r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9196
Expires: Tue, 06 Dec 2022 03:00:56 GMT
Date: Tue, 06 Dec 2022 00:27:40 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ee088fab9b287e174cfd1f2c735a909f
25c3335b514a36ad1a24d00413d60c3d394f5161
494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2765
Cache-Control: max-age=125384
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:40 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 11:17:24 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 00:18:32 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 548
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11757
Expires: Tue, 06 Dec 2022 03:43:37 GMT
Date: Tue, 06 Dec 2022 00:27:40 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6S7fvcgkvyAdLgT8MMHPO4wq7HIKdZQVvEjgZ3dhNEWBCPkHrU/RuTQWLd+jlwq4ck9L0N1IOcM=
x-amz-request-id: CN9VCQWVD8WT8BJT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 23:48:42 GMT
age: 2338
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 00:27:40 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.dcocsp.cn/
79.133.177.230200 OK 471 B IP 79.133.177.230:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 637e10d83745e1976fbd0ed705eb58ee
f3b4e27b35fcb16b6731676955d58385b8e93e92
87cca322ad1c22ddb7c07a214a8bae557e76acabbfb98fdd2e55a8ce7a89143c
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Mon, 05 Dec 2022 23:44:04 GMT
Last-Modified: Mon, 05 Dec 2022 14:24:48 GMT
ETag: "638dff30-1d7"
Expires: Wed, 07 Dec 2022 14:24:48 GMT
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1670283844
Via: cache21.l2de2[0,0,304-0,H], cache9.l2de2[0,0], cache8.de3[1,1,200-0,H], cache8.de3[3,0]
Age: 2616
X-Cache: HIT TCP_REFRESH_HIT dirn:12:260536900
X-Swift-SaveTime: Tue, 06 Dec 2022 00:27:40 GMT
X-Swift-CacheTime: 984
Timing-Allow-Origin: *
EagleId: 4f85b19c16702864607653570e
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 00:08:58 GMT
cache-control: public,max-age=3600
age: 1122
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 2b9d6a686aa3c4ea24568425e43a5221
d53bb4c9579bd1db78a0520619e888aec79f750f
c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2740
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:41 GMT
Last-Modified: Mon, 05 Dec 2022 23:42:01 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
163.171.131.129200 OK 21 kB URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1566), with CRLF line terminators
Hash a729a99ff699201709e0bc5d64f3c141
ea042792d3be3975d9626a8a6bf754dcb15b1f1a
699795c2aa9fec05d36d3d51d06b75b94c0f250119c2517dab414961cfa9de84
Analyzer Verdict Alert openphish Wells Fargo & Company
fortinet Phishing
GET /es/biz/ HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:41 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 20631
Connection: keep-alive
Expires: -1
Cache-Control: no-cache, no-store, max-age=0
X-XSS-Protection: 1; mode=block
Pragma: no-cache
Content-Security-Policy: default-src https:; img-src https: data:; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; object-src 'self'; font-src https: data:; style-src https: 'unsafe-inline'; script-src 'nonce-64f3dbeb-4d04-4f57-b8d0-d700a52d7d48' 'self' https://*.wellsfargo.com https://*.wfinterface.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://s.yimg.com https://sp.analytics.yahoo.com https://cdn.schemaapp.com https://www.knotch-cdn.com;report-uri https://ort.wellsfargo.com/reporting/csp
Content-Language: en-US
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3; Expires=Tue, 06-Dec-2022 00:28:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Tue, 06-Dec-2022 00:28:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Tue, 06-Dec-2022 00:28:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:0|i:491115; Expires=Tue, 06-Dec-2022 00:28:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=BA7F2D623CA75222BB71297F44B75EED; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=ES; Domain=.wellsfargo.com; Expires=Wed, 06-Dec-2023 00:27:40 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=11202212051627401606170356; domain=.wellsfargo.com; path=/; expires=3 Dec 2032 00:27:40 GMT; secure=true; SameSite=Lax; HttpOnly
ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; path=/; Httponly; Secure
WesdAksn=A-_H1OSEAQAAGPKQcjhp7qHaRZy53WrQKgf_YQTI3oHKkG7tggfMfKiOdcoZAaOrg1-cuDv8wH8AAEB3AAAAAA|1|0|8816621562317b7056ce59eaf50256d64ea28d4f; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=Hu9ai7J0UhnGt8R6sSTV+6I11HJHNgOiKllFKdd57Xac0nTPYNaH9xU4fhWtMNQr; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:40 GMT;Httponly; Secure
_abck=35B271DB1D9D186FC77204DA2E2ECAEC~-1~YAAQHWgRYNZqeImEAQAA7sjU5AlSOBF+U5gDhY2dQmGmsU9PIuyGXyYtZ8MKJLq+edRjHSnpH27QjxoZaVSGL+9eQKd84gpgzmpFf87KqRdJtIdHtwllgLhAey6/LIFV/dYseFkALmFiGedreYkkN3FsdlPU3bTSCGyMlCH28du1O5dc0mN7QdCGpnOdi9VHYGr1UFtW4geDfByFJ0hlhAPM7Ayj+7ze5g1RT//7cZ7nNr8LPi7njktlyBWomYLJ/Njg4Fb2H6XSNF+9Tmx3J3za+ApSjr9wCdwt8ibassfExe1M4DcZnBzRJ0dIc8ekNzmwyaeJ9FOg/Um/B6OhvrpuqzAkld0dKsZLJm+mNgv0ggim+m2HTCzC9Hiy8lVexw==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Wed, 06 Dec 2023 00:27:41 GMT; Max-Age=31536000; Secure
bm_sz=1E3817F718B7298CDEB22B94F25677DA~YAAQHWgRYNdqeImEAQAA7sjU5BITIksUCWbHuSqEuCCpeRMw6cDplHkvQWB3lABlVCAALn+3kEfbOPDVhBt+PHjydBl5U+ccPQzK5JFCEYbFTdKHSikqweGtDfR3WbAg9NZaAmmWH6fCZ/7wmVuzNdti1DEo8WT4ZDjN60u43Phy74InqNByosAgXtBoobr3cDJgzX1rWEbMZVuNSmM+lqzONQ/UFmeTNjYjOljjTlsuqm5dE2PX/mo06o78eV6LxCaWVY0z2NTNwUYzKwV91i3TaQLHnYhOZhQ1F65C7JoeYiCMipz8~3622455~3485763; Domain=.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 04:27:40 GMT; Max-Age=14399
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl21:9 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7c_bl21_19190-51962
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d91f808bca5cafd02cbd3d3029848b42
412dd8ad11f4a0201fe0423c9462ead5c7f06cac
e35ffd353788e6aec0d91c163ff6578c06792aab1f5ec943ff380d059d1a2ab0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 462
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:41 GMT
Last-Modified: Tue, 06 Dec 2022 00:19:59 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d91f808bca5cafd02cbd3d3029848b42
412dd8ad11f4a0201fe0423c9462ead5c7f06cac
e35ffd353788e6aec0d91c163ff6578c06792aab1f5ec943ff380d059d1a2ab0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 462
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:41 GMT
Last-Modified: Tue, 06 Dec 2022 00:19:59 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js
23.36.79.26200 OK 901 B URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1952), with no line terminators
Hash 5dcc7c101ced74367609685d577093f6
f0d8214335e3c33b634048b992afd536f5bd3e43
10aab16ccfb5374425dc6ee64453a7fe6d7b6dfa47ab65779f42c7db740da1ef
GET /assets/js/wfui/appdynamics/appdEUMConfig.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 20 Jan 2022 02:38:25 GMT
Vary: Accept-Encoding
ETag: W/"61e8cb21-7a0"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 901
Date: Tue, 06 Dec 2022 00:27:41 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=7+RRugQCmTzzsJBVb9EZjg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d91f808bca5cafd02cbd3d3029848b42
412dd8ad11f4a0201fe0423c9462ead5c7f06cac
e35ffd353788e6aec0d91c163ff6578c06792aab1f5ec943ff380d059d1a2ab0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 462
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:41 GMT
Last-Modified: Tue, 06 Dec 2022 00:19:59 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
static.wellsfargo.com/assets/js/wfui/container/wfui-container-top.js
23.36.79.26200 OK 17 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/container/wfui-container-top.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (48287)
Hash a75fd8e10b107df2ef26038f1783ac4e
b27d8fc62fd83f944d638b93140ec05bd050ded4
9baeb568dd185db9aeaefd009c3778e3fe04b59acfa6c04fe96bdf608c8f2299
GET /assets/js/wfui/container/wfui-container-top.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 13 Aug 2022 13:50:11 GMT
Vary: Accept-Encoding
ETag: W/"62f7ac13-bcef"
Cache-Control: max-age=1800
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 16778
Date: Tue, 06 Dec 2022 00:27:41 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=AT1qvz%2fi9%2fyiwW5PTxusTw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/icn-marketing-belt-cash-hand_64x64.png
104.110.27.78200 OK 2.5 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/icn-marketing-belt-cash-hand_64x64.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 01695377e69f7063e1550746495c81f5
609ec8ee8dd28f128f0477b6147817750c9b341e
5c9d48467771247548445209a10047ced732d2da276c072f4c6c5a483405c944
GET /assets/images/rwd/icons/marketing_belt_icons/icn-marketing-belt-cash-hand_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61c275a2-103b"
last-modified: Thu, 14 Jul 2022 02:03:01 GMT
server: Akamai Image Manager
content-length: 2520
content-type: image/webp
cache-control: private, no-transform, max-age=1721260
expires: Sun, 25 Dec 2022 22:35:21 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/icn_marketing_belt_checking_64x64.png
104.110.27.78200 OK 1.7 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/icn_marketing_belt_checking_64x64.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7d5653912e62290c532bc8739c69731e
c48cd970eaa966f211e760a0fb19eda8fc6f4a8d
f7a7b6bbb8e06125faa2e4d2199f44d59c89cf361d3334f1db281d7e827602fe
GET /assets/images/rwd/icons/marketing_belt_icons/icn_marketing_belt_checking_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61c275a2-957"
last-modified: Thu, 14 Jul 2022 02:03:02 GMT
server: Akamai Image Manager
content-length: 1652
content-type: image/webp
cache-control: private, no-transform, max-age=1689167
expires: Sun, 25 Dec 2022 13:40:28 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_gettyimages-691573493_1700x700.jpg
104.110.27.78200 OK 25 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_gettyimages-691573493_1700x700.jpg
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x423, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 73d5e0b0076f087b0878d8d90308b115
6af270bc7003c54dcff68b2b283c43799bc85abc
490dbbb001e913bcb03b5b1099174db6ff6ff1fe8396f2ab44e63c29899f1168
GET /assets/images/contextual/responsive/hpprimary/wfi_ph_gettyimages-691573493_1700x700.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61fc441a-17f0e"
last-modified: Thu, 14 Jul 2022 02:03:05 GMT
server: Akamai Image Manager
content-length: 24624
content-type: image/webp
cache-control: private, no-transform, max-age=1670094
expires: Sun, 25 Dec 2022 08:22:35 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/contextual/responsive/lpromo/matchmaker_woman_1600x700.jpg
104.110.27.78200 OK 35 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/contextual/responsive/lpromo/matchmaker_woman_1600x700.jpg
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x502, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 539b8a50b31186a56fc5f1ab1297ea78
575c94d22bac962bf0417f00c9539f28ad6296f0
bdb5cb84e084b4f210b9d4d961ed3c47d650e48d5010d6eeeba0a06338ca5988
GET /assets/images/contextual/responsive/lpromo/matchmaker_woman_1600x700.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61c4837f-1857e"
last-modified: Thu, 14 Jul 2022 02:03:06 GMT
server: Akamai Image Manager
x-serial: 322
x-check-cacheable: YES
content-length: 34606
content-type: image/webp
cache-control: private, no-transform, max-age=1721213
expires: Sun, 25 Dec 2022 22:34:34 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/icn_marekting_belt_credit_card_64x64.png
104.110.27.78200 OK 1.6 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/icn_marekting_belt_credit_card_64x64.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b6865ccc7a6df08112ed1669824be71c
1a51df486fd125ee8a966115a1373e4b34e49c11
