dd51c3834dd9af6d202b10bbd7e8da5734e78ff2dc3cea73834ab1d1a099a37e1d2f","ssdeep":"","tlshash":"bd81630df7e9d12ec5b0f82a1cbe0e246051b01b1ca30866b5c5dc0ea398dbdb975e4e","size":3772,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.551054Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.21.js?utv=ut4.49.202210132016","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"389a2b5df08337c70ed0ec2795effdf5","sha1":"169cda9ef1fc39d810d2b4d99d9621a13c1da795","sha256":"050e2aa89c3945fa04373c714347297146adebc89effa9e41c0df8090ba0ed51","sha512":"b9e91f5140bfe2becd680b4cf017bcb85f9212fd05c539e93def2188a9eebe5f951617b7560cb3edb7fe2c850cbcbfd84374dca21287bce4733d452373182bbb","ssdeep":"96:HN6taeIpB/yj8yjyVypxuujFnL3Hv3Geq+rk0E04/BDJ/mH+eH+Ca/:HNYXIpstGspxuQFn6x+rkV3PCC","tlshash":"82a1424d7a88e13ec9b0d112493f0e7820557a171993886275849c4eb328d7de966f4e","size":4560,"data":"","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-09-19T21:40:36.16441Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.10.js?utv=ut4.48.202102191956","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbc6a7a6729ddbafeb954b2688e4e4bb","sha1":"a18e5362444cd63d08180a035e3d07c52e699f34","sha256":"de5f63b7382d3479f84e396eb2b19ea62be6a30a6292bbf5b95d46716be552c7","sha512":"d31a0b4fd359b8a087a366d14cfbbae6b5f888209f26d7dcb85fb1d6293d4346c3023cae3ac83e7e8d00fc0fb7af44cad2643031a97160f188e0faeba31f1fb0","ssdeep":"384:ilNsImVVMlKpA3easDSgp8ilpin3UPDFGlu:ilKV1nDxp7lgn+DFB","tlshash":"5a92a38cf1b898be41f92818e41f468cf676b68ab4c70c54fb542d887368d4d61b3e6d","size":20670,"data":"","first_seen":"2023-05-10T15:11:47Z","last_seen":"2025-04-08T11:32:03.957072Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.7.js?utv=ut4.48.202010230514","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab4745d183b02aecc2f060184d98883d","sha1":"6ea6f3d306bda585b0743f4760d6a9ae368a2c40","sha256":"9c4cf53fef9222fc5d6659fa4b776fe20d64c46886c3d96547aaae16134afb2a","sha512":"2420b5f4e6f6c9c351a6ea65925dd092381c6d7fa641e37a30026b098ccaaaeefa044884c35383626963526c6414e10368b718282e05d4338a92c23eba8db56c","ssdeep":"192:jbFnNojImVVMbpK3TXvUcgbRmYaUshd/3UmNzT5Qad9FMjnpBu4x0allS45/2vNK:jlNsImVVMbpKDBgFAUg/3UsgME","tlshash":"0722525efba8843ec5f67248544e0f00b732b96e88c30889fa946c543350d9eb4b6f5e","size":10463,"data":"","first_seen":"2023-03-07T01:02:39Z","last_seen":"2025-11-11T10:30:37.356939Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ytc/ytc.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5ec882b57df1cff1ede91ddafe202c","sha1":"ba692da656e93b474b2c2559409b6cae1d2a2a76","sha256":"052776ce5bb96d76cced9b9d9d5cc8ab2110e33eaba59f6cd3259642a83ff4d4","sha512":"dbeb2ee98ba87b67496d6c79f5ae277bbae6301fb94cf58f756e49b86c80cdc0a51df3f51a2fabddeb9c995fe45adecb78f9ce13508e16286ec74dadf57bb998","ssdeep":"384:p40C/wTGLq+MYe2LrExHg3FmPS4KtmAshNnyyRgm:s4nRRxhAmKsryyr","tlshash":"5f62d654f2e0f0a543e2a161113fa907b776253d1c6a9460a206dbc4297cecb8276fbe","size":15059,"data":"","first_seen":"2023-03-08T23:14:58Z","last_seen":"2026-02-25T12:49:52.546452Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.3.js?utv=ut4.48.202112091836","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"afb83cb0c351cf06179a4e19d73ab7be","sha1":"77e67c47f724a1a96839fc4ef843b5366100a62b","sha256":"3636799d3181248d5db968a7851b9aa972ea77f64b3cba9ce6b0a8933106c0c2","sha512":"563cc90e051e133eb73a4f4d6f9f2715590322e4224d20c54a1318828aeb59ed3112c139ebfd7c2396c947070643f0e2ff953ea6633e34de1c9bb9f5405b8c89","ssdeep":"96:UhZWWWNfWB/KGjNGLyYrQbMYrQV3Yr2hMGtCcBhpg7rpGIOWp3r7U8oN98XHUc1u:UhMHfWZYrQbMYrQV3Yr2hbC8X+13rKN9","tlshash":"75c1944df978e22ec6b0b569243e0e34a0f0b9525ad34958b455dc09e324c7c72fbb4e","size":5625,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.536482Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"28118b10e976acfd04c408fd5b2bf75f","sha1":"602467c73559091d2a290028566d92599e85b12b","sha256":"c096151906e12dab59a9ef244248a08b30021d778fd538394bead31aff29d21d","sha512":"a6083f4c573af70a31e4b1658b2a4a7de26a9dc22ed3d393983f384f94ea7c446c7e5129090abc59e0197cd1b63b25825f49739c7fae607c89c428514b5264e0","ssdeep":"","tlshash":"284111ba7e4ae4115113259b2b5bdb09262b60d71c44d68195f8ce90b031b4bdd3bccc","size":1952,"data":"","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-08-20T18:51:20.749418Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"b6e124621131d20640f582f097eb1d41","sha1":"13fd0a3ec7c352d01eba2942e5d9134834589b71","sha256":"d325e1bbfd1c5681d165e3b8d709469492c1b4ee8a5086da24ca56d79b72d379","sha512":"899370f950a7276f55e0763712c4fec6ce0e811449e73fa8c18540af34dcf520264023ee8e03f9a3298cee300e60a5cd71af84208cf8dc7b801eef1e12e80349","ssdeep":"","tlshash":"8760000000c3000c3cc3030cc0000000c300f03000c00000c0c033330003c0f00300c3","size":14,"data":"","first_seen":"2023-03-10T21:19:10Z","last_seen":"2024-08-20T21:47:19.802848Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.3.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T13:24:45.438Z","timestamp":1701696285438,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Oct 2023 17:13:53 GMT","end":"Tue, 09 Jan 2024 17:13:52 GMT"},"fingerprint":{"sha1":"91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF","sha256":"F3:D6:02:91:4C:11:83:7C:7C:FD:D0:A3:86:08:75:A0:37:A4:08:AF:67:24:48:AE:14:4D:D0:BA:8D:6A:19:A9"}}},"request":{"raw":"GET /signon.htm HTTP/1.1\r\nHost: pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 04 Dec 2023 13:24:40 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"c468de057245c43255e666dd38d589cf\"\r\nLast-Modified: Sat, 18 Nov 2023 16:53:47 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 83045ef50f650b61-OSL\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26773,"size_decoded":0,"mime_type":"text/html","magic":"PHP script text\\012- HTML document text\\012- HTML document text\\012- HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (18511), with CRLF line terminators","md5":"c468de057245c43255e666dd38d589cf","sha1":"2db5ad87ffab99b26fda6069deb1fd5c6a29e7bc","sha256":"b32732d5447d91b0a04f9bdc5b91f2b7ba202eab794887aa37dad2d955290f4a","sha512":"f84a33e51815bd65f0bd973a3844bce59dba76400ea9d07b15d08168846fe20a6f8b4580e2a8b3c73c0ee9d5fc9251baa8bfa8f01ea215b88767e1b1d30c2f6f","ssdeep":"1536:sb+HecuLRztJA8mMg0nBYqUOg6m/txTsrfxDBomw1vUOVMunrGqtgYgSVF+:uLyqBomw1vprGqtgj","tlshash":"a1a3f9c7e6cdcae586120f98d25d5089b2118008c2d49cd1fdedc259bffee4db92e299","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-08-20T18:51:20.724763Z","times_seen":11,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":7,"dns":0,"connect":1,"send":0,"wait":499,"receive":3,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"Wells Fargo \u0026 Company","trigger":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","verdict":"phishing","severity":"medium","comment":"Wells Fargo \u0026 Company","link":"https://openphish.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-11-19","alert":"Wells Fargo","trigger":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","verdict":"phishing","severity":"medium","comment":"Wells Fargo","link":"http://phishtank.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.223Z","timestamp":1701696286223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/gtag.js?t=UA-107148943-1 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Oct 2023 20:05:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65400c94-19f56\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 41174\r\nDate: Mon, 04 Dec 2023 13:24:40 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=+0lgviylaiV2b01ebY6EMQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65508)","md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":81,"dns":53,"connect":0,"send":0,"wait":11,"receive":3,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?id=AW-984436569","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.227Z","timestamp":1701696286227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/gtag.js?id=AW-984436569 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Oct 2023 20:05:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65400c94-19f56\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 41174\r\nDate: Mon, 04 Dec 2023 13:24:40 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=34ey9PLwYjLnj+XtOzBVlQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65508)","md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":50,"connect":9,"send":0,"wait":40,"receive":4,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/glu.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.236Z","timestamp":1701696286236,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/glu.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:40 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=UIzTFkgDfAUHS0eymwFIM+zG%2fjv5OnI7cRDZcSwfz5gGeTHuKubUGLI6JYP58eTP; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:40 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":56,"connect":2,"send":0,"wait":267,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/jenny/nd","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.227Z","timestamp":1701696286227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /jenny/nd HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nVary: accept-encoding\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript;charset=ISO-8859-1\r\nContent-Length: 17951\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ADRUM_BTa=R:52|g:fc7c1668-f0cd-41e9-85f6-babb165734ae; Expires=Mon, 04 Dec 2023 13:25:10 GMT; Path=/; Secure\nADRUM_BTa=R:52|g:fc7c1668-f0cd-41e9-85f6-babb165734ae|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Mon, 04 Dec 2023 13:25:10 GMT; Path=/; Secure\nSameSite=None; Expires=Mon, 04 Dec 2023 13:25:10 GMT; Path=/; Secure\nADRUM_BT1=R:52|i:302812; Expires=Mon, 04 Dec 2023 13:25:10 GMT; Path=/; Secure\nADRUM_BT1=R:52|i:302812|e:3; Expires=Mon, 04 Dec 2023 13:25:10 GMT; Path=/; Secure\nISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=S9NMKORpM2mJO37++ECR1kh6cM+gqZp8oT+D1peH7KD+ZYqXEnYD9r84L64e+cNO; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:40 GMT;Httponly; Secure\n_abck=2C7E31EC7CCC449DAB13469788D47AA8~-1~YAAQFE8kFx0X/OGLAQAA0pkANQvRVGkrb7mAC+4xxz3fkcG31BLqAZlAf2xj5GbjG4oNsDoHbrwYyRo1eGzu+tFzOgv2ZzY3BwxWzPbG0wfelUtohjto63+5tB7RAqOnbauVClnFE1w25Bj5rCEod9Qd1qFo580laXeIYbeGYPEUzkgB0rJi2CdoHRCzsIV3lISZiVYRciPfogaoHmoO0QCSQc5BucjtYuTckkOlvL3L17nkrlXoubuzHBqir6+vqvtiImcNXQ6derHtyVp/8Np70hE/wdmBtgCjZ1mOOM1uNqUlZzB6XtC+tVY+r8IpTU9MBIc6Z7hSKRSmoa0lOfKbPL+pN2Ylkpve0TzYZ33kcAO0ZNvARipFyLWng4DlMw==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=D6776A554F655A796540545B7F52E61C~YAAQFE8kFx4X/OGLAQAA0pkANRbpD1lmH6QdnHBOnhecZ12AJDIjx3tdlrZybbjzzctX67nLr5hib4BusWd9IBNt/1vh9F3MAM7ZYXJOLZmBwygvuMOr23GMPswuHHMZtg7PGuapz5/Do5ih+Gm8hvMa7ht43IRa/IaO0sq4lLemxkFf41txeql3vrLtxv3AUr2nimWzvcMW0zXjToPGGyZimoCSzior/3YwSUVN5xuGuZyAWGfkKauI1Rj3lii6t36SwZBKinHqkRiaLL677rDfG51Lurp0BxI7HM5izv9d08itIP41~3618358~3490373; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:40 GMT; Max-Age=14399\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17951,"size_decoded":0,"mime_type":"application/javascript; charset=ISO-8859-1","magic":"ASCII text, with very long lines (2293)","md5":"81b15ddca010ee5c41e06efb93cd7485","sha1":"f4ec75bcdf4bb60fcc01f6e2ba296184859ae45f","sha256":"d104c8e44eed5f3a334d124a55658c3a4bdd8005b68d47e1c43d487a341fedd4","sha512":"a18f160617cb262c0eaeb8ab7b716b2ec623e7033b7a8fd314ddc87d8a084f1f5adf0d35c1c8bc8c67c7d94dcfd951211a02737bfbb16183bb8ca38a3fb582da","ssdeep":"768:tnTWzoeNyFVo/nrj36oCvF1pvms5JO7O/oBWRo1bcJwQfkq/oLpQBfMu+M:tnTWAorDbYOsTenbcJ/f2Afn+M","tlshash":"60331a9a3275343948f5197a203f110f72765f6b78a8e8c0e659ecb02eb458f112bf9d","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":true,"data":null}},"time_used":531,"timings":{"blocked":97,"dns":64,"connect":3,"send":0,"wait":321,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ytc/ytc.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.229Z","timestamp":1701696286229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ytc/ytc.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 15 Jul 2021 21:00:28 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"60f0a1ec-3ad3\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 5614\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=mzA552siPDpM60clG2CmTQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5614,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (15032)","md5":"7a5ec882b57df1cff1ede91ddafe202c","sha1":"ba692da656e93b474b2c2559409b6cae1d2a2a76","sha256":"052776ce5bb96d76cced9b9d9d5cc8ab2110e33eaba59f6cd3259642a83ff4d4","sha512":"dbeb2ee98ba87b67496d6c79f5ae277bbae6301fb94cf58f756e49b86c80cdc0a51df3f51a2fabddeb9c995fe45adecb78f9ce13508e16286ec74dadf57bb998","ssdeep":"384:p40C/wTGLq+MYe2LrExHg3FmPS4KtmAshNnyyRgm:s4nRRxhAmKsryyr","tlshash":"5f62d654f2e0f0a543e2a161113fa907b776253d1c6a9460a206dbc4297cecb8276fbe","first_seen":"2023-03-08T23:14:58Z","last_seen":"2026-02-25T12:49:52.546452Z","times_seen":40,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":50,"connect":9,"send":0,"wait":348,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?t=AW-984436569","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.226Z","timestamp":1701696286226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/gtag.js?t=AW-984436569 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Oct 2023 20:05:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65400c94-19f56\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 41174\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=oSir91ofn0cXF15jXeyTfQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65508)","md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":82,"dns":52,"connect":0,"send":0,"wait":396,"receive":2,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?t=DC-2549153","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.224Z","timestamp":1701696286224,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/gtag.js?t=DC-2549153 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Oct 2023 20:05:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65400c94-19f56\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 41174\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=+ZpiESlFWnqebKZgFiHpiw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65508)","md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":83,"dns":53,"connect":1,"send":0,"wait":406,"receive":2,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/stylesheets/main.b3b5f355e18c2c42a801.chunk.css","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.234Z","timestamp":1701696286234,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/static/ui/loginaltsignon/public/stylesheets/main.b3b5f355e18c2c42a801.chunk.css HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nContent-Length: 2005\r\nLast-Modified: Wed, 08 Jun 2022 01:52:18 GMT\r\nVary: Accept-Encoding\r\nETag: \"62a000d2-7d5\"\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp\r\nCache-Control: max-age=10368000\r\nAccess-Control-Allow-Methods: POST\r\nAllow: GET, POST, OPTIONS\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=ItyJXIKH1ccBZcBpd5b7gw%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2005,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11856), with no line terminators","md5":"89c57e64334b3c479c26cf0dd1971fad","sha1":"259db957ed72c84154021c09ba48ceaa8c49de7a","sha256":"5e68ea9ca9cce32f91979f88142e963f0ff950cc1f1b6c3246eaaaf2f3091c58","sha512":"7325e5b5f7c56b46469f091a37104b380eb9e02be6898123ecfcdb7cc417b9ec8f8bd38f205163d84add06c3318c5090824281347d84908a8dbcc6191f7ca387","ssdeep":"192:2Ba5xoAJtcubCMuWbn6OiF94LH7dhqbz+FcWRsgd93K79C3URJK9Rvg762tpDd6k:2Ba5xjtcubCMFbn6OiF94LH7d79Zu","tlshash":"963252eb8b8102dccc3b8c8f74c3d4456c1f681efa8a149ee9da69a09bd71451631fd2","first_seen":"2023-04-24T07:46:10Z","last_seen":"2025-04-08T11:32:03.941068Z","times_seen":64,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":57,"connect":2,"send":0,"wait":428,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/login/static/js/general_alt.js?async\u0026seed=AIB30aSBAQAAaON8e0THKEG-EABBQKIADdpWWv5DyTHstHopwQkaHgNyXtDA\u0026X-G2Q3kxs3--z=q","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.907Z","timestamp":1701696286907,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/login/static/js/general_alt.js?async\u0026seed=AIB30aSBAQAAaON8e0THKEG-EABBQKIADdpWWv5DyTHstHopwQkaHgNyXtDA\u0026X-G2Q3kxs3--z=q HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 0\r\nExpires: Mon, 04 Dec 2023 13:24:41 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: DCID=U9Wrk+CNviwQ%2fW3yce1dhwdyQoyloiu1QAl+N66kdRI%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":234,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/mint.js?dt=login\u0026r=0.7640382844861511","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.244Z","timestamp":1701696286244,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/mint.js?dt=login\u0026r=0.7640382844861511 HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=QMzRPcR03EsGVfvjsRxFPmhyb%2fZsfm%2flQ7eubqMI0Cm8xTOGPGZP%2f5qeaWZMO72r; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":337,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/ga_conversion_async.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.221Z","timestamp":1701696286221,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/ga_conversion_async.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 09 Sep 2021 17:30:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"613a44c0-8c31\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 13593\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=S58wCC2xAsv%2fspKgfkY9%2fw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13593,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (35846)","md5":"0a40602db7616a31c9da4548ee920190","sha1":"878e01cb0c90cb247aabc137327655a6fcffcbd5","sha256":"6c771bd1c269646a76015f2f6410a40c031e5adea88f665bfe9ae15a972ab6ab","sha512":"f300ef35835ccfa6cde375b24bd2dcfc8374d6e698e857431bed0404d5dd3634e09c92a0efa7f2015b92a80831c06ae7363f2ebf8407854e04d2970b8363eb48","ssdeep":"384:y8QkSSXI2OCj27cj1Dfo2Y2rJLO+Pv5H9AeHAmvApNkStktL5/CohDAI5jUWZ1V0:y8/Sip1g+zAL1NkW01jZUT0dX2knK","tlshash":"3ef209caba45b06bc3a3a1a4217f4907f37e9d96a888d4d0d941d4807d34bdd02b7fad","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-02-25T12:49:52.55026Z","times_seen":45,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":83,"dns":52,"connect":0,"send":0,"wait":450,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.4.js?utv=ut4.48.202108231941","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.237Z","timestamp":1701696286237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.4.js?utv=ut4.48.202108231941 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Sep 2021 21:00:33 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"614ceaf1-16e0\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 1663\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=iS3on0Ms4Vrf93J4VLEGYw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1663,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4209)","md5":"15bd844e81d95845c29b50ec9f3e100c","sha1":"b4694ab4ad0384db500c155b371df093790f01f6","sha256":"d05c6eece255484babbedeb74b3a5b19daaa9763049e08362b82cfdf1fc8bfbe","sha512":"3a2f98e778fa0f19261cbc75972fa2c0c85d4723239d853ed44a27c82b9bff98327f811fa2303211043bb549ce19047d200d070e12a283807b0470baa1ca6451","ssdeep":"96:LNTJ2taeIpB/jLvoYrFooYrKaoYrkPEoYrlKXoYrKYrQbfYrQ5Z5YrQ5rikJYrQD:LNTaXIppvoYrFooYrKaoYrMEoYrlCoYM","tlshash":"88c10250f5f97361abb0b4bc284a8e2894de814329f15e9ef079c455863cc2986ff78c","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.530515Z","times_seen":33,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.3.js?utv=ut4.48.202112091836","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.236Z","timestamp":1701696286236,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.3.js?utv=ut4.48.202112091836 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 03 Dec 2020 23:04:06 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"5fc96ee6-15f9\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 2186\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=%2feXOmdJvbfnIEc9+9DICUQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2186,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1022)","md5":"afb83cb0c351cf06179a4e19d73ab7be","sha1":"77e67c47f724a1a96839fc4ef843b5366100a62b","sha256":"3636799d3181248d5db968a7851b9aa972ea77f64b3cba9ce6b0a8933106c0c2","sha512":"563cc90e051e133eb73a4f4d6f9f2715590322e4224d20c54a1318828aeb59ed3112c139ebfd7c2396c947070643f0e2ff953ea6633e34de1c9bb9f5405b8c89","ssdeep":"96:UhZWWWNfWB/KGjNGLyYrQbMYrQV3Yr2hMGtCcBhpg7rpGIOWp3r7U8oN98XHUc1u:UhMHfWZYrQbMYrQV3Yr2hbC8X+13rKN9","tlshash":"75c1944df978e22ec6b0b569243e0e34a0f0b9525ad34958b455dc09e324c7c72fbb4e","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.536482Z","times_seen":33,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.5.js?utv=ut4.48.202202030106","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.238Z","timestamp":1701696286238,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.5.js?utv=ut4.48.202202030106 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 28 Mar 2023 20:08:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6423493b-17d0\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 2228\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=RKOMz2sYxUB%2fEufK8OySfA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1438)","md5":"4cd4bf818c99ff83fc9ce2156c6be55f","sha1":"26927a92d9bc8ba2b63af7e05eee77578703245d","sha256":"08d354755dc9adefb41c59c46592115a5c76ccd543108ce7c6ab2fb7617a908f","sha512":"c2d7bb5fc0c7516f566f3e7b4c4c382a4eddc794033383af66e0363850cb4d6bf95770d55b1a835044bdee2b2c8e96de8871c691c11a8cadd7cb08d7a40a32ae","ssdeep":"96:lN6taeIpB/yjRdB1OsHML3Hv5G+r904/BDJ/mHq+9gHq+9o4:lNYXIpsVj1DHMo+r9d+B+O4","tlshash":"4cd1938d3d4cf03ec8e4e193d8bf0e741101761349875862a594ae8ea36cdfd9926b0f","first_seen":"2023-05-10T15:11:47Z","last_seen":"2024-08-21T08:24:40.47658Z","times_seen":16,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":421,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/stylesheets/wfui.5d3fa5b6daab852c2a31.chunk.css","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.233Z","timestamp":1701696286233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/static/ui/loginaltsignon/public/stylesheets/wfui.5d3fa5b6daab852c2a31.chunk.css HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nContent-Length: 16482\r\nLast-Modified: Wed, 08 Jun 2022 01:32:24 GMT\r\nVary: Accept-Encoding\r\nETag: \"629ffc28-4062\"\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp\r\nCache-Control: max-age=10368000\r\nAccess-Control-Allow-Methods: POST\r\nAllow: GET, POST, OPTIONS\r\nAccept-Ranges: bytes\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=sfMRLuaMURWwp5o5Kwi4Vg%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16482,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7eacd065e8320eabb4f66e807ba3b9ce","sha1":"a0f64e27a7cb68015959154fadde15ab85a08c1d","sha256":"fea85638d902b7d705d72aa9776531c035371a16774f0e52be50c0638c6eb110","sha512":"0aa922afc5b96cb79f83d9994c3455b7df449d0357ba6aa324cab50629af00324151c0bf74f210f25798a0f7f92b75281a1769c6d7c7dca01fad6c3c139eea76","ssdeep":"3072:+VqqJrgVxzDUDE4Q/G/C/MIQPGPCPMgQeGeCeMQQPGPCPM7LOjF7wW4dRrmSxWMl:EgVxzDUDE4Q/G/C/MIQPGPCPMgQeGeCy","tlshash":"2aa3c8f56e0a5d39d037943ff183f8449e37c7216a253f6afda1a86483c3291572638a","first_seen":"2023-04-24T07:46:10Z","last_seen":"2025-04-08T11:32:03.947177Z","times_seen":58,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":57,"connect":2,"send":0,"wait":497,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/PIDO/pic.js?r=0.8426445611056853","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.246Z","timestamp":1701696286246,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /PIDO/pic.js?r=0.8426445611056853 HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=4fKhvdaTZnohlIQam5OMWMtsKWhRQZnjhqdI25F5vngF9NoqMaoDYRWMAsnWT1Cr; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":400,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/ATADUN/2.2/w/w-642409/init/js/?q=NDX%3A%25pR%20Z*d%20UcHG4Pt6k%3F%22KmP%3Ck%3B0G%3A.y7xpE%3DG%3CAp39dLl%25N%3EKJ%60%5D%27sX5rJ!u%25%3Fr%5E8p.%5ErA4m!3mC5%3E1%3D-h%2C9LL%23lK%3E%7D2eH%3Ca4L1ozMnA%23jQ%5Ec%7B%3A%25%40u%20pC%3E%22%22hlFg%40TuXBp55t%5D)z%23XnOmGPSF7L%2BF%3DnClfQsD6%7D%25)Pu%5Cd-r%27OD0f79j%22c%3CS%5E%7BG(_9vX%25qE7A%7B%3Db%3BX9t5%3Bn9N%2FbLlHQ%3B%60uN)EgyY_t0V%3A%3C%7D%5EKE%5Er4%3A%27g%3Bg%5C%407imewVcr%25teRf_hebAfazc9N%20(Zn49Kbx%60%607%2BcfRwO-zVD%5DD9Q%22%7CzFw%5E%5C9Rdkl0fCT%7D8%2B%7DTMeZ.zW%5CzR%2Bb%3D%27aG9!1-%3Bn3L%5D%5EGn5i%3C%5Bk%5B%20SI%5Bp%5C%22iCzH7J%3EKY!%24J1i%2C%2Fg%24a(F%3CiS%2B%2F%7CMcu%40auRzp.%27P6%40z%24RvL%22%2BWuNGn%3CH1j_Ux4%404%3Cs%20-qB86j6uO3Mw9q9Q2s2lEDh%5B05%3E%20.dBfSHg!%2CfOU%5EV%7DG5y%3Ak1b*3.RB7WS%26JAL%7D%5DcIpX%7D6a%7BCB%2FR%23","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.220Z","timestamp":1701696286220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /ATADUN/2.2/w/w-642409/init/js/?q=NDX%3A%25pR%20Z*d%20UcHG4Pt6k%3F%22KmP%3Ck%3B0G%3A.y7xpE%3DG%3CAp39dLl%25N%3EKJ%60%5D%27sX5rJ!u%25%3Fr%5E8p.%5ErA4m!3mC5%3E1%3D-h%2C9LL%23lK%3E%7D2eH%3Ca4L1ozMnA%23jQ%5Ec%7B%3A%25%40u%20pC%3E%22%22hlFg%40TuXBp55t%5D)z%23XnOmGPSF7L%2BF%3DnClfQsD6%7D%25)Pu%5Cd-r%27OD0f79j%22c%3CS%5E%7BG(_9vX%25qE7A%7B%3Db%3BX9t5%3Bn9N%2FbLlHQ%3B%60uN)EgyY_t0V%3A%3C%7D%5EKE%5Er4%3A%27g%3Bg%5C%407imewVcr%25teRf_hebAfazc9N%20(Zn49Kbx%60%607%2BcfRwO-zVD%5DD9Q%22%7CzFw%5E%5C9Rdkl0fCT%7D8%2B%7DTMeZ.zW%5CzR%2Bb%3D%27aG9!1-%3Bn3L%5D%5EGn5i%3C%5Bk%5B%20SI%5Bp%5C%22iCzH7J%3EKY!%24J1i%2C%2Fg%24a(F%3CiS%2B%2F%7CMcu%40auRzp.%27P6%40z%24RvL%22%2BWuNGn%3CH1j_Ux4%404%3Cs%20-qB86j6uO3Mw9q9Q2s2lEDh%5B05%3E%20.dBfSHg!%2CfOU%5EV%7DG5y%3Ak1b*3.RB7WS%26JAL%7D%5DcIpX%7D6a%7BCB%2FR%23 HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Length: 541\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nVary: Origin,Referer\r\nX-Content-Type-Options: nosniff, nosniff\r\nAccess-Control-Allow-Origin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nAccess-Control-Allow-Methods: GET, POST\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ndcd=wc1.1.w-729460.1.2.6i4fydIKdDNTH4XNkd6iBw%252C%252C.HbmzHg-72uMolwJZS5Lm2m8U_K15Sl1SVLsb80tnU2ms8kNEqtUrRjBe-uKwDT4COy3X7ZO741vqn8dTF4Ok7cFreII6Zoz4y652Fk1pxooRaikmBWOLw3utOZVP1XWEpnYi6D2saUcK7llaqUMrlzfDfzhz6Ps7N5GqmtL4CXgfRky1lctl62YRHtjkjI_B; expires=Tue, 03-Dec-2024 13:24:41 GMT; Max-Age=31536000; path=/; domain=.wellsfargo.com; secure; HttpOnly; SameSite=None\nDCID=uYI2Y63XL8mFy30OuCsDOBM3p%2f4+fb8sE1EIsGUbugezxfeFqDnuBiPFcd5zdYmR; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\n_abck=2B3B6BCB07BC1CEDCF88B7218094E972~-1~YAAQFE8kFzIX/OGLAQAAxpoANQtQQ2JjMkoHbX/Kiu6lEqtX7S7dj8EIhxXTJQHBKJV5JuxvG0xLHSAA74itNdz/Flih8/iMQNOQarrouOLzUD2HyunNTah2FvVBdNFh1vguDsgvHfRW3We4eKD+8c+KJ1tGI3393Q/IL7nZJGGz4U/10B+hrPAfcX34pKmpy1pbeFWtER5x1Sg9nf4WwkDhK4IoOU36nwJaRTrKSY4Iii6/rW3ESv0m7Oy9r9FDlO3dbomDmwIywzfSuK5I8prx7u0t/KglPKhI15eQ/KARg+/EWAXwkRgcmCP8l6pAeJ+CATqqZMaaQamEpiRB547e1L6OCt72Sv8Y23iiXSYVjrTdJ8jF5ELe79OaioEPsQ==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=57F5BDBA8E643B408A6BFC61AB1EB4E4~YAAQFE8kFzMX/OGLAQAAxpoANRaYLqGGUFw7OBIejT6yMxtQQWS4iVvrUCC/UL2EkNZ2L2RsK+hRQV7FiUgFlYKS/sGlfro6uBzZkrilo1WzTKeHZusfndxq4G7+q5gAwrkXIPqvvtFT68H5rDdGc5RGWsAFiKGLvmCsN9OWAKMiLQA8TZosi6z82aAjmdaFuSRirw5DACJqnoeJoFvPMxc5Z1MOu5x8Pi9ePI/tCbaCDivz14SNi4PKSegF5fgYUI8t0TRVHilvt/4Sm7ovuniaXVQbwHs4c5hfXVSpNMwfduCaOwN8~3618358~3490373; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:40 GMT; Max-Age=14399\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":541,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (541), with no line terminators","md5":"70270f7167160c2f75e3644a91eb6c9a","sha1":"0de1e531dd7291491829d0c482f0687e32cab187","sha256":"9d03350007b40b5d9c4777c6e59c751ee3931042e02fcb9a51c3d4bed277cf82","sha512":"84b7176b21ce6c40019d2a78d785dfbf2e1c8b444bb7a3be421f9ed055e60a669e53fb97f48fbdaec4e37ebec9b416c14128999d96ccba8bd2c13debaefb5084","ssdeep":"","tlshash":"95f020b18e0c48988c361d40e316b1300e58b93952073fac92b25c851eec1ce69641cf","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":104,"dns":60,"connect":3,"send":0,"wait":565,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/try.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.250Z","timestamp":1701696286250,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/try.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=UEyBmyGPnM24u8%2fSMzSJ3y3dgYnvya%2fOiDUVD40vwgtgc0y8ghSRoV74HmguitP4; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":665,"timings":{"blocked":498,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/trx.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.248Z","timestamp":1701696286248,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/trx.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=gZO8VjO2Ly4p%2fpbPt6uszfj2Cl4jQx%2fSbA4JpOeHo8C046cL0t0MEjDm1KaWfTHh; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":679,"timings":{"blocked":499,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/ay6u?d=JTVCJTdCJTIyaWQlMjIlM0ElMjIxNSUyMiUyQyUyMmRhdGElMjIlM0ElN0IlMjJyZWYlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmNvbm5lY3Quc2VjdXJlLndlbGxzZmFyZ28uY29tJTJGYXV0aCUyRmxvZ2luJTJGcHJlc2VudCUzRm9yaWdpbiUzRGNvYiUyNkxPQiUzRENPTlMlMjIlN0QlN0QlMkMlN0IlMjJpZCUyMiUzQSUyMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMnMlMjIlM0ElMjJhYWY5NTg4OS0yMDZiLTQ1N2UtOWQzNC0xMGE0NDYwY2U3YTUlMjIlN0QlN0QlNUQ%3D\u0026cid=15%2C28\u0026si=3\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=tasfxhz_xfidlmov\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.251Z","timestamp":1701696286251,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/ay6u?d=JTVCJTdCJTIyaWQlMjIlM0ElMjIxNSUyMiUyQyUyMmRhdGElMjIlM0ElN0IlMjJyZWYlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmNvbm5lY3Quc2VjdXJlLndlbGxzZmFyZ28uY29tJTJGYXV0aCUyRmxvZ2luJTJGcHJlc2VudCUzRm9yaWdpbiUzRGNvYiUyNkxPQiUzRENPTlMlMjIlN0QlN0QlMkMlN0IlMjJpZCUyMiUzQSUyMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMnMlMjIlM0ElMjJhYWY5NTg4OS0yMDZiLTQ1N2UtOWQzNC0xMGE0NDYwY2U3YTUlMjIlN0QlN0QlNUQ%3D\u0026cid=15%2C28\u0026si=3\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=tasfxhz_xfidlmov\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=1IH7YbPw40ecEll5MKeOjHLuPpkRTLdSTJC1CFInGniJQ+jqrTq3opkg497K+Ija; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\n_abck=CE350D1FAB6503666584EB15D6386F3D~-1~YAAQFE8kFzYX/OGLAQAA7ZoANQumRX5nRhDprqg775h+HFVGMe7lEZWoV9wols6belsscKpQG2d3VHn819zqlKkxIBwwITll+HrStCm5XPOz4O/HjzW+HwMI6wmuqq1QkymIDjg20GPpiUU+tWuH7r3TqYbRod/ACeCTH2lc72g32m5zbQJsfuLVrX+LhwGZvk2SCcWqaMfIn7T2c+y3kM4o7AtRGro/ZeOGNTYcRGVBwXChjHkIAfhpoq/ZN/8KmNMCLLO87QSud9YIRvEv6cDnyUztLKOBLfmpv5zsnClV9SI8+ARKykDqA01LTGsZWuRasfxD1PgwmysvTskgIdqBmu7qblQpP1G7BhV2oyGhKjsbxuwMapuIPMWK7gvIAw==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=4B52C1AE71408F6F3F76B7F0FA3A60A4~YAAQFE8kFzcX/OGLAQAA7ZoANRYrNBmzr7hIdFtj0OnZaAR36SYmke6MkcDBy79S0WnnvcGWrf0wPC9ucM5jCOtete5zQJqfACX4mV2PqzrntuSPXSNTflR9gIL4az1VOTI0A3s+SAxFHmtDtvBEAz1ko/6YlSayRfjEZqZioC4KHNhsxgmh1wu/qQ97Fhs+YBpdNzvBxX1M/Bmx3hOcwFjDRbaagjoDqI2z16FRLdIRRsa2oGBjmUqhVz66cOE1ANqm2ie529gtt1cO66YcVVbkCPq9V4MQlSymG7u7H7OBy6ShFxPc~3621697~3228720; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:41 GMT; Max-Age=14400\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":500,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www10.wellsfargomedia.com/auth/static/images/COB-BOB-IRT-enroll_balloons.jpg","fqdn":"www10.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.9.46","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.277Z","timestamp":1701696286277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www10.wellsfargomedia.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Feb 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"01:8C:11:B0:3A:3C:49:43:DF:06:F0:63:93:3D:DD:18:5A:6F:B1:13","sha256":"F5:50:C1:11:46:7C:02:00:F7:70:30:CE:8F:C8:3C:A8:6B:ED:89:B3:CF:27:7B:8D:B4:24:D8:74:0D:47:35:52"}}},"request":{"raw":"GET /auth/static/images/COB-BOB-IRT-enroll_balloons.jpg HTTP/1.1\r\nHost: www10.