f33f804c40891284e0c3afcd509b199e56f3a2821fcc2f83f60aa66cf60ba305
GET /assets/images/rwd/icons/marketing_belt_icons/icn_marekting_belt_credit_card_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61c275a2-9d0"
last-modified: Thu, 14 Jul 2022 02:03:02 GMT
server: Akamai Image Manager
content-length: 1648
content-type: image/webp
cache-control: private, no-transform, max-age=1721200
expires: Sun, 25 Dec 2022 22:34:21 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/icn_marketing_belt_touchless_64x64.png
104.110.27.78200 OK 1.9 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/icn_marketing_belt_touchless_64x64.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fd7f8c24576c73072097bf2e6259185
0fbda4c7e3b800aec15fea0539ad703ae61d6046
144529be2df1a6a4bbcbd82b300cd99b256fea8a768d3488f8080f4c0a908260
GET /assets/images/rwd/icons/marketing_belt_icons/icn_marketing_belt_touchless_64x64.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61c275a2-bde"
last-modified: Thu, 14 Jul 2022 02:03:01 GMT
server: Akamai Image Manager
content-length: 1930
content-type: image/webp
cache-control: private, no-transform, max-age=1482210
expires: Fri, 23 Dec 2022 04:11:11 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/es/images/rwd/wf_logo_220x23.png
104.110.27.78200 OK 1.7 kB URL HTTP/2 www17.wellsfargomedia.com/assets/es/images/rwd/wf_logo_220x23.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c5f6eb132665afa77e8ac7a1a707e951
70d65ab0dcfaace4c1d8bbb772af4fd7c6f66c80
0d7727e08780a04f9c86fca16ed264664eea2b161744cfb70836880bf04fc1ac
GET /assets/es/images/rwd/wf_logo_220x23.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61c392e6-10c2"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 1710
content-type: image/webp
cache-control: private, no-transform, max-age=1675948
expires: Sun, 25 Dec 2022 10:00:09 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
X-Firefox-Spdy: h2
www--wellsfargo--com--8449329d48d6c.wsipv6.com/ui/css/publicsite-ui/ps-global.css
163.171.131.129200 OK 26 kB URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/ui/css/publicsite-ui/ps-global.css
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2fa7fc2a6e81e8690f742b8c860787ca
bc1311f6f618fc318089767b6681ed007ba77625
5e4a87e0724000f577a071c64bb8dd65ef6823e675ff9cd9a146b2e8111f3682
GET /ui/css/publicsite-ui/ps-global.css HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Cookie: ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:491115; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:41 GMT
Content-Type: text/css
Content-Length: 26114
Connection: keep-alive
Expires: Mon, 05 Dec 2022 16:40:08 GMT
Last-Modified: Wed, 19 Oct 2022 17:27:16 GMT
ETag: "63503374-32094"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Age: 1
X-Via: 1.1 VMdgflkfFRA2wp48:1 (Cdn Cache Server V2.0), 1.1 bl22:2 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7d_bl21_20387-36549
www--wellsfargo--com--8449329d48d6c.wsipv6.com/ui/javascript/homepage-ui/homepage_iaoffer.js
163.171.131.129200 OK 18 kB URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/ui/javascript/homepage-ui/homepage_iaoffer.js
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type Unicode text, UTF-8 text, with very long lines (31354), with NEL line terminators
Hash 59e9efb0258fa77e22ba60cebadda375
14d20bc503649a3b3275eb229e8a965069d74253
7e28a89f68d98388e4f1b5d76b6770fbc175df1c3545d54ba6c67b1abda5b97b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
fortinet Phishing
GET /ui/javascript/homepage-ui/homepage_iaoffer.js HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Cookie: ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:491115; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:41 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 17883
Connection: keep-alive
Expires: Mon, 05 Dec 2022 16:40:08 GMT
Last-Modified: Wed, 19 Oct 2022 17:27:48 GMT
ETag: W/"63503394-d905"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Age: 1
X-Via: 1.1 VM-CDG-01uY9168:5 (Cdn Cache Server V2.0), 1.1 bl22:6 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7d_bl21_20304-16915
www--wellsfargo--com--8449329d48d6c.wsipv6.com/ui/javascript/publicsite-ui/ps-global.js
163.171.131.129200 OK 58 kB URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/ui/javascript/publicsite-ui/ps-global.js
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type Unicode text, UTF-8 text, with very long lines (65500), with no line terminators
Hash af392eceb5785939026904fe5e732b59
bec4dac7e409117cf507217c02fea99974dac589
5472cbd4e60da4689c63a18c499241925add77f6ee329cc919856f983b9b7e93
Analyzer Verdict Alert fortinet Phishing
GET /ui/javascript/publicsite-ui/ps-global.js HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Cookie: ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:491115; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:41 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 57932
Connection: keep-alive
Expires: Mon, 05 Dec 2022 16:40:08 GMT
Last-Modified: Wed, 19 Oct 2022 17:27:16 GMT
ETag: "63503374-2c4b0"
Cache-Control: max-age=1800
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Age: 1
X-Via: 1.1 VMdgflkfFRA2wp48:6 (Cdn Cache Server V2.0), 1.1 bl22:7 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7d_bl21_20387-36551
www--wellsfargo--com--8449329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?single
163.171.131.129200 OK 4.3 kB URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?single
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (9269)
Hash f950cbaf0ddfd43cebb9bfd856bc7db4
1118d84ba88705ff234cfe2bb91da70532a404d7
19e073c72bca57b417c17e770091be167e65af8519b686d4714c3cbd02df2517
Analyzer Verdict Alert fortinet Phishing
GET /auth/login/static/js/general_alt.js?single HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Cookie: ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:491115; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:41 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 4281
Connection: keep-alive
Content-Encoding: gzip
Expires: Tue, 06 Dec 2022 00:27:41 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Set-Cookie: WesdAksn=A6PJ1OSEAQAAilikmL-M9CGdKDYyGeMk4FL8JrCWEdnQUHHFypiV8xO_7fjoAaOrg1-cuDv8wH8AAEB3AAAAAA|1|0|59fd24cc0196de3ce336486f0487676e6f8cc398; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=FaWLUzoyCmxa9Z+%2fP39q4tcRPHtzldHb%2f55uqWilszY%3d; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:41 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl21:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7d_bl21_19190-51983
static.wellsfargo.com/assets/js/wfui/container/wfui-container-bottom.js
23.36.79.26200 OK 11 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/container/wfui-container-bottom.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (31790)
Hash 6d79a0dbc6ea2602aa38bbf53e43124e
8b53e45df3e4aea81cbfaa90081f6795bcfe39fc
d2aa003ecdd6c31e12964104bd23498a60e94fa2d163c6d1ff285db59f61bb6a
GET /assets/js/wfui/container/wfui-container-bottom.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Sat, 12 Feb 2022 17:58:28 GMT
Vary: Accept-Encoding
ETag: W/"6207f544-7c61"
Cache-Control: max-age=1800
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 11076
Date: Tue, 06 Dec 2022 00:27:41 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=5N9AlrOmWsC5eBRmfTZkFQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www17.wellsfargomedia.com/assets/images/sprite/responsive-sprite-v7.png
104.110.27.78200 OK 49 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/sprite/responsive-sprite-v7.png
IP 104.110.27.78:0
File type PNG image data, 1187 x 406, 8-bit colormap, non-interlaced\012- data
Hash 4576998e5446061faba47c4c609823e0
3beff60a8beab6ef65403e7bc02f996509c737a2
9730d81c67de0dae104be9a17b43a179e68557cc4a10a81c95fd451630d04b39
GET /assets/images/sprite/responsive-sprite-v7.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 48569
last-modified: Thu, 21 Jul 2022 20:04:58 GMT
etag: "62d9b16a-bdb9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
cache-control: max-age=7876327
expires: Tue, 07 Mar 2023 04:19:48 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2
104.110.27.78200 OK 22 kB URL HTTP/2 www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2
IP 104.110.27.78:0
File type Web Open Font Format (Version 2), TrueType, length 22424, version 1.13107\012- data
Hash 0a1639ebe9fab396657a62aa5233c832
9b58164729ad918dd7255e4856f9da7f3a90bfde
631f3b6267a831a8d67c45e480b5d5a2601f10ff8708bcf3a45a41b377a129cc
GET /assets/fonts/wellsfargosans-rg.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22424
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-5798"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=2017177
expires: Thu, 29 Dec 2022 08:47:18 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-sbd.woff2
104.110.27.78200 OK 23 kB URL HTTP/2 www17.wellsfargomedia.com/assets/fonts/wellsfargosans-sbd.woff2
IP 104.110.27.78:0
File type Web Open Font Format (Version 2), TrueType, length 22600, version 1.13107\012- data
Hash 83df8749c013f13019fa8e0912041759
2bbffcf012a59e47661c0a37edda0fc772992ae7
ab9d8c97b35ed86b6224aca911aa304a0d7dbcbd28e00a4c6585b96e28ed30ba
GET /assets/fonts/wellsfargosans-sbd.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22600
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-5848"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=1927036
expires: Wed, 28 Dec 2022 07:44:57 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2
104.110.27.78200 OK 22 kB URL HTTP/2 www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2
IP 104.110.27.78:0
File type Web Open Font Format (Version 2), TrueType, length 22172, version 1.13107\012- data
Hash f0307736c3a6ef356722f1dc3e9fa3f4
e29ea90ba786f0e08caa770dcfdfe923f619bebd
6bc7e16d4b6822a6867d7dd9f9d29f5fd77cd803750b0fe38a92309d9eb00704
GET /assets/fonts/wellsfargosans-bd.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 22172
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-569c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=1993971
expires: Thu, 29 Dec 2022 02:20:32 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/fonts/wellsfargosans-lt.woff2
104.110.27.78200 OK 22 kB URL HTTP/2 www17.wellsfargomedia.com/assets/fonts/wellsfargosans-lt.woff2
IP 104.110.27.78:0
File type Web Open Font Format (Version 2), TrueType, length 21636, version 1.13107\012- data
Hash 1a2740c8df445989e4ee5f5396b6474c
a3f8545619fdd5b2a481952cd9e2c7b169bb43a6
63673faef8532b2789dee1ac7534f87b1a6a249590acc7da8644beda141794fc
GET /assets/fonts/wellsfargosans-lt.woff2 HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 21636
last-modified: Fri, 03 Sep 2021 13:01:20 GMT
etag: "61321ca0-5484"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=1926756
expires: Wed, 28 Dec 2022 07:40:17 GMT
date: Tue, 06 Dec 2022 00:27:41 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&cb=1670286461001&event=PageLoad&pid=tcm:703-225258-64&ptid=tcm:703-223694-128&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fbiz%2F&clist=702-228795-16~91-2829-32|84-224686-16~91-2049-32|703-6793-16~91-223645-32|283-192509-16~91-223645-32|283-148263-16~91-223645-32|283-38072-16~91-223645-32|84-226264-16~91-223649-32|84-233306-16~91-223645-32|84-226382-16~91-223645-32|283-226516-16~91-223647-32|283-244189-16~91-236597-32|283-226480-16~91-226306-32|283-224785-16~91-223660-32|283-235016-16~91-223671-32|283-238621-16~91-228642-32|283-226262-16~91-223669-32|283-225008-16~91-223650-32|283-247102-16~91-244420-32|283-225025-16~91-223650-32|283-225026-16~91-223650-32|283-225027-16~91-223673-32|283-226514-16~91-223668-32|283-226635-16~91-223675-32