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 625433\r\nlast-modified: Mon, 31 Jul 2023 21:07:59 GMT\r\netag: \"64c822af-98b19\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-security-policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp\r\naccess-control-allow-methods: POST\r\nallow: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: Tue, 02 Apr 2024 13:24:41 GMT\r\ndate: Mon, 04 Dec 2023 13:24:41 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 2400x1600, components 3\\012- data","md5":"a7beec55acf059f8f2e69b35fd93a671","sha1":"e3c3d2cc20962e77be670f7f7e9f08d855f9feba","sha256":"b8325d272c72a041414d9fb349e9d4bca5e7fc8ad66f47a719e491960afa5683","sha512":"61438965afbde68b9ee7655887e1b55d190b1826585dd678efa4d460b7b85442522f7cd5481adabf4b66a2fd5f4b7df7cb398bb0a7e2cbe0afe6fbe20a116b6e","ssdeep":"12288:zG54feLIvIn0l5o3ZEczyUA1LOhJLzEg8w0Czs6jACo50HO6f+nweTVN:zGymEgpvJ9LQghXo6j3mWOeef","tlshash":"bcd4234156d225f0efe872b4003a896a9973bfcd20c9ae5d070ff81876de695fe845b0","first_seen":"2023-05-10T08:35:51Z","last_seen":"2026-03-10T21:49:23.561083Z","times_seen":138,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":651,"dns":0,"connect":1,"send":0,"wait":4,"receive":44,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.7.js?utv=ut4.48.202010230514","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.239Z","timestamp":1701696286239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.7.js?utv=ut4.48.202010230514 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 28 Oct 2020 21:48:43 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"5f99e73b-28df\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 3220\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: DCID=exSH6SIl5qHpOOjtAaRris3yJTlVY1G5SPt9xh7aki0%3d; Domain=static.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3220,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1579)","md5":"ab4745d183b02aecc2f060184d98883d","sha1":"6ea6f3d306bda585b0743f4760d6a9ae368a2c40","sha256":"9c4cf53fef9222fc5d6659fa4b776fe20d64c46886c3d96547aaae16134afb2a","sha512":"2420b5f4e6f6c9c351a6ea65925dd092381c6d7fa641e37a30026b098ccaaaeefa044884c35383626963526c6414e10368b718282e05d4338a92c23eba8db56c","ssdeep":"192:jbFnNojImVVMbpK3TXvUcgbRmYaUshd/3UmNzT5Qad9FMjnpBu4x0allS45/2vNK:jlNsImVVMbpKDBgFAUg/3UsgME","tlshash":"0722525efba8843ec5f67248544e0f00b732b96e88c30889fa946c543350d9eb4b6f5e","first_seen":"2023-03-07T01:02:39Z","last_seen":"2025-11-11T10:30:37.356939Z","times_seen":24,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":466,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjIxNSUyMiUyQyUyMmRhdGElMjIlM0ElN0IlMjJyZWYlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmNvbm5lY3Quc2VjdXJlLndlbGxzZmFyZ28uY29tJTJGYXV0aCUyRmxvZ2luJTJGcHJlc2VudCUzRm9yaWdpbiUzRGNvYiUyNkxPQiUzRENPTlMlMjIlN0QlN0QlMkMlN0IlMjJpZCUyMiUzQSUyMjglMjIlMkMlMjJkYXRhJTIyJTNBJTdCJTIyY2lkJTIyJTNBJTIyOCUyMiUyQyUyMnUlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmNvbm5lY3Quc2VjdXJlLndlbGxzZmFyZ28uY29tJTJGYXV0aCUyRmxvZ2luJTJGcHJlc2VudCUzRm9yaWdpbiUzRGNvYiUyNkxPQiUzRENPTlMlMjIlMkMlMjJyJTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZjb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbSUyRmF1dGglMkZsb2dpbiUyRnByZXNlbnQlM0ZvcmlnaW4lM0Rjb2IlMjZMT0IlM0RDT05TJTIyJTJDJTIycGlkJTIyJTNBNDQ3OTI0NzcwJTJDJTIyZmMlMjIlM0ExJTJDJTIyY251bSUyMiUzQTElMkMlMjJ0cyUyMiUzQTE2NTYzMjkyMDYwNjAlMkMlMjJ0JTIyJTNBJTdCJTIydCUyMiUzQSUyMmxvZ2luJTIyJTdEJTJDJTIycmFuZCUyMiUzQTQ3Nzg4JTdEJTdEJTVE\u0026cid=15%2C8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=lawigr_kbuauxo_m\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.252Z","timestamp":1701696286252,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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\u0026cid=15%2C8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=lawigr_kbuauxo_m\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=BQ5j2vfI8hJpg+0KEvHOUeGZnHnfO72o8zVo3fgQTaU7J1zM3UHeOJpzS28rqKmL; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\n_abck=AEDC234CC7BCB24EC54E96EE1C91D128~-1~YAAQFE8kFzwX/OGLAQAAJJsANQvTmh71aslamoWnZ9MotJT9POwikjNR1Hx/T6NQiSrnWeA/qHRRPhmkCNBeeFHzTPB6wZiHDD5pePEej+GKvq0i0irByWM1QDGK3yzRFO4D13zyOxS61mGte87V9GohYusNc1MVxFjr7mALKyuCgO+b5cWSmRq363JYRIhlNvVkK9bqUBT0rIRVqHXem//iFnmGbyfHbAmKtEl0Xr1IOL2211Ect5dUA3v5tv4bAQLYho88GPDokHV8P3ZrP4JTTdl6HjPB2+5BKtwBmQoSQoBqpmG5TOkLATniNoF5ft7jHd1Ywn3THeChJIRumPcrukGW+d8Xi/BgxlKhLnWgUjaKBiMiAlbjmo8Y5ewbpg==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=E52E84D7ED95CE34333879C59E61E13A~YAAQFE8kFz0X/OGLAQAAJJsANRZrNH0zi00IoCxgZ8vl6gNc1Vs/NJyvl6gqayXtiq/EYMjz+lCmO9cWJPIjbsMRPu24PLVFDjOWzlMKiWEYA5LvBnWPzMfU4Pp4/3BP6hRUoRhKkeGTcz9vte0JzRr6gPGJ4O9VAM+5S075DfElm6h+gb0JXnK+z3msh7sIg3Dd/EqhPiX5ZjUsmuQWFdxn6XAAckzHuxsSDkkojHZ4QS4MnSuCD3MKPUGnQqeQbCaEsiT/ChY2mvO3ZmIynVOE1BFBn4Dkgsh6jAUW8bHKG5Wiq+CZ~3621697~3228720; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:41 GMT; Max-Age=14400\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":569,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjIyMCUyMiUyQyUyMmRhdGElMjIlM0ElN0IlMjJkdCUyMiUzQSUyMmdkaWQlMjIlMkMlMjJnJTIyJTNBJTIybDR3bm1iY2Q3a2hla3h2ZGR1ayUyMiUyQyUyMmNpZCUyMiUzQSUyMjIwJTIyJTdEJTdEJTVE\u0026cid=20\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=dklzlamqibulxmua\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.254Z","timestamp":1701696286254,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjIyMCUyMiUyQyUyMmRhdGElMjIlM0ElN0IlMjJkdCUyMiUzQSUyMmdkaWQlMjIlMkMlMjJnJTIyJTNBJTIybDR3bm1iY2Q3a2hla3h2ZGR1ayUyMiUyQyUyMmNpZCUyMiUzQSUyMjIwJTIyJTdEJTdEJTVE\u0026cid=20\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=dklzlamqibulxmua\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=kB+jC5I0qWhjKEcIe5YwjX6MqqFPM6Wl0zpmZurod%2fyFwEn9XxxbqzY6yf0WyGer; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\n_abck=78C2015D13504B9F99F2E01EA72D6ACA~-1~YAAQFE8kFz4X/OGLAQAAL5sANQv7B32xFe/fsyN71kGUVEhxsUzcJ2bL7EKENVdl5Ubj9cdTBAyqTSUer5hs46U8ChzodUSnwMw4ORSrFar43WOQGpaHD+dA11VOwLj544fKMZcxX7h2DQU/AqVWSIqK7btgf/J9RBelqv7wwJoLfu1Gz1BhYRPDr3FKI46LlQYT3UH0ayBIaX8y8MkEEhuBZcTGET5pZfCEcWkgOnJWnNNuN5qJplJT8QQy2KPl6M8RWjMFfmjnRA691YO4NgmPgmLkwpD1jq6cia8rgpyO9C/YsheNKLLh+1UuBAKLv2fuzhEzvJheemJt9Pt7HuH2JyqKchSuagGyLaMOwIfcrF5uZW7XkLqUpGM0ulDd4w==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=AAAC850C0A37521C731C21411F4A3CB0~YAAQFE8kFz8X/OGLAQAAL5sANRbNtvcFziMdIP9YTXRj1qqTrQz7c1/v6juopFkfKIE3K7m7qLYSiTi8hZXcbRLIe8CSrdwpvNiRXwBu4dWHC2VDQ/tD4qV37bMN/QYmbQ+kkh4s8vOZ89f817ZnXbG+PY3Yc6MfE7Ebim+HIA1ls2R3GOUj16i4BeR/ZOZ8iVnYIchqMqQbmT53tCXqpZRDiur+tN0tfBKtmZsCP+po0itBOrizu1Ix1oTCD0lEmT0NlpIZqZDY16c0uRcc7QMVunvllNT9eGznKgYkjm3v8YSRqd8N~3621697~3228720; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:41 GMT; Max-Age=14400\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":571,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.282Z","timestamp":1701696286282,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Sat, 01 Apr 2023 00:40:10 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"64277d6a-86f1\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 10216\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=p3ukTC2Q5hFikqsr7wGMmQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10216,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (4327), with CRLF line terminators","md5":"52ceaa24ff02c7acc2123d516f74ac76","sha1":"854f566a3ded22d56d80856bae40b73185d1dee2","sha256":"8e011261942d9f89c394af6e3ec838beef85c536f43fc8a3d052deed076a5ce7","sha512":"a893536fbf8efb121ccba5c6024db8698f77c9c55ba7e1d639bdbc5c756f6056cb7bb3f1c3d3cf6d1bbe4803185c412de68e9a3755538c0fcf28e39eee884654","ssdeep":"768:EGkqO1zX9zw0pQbNxXMKNkUYTUYsZnER0q4ZVcHDo+CBTR/KKedh1ci:5k/xX9zw0pYNxcKytTtsZER0b3cMTRCl","tlshash":"21f2e80031f8a139c3d171ad544fcf069836b16728f1446aa46c9d88dfa4a0fe5bbfad","first_seen":"2023-05-10T15:11:47Z","last_seen":"2024-08-21T07:37:55.725328Z","times_seen":14,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":480,"dns":0,"connect":0,"send":0,"wait":268,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.10.js?utv=ut4.48.202102191956","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.240Z","timestamp":1701696286240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.10.js?utv=ut4.48.202102191956 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 13 Feb 2023 21:04:12 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"63eaa5cc-50be\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 5672\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: DCID=yMS81BZREnzuDKaFjRCSlz1ZEi%2fplPS8nnwMdRjPBe8%3d; Domain=static.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5672,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2575)","md5":"cbc6a7a6729ddbafeb954b2688e4e4bb","sha1":"a18e5362444cd63d08180a035e3d07c52e699f34","sha256":"de5f63b7382d3479f84e396eb2b19ea62be6a30a6292bbf5b95d46716be552c7","sha512":"d31a0b4fd359b8a087a366d14cfbbae6b5f888209f26d7dcb85fb1d6293d4346c3023cae3ac83e7e8d00fc0fb7af44cad2643031a97160f188e0faeba31f1fb0","ssdeep":"384:ilNsImVVMlKpA3easDSgp8ilpin3UPDFGlu:ilKV1nDxp7lgn+DFB","tlshash":"5a92a38cf1b898be41f92818e41f468cf676b68ab4c70c54fb542d887368d4d61b3e6d","first_seen":"2023-05-10T15:11:47Z","last_seen":"2025-04-08T11:32:03.957072Z","times_seen":27,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.15.js?utv=ut4.48.202109220050","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.243Z","timestamp":1701696286243,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.15.js?utv=ut4.48.202109220050 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Sep 2021 21:00:33 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"614ceaf1-ebc\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 1682\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=EfCuZr66zRhm7WmxJO7GzA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1682,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1142)","md5":"ecc23176aa665855c451bceb08ca718e","sha1":"ad9d1d43415aa1800b2f2c024d07e1e9042cfed6","sha256":"384f41d37d3a9be1a72e761589096fcce4119150ea81ead29ba758514d321e94","sha512":"63a059663ef62a8afca74327224947705777f11af3eb23bf9aa0639f13e3dd51c3834dd9af6d202b10bbd7e8da5734e78ff2dc3cea73834ab1d1a099a37e1d2f","ssdeep":"","tlshash":"bd81630df7e9d12ec5b0f82a1cbe0e246051b01b1ca30866b5c5dc0ea398dbdb975e4e","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-02-25T12:49:52.551054Z","times_seen":32,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":513,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=zpuevxekebkkqzyz\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.259Z","timestamp":1701696286259,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMmNpZCUyMiUzQSUyMjglMjIlMkMlMjJ1JTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZjb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbSUyRmF1dGglMkZsb2dpbiUyRnByZXNlbnQlM0ZvcmlnaW4lM0Rjb2IlMjZMT0IlM0RDT05TJTIyJTJDJTIyciUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGY29ubmVjdC5zZWN1cmUud2VsbHNmYXJnby5jb20lMkZhdXRoJTJGbG9naW4lMkZwcmVzZW50JTNGb3JpZ2luJTNEY29iJTI2TE9CJTNEQ09OUyUyMiUyQyUyMnBpZCUyMiUzQTQ0NzkyNDc3MCUyQyUyMmZjJTIyJTNBMCUyQyUyMmNudW0lMjIlM0EzJTJDJTIydHMlMjIlM0ExNjU2MzI5MzA2NTIyJTJDJTIydCUyMiUzQSU3QiUyMnQlMjIlM0ElMjJsb2dpbiUyMiU3RCUyQyUyMnJhbmQlMjIlM0E0NDg2NTclN0QlN0QlNUQ%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=zpuevxekebkkqzyz\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=KxTzT28x2h1FrNI4r7v7lBgFBf4k+XwrJGizg0I0+uVclr80Oc8dnLkktNKdGtmL; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\n_abck=5F4ED5F812685BEA2C7B431D6DEF8FB4~-1~YAAQFE8kF0EX/OGLAQAAgZsANQsZt5wHqRGT6zJR+W622H1DSFshXr3uQCW7LkZ7uN/22PFiKadvLGNYzAtcBru7prfedD21OCDiJiOX5qQXgVOF2QSnVjBKJ0kRmyPWJHefBBV7Ot7EYsjDqZPaKO9zyqD9HlCs4eCFuTbKxFvkhJiRPzCmgYFfuWCj8lRQqhc0XIzZYPqD8/RlXTAlGtyrwr7XNnhcLaJ+11TMGRIALBNMkgOTqmiUw39UMTY98Mat4g7xoFmi6YKo9VFKTkS61fvNAWGXqNKlMhqn7clkXsz9riM/MLAJhi2scF7d0xvTRPnfNgxEhVfJmTcrvfY4JeiWzAjhxvjkjsCgQr9x4KUtmxq5wQ3h5mgvoIkRvA==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=0E495FCB42D23B0A6F1D765DB920E83C~YAAQFE8kF0IX/OGLAQAAgZsANRahGHB6FcLb7SFpSFv+OOZlBYiIXhaKg8DrfhnAbIDNM8+8EwoIf7BmbQS+nyhPysD2lN9+LqXpEzWtOwIWNrCaeBk6AUHQ8sxH14qePesgCw2Z0ebCqd5Y82igcfLpeXz9RSjhQ6e1jP+UIXG5FfzvZnDfeNeNRWyp5bB0oSubr3otm7GkQZwkctdUCY0xEIQ6MsOmae94sKI6s2A/h3QGPkaBo5Ji02yGShcPkjRmXsCht/ByVTBwTpowpbCeNMeHW6j3etFe3lAXxxHMyOKCgVEU~3621697~3228720; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:41 GMT; Max-Age=14400\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":822,"timings":{"blocked":657,"dns":0,"connect":0,"send":0,"wait":162,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=lqrrtixbvptwrupv\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.268Z","timestamp":1701696286268,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=lqrrtixbvptwrupv\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=wMSgClb0GIPzCdaKejj%2fYQ%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"8176c047047a730703f79caaf28a119e","sha1":"f03e2e0f4e61ec8760013e177590e260d1038076","sha256":"06edb71d84f904ed938a83e42e8e027e2b91607576f0ddde3ffe5ecf9dcbd74e","sha512":"1e1458485ed9aa9e3324e55da72f735e0b8aa3b9d161aab8e50f930074fa20ed9b0a50fc006166b86e262e2d19f3a08d93437e6b1ff30e8ab281ef24fa1523e4","ssdeep":"","tlshash":"c4c080c5d8732fa5d02155002dcf3b419dd6c157829544b932c58223cf4756dc9cb1a7","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":814,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=hsxdfhsfonvcksrz\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.262Z","timestamp":1701696286262,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=hsxdfhsfonvcksrz\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=o7OzeJutqvuH7TOTk56B278BczZZI%2fjhyvNcYPykQjhqBQMpqV3CgyTGUWSnDbrD; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\n_abck=A9586159513B5F40D83778C9EB93C150~-1~YAAQFE8kF0MX/OGLAQAAm5sANQsr8GUoGkic2Lin3VUQNe64KUVGHOql2kryd+U4Trcp/NfizKb015Bw1oUAzXACfOrtlL7Ya4cITzLrRqG1juLutKzRnnYrA3adKbP40WQiqWTTxldhMq1vyu0mGe65PRqQgAb3BkFuzG1VIrj+rVTigUGfDEBefPLVSsfl/mwj0zwNubw05TYsMHVCQfuSruWmbgd5IVYTEX9g1eR0b2IdE2bTsVrfuRyMdD6Lifuq/jGiOZIW5WKj8vpNxLISiMi7NfEglpQcn1UWLiacgPry6GOcV9PjvLv54AdHSe0Mb6GVNxtJHiGkvcK8AQOZeZl9BvPO8i2IRgAuiQTYGJDxnzsJ5tX9c5A4VDydAg==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=ED4C9677B4A08C8620E72100B8AC16E9~YAAQFE8kF0QX/OGLAQAAm5sANRYOfgow4PsAp00rh1xyVjQ2+lQbjb1igYjRlcidPO8jG8GE5x5PNZ3l/4Kz/EHX/0l3iTtj+mC1b8cnDI5N5OKvhNBnl3fZYTGrxPCzmG16gQRV7ll3/0nbe2LFnovb2LyOEcUgrXB3m0HK0d646/GGXETr4nfLnEdjxPfCa5+U6B9buSFvCJmK0ZawC+iu3LQudDlBG/qwiKfInnkHdXvocwtrQZ80BjOKOEq+7LNqzOXI3Ksmfur6fNQ0B0IDc+GAc9vbzXdOLGm1x9Bs2LIgwH1a~3621697~3228720; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:41 GMT; Max-Age=14400\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":667,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=pgvvbn_cpqputmas\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.270Z","timestamp":1701696286270,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=pgvvbn_cpqputmas\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=VxCi64c2UvZkUR8a4Dzq7Q%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"ff49699b8e28a3b882d03eae1f4dcda4","sha1":"04a486b438fa55417a7e73ba6f601fbfd416c58b","sha256":"08312a31a5423b7b1a40c1973713a4067d7527f0fe84819776755ffe81b54b55","sha512":"eac87c3293795c983a05c1d411f406a374bd36dbb5d493bcf556bc8316c420fccf7a1ae0568846cbec86d65d83be4c046798d98d8ee6122a849032ccbc9797e6","ssdeep":"","tlshash":"1fc012c4d8732ba1d1215a002d8a3a519996d257829544a932868222cf4655dc98b156","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":830,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=esdkbhzwxugbfrfa\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.256Z","timestamp":1701696286256,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=esdkbhzwxugbfrfa\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=i%2f1nk6GuAgveDgFpiVZ6L4ZfoL9WSx04ki7%2fVSUfVXNss0VllOkn1LUKEFLeTCDs; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\n_abck=A26E3D14723FBA619371CE267B03F4BA~-1~YAAQFE8kF0YX/OGLAQAAn5sANQuPNtmTeXTzbEVfmOpHJ5cY7i218A7FTpopMfH+oRr9NtlLYvSJ5EoL0p42AAPYdVz9oHJaYp+K4dLC4TNG4J/49tRVbBYEEfFUJb5QMJ4pam1U0Keuc7rJkTDL1zOTwd9MsamYk4o91XJeq/+IdQMNOW2sA+IPwDi4PdnT9fq1tTgh/mdVQeN+tSpMKISZ+xNF4mBFqIamszVGmXHadKQtY9fvZnI6rJvCEavDkfmctRgIc2fafRzsFkv++wt8Twqo1dDiHv8Krxm/lZPMM2ff6ZlZGjTG6lLK2zekZw+O3T9LYW9nYjXt2SDgi79I2MvmC2x+pyjvaSwSQHMQQozxJ2SCYDRq+RjNq1GUtw==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=B452043D7A81D291AAA70C99647035D9~YAAQFE8kF0cX/OGLAQAAn5sANRbEG/cwo6c900qcP9ygsGZU7kA3D3qV/ijCTo9b5CR8Dle0Nya0S60Yp+CBNYh6sgngu3gFl6pTMcw+bx6bnDao4k3199tHRlOU/VC1yXS3GgEwFmpzTswEc5rcwZtQP57JuLdeUY6Qg5CflxHDd4Oi1jetiIY+EFn7a/RsdMo3wGRPRT/Oh5V8zHqFCTM/UyRHzro3SGRYVOud4gAfAJiHcblfXeS43dCPfcuBuDEvma9v+8+BaKOG6Ta20VZP97PbRZuzAfsZ1a0UNgIy0nl2Q4e/~3621697~3228720; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:41 GMT; Max-Age=14400\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":853,"timings":{"blocked":633,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=mkelibaqu_rvuwbv\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.272Z","timestamp":1701696286272,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=mkelibaqu_rvuwbv\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=HdxZ8mAQZEcHvT31n9FcLA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"85c992aff0f6e282a78c791761eb440a","sha1":"f70d7123292be68e58ad5728af78664e1853e6cb","sha256":"4878db268f95fae19592954f379c5d7de7a3d11d041c6030ba2c935e20403d6a","sha512":"2f8fe3c47ddabec862beb6fcfd8e583279227e54e3037dfd765e8b1d958e23decc8d5e82cb520fbd68b87c7a37543d9d79ec4ad2bfd4ff00f2c9f22f9a4a52bc","ssdeep":"","tlshash":"4ec080c4d8732fa1d42155002dce3f519dd6c157829544bd32c59223cf4755dc9cb157","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":837,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=fpkngzkdahnngdzl\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.271Z","timestamp":1701696286271,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=fpkngzkdahnngdzl\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=ZUaYrp3yrIvo34RU2ZizZQ%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"28a06d1a80e9a02ca3beb34a46210a4a","sha1":"567d2ea9441ad3fa028a82d71ca5d7366ff1e00f","sha256":"6e48115d50f5709ec6a621fa6ff67a9b8924395dcd51c26190a0a159117655e3","sha512":"0e54e7f58f2aaadd84f6906f94d4c69406d23b54866230694b08980a85418c1b2a3755ac8339d0b0abb8553569197abd276ca000bb555a3b22afbfd333c506f2","ssdeep":"","tlshash":"8dc080c4dc732fa1d03156006dde3b419dd6c157829544b932c98223cf4755dc9cb157","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":838,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-sbd.woff2","fqdn":"www15.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"96.6.19.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:47.046Z","timestamp":1701696287046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www15.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 27 Sep 2023 00:00:00 GMT","end":"Thu, 26 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"DC:E4:44:A1:3F:E4:8F:5F:29:7D:F0:E0:17:49:BA:51:7E:2A:A5:65","sha256":"E6:87:85:20:F4:1C:8D:5D:8D:6B:51:34:3E:BB:9B:2E:E6:A4:6C:2E:96:63:03:31:69:6B:5A:81:22:C1:8E:B4"}}},"request":{"raw":"GET /wfui/css/fonts/wellsfargosans-sbd.woff2 HTTP/1.1\r\nHost: www15.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connect.secure.wellsfargo.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 22600\r\nlast-modified: Tue, 26 Feb 2019 19:38:34 GMT\r\netag: \"5c7595ba-5848\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Tue, 03 Dec 2024 13:24:41 GMT\r\ndate: Mon, 04 Dec 2023 13:24:41 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22600, version 1.13107\\012- data","md5":"83df8749c013f13019fa8e0912041759","sha1":"2bbffcf012a59e47661c0a37edda0fc772992ae7","sha256":"ab9d8c97b35ed86b6224aca911aa304a0d7dbcbd28e00a4c6585b96e28ed30ba","sha512":"60ef81e9500e9b33e9d799d4bd56f8ef4df5dfdc88a42d5739c3da65733cfaedd42aa0dc623d46b370dc750c693cbe0c473c92e6c4c2a7bed2c7da33b8bcee84","ssdeep":"384:X4TnfMKBnolaid+tMKsLZqy+1EooqFdf8THOgmFtI2ErNX0sAZwk+pcHgXvCdFPh:XWXBolb+tMKoc1E1qFdgHOujisY+pcHt","tlshash":"5ba2d0f0681f37b4473b083c3472a3ca80f69516eaea19951b3d123e699ada5934c37d","first_seen":"2023-04-13T05:35:56Z","last_seen":"2026-04-06T16:35:22.134688Z","times_seen":586,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":68,"dns":51,"connect":1,"send":0,"wait":2,"receive":2,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=prbrcxwatzwqdxwq\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.273Z","timestamp":1701696286273,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMmNpZCUyMiUzQSUyMjglMjIlMkMlMjJ1JTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZjb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbSUyRmF1dGglMkZsb2dpbiUyRnByZXNlbnQlM0ZvcmlnaW4lM0Rjb2IlMjZMT0IlM0RDT05TJTIyJTJDJTIyciUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGY29ubmVjdC5zZWN1cmUud2VsbHNmYXJnby5jb20lMkZhdXRoJTJGbG9naW4lMkZwcmVzZW50JTNGb3JpZ2luJTNEY29iJTI2TE9CJTNEQ09OUyUyMiUyQyUyMnBpZCUyMiUzQTQ0NzkyNDc3MCUyQyUyMmZjJTIyJTNBMCUyQyUyMmNudW0lMjIlM0ExMiUyQyUyMnRzJTIyJTNBMTY1NjMyOTY4NzIyMiUyQyUyMnQlMjIlM0ElN0IlMjJ0JTIyJTNBJTIybG9naW4lMjIlN0QlMkMlMjJyYW5kJTIyJTNBNjc0MDk1JTdEJTdEJTVE\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=prbrcxwatzwqdxwq\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=6qgutFNuVinGKPQrSfyscA%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"85830dbf227b5e42ac6d7ce6aad221bc","sha1":"7689f4e29af5109487f779b739bdaaee129b84a0","sha256":"b6d20a8a2d9cb25bc1e0964d9a5a2e6d2b8ff231f1877e05c4bef272a38a3186","sha512":"4787846ca9d5be3309c9da56e8e85ae4ae8d92d9cf24f61cc7373460e57cd9cd130a76d27e69a450941efb93f27ede160002d94b6b854accd7dab8f2a57cf1fa","ssdeep":"","tlshash":"a2c080c4d8732fa1d42155002dce3f41add6c157829544bd32c58223cf4755dc9cb157","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":837,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff2","fqdn":"www15.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"96.6.19.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:47.033Z","timestamp":1701696287033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www15.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 27 Sep 2023 00:00:00 GMT","end":"Thu, 26 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"DC:E4:44:A1:3F:E4:8F:5F:29:7D:F0:E0:17:49:BA:51:7E:2A:A5:65","sha256":"E6:87:85:20:F4:1C:8D:5D:8D:6B:51:34:3E:BB:9B:2E:E6:A4:6C:2E:96:63:03:31:69:6B:5A:81:22:C1:8E:B4"}}},"request":{"raw":"GET /wfui/css/fonts/wellsfargoserif-rg.woff2 HTTP/1.1\r\nHost: www15.