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&cb=1670286461001&event=PageLoad&pid=tcm:703-225258-64&ptid=tcm:703-223694-128&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fbiz%2F&clist=702-228795-16~91-2829-32|84-224686-16~91-2049-32|703-6793-16~91-223645-32|283-192509-16~91-223645-32|283-148263-16~91-223645-32|283-38072-16~91-223645-32|84-226264-16~91-223649-32|84-233306-16~91-223645-32|84-226382-16~91-223645-32|283-226516-16~91-223647-32|283-244189-16~91-236597-32|283-226480-16~91-226306-32|283-224785-16~91-223660-32|283-235016-16~91-223671-32|283-238621-16~91-228642-32|283-226262-16~91-223669-32|283-225008-16~91-223650-32|283-247102-16~91-244420-32|283-225025-16~91-223650-32|283-225026-16~91-223650-32|283-225027-16~91-223673-32|283-226514-16~91-223668-32|283-226635-16~91-223675-32
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&cb=1670286461001&event=PageLoad&pid=tcm:703-225258-64&ptid=tcm:703-223694-128&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fbiz%2F&clist=702-228795-16~91-2829-32|84-224686-16~91-2049-32|703-6793-16~91-223645-32|283-192509-16~91-223645-32|283-148263-16~91-223645-32|283-38072-16~91-223645-32|84-226264-16~91-223649-32|84-233306-16~91-223645-32|84-226382-16~91-223645-32|283-226516-16~91-223647-32|283-244189-16~91-236597-32|283-226480-16~91-226306-32|283-224785-16~91-223660-32|283-235016-16~91-223671-32|283-238621-16~91-228642-32|283-226262-16~91-223669-32|283-225008-16~91-223650-32|283-247102-16~91-244420-32|283-225025-16~91-223650-32|283-225026-16~91-223650-32|283-225027-16~91-223673-32|283-226514-16~91-223668-32|283-226635-16~91-223675-32 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Cookie: ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:491115; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:41 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:41 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=6br1FsvUVeIL3J6xhInyO3SJPvtJ3Ookgso1CPOzgn3dtmzN5GKAoZb4s4rgbJia; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:41 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7d_bl21_20387-36557
www--wellsfargo--com--8449329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?async&seed=AABwu-SEAQAAptisvQLGf8vclCZPDug9ov2XG9hKA6mRu1VA_XHkFGXnRaUb&X-G2Q3kxs3--z=q
163.171.131.129200 OK 148 kB URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?async&seed=AABwu-SEAQAAptisvQLGf8vclCZPDug9ov2XG9hKA6mRu1VA_XHkFGXnRaUb&X-G2Q3kxs3--z=q
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (147640 bytes)
Hash 8fba0be2051a2d36dd3939d939864bb5
ac8795eee23a089a3f1b51988943d51192030351
890f43af2c11f124e0945c356c2b6094cd54298da00213a7387305021b6591ea
GET /auth/login/static/js/general_alt.js?async&seed=AABwu-SEAQAAptisvQLGf8vclCZPDug9ov2XG9hKA6mRu1VA_XHkFGXnRaUb&X-G2Q3kxs3--z=q HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Cookie: ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:491115; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:41 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 147640
Connection: keep-alive
Content-Encoding: gzip
Expires: Tue, 06 Dec 2022 00:27:41 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Set-Cookie: WesdAksn=A1XK1OSEAQAAboibnWacuaFII0cyddppmFbKPQ2pJVy33grm8LQ1qxKqRfQrAaOrg1-cuDv8wH8AAEB3AAAAAA|1|0|26a9e38bfd92ce433ddb32572c72207e11d53cb3; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=h3SQzcjxHWkzccsIkvUsm0vlT%2f7Cq5iqJZ0C0uONLWc%3d; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:41 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl21:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7d_bl21_20387-36558
static.wellsfargo.com/tracking/hp/utag.js
23.36.79.26200 OK 55 kB URL HTTP/1.1 static.wellsfargo.com/tracking/hp/utag.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (15536), with CRLF line terminators
Hash a2ab4b46ad30f60866211f2fe5de68a3
125c39f1a776161eb319a742ae7ce621f4c38933
11f666b297e903717f7f8fb577dca1beb1db6bff324a2a99b4dc0c639f883452
GET /tracking/hp/utag.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 22 Sep 2022 20:06:35 GMT
Vary: Accept-Encoding
ETag: W/"632cc04b-32229"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 54746
Date: Tue, 06 Dec 2022 00:27:41 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=KqqLI7QgPnGIoveG%2fI9k8w%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/ndep/websdk/nuance-websdk-loader.js
23.36.79.26200 OK 13 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/ndep/websdk/nuance-websdk-loader.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (41881)
Hash 346912f774e106a5ea6f78459c661c4a
71d774577bd02f71c5def49535f88a92bd1b7088
8e7d64f1048594472f76fc1b6796a2b8fe847953a2e5b15636f3862e629ff27b
GET /assets/js/wfui/ndep/websdk/nuance-websdk-loader.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 09 Nov 2022 04:37:54 GMT
Vary: Accept-Encoding
ETag: W/"636b2ea2-a3cb"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Content-Length: 13370
Date: Tue, 06 Dec 2022 00:27:41 GMT
Connection: keep-alive
Set-Cookie: DCID=CtWt8gixWoqjKBjpmlF%2fNc9wO2dpnxE+o1vvIfX5C20%3d; Domain=static.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:41 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
www--wellsfargo--com--8449329d48d6c.wsipv6.com/as/target/offers/conversations
163.171.131.129200 OK 921 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/as/target/offers/conversations
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with very long lines (2527), with no line terminators
Hash cc25a58446baccb3d654bbd30e5e076f
105701e8bc6688ed45e18cb0a060eb45acc1c67c
22eeaa23138a313f184f6b3d75214b119c3886f3bec04443234affb6ddf490ba
Analyzer Verdict Alert fortinet Phishing
POST /as/target/offers/conversations HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 103
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Cookie: ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:491115; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:41 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 921
Connection: keep-alive
Content-Security-Policy: default-src https:; img-src https: data:; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; object-src 'self'; font-src https: data:; style-src https: 'unsafe-inline'; script-src 'nonce-e21acaa8-6a3f-45e5-982e-4789f451b34c' 'self' https://*.wellsfargo.com https://*.wfinterface.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://s.yimg.com https://sp.analytics.yahoo.com https://cdn.schemaapp.com https://www.knotch-cdn.com;report-uri https://ort.wellsfargo.com/reporting/csp
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0
Expires: -1
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Set-Cookie: ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:0|i:491115; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67; Expires=Tue, 06-Dec-2022 00:28:11 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Tue, 06-Dec-2022 00:28:11 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Tue, 06-Dec-2022 00:28:11 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:34|i:206917; Expires=Tue, 06-Dec-2022 00:28:11 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:34|i:206917|e:87; Expires=Tue, 06-Dec-2022 00:28:11 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=932E0B0FF1902A3FAF48F80DAAB7231F; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=EN; Domain=.wellsfargo.com; Expires=Wed, 06-Dec-2023 00:27:41 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=1120221205162741896220253; domain=.wellsfargo.com; path=/; expires=3 Dec 2032 00:27:41 GMT; secure=true; SameSite=Lax; HttpOnly
DCID=+Fll9HLvtOg3LdV%2fwG4BtewlHlAw4Ra62whlfDVVrck%3d; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:41 GMT;Httponly; Secure
_abck=C4FE8E9C85D6AC78E989421B4C75AB4A~-1~YAAQJmgRYJnnS8aEAQAAtMvU5An6mUDedtdc9vOY7AFKgu7+aTOW7EIq1QOeuzpq0Wd3iHg8+Wa/G8URpw5Rt9JADN0gOjiFjY5oB4Z6ScrDlNYSqQ/mSPgvqqKtKBr41s7QnVUHRaYe3cTdmtqMnlf2Ndi/XfWnXRu8Fea4IxroHRTCKwXvDzUA4wQrOgsj/TmoRlgfOpQSk1o2sCAKNAgOpWSQyJ0nvqwakpiPRFWTi+EHHR5Y/8SJEZacZMe+wZeV7Vj5BaXSXZV2rbRiIW630RZJXGo2IiTzvC94wi+cT2wF5m1WnHkDs+ipAbNUJsMZoELDXa/ZF0EyO7XfeSbfoBNpFmhAZqPU7MlEDHM6gMQ0hFB5o2ADCLBhqiplRg==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Wed, 06 Dec 2023 00:27:41 GMT; Max-Age=31536000; Secure
bm_sz=86CFF55D0520DF0DC12EEF9D3ED860B9~YAAQJmgRYJrnS8aEAQAAtMvU5BKaI26lcWTRctczbS58LRozZItPf2UCJrDvFrjRdjtY5uqh1x5mtlSTmakIlk53T6ceDFhG5tWL5M9Pj7iZr62CWOdEX8tulObuThGe8iwEWBWJWad0FfyNvBmL7KDbCt7z12Gmnlqs5ZYkkT7zL53u0JzZCn8YRI/Na7eIjxa3TQwzKm8SIHuXFjKk5ptiz8h/lY/xEU/OzgJ5PU7G/yCH8As3fj6ykBB8aKVOypZNUAYr4f/jejJz11i7CvHFaTlSMCzAfc/3Ky8eOi+DY+7tYdcD~3621943~3621941; Domain=.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 04:27:41 GMT; Max-Age=14400
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl22:7 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7d_bl21_20304-16924
static.wellsfargo.com/assets/js/wfui/ndep/css/nuance-c2c-button.css
23.36.79.26200 OK 2.7 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/ndep/css/nuance-c2c-button.css
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash 5257c2e188d24ddc00cc92573e5f2cfb
3526eb21d812e9ebfcb3514cc2ff9ad53abe442e
ae7a3a2c2db5a1dc74814e5001e439aeeae648e3b31cdb7474856dc52ea0b223
GET /assets/js/wfui/ndep/css/nuance-c2c-button.css HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 14 Jul 2021 10:08:23 GMT
Vary: Accept-Encoding
ETag: W/"60eeb797-2bb3"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 2671
Date: Tue, 06 Dec 2022 00:27:41 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=7t7nsWmP4B8tqU0wk7dzdA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/ndep/css/nuance-chat.css
23.36.79.26200 OK 505 B URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/ndep/css/nuance-chat.css
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF, LF line terminators
Hash e2966fedd68930d5281a2ed6ea61c0d3
1ede5572cf49f251c212abdbd6f2df4bb48de1fe
c2ef5abb39d304068b5476114ebc952a97c091ea59348c8ba3adeadc715976ad
GET /assets/js/wfui/ndep/css/nuance-chat.css HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Tue, 17 Nov 2020 14:00:34 GMT
Vary: Accept-Encoding
ETag: W/"5fb3d782-52b"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 505
Date: Tue, 06 Dec 2022 00:27:41 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=vphtccwmeAxO8nDC6EY0KA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/ndep/js/nuan_websdk_bootstrap.js
23.36.79.26200 OK 35 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/ndep/js/nuan_websdk_bootstrap.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (306), with CRLF line terminators
Hash 6b6e25186e12dddab5cfc7e3eaf88138
b10a74c86e7fa78e2c8a7b3797bcfaf7ccc717e7
c626e63ae020f2dff5a3dd67681ef69d4fb334218d325321dabfa5e206586602
GET /assets/js/wfui/ndep/js/nuan_websdk_bootstrap.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 09 Nov 2022 04:37:55 GMT
Vary: Accept-Encoding
ETag: W/"636b2ea3-24709"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 35227
Date: Tue, 06 Dec 2022 00:27:42 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=bu1zBg35o0zRZrpsrE0sUw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/assets/js/wfui/ndep/js/nuan-c2c.js
23.36.79.26200 OK 5.6 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/ndep/js/nuan-c2c.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (928), with CRLF line terminators
Hash 00e6f77045d9c92840a490cfcdc9ff6a
22f273b66fe0c5d43cf747fb9868b0904d5ee4b8
4d144f941f05ff42f2a818328b7524c6d3f2b6efc1fe93a09794af14ad262f6c
GET /assets/js/wfui/ndep/js/nuan-c2c.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 16 Mar 2022 05:41:26 GMT
Vary: Accept-Encoding
ETag: W/"62317886-590b"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 5649
Date: Tue, 06 Dec 2022 00:27:42 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=MHjy1sk+dcD0vauGTjH1Mg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
www17.wellsfargomedia.com/assets/images/icons/icon-hires_192x192.png