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connect.secure.wellsfargo.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 26708\r\nlast-modified: Mon, 11 Mar 2019 20:52:01 GMT\r\netag: \"5c86ca71-6854\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Tue, 03 Dec 2024 13:24:41 GMT\r\ndate: Mon, 04 Dec 2023 13:24:41 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26708, version 1.13107\\012- data","md5":"885d42ab7ffcffc42ed29816c3ce9727","sha1":"3d84cb41ddfb5bf8627e2b9dc867237bea47baad","sha256":"aeb7b3bfc4281d35b02dfde05ac7a6c0d3daa7f3123b35a9cbd4b5a8e3f3c310","sha512":"1b64ea9a7598a69dc5837f70af7eb702171fb55dfc58aa071a5efe70522676da4cbc1d3af054ab3b8f325143479d484388917e015e9ab61b5b7322077461fb11","ssdeep":"768:NqcUCwKb4mdzrl3vUSwXTRoji0iG6dlLsCPlT:NqrCwkTlLwV0izRPZ","tlshash":"c4c2e2c8099724dedb6d81eea692155e3f01c2df861a009a419ecc4c0c9dcdc9b9337e","first_seen":"2023-04-12T09:13:55Z","last_seen":"2026-04-06T16:35:06.872471Z","times_seen":216,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":83,"dns":60,"connect":1,"send":0,"wait":3,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/js/wfui.11759b41ee721f527bba.chunk.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.278Z","timestamp":1701696286278,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/static/ui/loginaltsignon/public/js/wfui.11759b41ee721f527bba.chunk.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=pZem68yemwBD317Dj7f7TQ%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"24cfc5725212dc3896710a79ab33b29d","sha1":"126b99dd395a0c9d57bfe77d1279ee5cb82c1fd1","sha256":"bcba343872d8eaa1f2c9b87a925b28fb3b90973bb63c1d1a82fe7672d0564eaf","sha512":"1e61b027c74c78f5ff1085e1e157eba01869fbd8415eaf3d53df3272a07750ce1bc5db201f14c56a69f788b0fd9ef7a217976a24eecb6a8eecc8fbefb64eb0d7","ssdeep":"","tlshash":"17c0c0c4d8732fa1d02005002cce3b409dd2c11382c244b833c48223cf0719cc9cb053","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":837,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=zlhbpoezzaimha_l\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.274Z","timestamp":1701696286274,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=zlhbpoezzaimha_l\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=erxBSbR7+cfqsy3BWqXVXQ%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"6828dafa34d18a7cc6e077b2aa3eaaeb","sha1":"2a52a23bdb7665931fa70f2da1f5cc252a622716","sha256":"25cb43691c4ba8253beb084e19668a91cb795748c33fffc40199d81f6447cdf6","sha512":"fbb7ee063c783942c144d3307486e465884d073806cd7cc47f7d9b8f074ce9ad2f0be734f3e4ea3f55c7662d2027c215d6e71f79e705038e34cb74f9f0bc77da","ssdeep":"","tlshash":"9ac080c4d8732fa5d02555003dce3f459dd6d157829644b932c58223cf4756dc9cb157","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":840,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff2","fqdn":"www15.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"96.6.19.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:47.045Z","timestamp":1701696287045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www15.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 27 Sep 2023 00:00:00 GMT","end":"Thu, 26 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"DC:E4:44:A1:3F:E4:8F:5F:29:7D:F0:E0:17:49:BA:51:7E:2A:A5:65","sha256":"E6:87:85:20:F4:1C:8D:5D:8D:6B:51:34:3E:BB:9B:2E:E6:A4:6C:2E:96:63:03:31:69:6B:5A:81:22:C1:8E:B4"}}},"request":{"raw":"GET /wfui/css/fonts/wellsfargosans-rg.woff2 HTTP/1.1\r\nHost: www15.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connect.secure.wellsfargo.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 22424\r\nlast-modified: Tue, 26 Feb 2019 19:38:34 GMT\r\netag: \"5c7595ba-5798\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Tue, 03 Dec 2024 13:24:41 GMT\r\ndate: Mon, 04 Dec 2023 13:24:41 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22424,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22424, version 1.13107\\012- data","md5":"0a1639ebe9fab396657a62aa5233c832","sha1":"9b58164729ad918dd7255e4856f9da7f3a90bfde","sha256":"631f3b6267a831a8d67c45e480b5d5a2601f10ff8708bcf3a45a41b377a129cc","sha512":"a3786f7c1188bcbddcabe54e40dfbc77d842b1a19d2cca56cedaeb3c1a8126b3c203ac8b6297268c94aedf270be2b822aa8ac0de9e1e5c6d42bc7866324d8128","ssdeep":"384:ZWomH3hR7XCKb7GSa5mSWAmtXnCe83/17wdTgm6keJR60vqy:ZWDL7va5mSWbn4cdEmhJvy","tlshash":"cda2e16e1fb4ae24ec1c3bb164a5d0ed75c744750470c45fa331a0d626c5d4c9d86ef9","first_seen":"2023-04-12T09:13:55Z","last_seen":"2026-04-06T16:35:22.135406Z","times_seen":655,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":72,"dns":48,"connect":12,"send":0,"wait":4,"receive":19,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/reporting/ttms.gif?capability=LiveRamp\u0026appId=loginapp\u0026wfaCookie=11202206270424411143497415\u0026error=timeout\u0026pageId=LOGIN\u0026pageType=BROWSER\u0026deviceType=DESKTOP\u0026c_t=","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.283Z","timestamp":1701696286283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/reporting/ttms.gif?capability=LiveRamp\u0026appId=loginapp\u0026wfaCookie=11202206270424411143497415\u0026error=timeout\u0026pageId=LOGIN\u0026pageType=BROWSER\u0026deviceType=DESKTOP\u0026c_t= HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nLast-Modified: Thu, 16 Jan 2020 21:55:22 GMT\r\nETag: \"5e20dbca-2b\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nAccess-Control-Allow-Methods: POST\r\nAllow: GET, POST, OPTIONS\r\n$host: wellsfargo.com\r\nCache-Control: max-age=3600\r\nAccept-Ranges: bytes\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: DCID=GhypMkNA9gyAwYpYi5VzDSxS0j6y3RfeqXpXkkischw%3d; Domain=static.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-04-07T12:32:36.951946Z","times_seen":76412,"resource_available":true,"data":null}},"time_used":860,"timings":{"blocked":645,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=stdgds_icz__zvhk\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.260Z","timestamp":1701696286260,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=stdgds_icz__zvhk\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=V0jn%2fuvkCC0op%2fUR8tQOFMnk6MmI6r71WvMuDQgw6LM9Jl26OGa8o6jC%2fUVSI2RX; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\n_abck=66A9ACAE394979D609EF17AEC11E1CB1~-1~YAAQFE8kF0kX/OGLAQAAsZsANQsFEAZ8nt6J3tQtHqUPJ2/oRAoo28VBKu91Rgaojy/XuMnHji07njfZDScEDhd3nKvwk3PhPlCCs1DkCwWr0X5U54KpZGV2v9gPlrtvDgSHfqijptAP8TSPnfd7KiHq34WuVJO+t8pyHig5aGdZJptJ5tjLO0aFf1uT23hTbiOQHM4L9x2ywDZLoKgGSW6qoxazexFiMVR+V3xxHncoxzSCt3jbf1AtWLCaTIIFMzUkZb+I4OYLDMFeYGFftfbK55lqFuRkHrem72OrkVjlOYv/1fTRl05elwwcBI+MpVHv+nTz57/jgqwfVFuvP6AnYEYtFHl5EMI03puC9uP8jwpv2Ps0Df/tveEwrjpWSQ==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=21F9C0F8E665EB1FE0EF68DAB2FE9A5D~YAAQFE8kF0oX/OGLAQAAsZsANRZn+uTpnX29h70PT/Yljz5jvgbshW2FIhnBd2hlFPHeHNj0WxEKtpb3MOhit/UDiicQNMhpGlqBG4uFLtmKxMZyLSqg2jpZHRG2SGxab6kbasOsqZPunFY6h3vnD3OUuD9IzGhX/Xk0BYubDV2PCZS2fsP+5e9NUHLkeyAZTb9wS9p4NhIcSKgcWUuc4+lAeiJJ0620Ds5cpLOfEFLaKzoniM2EskPMFLSmm3CELkBC+dxZcB8JvPDtbe04coIErlXvjtcBJ5PFly9Ogr/ewwmAxZfJ~3621697~3228720; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:41 GMT; Max-Age=14400\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":884,"timings":{"blocked":668,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/js/main.2c70436e78e79e8ed3b8.chunk.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.279Z","timestamp":1701696286279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/static/ui/loginaltsignon/public/js/main.2c70436e78e79e8ed3b8.chunk.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=Ey5VqReBS+cs1vnsriCTxg%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"ee27393a1e52309e2f2a37e945862895","sha1":"b108584720773e59f2bdc8f68d13414b4992412e","sha256":"49690460a8d014666357fda98cc3f0f3bc886a4fe2d2f869b1b5379639d5f1a1","sha512":"cec2f349a50a97de7db6bec66e445733ab304ded0904a9825ab7b55327e0e7d19377a757c52a4dc5f3e3fd3dc962507a0d33a0c89afd4f556bab11c8613cff54","ssdeep":"","tlshash":"d1c012c4d8732aa1d02159002d8a3a459996c157829648a932858222cf4655dc98b166","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":841,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/login/static/js/general_alt.js?async\u0026seed=AIB30aSBAQAAaON8e0THKEG-EABBQKIADdpWWv5DyTHstHopwQkaHgNyXtDA\u0026X-G2Q3kxs3--z=q","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.907Z","timestamp":1701696286907,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/login/static/js/general_alt.js?async\u0026seed=AIB30aSBAQAAaON8e0THKEG-EABBQKIADdpWWv5DyTHstHopwQkaHgNyXtDA\u0026X-G2Q3kxs3--z=q HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nCookie: ndcd=wc1.1.w-729460.1.2.6i4fydIKdDNTH4XNkd6iBw%252C%252C.HbmzHg-72uMolwJZS5Lm2m8U_K15Sl1SVLsb80tnU2ms8kNEqtUrRjBe-uKwDT4COy3X7ZO741vqn8dTF4Ok7cFreII6Zoz4y652Fk1pxooRaikmBWOLw3utOZVP1XWEpnYi6D2saUcK7llaqUMrlzfDfzhz6Ps7N5GqmtL4CXgfRky1lctl62YRHtjkjI_B\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nMime-Version: 1.0\r\nContent-Length: 189\r\nContent-Type: text/html\r\nExpires: 0, Mon, 04 Dec 2023 13:24:41 GMT\r\nCache-Control: no-cache, no-store, must-revalidate, max-age=0, no-cache, no-store\r\nPragma: no-cache, no-cache\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=PUwWkVC6+L4G7DkyCEKi7A%3d%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text","md5":"13f9b461ca822651575011a03787e0ee","sha1":"003e3c1d946e916434bcc17e02a0791ff8531862","sha256":"b24ec5faf115847eea3de6bbff883f40c0f911f113f276f23d9a2d3298a2a8c7","sha512":"d847b0f18ad00a079584d2a289c9455e0e5df108ce9b7f222e8c9bb0126d83b4f5f901d44da4b99b7f4063e5bc3e9f491e07dd8ed53406d5270b8211dc1ca55a","ssdeep":"","tlshash":"14c012c8d8632ba1d02155002d8a3a519996c257829584a932858622cf4765dc98b157","first_seen":"2023-12-04T14:25:00Z","last_seen":"2023-12-04T14:25:00Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":234,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=JTVCJTdCJTIyaWQlMjIlM0ElMjI4JTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMmNpZCUyMiUzQSUyMjglMjIlMkMlMjJ1JTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZjb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbSUyRmF1dGglMkZsb2dpbiUyRnByZXNlbnQlM0ZvcmlnaW4lM0Rjb2IlMjZMT0IlM0RDT05TJTIyJTJDJTIyciUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGY29ubmVjdC5zZWN1cmUud2VsbHNmYXJnby5jb20lMkZhdXRoJTJGbG9naW4lMkZwcmVzZW50JTNGb3JpZ2luJTNEY29iJTI2TE9CJTNEQ09OUyUyMiUyQyUyMnBpZCUyMiUzQTQ0NzkyNDc3MCUyQyUyMmZjJTIyJTNBMCUyQyUyMmNudW0lMjIlM0E3JTJDJTIydHMlMjIlM0ExNjU2MzI5NDI3OTQ0JTJDJTIydCUyMiUzQSU3QiUyMnQlMjIlM0ElMjJsb2dpbiUyMiU3RCUyQyUyMnJhbmQlMjIlM0E0OTExNDclN0QlN0QlNUQ%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=tmhuhxuddiamtoys\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.267Z","timestamp":1701696286267,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=tmhuhxuddiamtoys\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=OgiktuPkov6fSLyWEJKAiT2BJaMgh%2ffM2lL79AB8Cik%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\n_abck=BFD978A53C7C0ECE833A3540FB4EEFF3~-1~YAAQFE8kF0wX/OGLAQAA0psANQshaAei/aTJH9GYMHogUr8fr3b7PnIIGpfpQNbzyn1WEZHwoJMCcU9zjbgnqnWMNlr4ebN2PI1iHjyxIcvfKybw62Mv8mnPfrtCMn+Lq+K0+fKmVlp8UUAwxD2thDXW/kuImWJB07Vy7V1Kg2W0AwwQzEPdEA7kirNgE23/7J7tCv+jQSyD84rnkiOFuUm0aJZ/e1QbYcsHOeZtGY6biYL2QgzETGLP17iC6ZwWUbWuQv6g2pS63ysbqsgE1NItrX02MaWoOpgNHMau28Lmem+46nZeUfwpqPyE/FZX41SXNc0FT7EtG2KA8V4/gTpAJFg9fjiZqMWgX7Vvvj71Yj9Nx0iMeAzrvkOX0ug+EA==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=334669942B1DD8A2B714AD60D4E3038F~YAAQFE8kF00X/OGLAQAA0psANRabN5Qc1Ra5HFIhHNmiwEJGW6+4lie03iezKVe2g7GqBugImoGiB89yRWZsqV7ryj/yv2wiTRXE8xEBTVSWtKdB2eCcFoV9ptchcjZfzH9tFZInaa0NkaH9pFRnCS/+sZUGxgE/yavrAYn5RX0q/XWzNkb9VLQpu4F6k4XoJixPjDOxQkAJm+/YDrk3rkuZpEIJe61s6+N/48dt8bgrd3qlj7CPfhE7X1ZeU8cMAsN3v+Px7JFJ28TLQt27I57YvqZ3xUsiEgJXp1GNcovsKvn7LSRK~3621697~3228720; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:41 