104.110.27.78200 OK 1.6 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/icon-hires_192x192.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b9d2c719de3d6701349f1134e129defe
703a51a2f72672f6b34a3dcf8d07c351143f9151
95ae72a8f3b1f5794802b2704b74bef2f29fe1b8da1f06c97a8e7ab2acb5e435
GET /assets/images/icons/icon-hires_192x192.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6116f9a6-dcf"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 1636
content-type: image/webp
cache-control: private, no-transform, max-age=1576024
expires: Sat, 24 Dec 2022 06:14:46 GMT
date: Tue, 06 Dec 2022 00:27:42 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/icons/ico/favicon.ico
104.110.27.78200 OK 9.2 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/icons/ico/favicon.ico
IP 104.110.27.78:0
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash cd112f1acb59ef6e59e09c0effd8ce2a
bc104cd92adc32a8f695300d2b0cc69c2776f6af
6780d0b2bc67397895ef7b8845261eee7b9b22610b026835362128942da5fb7c
GET /assets/images/icons/ico/favicon.ico HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 9198
last-modified: Fri, 17 Dec 2021 21:10:38 GMT
etag: "61bcfcce-23ee"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=65425
expires: Tue, 06 Dec 2022 18:38:07 GMT
date: Tue, 06 Dec 2022 00:27:42 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13437
Expires: Tue, 06 Dec 2022 04:11:39 GMT
Date: Tue, 06 Dec 2022 00:27:42 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13437
Expires: Tue, 06 Dec 2022 04:11:39 GMT
Date: Tue, 06 Dec 2022 00:27:42 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13437
Expires: Tue, 06 Dec 2022 04:11:39 GMT
Date: Tue, 06 Dec 2022 00:27:42 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f60a6490f38a772dcd50a1132e98e1b
ff254a1df087d2c157d88a6ef04e395dc49efe5e
653e40becd103cd76cc2f194a87e933e8c548d346f87520fefca3b16430fc4ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: c17eff92-da62-4f0f-9e75-2741012ec43a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_sqFSjoAMFQ6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-61d61d2f0bb01ecb21b809ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: i6QasBBRK9APW19sH0DdOipvUJA3gWj0CAMTzt7ejRCOk_V2psz-Xw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:45:47 GMT
age: 9715
etag: "ff254a1df087d2c157d88a6ef04e395dc49efe5e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F273773ed-3135-47d7-b4ff-5e390a90fecf.jpeg
34.120.237.76200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F273773ed-3135-47d7-b4ff-5e390a90fecf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 49c08cd33e41826af9dd4a8a912e0ddf
bde85bd98858e4b13484a9cc3263b4db7fb5d348
43471e7b4da8e4e58b842d05cb073ef150ff119eaa6890c86162f03a140459cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F273773ed-3135-47d7-b4ff-5e390a90fecf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5273
x-amzn-requestid: 5ab71aaf-6757-46dc-86fc-0a866958d22f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSz2EqfIAMFqng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64e5-15ae9d330e005f547161b4df;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xcEI729NEfORs3fT_fHi-BkyqA1sHl0dA6fAGd9hYkJNePUlM4vKQg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:05:52 GMT
age: 8510
etag: "bde85bd98858e4b13484a9cc3263b4db7fb5d348"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8b8df80-ffce-4960-a0e3-83eaf7ee52f3.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8b8df80-ffce-4960-a0e3-83eaf7ee52f3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ebd3528452aecd80e39bbf82d3f71f2c
eaa956309d27052d466f7c4bd75b3bdf8443f251
680066dadbddc2cd7179ad5bdfbf9b2014ea601561e585d18dfcda73512ae84a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8b8df80-ffce-4960-a0e3-83eaf7ee52f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6352
x-amzn-requestid: cd970b83-2a99-4e38-afed-580d733040a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSuWF1bIAMFcpg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64c2-1ba552306e857bb37424d679;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P9Yc2Lh9Kw4AEDZyc9R9WExLdUnCitDeuy0NjttQM-EL1cdVndZxFA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:30:36 GMT
age: 7026
etag: "eaa956309d27052d466f7c4bd75b3bdf8443f251"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3801236dc22938e1cc18947e90ea5326
5979d7dc3ba0eb61947282a4adeac8208b4148ae
3bd4eab29590ec3c316597abd2be65281cd9a6137add037ad57c093f1fca12e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5995
x-amzn-requestid: 25b34277-c486-4642-aea7-21e0598babc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSzOGGjoAMF4kw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64e1-6f43ab8e0c1a5260327bce11;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cO5j7BIPh3GSOUqKDYYY2qmG6__Hn2XB9lFhhYT_WpOXya-9TTGtgw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:22:24 GMT
age: 7518
etag: "5979d7dc3ba0eb61947282a4adeac8208b4148ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b15136d60fd0a5e0f657a4f5c75d540f
36082b7329d473829178f280cb71a83b1531e486
79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: YVR50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGtiCE9C3j0BUruNaFN2j1mKxCSouLmocmTXpmLMBJaLNyVwkXu1gQ==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:23:09 GMT
age: 7473
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc696fe00-4af0-41c0-a10e-ba5dcc55c22b.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc696fe00-4af0-41c0-a10e-ba5dcc55c22b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4193f05dfd1de8bf795f433d4387243
b76ea6ae9df756f131ec16b01cdc7ab19b2d01be
b56231f3c788519751528b849a442d5c7ed828ea4ce3321fd629ca27440ea6e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc696fe00-4af0-41c0-a10e-ba5dcc55c22b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6920
x-amzn-requestid: 05ec2698-a5ee-4046-be77-0036755f2946
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSwaEd-IAMF_-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64cf-783b236b79b1e9ba22098cb2;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:23 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GgMHlvU3WIDYMF9fmZAajw_Y3zmPm2zojn7FTqgqtBj7e4qeu8Uokg==
via: 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:05:53 GMT
age: 8509
etag: "b76ea6ae9df756f131ec16b01cdc7ab19b2d01be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/homepage/position-1-bg-gradient.png
104.110.27.78200 OK 2.3 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/homepage/position-1-bg-gradient.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash cd43a2d200f1b8eec84495408eb299f0
2eb173b0af9b49b634e0645a96931f5fdf6e3ab3
659ec8c02bafa9c286c39731fb1d2d382a7a8dd2ee8cc4132146558dbe27b6a8
GET /assets/images/homepage/position-1-bg-gradient.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61619278-9f2c"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
x-serial: 858
x-check-cacheable: YES
content-length: 2330
content-type: image/webp
cache-control: private, no-transform, max-age=1694619
expires: Sun, 25 Dec 2022 15:11:21 GMT
date: Tue, 06 Dec 2022 00:27:42 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/homepage/position-2-bg-gradient.png
104.110.27.78200 OK 2.3 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/homepage/position-2-bg-gradient.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2f9e97870725142046712437d067b97f
bf8db685193835edea05ac95e5671b24e0f49467
50ce7b0d954443e5fd62e3cd003bc7124bda0b30dd58d6a66485c72be96959c0
GET /assets/images/homepage/position-2-bg-gradient.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61619278-cf3e"
last-modified: Thu, 14 Jul 2022 02:02:39 GMT
server: Akamai Image Manager
content-length: 2340
content-type: image/webp
cache-control: private, no-transform, max-age=1545549
expires: Fri, 23 Dec 2022 21:46:51 GMT
date: Tue, 06 Dec 2022 00:27:42 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/homepage/position-3-bg-gradient.png
104.110.27.78200 OK 2.1 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/homepage/position-3-bg-gradient.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash bf02d082705f06162b2e73f68602e79e
219dbb45081fa5d8663bad2f96e9066e7f17aa6e
10c22e3b130204065c1a61e7995a9defe21f0408801e8b442035a03f8d16ad64
GET /assets/images/homepage/position-3-bg-gradient.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61619278-7b35"
last-modified: Thu, 14 Jul 2022 02:02:36 GMT
server: Akamai Image Manager
x-serial: 416
x-check-cacheable: YES
content-length: 2092
content-type: image/webp
cache-control: private, no-transform, max-age=1726029
expires: Sun, 25 Dec 2022 23:54:51 GMT
date: Tue, 06 Dec 2022 00:27:42 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/homepage/position-4-bg-gradient.png
104.110.27.78200 OK 2.6 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/homepage/position-4-bg-gradient.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1626a2f9535a10e8d076cab3de0df78f
4c2c4d82a3d4b49457a8a17a345c07c9617202fd
3fbf3b0d590832220370ac5dd608fa737315363f163967c6671d228bd3161084
GET /assets/images/homepage/position-4-bg-gradient.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61619278-ea13"
last-modified: Thu, 14 Jul 2022 02:02:46 GMT
server: Akamai Image Manager
x-serial: 1250
x-check-cacheable: YES
content-length: 2594
content-type: image/webp
cache-control: private, no-transform, max-age=1679556
expires: Sun, 25 Dec 2022 11:00:18 GMT
date: Tue, 06 Dec 2022 00:27:42 GMT
X-Firefox-Spdy: h2
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460316&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460316&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460316&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=emtddl7%2f2+%2fqJPROxMIzj9O%2fXaEMTZyLTxXIvjy0wmgEbwvHtzgToNfOGwmi+BW3; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_20387-36626
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460394&event=DisplayMasthead&eventType=Presented&eventDescription=DisplayMasthead&clist=tcm%3A283-226516-16%7Etcm%3A91-223647-32
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460394&event=DisplayMasthead&eventType=Presented&eventDescription=DisplayMasthead&clist=tcm%3A283-226516-16%7Etcm%3A91-223647-32
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460394&event=DisplayMasthead&eventType=Presented&eventDescription=DisplayMasthead&clist=tcm%3A283-226516-16%7Etcm%3A91-223647-32 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=EZ7l26szKa6VIC%2fLJVvbXd+DhOMKp0oAArit0iefheMq7JEfdMJyspgbux2x7ogr; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_20387-36630
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460400&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-226451%7Etcm%3A84-1029-2
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460400&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-226451%7Etcm%3A84-1029-2
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460400&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-226451%7Etcm%3A84-1029-2 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=eM6hGfPhVh0vlsg%2f3SsaX89yZTTpJ6lJ4QBFPKPNz5h1wYhFv8PFEXU6ze1B%2fxgZ; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_19985-11458
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460397&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A283-226480-16%7Etcm%3A91-226306-32
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460397&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A283-226480-16%7Etcm%3A91-226306-32
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460397&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A283-226480-16%7Etcm%3A91-226306-32 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=FFYPCQNzThUHktCBAnaCiISuMtIwXiH+4qRySqLMsAa3lBN29bKqoNdjvzyGbzNU; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_20304-17005