GMT; Max-Age=14400\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":891,"timings":{"blocked":728,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=hronhtcntiapovlh\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.264Z","timestamp":1701696286264,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /AIDO/vyHb?d=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%3D\u0026cid=8\u0026si=4\u0026e=https%3A%2F%2Fconnect.secure.wellsfargo.com\u0026t=jsonp\u0026__tp=login\u0026c=hronhtcntiapovlh\u0026eu=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nContent-Length: 0\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=7Z9awwNtVzpIpqlleJSnZBVZs3BsWqZN%2fFAqeLqK3b5q%2fDZ521IAa9UKg7ptp+gh; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\n_abck=DDBE383BFB11C83A7FC43B8C9F0906A3~-1~YAAQFE8kF04X/OGLAQAA1psANQuNiaXL8eFTt3hzV0cK5ICJPkEclz292+xRiFRrU3oIO89XMGpJbVGdXyE9MV1ii8l5DwjC2zWkXxegNhQmjLW1SYbqKp+pilfKNcGq2aYVjG+7VEohSm/c8GWrtI/u34GgQt65l2ZOtN2Y7t47KQo4/nDzLWLtD+U0abR0R9rGX7/fg0o49VNlxaRHWQZuAfWQxKGCWcn4rGeRG5E2jyQdZFTnoeJtoCtOyjdvsmj5xhv/qOxo/lLn1ODIsAMHpion6QzwfDRB34XyIiiR/gJ7slLz/WkmFJ/oSEiTyEaRex43CcDFng9+puiNWVrPyer28snp19S4EOJKnnhvE0EqOLU95iKXkXePkpjxZA==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Tue, 03 Dec 2024 13:24:41 GMT; Max-Age=31536000; Secure\nbm_sz=565753EE142A07B14871806225CE13AB~YAAQFE8kF08X/OGLAQAA1psANRbduBngSCvOLPo+uVLcA9pHRXwl/QN1c/+0XV2LDtBcVsgA9D4EWnDZGBbwuKSJGOL2I1oF+XgMg0KpN30t16ueVWGShadbkY6de6CnXHj1YcUn9ZeAo7dTdeSdow24NkGEt0UNZTRk34f8wEExLKEApHJcTcrAdkGH3XdGjR763mQLrWSNGM3ZSkdL8XFvehDrZHcSqaBGDf3HIcSkNSmdAxubtz3tkiRFmxHoGuV7Q09OwDS02fUZCoLQRTB/WkYF5HKOV6bt5t6PieUHbmepOikO~3621697~3228720; Domain=.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 17:24:41 GMT; Max-Age=14400\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":898,"timings":{"blocked":727,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/sub.png","fqdn":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","domain":"pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.3.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.978Z","timestamp":1701696286978,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Oct 2023 17:13:53 GMT","end":"Tue, 09 Jan 2024 17:13:52 GMT"},"fingerprint":{"sha1":"91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF","sha256":"F3:D6:02:91:4C:11:83:7C:7C:FD:D0:A3:86:08:75:A0:37:A4:08:AF:67:24:48:AE:14:4D:D0:BA:8D:6A:19:A9"}}},"request":{"raw":"GET /sub.png HTTP/1.1\r\nHost: pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 1690\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"c1b8aa525681adce2d99b2452838b5d9\"\r\nLast-Modified: Sat, 18 Nov 2023 15:23:07 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 83045efe6ded0b61-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 176 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"c1b8aa525681adce2d99b2452838b5d9","sha1":"fca07525dfd5724a30718590287a8fdb57d1efaa","sha256":"85f39a9e87ea01745f1ac1475b364af858780a16798712130d27ef5741ad4431","sha512":"f8982a9fc20101876b28dcaf50988b5e39c3e9bffbeb3a3ed74fb1087c24c84cf12b45dde67e38cdf3322999192752a2baa2f23d8bbae8c4658cad5744a3d4b0","ssdeep":"","tlshash":"3431daa4be41550faa144735147c2eb35885119ccfed9a4bd8f417b90edc9a32b15b13","first_seen":"2023-11-19T03:00:53Z","last_seen":"2025-04-08T11:32:03.956441Z","times_seen":14,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.9.js?utv=ut4.48.202108231941","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:46.241Z","timestamp":1701696286241,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.9.js?utv=ut4.48.202108231941 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Sep 2021 21:00:33 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"614ceaf1-2bba\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 3522\r\nDate: Mon, 04 Dec 2023 13:24:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: DCID=Fo++OAeP7t2c5LIabT4INSY6bR3%2f82QQRiD6ACnZhUs%3d; Domain=static.wellsfargo.com; Path=/; Expires=Mon, 04 Dec 2023 13:39:41 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3237)","md5":"b7d078e49a0d7b507dbff8cf78554ec3","sha1":"89020fd9ed1678f2fd3d97fa6008ba5a5875b1cc","sha256":"34d6af1ed862f62ede259dedabcadba6446c1e9182cd70b19c66cb3acedae93d","sha512":"b2b0124f2d7ab969e80a2b0f10c4d1cce8089191d95946daf48e5dd36550ada1dd59e64aa65452ae5fc9dfe32ed67380a268d45611e9f50cf9d48b33d5d14a74","ssdeep":"192:2bFnNojImVVMwKpTXv161EyzcYr2hjCWCYrQ5+QBHYrQ5rwkxHYrQ5rik/YrQ5rc:2lNsImVVMwKp/oiyzcqTqQ5+8qQ5rwki","tlshash":"1832844cf6f8a53e86f0705c140e4b08b175ba8b19e2494eb9a95c107760cadb5f7b8e","first_seen":"2023-03-07T01:02:38Z","last_seen":"2025-11-11T10:30:37.41875Z","times_seen":23,"resource_available":true,"data":null}},"time_used":997,"timings":{"blocked":514,"dns":0,"connect":0,"send":0,"wait":480,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www10.wellsfargomedia.com/favicon.ico","fqdn":"www10.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.9.46","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:47.455Z","timestamp":1701696287455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www10.wellsfargomedia.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Feb 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"01:8C:11:B0:3A:3C:49:43:DF:06:F0:63:93:3D:DD:18:5A:6F:B1:13","sha256":"F5:50:C1:11:46:7C:02:00:F7:70:30:CE:8F:C8:3C:A8:6B:ED:89:B3:CF:27:7B:8D:B4:24:D8:74:0D:47:35:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www10.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Thu, 05 Oct 2023 01:28:28 GMT\r\netag: \"651e113c-47e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccess-control-allow-methods: POST\r\nallow: GET, POST, OPTIONS\r\n$host: wellsfargo.com\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: Tue, 02 Apr 2024 13:24:41 GMT\r\ndate: Mon, 04 Dec 2023 13:24:41 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\\012- data","md5":"11e6b612207abf064158e69540c16e24","sha1":"9e3912485514553b2e17b578c8340986f1172b4d","sha256":"8670da3c95c03b59b091eac882b67e0b59b765c455b8d871abd2e55d4618573b","sha512":"2a1257c597a985ae9da8a029a2bab00e2cda2106026578ac382c7319f4754d42c47e51f59a3f45f1228e4e036b00707a9b087d6dbf18821327f187e4e79ea24f","ssdeep":"","tlshash":"93214200430423acdcabd273f6027b69044f2d2ed9c5613f634038d5a4aff7608e3648","first_seen":"2023-05-08T02:46:24Z","last_seen":"2026-04-06T22:53:45.033487Z","times_seen":238,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/secure-auth/utag.21.js?utv=ut4.49.202210132016","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:47.541Z","timestamp":1701696287541,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/secure-auth/utag.21.js?utv=ut4.49.202210132016 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nCookie: ndcd=wc1.1.w-729460.1.2.6i4fydIKdDNTH4XNkd6iBw%252C%252C.HbmzHg-72uMolwJZS5Lm2m8U_K15Sl1SVLsb80tnU2ms8kNEqtUrRjBe-uKwDT4COy3X7ZO741vqn8dTF4Ok7cFreII6Zoz4y652Fk1pxooRaikmBWOLw3utOZVP1XWEpnYi6D2saUcK7llaqUMrlzfDfzhz6Ps7N5GqmtL4CXgfRky1lctl62YRHtjkjI_B\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 14 Nov 2023 21:04:47 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6553e0ef-11d0\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 1896\r\nDate: Mon, 04 Dec 2023 13:24:42 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=r+CA2OiiCYPCjRQwFkNBDw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1896,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1090)","md5":"389a2b5df08337c70ed0ec2795effdf5","sha1":"169cda9ef1fc39d810d2b4d99d9621a13c1da795","sha256":"050e2aa89c3945fa04373c714347297146adebc89effa9e41c0df8090ba0ed51","sha512":"b9e91f5140bfe2becd680b4cf017bcb85f9212fd05c539e93def2188a9eebe5f951617b7560cb3edb7fe2c850cbcbfd84374dca21287bce4733d452373182bbb","ssdeep":"96:HN6taeIpB/yj8yjyVypxuujFnL3Hv3Geq+rk0E04/BDJ/mH+eH+Ca/:HNYXIpstGspxuQFn6x+rkV3PCC","tlshash":"82a1424d7a88e13ec9b0d112493f0e7820557a171993886275849c4eb328d7de966f4e","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-09-19T21:40:36.16441Z","times_seen":16,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:47.798Z","timestamp":1701696287798,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nCookie: ndcd=wc1.1.w-729460.1.2.6i4fydIKdDNTH4XNkd6iBw%252C%252C.HbmzHg-72uMolwJZS5Lm2m8U_K15Sl1SVLsb80tnU2ms8kNEqtUrRjBe-uKwDT4COy3X7ZO741vqn8dTF4Ok7cFreII6Zoz4y652Fk1pxooRaikmBWOLw3utOZVP1XWEpnYi6D2saUcK7llaqUMrlzfDfzhz6Ps7N5GqmtL4CXgfRky1lctl62YRHtjkjI_B\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 14 Nov 2023 21:11:03 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6553e267-7a0\"\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 827\r\nDate: Mon, 04 Dec 2023 13:24:42 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=0JV7jzkD9MSsMigilVExQw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":827,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (720), with CRLF line terminators","md5":"28118b10e976acfd04c408fd5b2bf75f","sha1":"602467c73559091d2a290028566d92599e85b12b","sha256":"c096151906e12dab59a9ef244248a08b30021d778fd538394bead31aff29d21d","sha512":"a6083f4c573af70a31e4b1658b2a4a7de26a9dc22ed3d393983f384f94ea7c446c7e5129090abc59e0197cd1b63b25825f49739c7fae607c89c428514b5264e0","ssdeep":"","tlshash":"284111ba7e4ae4115113259b2b5bdb09262b60d71c44d68195f8ce90b031b4bdd3bccc","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-08-20T18:51:20.749418Z","times_seen":8,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/generic1697649041190.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:47.831Z","timestamp":1701696287831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/medallia/wdcusprem/57907/onsite/generic1697649041190.