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460402&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A283-224773-16%7Etcm%3A91-223657-32
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460402&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A283-224773-16%7Etcm%3A91-223657-32
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460402&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A283-224773-16%7Etcm%3A91-223657-32 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=PFmjcWjpOvM9d+BTasmsxSkJcd4qCtt%2f87LSUBj4xPZGXVZBrY%2fYxKtN7+HGteM3; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_19392-60671
www--wellsfargo--com--8449329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?1js
163.171.131.129200 OK 306 kB URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/auth/login/static/js/general_alt.js?1js
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (65356)
Size 306 kB (305866 bytes)
Hash 0a73606e47133a2d2a13f7b5e1750e3c
8faaf759f275f0b66491df1c5077939099282044
cadbb05fc74ea8549b09ebed74da9dddf5499847acbcfaf7775b67a48abfc1ed
Analyzer Verdict Alert fortinet Phishing
GET /auth/login/static/js/general_alt.js?1js HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Cookie: ADRUM_BTa=R:0|g:2a3c9b89-b350-43db-8d03-687f703bbcb3|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; SameSite=None; ADRUM_BT1=R:0|i:491115; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:42 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
Expires: Tue, 06 Dec 2022 00:27:42 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Set-Cookie: DCID=D7yhAmmNnNKxY3K4PrJO7M1GU8B0AGuyyoDdteif8Nw%3d; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:41 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl21:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7d_bl21_19190-51989
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460404&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarqueeOffer
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460404&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarqueeOffer
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460404&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarqueeOffer HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=vTa76JgZCMcIdUde53SzhhOI%2fjqDr9nutNU+zodlAI5jOyaarb+AQPiIzsEnZlTv; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_20387-36633
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460405&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A283-238607-16%7Etcm%3A91-228643-32
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460405&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A283-238607-16%7Etcm%3A91-228643-32
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460405&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A283-238607-16%7Etcm%3A91-228643-32 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=7NEvkAuxljz7fE9HlmK1L+PtcYJGAyAHqKuiRvYJ2Zh2jqRW35aJbq0rMc4MKB0f; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_20387-36640
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460407&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=1
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460407&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=1
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460407&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=1 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=XnP6AJsp46bMpT4P+%2fhLhk1v2ypeV4el259ceEaqhLX411mA42HAfZ18WYGl+zhd; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_19985-11464
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460411&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=2
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460411&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=2
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460411&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=2 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=dyz0RyL5KOSqrLdxZRUUND6UDqwTz5KHX446I3U+WcDa29F4z78DVw%2fCZe6RCTOE; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_19392-60686
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460413&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A283-238609-16%7Etcm%3A91-228643-32
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460413&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A283-238609-16%7Etcm%3A91-228643-32
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460413&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A283-238609-16%7Etcm%3A91-228643-32 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=mbVrqft4NNGUKVcl3J9F8cuWyeZ4kCy5kT5mJK7T5LzcUBvuXCQd03Kp1pm8CJIp; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_19190-52076
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460415&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=3
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460415&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=3
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460415&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=3 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=9HkYi%2fKa4XvpW8WvPGdAbzJY5wb%2fVyXpD5QdVOgu3HnsUia338gwjk8AMkUAC0Tx; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_20387-36649
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460417&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A283-238610-16%7Etcm%3A91-228643-32
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460417&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A283-238610-16%7Etcm%3A91-228643-32
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&pid=703-225258-64&pageUrl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&cb=1670286460417&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A283-238610-16%7Etcm%3A91-228643-32 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=NgzvZDNi7AmsJjKHftY5P2lFCiZPBI10pfP5XOd2jr4sfUUmTYiAFTIQz79YMYFK; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_20387-36650
www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460419&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=4
163.171.131.129200 OK 43 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460419&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=4
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
GET /assets/images/global/s.gif?log=1&event=IADefaultOffer&cb=1670286460419&pageID=null&program=EventReporting&offterType=cmsDefault&eventDescription=DisplayCMSDefaultMarketingSmallPromoOffer&promoSlot=4 HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 24 May 2013 20:08:06 GMT
ETag: "519fc8a6-2b"
Expires: Mon, 05 Dec 2022 00:27:43 GMT
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' *.wellsfargo.com
Set-Cookie: DCID=erxpwRtARpWoD+OJjLCbac0xB7WUH2BvcSpuL7UHVeLsbaG2mUdBuGLjMOwWOydk; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:43 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 VM-CDG-01nP5154:3 (Cdn Cache Server V2.0), 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_20304-17026
www17.wellsfargomedia.com/assets/images/rwd/photography/product/small-business/card/fatnav/cc-business-platinum_79x49.png
104.110.27.78200 OK 1.4 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/photography/product/small-business/card/fatnav/cc-business-platinum_79x49.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0880265bd118920fd1ca18eabb29c528
49602ee1485b1f4055635d42c568546e13aa8c90
37dd0a3404af3c62777281c147d144378dd6809620e531e58a17423abc057c38
GET /assets/images/rwd/photography/product/small-business/card/fatnav/cc-business-platinum_79x49.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "6335f9d5-1a8f"
last-modified: Mon, 03 Oct 2022 02:02:07 GMT
server: Akamai Image Manager
x-serial: 1888
x-check-cacheable: YES
content-length: 1436
content-type: image/webp
cache-control: private, no-transform, max-age=1721254
expires: Sun, 25 Dec 2022 22:35:17 GMT
date: Tue, 06 Dec 2022 00:27:43 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/photography/product/small-business/card/fatnav/cc-business-elite_79x49.png
104.110.27.78200 OK 1.4 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/photography/product/small-business/card/fatnav/cc-business-elite_79x49.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash cc3d77556283919af04e0641e3e37250
1e96a649e7cb434597082cc204b050127e36e8f8
21c8d2fc781f13fb45ae4208b353c983d49d41c3505e94e29b5c1d5c31e19c68
GET /assets/images/rwd/photography/product/small-business/card/fatnav/cc-business-elite_79x49.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61c275a2-1bfd"
last-modified: Thu, 14 Jul 2022 02:03:02 GMT
server: Akamai Image Manager
content-length: 1350
content-type: image/webp
cache-control: private, no-transform, max-age=1358000
expires: Wed, 21 Dec 2022 17:41:03 GMT
date: Tue, 06 Dec 2022 00:27:43 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/man_tablet_flower_shop_616x353.jpg
104.110.27.78200 OK 33 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/man_tablet_flower_shop_616x353.jpg
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 65a51929096fa18d4bb06f2a29891a75
d34df0eb676d584af89dfc2b6e022b4910b90cc0
d67a289220cf94e6d81eefe14a1a911aeeff5010229d78c409fe55761f2d8108
GET /assets/images/rwd/photography/616x353/man_tablet_flower_shop_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62a189aa-d24b"
last-modified: Thu, 14 Jul 2022 02:02:36 GMT
server: Akamai Image Manager
content-length: 33186
content-type: image/webp
cache-control: private, no-transform, max-age=1601829
expires: Sat, 24 Dec 2022 13:24:52 GMT
date: Tue, 06 Dec 2022 00:27:43 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/2_woman_cafe_folder_616x353.jpg
104.110.27.78200 OK 55 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/2_woman_cafe_folder_616x353.jpg
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a974c3d7e7eec33c0b3a6a51bc5dda5b
e3c5e2e739d51f334183573016c9e00de421bed5
ca43102cb524defb85fcf58b1236f271a8c02303e3e4e1df6351273867576cce
GET /assets/images/rwd/photography/616x353/2_woman_cafe_folder_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62a189aa-11d15"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 54586
content-type: image/webp
cache-control: private, no-transform, max-age=1721257
expires: Sun, 25 Dec 2022 22:35:20 GMT
date: Tue, 06 Dec 2022 00:27:43 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/food_truck_card_insert_616x353.jpg
104.110.27.78200 OK 26 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/food_truck_card_insert_616x353.jpg
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e004488f9fb67721f39390f524ad5c78
24a7cf417462d429cc72dc5ea55873c4cdeef796
1b422aeb872e1f5c9a0c4ea9db41f1022d6c38a83d7e5e806d1ca6741ab3be6a
GET /assets/images/rwd/photography/616x353/food_truck_card_insert_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62a189a9-b2b6"
last-modified: Thu, 14 Jul 2022 02:02:38 GMT
server: Akamai Image Manager
content-length: 25792
content-type: image/webp
cache-control: private, no-transform, max-age=1721241
expires: Sun, 25 Dec 2022 22:35:04 GMT
date: Tue, 06 Dec 2022 00:27:43 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/Navtive_App_Phone_Personal.png
104.110.27.78200 OK 15 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/Navtive_App_Phone_Personal.png
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 42f3bed043f7a3b4c585c74b98e35499
16d8482ca3e416cb9203f15bd0c0faa82e622327
ecfea4fcc40f95576acdf90df879a5bed9a1c481a69c127d940c616e5332cc98
GET /assets/images/rwd/Navtive_App_Phone_Personal.png HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "61a934dd-41c5b"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 15388
content-type: image/webp
cache-control: private, no-transform, max-age=1721166
expires: Sun, 25 Dec 2022 22:33:49 GMT
date: Tue, 06 Dec 2022 00:27:43 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/woman_kitchen_tablet_616x353.jpg
104.110.27.78200 OK 26 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/woman_kitchen_tablet_616x353.jpg
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ce943ec0868d0b5769548025730ebb06
31d26f01d9a1e62d683b1165bec3d6e5b5310093
be1ec3a15be24dbd2904218e9def59d04b54bdca02738ee718a55823572f179a
GET /assets/images/rwd/photography/616x353/woman_kitchen_tablet_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62a189a8-c00f"
last-modified: Thu, 14 Jul 2022 02:02:36 GMT
server: Akamai Image Manager
content-length: 25762
content-type: image/webp
cache-control: private, no-transform, max-age=1721208
expires: Sun, 25 Dec 2022 22:34:31 GMT
date: Tue, 06 Dec 2022 00:27:43 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/man_computer_paper_shop_616x353.jpg
104.110.27.78200 OK 33 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/man_computer_paper_shop_616x353.jpg
IP 104.110.27.78:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 616x353, components 3\012- data
Hash 816d65c2758ff533fa6e21801daeb1e6
08e4d8044b39ddbef43651cb29b371c450e651c1
72137441f0a479553ec1c095ac9f20ae25a6a1a631f910415ea2e18eb367f2bd
GET /assets/images/rwd/photography/616x353/man_computer_paper_shop_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62a189aa-a3e7"
last-modified: Thu, 14 Jul 2022 02:02:38 GMT
server: Akamai Image Manager
x-serial: 510
x-check-cacheable: YES
content-length: 32871
content-type: image/jpeg
cache-control: private, no-transform, max-age=1498062
expires: Fri, 23 Dec 2022 08:35:25 GMT
date: Tue, 06 Dec 2022 00:27:43 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/man_woman_shoes_616x353.jpg
104.110.27.78200 OK 25 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/man_woman_shoes_616x353.jpg
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 11d5c849b66051138628a9cbe63132fd
7b30e03cf2ba108867c248ecdc8207bd6a4bb80c
ba5375591bbba655a050fea8fb3c9dfa7561d09a102c7b4a987999cc7b4ddb0d
GET /assets/images/rwd/photography/616x353/man_woman_shoes_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62a189a9-d12c"
last-modified: Thu, 14 Jul 2022 02:02:36 GMT
server: Akamai Image Manager
content-length: 25094
content-type: image/webp
cache-control: private, no-transform, max-age=1648499
expires: Sun, 25 Dec 2022 02:22:42 GMT
date: Tue, 06 Dec 2022 00:27:43 GMT
X-Firefox-Spdy: h2
www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/woman_computer_writing_mugs_616x353.jpg
104.110.27.78200 OK 34 kB URL HTTP/2 www17.wellsfargomedia.com/assets/images/rwd/photography/616x353/woman_computer_writing_mugs_616x353.jpg
IP 104.110.27.78:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 58ede609c8abd3ba38aa9d0e8de3298e
b2236e0ac30a78ef74c1db03a331f2cdc78dbf34
8e7880330ef42f2dd950fea1001a6124574a5a03afc384b88a2b744b9875fbb5
GET /assets/images/rwd/photography/616x353/woman_computer_writing_mugs_616x353.jpg HTTP/1.1
Host: www17.wellsfargomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "62a189a8-e4dd"
last-modified: Thu, 14 Jul 2022 02:02:37 GMT
server: Akamai Image Manager
content-length: 33632
content-type: image/webp
cache-control: private, no-transform, max-age=1572513
expires: Sat, 24 Dec 2022 05:16:16 GMT
date: Tue, 06 Dec 2022 00:27:43 GMT
X-Firefox-Spdy: h2
static.wellsfargo.com/tracking/ga/gtag.js?id=UA-107148943-1
23.36.79.26200 OK 45 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?id=UA-107148943-1
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65508)
Hash f0bce3a74e635ab88b299b1f625c99a4
345faf01029820b11abc73022ece8fb8e51cc321
faebd8dced2c15d37da85427c6e60aecb6a1a5f75e888280d447e93e64102c8e
GET /tracking/ga/gtag.js?id=UA-107148943-1 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-1ca73"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45086
Date: Tue, 06 Dec 2022 00:27:43 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=2JZWkwRLwo4ogaFW5nr8rw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b967016c92599586200298d67c900ac5
14a6fd8d84b435e154c0ae357a9f8dc24c16e9eb
b266fccee1baec0b93927cf1385b1a3e6987424f00cbf0ac879fcc8f212df56c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2439
Cache-Control: max-age=109189
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Etag: "638d8a7e-1d7"
Expires: Wed, 07 Dec 2022 06:47:33 GMT
Last-Modified: Mon, 05 Dec 2022 06:06:54 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
static.wellsfargo.com/tracking/gb/detector-dom.min.js
23.36.79.26200 OK 132 kB URL HTTP/1.1 static.wellsfargo.com/tracking/gb/detector-dom.min.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65434)
Size 132 kB (131829 bytes)
Hash 73ad7a8f8ccda765b898b038f90d8274
756ac35ad2422d93a0b327dfeff7fe9200695883
60ccc38cf175aba7cbe63bf1ec6319b5c1648d9a52014dfefa6ec718476a17b7
GET /tracking/gb/detector-dom.min.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 22 Sep 2022 20:03:51 GMT
Vary: Accept-Encoding
ETag: W/"632cbfa7-6b8d3"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 131829
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=pGSk8r8Eyfzx7FrkD%2fh1xA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_coop_unsafe=1&ts=1670286461185
34.247.44.49200 OK 320 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_coop_unsafe=1&ts=1670286461185
IP 34.247.44.49:0
File type JSON data\012- , ASCII text, with very long lines (382), with no line terminators
Hash fc515abf8d43c79f3719c6d1bf7aed79
20393888b9e55265ab55c1a940fee0b2e007b083
d0b50b147f5e25775267c92ab96c99951ec0c1aa4d648e8f9a5fc42f66ed4d99
GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_coop_unsafe=1&ts=1670286461185 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v045-071cdea73.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=76932340854132740610085529946535580626; Max-Age=15552000; Expires=Sun, 04 Jun 2023 00:27:44 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: UQa11qvjRKg=
Content-Length: 320
Connection: keep-alive
www--wellsfargo--com--8449329d48d6c.wsipv6.com/dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA
163.171.131.129200 OK 175 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash 92db2f431711e765b855e11d7b47a257
d4e6ef3e83b15d2d8ab2050382f1260f447ce4ee
867497e0b41370c2f07e8baeeddc89058d6b5207107cf43fa56673835f98057d
Analyzer Verdict Alert fortinet Phishing
POST /dti_apg/api/dc/sed-wellsfargo-9de6abb8?key=AIzaSyDsCAtzgd6ckzbiXwzmWMJoC0UPQEu9QhA HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Content-Type: multipart/form-data; boundary=---------------------------52058578522327798142597933647
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Content-Length: 169
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:1$_ss:1$_st:1670288259171$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87; __ts_xfdF3__=268208216; dti_apg=%7B%22_rt%22%3A%22DTc5Vdc7qCTJ8CmqqBv%2F%2FdF%2Bc622wCW%2F0Q1r1EL6vZ8%3D%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:44 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 175
Connection: keep-alive
Access-Control-Allow-Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
x-envoy-decorator-operation: ingress DeviceCategoryPost4
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=wsagLl5Ld4ZmMaHerAk+04BsXWRytUY7BN6IqmicFYY%3d; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:44 GMT;Httponly; Secure
_abck=9640ADE4D2D0B1B0312AEE85097AA71A~-1~YAAQHWgRYFVreImEAQAAjtTU5AloMxzXrvnLW2p9DMwWy8P0OGpwRQVeUvPh2aVUCrLy9CuHPrXkvLQHwFq0668aHNbhLUw1oLtwImFacr1LIGLWJn8qKChKKO1q8+vJz19vOqpPdHXEMcuN+msCcZ0ufj6d3AuKXtjQbuptvFW8UrSwsWUbXDO4I9eX6PFw/haegpFSg9X9UnFPe+y1P7KLSu0ouXn9WU1M0uOPuemZwV71p9fEOn0c3sAf6UdZLnz5Q4jG8MgToIVPD3Y1xWcQX6qTKWYcN07HHpPUR0f7vpaJvutNc9IqO7BkGLrBimqh+CZvmGytDGuOd5B3jb9E2kSh1VzAw8lE9OV9W0tWhN/w3rVii+mtKm9UxGZEww==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Wed, 06 Dec 2023 00:27:44 GMT; Max-Age=31536000; Secure
bm_sz=7325224EE5B0084236D540CB5011801B~YAAQHWgRYFZreImEAQAAjtTU5BKzyxdQQmZwVwOAahhqCE1BGovT2+3EVENVrVVYA42LA5tFd/0bZDF4i8yzk3ThJ4EaVnNhgK5nzW8BlJD61Foui8IwIu2QPr0CQid/FOIKYM5Hc0jCxjE9DMccn6ISBH2hkjyOqUov2Z+HnipCzQomz3baEdnMp4xrUF7ae+/ET182Z4ffSnUvM24l8p+5sqWwKGCD7TDd8wEdSULLcmULHM192CQTZJcBqHuzI/iBMIY8kJx3NQFUub8zl6D2cCLJxFQZGuQFtYbxVp+syWxOKCBx~3552066~3290937; Domain=.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 04:27:43 GMT; Max-Age=14399
X-Via: 1.1 bl21:1 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c7f_bl21_19190-52090
static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.js
23.36.79.26200 OK 14 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (32088), with CRLF line terminators
Hash 3aebe41731e9656c48b87e8e8b2d1177
43369d1732f4ad8a5e7a1e9a3e133d96945afe02
6cf0cd136cefa8b4cce2da6ead22c33b83af4af3e87d7e4e9589b60f6ce4e395
GET /assets/js/wfui/appdynamics/adrum-ext.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 09 Mar 2021 18:36:55 GMT
Vary: Accept-Encoding
ETag: W/"6047c047-b11c"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 14304
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=D96dLL52bl4Et2Ch7IYQDQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash a97c490a5f57669e4779f159c4dc7c2e
a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc
440bae73a0f989f36ec69b72d2cd21fab3637efc498af4a5e77d74a55ea7fca7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 01:42:53 GMT
Expires: Sun, 11 Dec 2022 01:42:52 GMT
Etag: "a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc"
Cache-Control: max-age=435907,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7750e5c0dff5b52d-OSL
connect.secure.wellsfargo.com/auth/static/prefs/login-userprefs.min.js
23.36.79.34200 OK 152 kB URL HTTP/1.1 connect.secure.wellsfargo.com/auth/static/prefs/login-userprefs.min.js
IP 23.36.79.34:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Size 152 kB (151721 bytes)
Hash a23d19b6dfc997895b0ee60e6dbdf953
ef054a07ef2422df38d97eb2b69582f8323025a5
8080628614fcb2471ff24ffe4450f00bbe89b258d5bddea47f830fe5c87a221d
GET /auth/static/prefs/login-userprefs.min.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
X-XSS-Protection: 1; mode=block
Pragma: no-cache
Content-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/reporting/csp
Allow: GET, POST, OPTIONS
Access-Control-Allow-Methods: POST
X-Frame-Options: SAMEORIGIN
ETag: W/"6369c8eb-172f"
Last-Modified: Tue, 08 Nov 2022 03:11:39 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 00:27:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
WesdAksn=AyvU1OSEAQAAD57WGp58kqSijl5oZW5N3haY-Qkx83ewOJ9iVZClsuXqGdlbAVtaKpqcuDv8wH8AAEB3AAAAAA|1|0|df87dd8161d70e701b1688767d4ef5ff4fd75c1a; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure
DCID=+hdRdETbQjYUTKX5CerH+DRZ6t%2f9AIgGDgVVKGlfm1UAK0c9oB3jrfoEF4p54v+J; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:44 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
api.rlcdn.com/api/identity/idl?pid=1317
34.120.133.55451 Unavailable For Legal Reasons 0 B URL HTTP/2 api.rlcdn.com/api/identity/idl?pid=1317
IP 34.120.133.55:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/identity/idl?pid=1317 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 451 Unavailable For Legal Reasons
date: Tue, 06 Dec 2022 00:27:44 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_mid=76963200357020620460081861805267954113&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=wfacookieidsync%0111202212051627401606170356%011&ts=1670286461417
34.247.44.49200 OK 321 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_mid=76963200357020620460081861805267954113&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=wfacookieidsync%0111202212051627401606170356%011&ts=1670286461417
IP 34.247.44.49:0
File type JSON data\012- , ASCII text, with very long lines (382), with no line terminators
Hash 944be9c95e91df142c9b4493fde0328a
f59ed1bac6fc86e4d968f5d5afdc8cde81c685ba