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nCookie: ndcd=wc1.1.w-729460.1.2.6i4fydIKdDNTH4XNkd6iBw%252C%252C.HbmzHg-72uMolwJZS5Lm2m8U_K15Sl1SVLsb80tnU2ms8kNEqtUrRjBe-uKwDT4COy3X7ZO741vqn8dTF4Ok7cFreII6Zoz4y652Fk1pxooRaikmBWOLw3utOZVP1XWEpnYi6D2saUcK7llaqUMrlzfDfzhz6Ps7N5GqmtL4CXgfRky1lctl62YRHtjkjI_B\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 14 Nov 2023 21:11:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6553e266-58ff7\"\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 81992\r\nDate: Mon, 04 Dec 2023 13:24:42 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=glTOu7OgcteuRH0n9%2fGjWQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81992,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (12654), with CRLF line terminators","md5":"073be3890e20fbdcfcd85ed26864de52","sha1":"92cb3cbeb2e9dd170b716689cb47f433c904918d","sha256":"889a7d5363b778aa5a9ef66112c4da95363031ca6d1909133ef0691d268f7971","sha512":"4467152230b6dcf3a9e143e99e8d0b745b6429c33237081386072e48602aca22961dd34de08272bace9c78a1558795d7b1c6399ca5b8d68660792cfc3a59cbf6","ssdeep":"6144:HFAk6rgSZItMlN7hA1YzTEre/qozC8myMVCm:HFSrgPtMlN7hEYoe/qozCZ","tlshash":"7174f9843fd63128624b176e14af530a2c3732597dd1f588ebadc98030ac9cb7d6bb65","first_seen":"2023-11-19T03:00:52Z","last_seen":"2024-08-20T18:51:20.750835Z","times_seen":8,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.digital-cloud-prem.medallia.com/wdcusprem/57907/onsite/onsiteData.json","fqdn":"resources.digital-cloud-prem.medallia.com","domain":"medallia.com","tld":"com"},"ip":{"addr":"151.101.85.230","port":443,"asn":54113,"as":"FASTLY","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:48.033Z","timestamp":1701696288033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.digital-cloud-prem.medallia.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 01 Nov 2023 16:47:43 GMT","end":"Sun, 01 Dec 2024 16:47:43 GMT"},"fingerprint":{"sha1":"6A:E8:BF:DD:88:2C:23:7D:14:CF:AA:17:C6:DE:EE:02:C1:B6:89:51","sha256":"DA:8E:F9:9E:16:6D:A6:09:B0:6F:28:2A:7D:15:88:2C:24:17:51:CB:36:4A:8A:25:16:DB:9C:58:52:1A:EF:26"}}},"request":{"raw":"GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1\r\nHost: resources.digital-cloud-prem.medallia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: gdoAC1JFLJV1G/rFYaG3bqMi77JUF5ZBNxLFvZr7MIS/t1Ti7crlqOdPVTRsLGREwk7gfvRj/FQaKQ3Uoo+0HA==\r\nx-amz-request-id: M65MZCW0P2TMNBEH\r\nlast-modified: Tue, 14 Nov 2023 22:16:16 GMT\r\netag: \"922979d099fe26f40e5c5011622d2710\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: rPjWA7owhVwjjUArb5KuSGg_fynafZOi\r\ncontent-type: application/json\r\nserver: AmazonS3\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0,must-revalidate\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 13:24:42 GMT\r\nvia: 1.1 varnish\r\nage: 1586286\r\nx-served-by: cache-bma1681-BMA\r\nx-cache: HIT\r\nx-cache-hits: 3\r\nx-timer: S1701696282.492510,VS0,VE0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1817\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1817,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with very long lines (2056)","md5":"922979d099fe26f40e5c5011622d2710","sha1":"413f2feaf95a9154f9e46e2a5e90ed256c8dc538","sha256":"6d74d2e75f9d22b8028268de2b0f6b21a7ea2ddad52c64d8d549b90adb1cf5f4","sha512":"4eb09ac4a57487083908ade19933efc8bdb30a44fc986469f21739d2c2cd248387a0ba633b73efe769f61c9b08a9fd56b02af55305b8798ae540b5212695f598","ssdeep":"384:26DVG2N2WSxmK16DVGN2N2WSx156DVGN2N2WSxm2KncVGN2N2WSx1KcVGN2N2WSV:0vcLjCYW3yQ4u","tlshash":"15c2eb4ef461dca4d0052d1e79bf0e73282ada6386d0265cf354e7098b2e53d93e176e","first_seen":"2023-11-19T03:00:53Z","last_seen":"2023-12-04T14:25:01Z","times_seen":4,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":54,"dns":30,"connect":8,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsps.ssl.com/","fqdn":"ocsps.ssl.com","domain":"ssl.com","tld":"com"},"ip":{"addr":"34.237.184.165","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-04T13:24:48.423740902Z","timestamp":1701696288423,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsps.ssl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 04 Dec 2023 13:24:42 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 1810\r\nConnection: keep-alive\r\nExpires: Sun, 10 Dec 2023 14:46:09 GMT\r\nCache-Control: max-age=86400,public,no-transform,must-revalidate\r\nETag: \"e272a24f669563f6f837c1d317b5005a0f78d6e8\"\r\nLast-Modified: Sun, 03 Dec 2023 14:46:10 GMT\r\nX-Proxy-Cache: HIT\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1810,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"1b50774e10a30049c1456c32d531519a","sha1":"e272a24f669563f6f837c1d317b5005a0f78d6e8","sha256":"18628d37a5dff2a2ef575680a6a4c5eb028dc0066c77c65febc67fa792a2b671","sha512":"ae3836184f8778c6a48190fca6b34f0bdf7741fd8a8060b8222c90af67e08eaac2242344c97af6a425a4c24a47bf8ddbafb0f08790d6240b2e421cff996be19f","ssdeep":"","tlshash":"4a31e7930c78f1465e83888af0e3d93b7eb53898159b253c5974c090f98b3e5af5a63c","first_seen":"2023-12-04T09:59:56Z","last_seen":"2023-12-04T14:25:01Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsps.ssl.com/","fqdn":"ocsps.ssl.com","domain":"ssl.com","tld":"com"},"ip":{"addr":"34.237.184.165","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-04T13:24:48.426103509Z","timestamp":1701696288426,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsps.ssl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 04 Dec 2023 13:24:42 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 1810\r\nConnection: keep-alive\r\nExpires: Sun, 10 Dec 2023 14:46:09 GMT\r\nCache-Control: max-age=86400,public,no-transform,must-revalidate\r\nETag: \"d70fa63f06abefd3c2ed324442eb564435c2e0c5\"\r\nLast-Modified: Sun, 03 Dec 2023 14:46:10 GMT\r\nX-Proxy-Cache: HIT\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1810,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"588b0464d6eb2216265dae78b7d06dfc","sha1":"d70fa63f06abefd3c2ed324442eb564435c2e0c5","sha256":"fc0730c9e40e7852c9b8df026b422dcd4f0f058af3585494cc09a3195649b92e","sha512":"d160d47c5be6ec08ca764b77664774b4328131d2533f88acb723347b816179ed419c8254abd205a4925faad74dd9687a3bc39dc1a0ab0f29631fb6780cf34752","ssdeep":"","tlshash":"e631972047adb65a98570d0d61e0ec2b3a7b34b1365959b7b11c409678892979f1b13c","first_seen":"2023-12-04T14:25:01Z","last_seen":"2023-12-04T14:25:01Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"udc-neb.kampyle.com/v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track","fqdn":"udc-neb.kampyle.com","domain":"kampyle.com","tld":"com"},"ip":{"addr":"35.241.45.82","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:48.125Z","timestamp":1701696288125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kampyle.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 29 Mar 2023 06:23:12 GMT","end":"Wed, 28 Feb 2024 06:23:12 GMT"},"fingerprint":{"sha1":"38:12:16:65:B3:E4:74:2C:F1:56:DE:7C:79:BF:9A:16:8D:D9:0D:27","sha256":"EE:BD:8C:78:AD:C5:39:0B:6E:B0:E3:DE:B2:BE:46:61:67:76:24:46:8E:A1:C8:5F:A9:BA:30:AD:DD:5A:E0:CE"}}},"request":{"raw":"POST /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1\r\nHost: udc-neb.kampyle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 2024\r\nOrigin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 13:24:42 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: X-Requested-With, Origin, Content-Type, Accept\r\naccess-control-max-age: 1800\r\nx-me: prod-instance-gatewayservice-green-tfs7\r\nx-application-context: application:9090\r\ncontent-type: text/plain;charset=ISO-8859-1\r\ncontent-length: 59\r\nserver: Jetty(9.2.11.v20150529)\r\nvia: 1.1 google\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59,"size_decoded":0,"mime_type":"text/plain; charset=ISO-8859-1","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"0ab969c512ad71613832d03710eadde2","sha1":"f64271cfa7e4b386fed80e18a958a90ffd1e3893","sha256":"cbc1399b82e42018fbc8b8b9277200665d6367c9134ead9308ea5e568b00e459","sha512":"4af677314013020fcae2b96f756d8e6411453810a489323fbe1c550e7f34a36f1f307d95c728cf26b4742e09bba4694c1cb142a10315523cf2ecca4930db043c","ssdeep":"","tlshash":"fba002c1150250729d574b297710ab739b7015e6290912d011ed2ca505604e4d10a44a","first_seen":"2023-04-05T03:07:27Z","last_seen":"2025-01-09T02:30:16.643488Z","times_seen":693,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":300,"dns":18,"connect":7,"send":0,"wait":107,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=eyJldmVudHMiOiBbCiAgICB7InNlc3Npb25fc2NyZWVuX3NpemUiOiAiMTI4MHgxMDI0Iiwic2Vzc2lvbl9kdWEiOiAiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTA1LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTA1LjAiLCJzZXNzaW9uX3BsYXRmb3JtIjogIkxpbnV4IHg4Nl82NCIsInBhZ2VfdGl0bGUiOiAiU2lnbiBPbiB0byBWaWV3IFlvdXIgUGVyc29uYWwgQWNjb3VudHMgfCBXZWxscyBGYXJnbyIsInBhZ2VfdXJsIjogImh0dHBzOi8vcHViLTc3ZjRmZTk1NmU1ODQzYzJhMTkyY2FhODcwYmQ0YTBkLnIyLmRldi9zaWdub24uaHRtIiwidHJhY2tlcl90eXBlIjogImphdmFzY3JpcHQiLCJ0cmFja2VyX3ZlcnNpb24iOiAiMi4yLjIzIiwiZXZlbnRfbmFtZSI6ICJuZWJ1bGFfcGFnZV92aWV3IiwiZXZlbnRfdGltZXN0YW1wX2Vwb2NoIjogIjE3MDE2OTYyODgxMzAiLCJldmVudF90aW1lem9uZV9vZmZzZXQiOiAwLCJ1c2VyX2lkIjogIjE4YzM1MDBiNTFiMjE5LTBiOGQwYzdmZWI2NThhLWM1MDU0MjUtMTQwMDAwLTE4YzM1MDBiNTFjNDZhIiwiZW52aXJvbWVudCI6ICJkaWdpdGFsLWNsb3VkLXVzLXByZW0iLCJhY2NvdW50SWQiOiA1NzkwNSwidXJsIjogImh0dHBzOi8vcHViLTc3ZjRmZTk1NmU1ODQzYzJhMTkyY2FhODcwYmQ0YTBkLnIyLmRldi9zaWdub24uaHRtIiwid2Vic2l0ZUlkIjogNTc5MDcsImZvcm1JZCI6IG51bGwsImZvcm1UcmlnZ2VyVHlwZSI6IG51bGwsImthbXB5bGVfZGF0YSI6IHsibWRfaXNTdXJ2ZXlTdWJtaXR0ZWRJblNlc3Npb24iOiAiIiwiTEFTVF9JTlZJVEFUSU9OX1ZJRVciOiAiIiwiREVDTElORURfREFURSI6ICIiLCJrYW1weWxlSW52aXRlUHJlc2VudGVkIjogIiIsImthbXB5bGVfdXNlcmlkIjogIjkzYjctMjk2Ni0wMDRmLWY0YzUtYmI5YS0yYmNjLTA0NTYtNTk3MyIsImthbXB5bGVVc2VyU2Vzc2lvbiI6ICIxNzAxNjk2Mjg4MTI5Iiwia2FtcHlsZVVzZXJQZXJjZW50aWxlIjogIiIsIlNVQk1JVFRFRF9EQVRFIjogIiJ9LCJjb29raWVfc2l6ZSI6IDE3LCJrYW1weWxlX3ZlcnNpb24iOiAiMi41Mi4wIiwib25zaXRlX3ZlcnNpb24iOiAiMi41Mi4wIiwiaGlzdG9yeV9sZW5ndGgiOiAyLCJldmVudF9sb2NhbF90aW1lc3RhbXAiOiAxNzAxNjk2Mjg4MTMwLCJwb3NpdGlvbiI6IG51bGwsImlzVXNlcklkZW50aWZpZWQiOiBmYWxzZSwicGFja2FnZVZlcnNpb24iOiAiMi41Mi4zXzIwMjMxMDE4MTcxMDQwIn0KXX0=","fqdn":"udc-neb.kampyle.com","domain":"kampyle.com","tld":"com"},"ip":{"addr":"35.241.45.82","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/signon.htm","date":"2023-12-04T13:24:48.136Z","timestamp":1701696288136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kampyle.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 29 Mar 2023 06:23:12 GMT","end":"Wed, 28 Feb 2024 06:23:12 GMT"},"fingerprint":{"sha1":"38:12:16:65:B3:E4:74:2C:F1:56:DE:7C:79:BF:9A:16:8D:D9:0D:27","sha256":"EE:BD:8C:78:AD:C5:39:0B:6E:B0:E3:DE:B2:BE:46:61:67:76:24:46:8E:A1:C8:5F:A9:BA:30:AD:DD:5A:E0:CE"}}},"request":{"raw":"GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1\r\nHost: udc-neb.kampyle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-77f4fe956e5843c2a192caa870bd4a0d.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 13:24:42 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: X-Requested-With, Origin, Content-Type, Accept\r\naccess-control-max-age: 1800\r\nx-me: prod-instance-gatewayservice-green-fkmk\r\nx-application-context: application:9090\r\ncontent-type: image/gif; charset=UTF-8\r\ncontent-length: 0\r\nserver: Jetty(9.2.11.v20150529)\r\nvia: 1.1 google\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T13:11:50.75181Z","times_seen":13462273,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":292,"dns":6,"connect":11,"send":0,"wait":106,"receive":0,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