a7fde196128f910c7a74154b792b8d0dec6298cf9f9decf23ad900591ede01c7
GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_mid=76963200357020620460081861805267954113&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=wfacookieidsync%0111202212051627401606170356%011&ts=1670286461417 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-0826e4ce6.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=24530152283216473750150240240606642738; Max-Age=15552000; Expires=Sun, 04 Jun 2023 00:27:44 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: Rzsk/GDkRPI=
Content-Length: 321
Connection: keep-alive
static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1
23.36.79.26200 OK 45 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65508)
Hash f0bce3a74e635ab88b299b1f625c99a4
345faf01029820b11abc73022ece8fb8e51cc321
faebd8dced2c15d37da85427c6e60aecb6a1a5f75e888280d447e93e64102c8e
GET /tracking/ga/gtag.js?t=UA-107148943-1 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-1ca73"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45086
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=0aKDX0tiYzhQyvrzRXDQew%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/ga/gtag.js?t=DC-2549153
23.36.79.26200 OK 45 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?t=DC-2549153
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65508)
Hash f0bce3a74e635ab88b299b1f625c99a4
345faf01029820b11abc73022ece8fb8e51cc321
faebd8dced2c15d37da85427c6e60aecb6a1a5f75e888280d447e93e64102c8e
GET /tracking/ga/gtag.js?t=DC-2549153 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-1ca73"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45086
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=ZUWC+rVS%2fXEdAqiPkoGsJA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
wellsfargobankna.demdex.net/event?d_dil_ver=9.5&_ts=1670286461189
34.248.89.83200 OK 322 B URL HTTP/1.1 wellsfargobankna.demdex.net/event?d_dil_ver=9.5&_ts=1670286461189
IP 34.248.89.83:0
File type JSON data\012- , ASCII text, with very long lines (596), with no line terminators
Hash 93517fd3aa66ea73402f788dea665b00
acbd09c870a892f9f6933a7b298e15ca82f80b70
c7d9bffb1d4972efb3dd4417b8cc5d5e1e02bd5bac7e5527fa0e58cdf66154a0
POST /event?d_dil_ver=9.5&_ts=1670286461189 HTTP/1.1
Host: wellsfargobankna.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 377
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v045-0314701ba.edge-irl1.demdex.com 4 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=76932340854132740610085529946535580626; Max-Age=15552000; Expires=Sun, 04 Jun 2023 00:27:44 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: 2Y2nhDI9RMg=
Content-Length: 322
Connection: keep-alive
static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js
23.36.79.26200 OK 16 kB URL HTTP/1.1 static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (599)
Hash 18a9dcc7cee831010cf1647c8e39088a
731f39c30835414c6e165dd4687bf4071fe0eb10
1dc439a17ef08f995584c4869ccc397120b2502b57ba40240887df28e347be9b
GET /assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 03 Mar 2021 23:46:24 GMT
Vary: Accept-Encoding
ETag: W/"60401fd0-bbed"
Cache-Control: max-age=31536000
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Encoding: gzip
Content-Length: 15970
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=WGIm7PpoKXi2b5hKvKryfA%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash a97c490a5f57669e4779f159c4dc7c2e
a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc
440bae73a0f989f36ec69b72d2cd21fab3637efc498af4a5e77d74a55ea7fca7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 01:42:53 GMT
Expires: Sun, 11 Dec 2022 01:42:52 GMT
Etag: "a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc"
Cache-Control: max-age=435907,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7750e5c18839b52d-OSL
static.wellsfargo.com/tracking/ga/ga.js
23.36.79.26200 OK 20 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/ga.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (49163)
Hash d76c07f3794667edfb1c8ac0df3aac66
23e1915175dad06223c692b49c7b3c2aad1a5820
e0a246ff71144016a26e53493b8275a3a02b9386c690a169801840072851136b
GET /tracking/ga/ga.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-c025"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 19477
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=z2BK5G72gYvvduKApFBnnw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/ga/gtag.js?t=AW-984436569
23.36.79.26200 OK 45 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/gtag.js?t=AW-984436569
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65508)
Hash f0bce3a74e635ab88b299b1f625c99a4
345faf01029820b11abc73022ece8fb8e51cc321
faebd8dced2c15d37da85427c6e60aecb6a1a5f75e888280d447e93e64102c8e
GET /tracking/ga/gtag.js?t=AW-984436569 HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-1ca73"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 45086
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=NOS5mFMdOjoA8c8D3WdCIw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 54296ba5d9ad3f6d6c3f2ccdbc0e36dc
e236ba37d6955c1e2d2f4584e4fdf9b3ca2a2193
41a297c65a47785d689ed443b97167b020a4c97852ecb19b543eada6655462b3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=152847
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Etag: "638e3e8f-1d7"
Expires: Wed, 07 Dec 2022 18:55:11 GMT
Last-Modified: Mon, 05 Dec 2022 18:55:11 GMT
Server: nginx
Content-Length: 471
www--wellsfargo--com--8449329d48d6c.wsipv6.com/as/jsLog
163.171.131.129200 OK 0 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/as/jsLog
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
fortinet Phishing
POST /as/jsLog HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 344
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:2$_ss:0$_st:1670288261388$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206917|e:87; __ts_xfdF3__=970277163; dti_apg=%7B%22_rt%22%3A%22DTc5Vdc7qCTJ8CmqqBv%2F%2FdF%2Bc622wCW%2F0Q1r1EL6vZ8%3D%22%2C%22_s%22%3A%22RhsXJu0S%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C76963200357020620460081861805267954113%7CMCAAMLH-1670891261%7C6%7CMCAAMB-1670286460%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-808324926%7CMCOPTOUT-1670293661s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:44 GMT
Content-Length: 0
Connection: keep-alive
Content-Security-Policy: default-src https:; img-src https: data:; frame-ancestors 'self' *.wellsfargo.com; base-uri 'none'; object-src 'self'; font-src https: data:; style-src https: 'unsafe-inline'; script-src 'nonce-46dd79fc-fe22-4201-8e2e-60b0c2aae15a' 'self' https://*.wellsfargo.com https://*.wfinterface.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://s.yimg.com https://sp.analytics.yahoo.com https://cdn.schemaapp.com https://www.knotch-cdn.com;report-uri https://ort.wellsfargo.com/reporting/csp
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0
Expires: -1
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Set-Cookie: ADRUM_BTa=R:34|g:23eb27c7-6bc8-4bfc-b6be-f703bb3a7b67|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:34|i:206917|e:87; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:34|g:4891eef5-7fb8-4a7b-90eb-86aa56468844; Expires=Tue, 06-Dec-2022 00:28:14 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTa=R:34|g:4891eef5-7fb8-4a7b-90eb-86aa56468844|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Tue, 06-Dec-2022 00:28:14 GMT; Path=/; Secure; SameSite=Lax; Httponly
SameSite=None; Expires=Tue, 06-Dec-2022 00:28:14 GMT; Path=/; Secure; SameSite=Lax; Httponly
wcmcookiewf=E16E1FFB791F30B758C6AE047D44FBB5; Domain=www.wellsfargo.com; Path=/; Secure; HttpOnly; SameSite=Lax
INLANG=EN; Domain=.wellsfargo.com; Expires=Wed, 06-Dec-2023 00:27:44 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
wfacookie=1120221205162744240241947; domain=.wellsfargo.com; path=/; expires=3 Dec 2032 00:27:44 GMT; secure=true; SameSite=Lax; HttpOnly
ADRUM_BT1=R:34|i:206915; Expires=Tue, 06-Dec-2022 00:28:14 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:34|i:206915|e:16; Expires=Tue, 06-Dec-2022 00:28:14 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BTs=R:34|s:f; Expires=Tue, 06-Dec-2022 00:28:14 GMT; Path=/; Secure; SameSite=Lax; Httponly
ADRUM_BT1=R:34|i:206915|e:16|d:0; Expires=Tue, 06-Dec-2022 00:28:14 GMT; Path=/; Secure; SameSite=Lax; Httponly
DCID=ruhCgsjrjp%2f84brSX7HRW1WK79%2fzuhVSDeYWa3nLLtk%3d; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:44 GMT;Httponly; Secure
_abck=442EBD247F534FC6B71CA209836286F3~-1~YAAQJmgRYKbnS8aEAQAAEdbU5AlxcYOcErJvoTp39PwRmRDXj5gne7Q+ESmTAlnKwoQUUmxBQBtf4YmCqr3caK2TJBFtUoUE0ZF7BnMZEAc6NqbVGvnQu0D7YfWxgpX9yh+X2mfI53BWPDaekgaOds1l5VvMcKA5ND00BoHJHtMrlEkimcSCo4cYSAPifzWLjpbb9JM/vU72cEguNO2+3AyraEfTQNoMjgZjGs4HQvmWycVPd+MkYUna00TIjweIUWoPxin8Y2MuEHdouEZ3jj2JpcjvXLPQd9ndKnaIPfEzW/S84sp66JYx6IMe3cJY1rfYiPiWd8Dka3nvl/9ZgvMux4aRha3NTu+z+NFIXsF8x6KK9cmk31XQ/7ck8VWshA==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Wed, 06 Dec 2023 00:27:44 GMT; Max-Age=31536000; Secure
bm_sz=993B2AF7B9D3E6C4465C6BC730284C58~YAAQJmgRYKfnS8aEAQAAEdbU5BIBYvE7AQ7dFpbpY4Eeiiw1Y4xCyV1vIe6x0dPSZeTGMOqeCHbMo99qC5Qsbgaogp7qkTsIsXr/vJNG09Hw6huXO/g8vO+X69Wv7XA5pzdP/oTxuIK26i4i7+TT4K+s7H+6GPfHorbHMmE06cJX+y2jDzZ+R1hNvrg5Ojc6D1SsvnYrzcIKklxSN3WzESohJaWx9lKiHtEvNLJvPNXBFquJM4sfSKEFQ4dcAZ8diLq148e43V5BZHVPkd/zdNZxKL9NguPX9gvHknS9LjvB9k7sLH87~3551289~3682370; Domain=.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 04:27:44 GMT; Max-Age=14400
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Via: 1.1 bl22:0 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c80_bl21_19190-52108
rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=5906cf04-d563-48e5-9d8e-da9d71bf73d7%3A0&_cls_v=bf202fa2-555c-4809-91c5-751e24d6316e&pv=2&f_cls_s=true
95.101.10.104200 OK 76 B URL HTTP/1.1 rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=5906cf04-d563-48e5-9d8e-da9d71bf73d7%3A0&_cls_v=bf202fa2-555c-4809-91c5-751e24d6316e&pv=2&f_cls_s=true
IP 95.101.10.104:0
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 42a2a424f964a718d3357b347e2b0850
16dc9dccd4778393473b115748ea1358f9f3fe64
0f005255cd29a729f5ebfceda7f915d69cc26d4de6833160183181a3c41323e4
GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=5906cf04-d563-48e5-9d8e-da9d71bf73d7%3A0&_cls_v=bf202fa2-555c-4809-91c5-751e24d6316e&pv=2&f_cls_s=true HTTP/1.1
Host: rubicon.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Access-Control-Allow-Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Content-Length: 76
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: origin, Accept-Encoding
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Set-Cookie: _cls_s=5906cf04-d563-48e5-9d8e-da9d71bf73d7:0; Secure; SameSite=None;HttpOnly;Secure
_cls_v=bf202fa2-555c-4809-91c5-751e24d6316e; Secure; SameSite=None;HttpOnly;Secure
ROUTEID=.cligate1; path=/;HttpOnly;Secure
ISD_GB_COOKIE=!YPe3KawsDQLeFn4R0YpcGl4FPg9joVio/g0J/IYmQeBfZyVfKH9yX0YxbbYZkkHzZKmwwtVuC+bv2A==; path=/; Httponly; Secure
DCID=g%2fEv2SIgikbpVmdvhn+HjhzmIOnQlHmCKNU2GnIeLtzTZFE+FUkLmcdy2d2ovvsO; Domain=rubicon.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:44 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash b4c9bc834e851e84ac0f779a505ac0c6
f9746f1a2d68290ba8ba920ec78ecf1602f11eac
a3d9e104fbe02e14a43829a34689265973087658cbb9e7430ab03ed257b6e83f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2549153.fls.doubleclick.net/activityi;src=2549153;type=bisf90;cat=all_a0;ord=2934710859595;gtm=2od8g0;auiddc=53503492.1670286462;u1=11202212051627401606170356;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F?
142.250.74.38200 OK 319 B URL HTTP/2 2549153.fls.doubleclick.net/activityi;src=2549153;type=bisf90;cat=all_a0;ord=2934710859595;gtm=2od8g0;auiddc=53503492.1670286462;u1=11202212051627401606170356;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F?
IP 142.250.74.38:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (555), with no line terminators
Hash 697dbeed4994fc9f3aa6ea5723812eca
b31054c1637046cb480dc996d75f5c9b78075b53
0b95dd45d4668dfd2b28d80a4ffc7e98d0a10d471d11989f57283824b6b1e945
GET /activityi;src=2549153;type=bisf90;cat=all_a0;ord=2934710859595;gtm=2od8g0;auiddc=53503492.1670286462;u1=11202212051627401606170356;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F? HTTP/1.1
Host: 2549153.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 00:27:44 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 319
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Dec-2022 00:42:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.secure.wellsfargo.com/auth/static/prefs/atadun.js
23.36.79.34200 OK 607 B URL HTTP/1.1 connect.secure.wellsfargo.com/auth/static/prefs/atadun.js
IP 23.36.79.34:0
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash 00c66df208db2e1ba86a1bf44853001c
703b030e21167b9bbb52ae54bca96921a886c2dc
ab1989dd07ba1ed256db9131647ea9cb1b3735fac736fd27fb73b4b44c6e45b9
GET /auth/static/prefs/atadun.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 08 Nov 2022 03:11:38 GMT
Vary: Accept-Encoding
ETag: W/"6369c8ea-4a0"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Access-Control-Allow-Methods: POST
Allow: GET, POST, OPTIONS
Content-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/reporting/csp
Content-Encoding: gzip
Content-Length: 607
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=hSLbZLQa8PftgKoLLtmQ4rIjJoSXLyutS7nDacE4TuF2YGMkWdy5OAhXHGtwXgNC; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:44 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash b4c9bc834e851e84ac0f779a505ac0c6
f9746f1a2d68290ba8ba920ec78ecf1602f11eac
a3d9e104fbe02e14a43829a34689265973087658cbb9e7430ab03ed257b6e83f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.secure.wellsfargo.com/AIDO/glu.js
23.36.79.34200 OK 37 kB URL HTTP/1.1 connect.secure.wellsfargo.com/AIDO/glu.js
IP 23.36.79.34:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 45936e27c53c8f6dc2f8e1eae501f5d2
ad1eb90f198b0bc45d38ecf8bb31edb7fab77368
fb892cc505709d1447a6e66b5a736ab165fdba1258fdb2a6cb922a57f2a6f1ef
GET /AIDO/glu.js HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 36986
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, OPTIONS
max-age: 0
Expires: -1
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
PICS-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) "http://www.icra.org/ratingsv02.html" l r (nz 0 vz 0 lz 0 oz 0 cz 0) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0))
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=E1ffyZ8hhEU1gy83PZgMX0b66ZSxVOl2tQaP11sF1OD8ps7mt%2fe6eXqvkTwPJz2M; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:44 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5f16a534222e5749ef240d413826c2f6
11683d84d420dd6f919425094edb8961278f7fed
691ebf7feb1f7d6ae7e5e7efd678626c62042dda520506f262c7d9a67a48e3ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ee6bfe50f8e4b9c142f971a55496ac26
8c3fd42aaa7fa3ebdedc4f7b0271b8caae166e64
4582e8e1ada92a279cbc5d82904c7fd27b9d4b95bc06c7a8b3c13168978f0b33
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j92&aip=1&a=1817422960&t=pageview&_s=1&dl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&ul=en-us&de=UTF-8&dt=Servicios%20bancarios%2C%20pr%C3%A9stamos%20e%20informaci%C3%B3n%20para%20peque%C3%B1as%20empresas%20%7C%20Wells%20Fargo&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=4GBACUABBAAAAC~&jid=40318666&gjid=1604424159&cid=717038692.1670286462&tid=UA-107148943-1&_gid=470294191.1670286462&_r=1&cd1=WWW&cd4=n&cd7=DESKTOP&cd8=PRODUCTION&cd9=11202212051627401606170356&cd12=BROWSER&cd22=hp&cd23=4.48.0>m=2ou8g0&cd35=717038692.1670286462&z=2082292402
216.239.34.178200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j92&aip=1&a=1817422960&t=pageview&_s=1&dl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&ul=en-us&de=UTF-8&dt=Servicios%20bancarios%2C%20pr%C3%A9stamos%20e%20informaci%C3%B3n%20para%20peque%C3%B1as%20empresas%20%7C%20Wells%20Fargo&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=4GBACUABBAAAAC~&jid=40318666&gjid=1604424159&cid=717038692.1670286462&tid=UA-107148943-1&_gid=470294191.1670286462&_r=1&cd1=WWW&cd4=n&cd7=DESKTOP&cd8=PRODUCTION&cd9=11202212051627401606170356&cd12=BROWSER&cd22=hp&cd23=4.48.0>m=2ou8g0&cd35=717038692.1670286462&z=2082292402
IP 216.239.34.178:0
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j92&aip=1&a=1817422960&t=pageview&_s=1&dl=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&ul=en-us&de=UTF-8&dt=Servicios%20bancarios%2C%20pr%C3%A9stamos%20e%20informaci%C3%B3n%20para%20peque%C3%B1as%20empresas%20%7C%20Wells%20Fargo&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=4GBACUABBAAAAC~&jid=40318666&gjid=1604424159&cid=717038692.1670286462&tid=UA-107148943-1&_gid=470294191.1670286462&_r=1&cd1=WWW&cd4=n&cd7=DESKTOP&cd8=PRODUCTION&cd9=11202212051627401606170356&cd12=BROWSER&cd22=hp&cd23=4.48.0>m=2ou8g0&cd35=717038692.1670286462&z=2082292402 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
date: Tue, 06 Dec 2022 00:27:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=2549153;type=bisf90;cat=all_a0;ord=2934710859595;gtm=2od8g0;auiddc=53503492.1670286462;u1=11202212051627401606170356;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F
142.250.74.66200 OK 318 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=2549153;type=bisf90;cat=all_a0;ord=2934710859595;gtm=2od8g0;auiddc=53503492.1670286462;u1=11202212051627401606170356;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F
IP 142.250.74.66:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (554), with no line terminators
Hash 0a44c0ea4d6a3d403251f996ebb41e44
e600c9d6ee4e363b327e5940c5c9b3ca48e6b027
6a55c1ac5a5a7827d26630ba60b8f7a7f5497af551aa7f91503864411882cefa
GET /ddm/fls/i/src=2549153;type=bisf90;cat=all_a0;ord=2934710859595;gtm=2od8g0;auiddc=53503492.1670286462;u1=11202212051627401606170356;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2549153.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 00:27:44 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 318
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5f16a534222e5749ef240d413826c2f6
11683d84d420dd6f919425094edb8961278f7fed
691ebf7feb1f7d6ae7e5e7efd678626c62042dda520506f262c7d9a67a48e3ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.wellsfargo.com/tracking/ga/ga_conversion_async.js
23.36.79.26200 OK 14 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/ga_conversion_async.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (35846)
Hash 42c817a7b5f9583b2bc70f742dc950c9
ff75711716f8605860abe551b0235f7194e4348e
881b430ac699f32b3b5234582494d1f4fc0d22be1e6ac797847d66bc5ebc250f
GET /tracking/ga/ga_conversion_async.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-8c31"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 13593
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=ZXbNm7pMp%2f2Oi%2fGECxeFNQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
static.wellsfargo.com/tracking/ga/ec.js
23.36.79.26200 OK 1.3 kB URL HTTP/1.1 static.wellsfargo.com/tracking/ga/ec.js
IP 23.36.79.26:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2771)
Hash 8a1d22ba0de1104dcdc02a582b407ed2
e4d90fd13a73c7379c46b197ded523a5d33c69b9
4a44a1a7efd65360f31e0b1842ad06b7fedc7c0373c69c0077c696cd49cc35de
GET /tracking/ga/ec.js HTTP/1.1
Host: static.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 09 Sep 2021 17:30:40 GMT
Vary: Accept-Encoding
ETag: W/"613a44c0-aed"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1313
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=fwJbKZXaBDEIyf9CNZwe2g%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
tag-wellsfargo.nod-glb.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
8.39.193.5200 OK 266 B URL HTTP/1.1 tag-wellsfargo.nod-glb.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
IP 8.39.193.5:0
ASN #54396 NUANCE-MOBILITY
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a671bc4e541aadc71fd7812d93af15e7
3b8c76ac113e54f3d413e09807f3661c72d0f6b5
ef16255038c7c5847295c3c434243418d898b7b40a9095aeeb65e3ddb7579383
GET /tagserver/nuanceChat.html?UUID=WF_10006005 HTTP/1.1
Host: tag-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: max-age=3600
P3P: policyref="http://tag-wellsfargo.nod-glb.nuance.com/w3c/p3p.xml", CP="NON DSP LAW CUR ADMi TAIi PSAi PSD TELi OUR SAMi IND
ETag: "+6ZNxP/6RTk"
Last-Modified: Wed, 09 Nov 2022 03:50:49 GMT
Accept-Ranges: bytes
Content-Type: text/html; charset=utf-8
Content-Length: 266
Date: Tue, 06 Dec 2022 00:27:44 GMT
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8ead0ac4ce19cef2471bae0458759d89
af02fd3fcd2e10cfa2458407c0c2e59a43e18517
507b93c64bab73e393cf8d8131415ef4d4b01e65e0f2ab73597715197845e75e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5670c32d73c3d5771a2d9396774a7eb9
3fb62916ff54f22a011e11730ba87fea48e5d239
062531ed89864b713048421c9639d4a6249e92f33ef4177206f1deb5d85a8757
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j92&tid=UA-107148943-1&cid=717038692.1670286462&jid=40318666&gjid=1604424159&_gid=470294191.1670286462&_u=4GBACUAABAAAAC~&z=1101758020
173.194.222.154200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j92&tid=UA-107148943-1&cid=717038692.1670286462&jid=40318666&gjid=1604424159&_gid=470294191.1670286462&_u=4GBACUAABAAAAC~&z=1101758020
IP 173.194.222.154:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j92&tid=UA-107148943-1&cid=717038692.1670286462&jid=40318666&gjid=1604424159&_gid=470294191.1670286462&_u=4GBACUAABAAAAC~&z=1101758020 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 06 Dec 2022 00:27:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 917d281ca22c901597795b51fd9df338
be0e026d76f26092edfc1f67ea98ddc4a539439a
5f47f5ac32d4c80f29c4a69a830ec9427dd0055fc57973f01f73ec22503cd30c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.secure.wellsfargo.com/AIDO/mint.js?dt=login&r=0.26663577693398266
23.36.79.34200 OK 56 kB URL HTTP/1.1 connect.secure.wellsfargo.com/AIDO/mint.js?dt=login&r=0.26663577693398266
IP 23.36.79.34:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash d9f738b0f7cb30e4e87d48f830663ebc
68d18b039814e0fca3f9f6361613fc980e174bf9
eaa6993aaf5af920064d85ff00875c1aac3e21b30e43af8f86631a4e2f794eb9
GET /AIDO/mint.js?dt=login&r=0.26663577693398266 HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 55569
max-age: 0
Expires: -1
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
PICS-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) "http://www.icra.org/ratingsv02.html" l r (nz 0 vz 0 lz 0 oz 0 cz 0) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0))
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 00:27:44 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=BDsqAWU%2frI1rzYxY8X2QDbW7DNpeu8BsQdTRDcs9%2f%2fI%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:44 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5670c32d73c3d5771a2d9396774a7eb9
3fb62916ff54f22a011e11730ba87fea48e5d239
062531ed89864b713048421c9639d4a6249e92f33ef4177206f1deb5d85a8757
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=2549153;type=bisf90;cat=all_a0;ord=2934710859595;gtm=2od8g0;auiddc=53503492.1670286462;u1=11202212051627401606170356;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F
142.250.74.2200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=2549153;type=bisf90;cat=all_a0;ord=2934710859595;gtm=2od8g0;auiddc=53503492.1670286462;u1=11202212051627401606170356;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F
IP 142.250.74.2:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=2549153;type=bisf90;cat=all_a0;ord=2934710859595;gtm=2od8g0;auiddc=53503492.1670286462;u1=11202212051627401606170356;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;~oref=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 00:27:44 GMT
expires: Tue, 06 Dec 2022 00:27:44 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 917d281ca22c901597795b51fd9df338
be0e026d76f26092edfc1f67ea98ddc4a539439a
5f47f5ac32d4c80f29c4a69a830ec9427dd0055fc57973f01f73ec22503cd30c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tag-wellsfargo.nod-glb.nuance.com/tagserver/frame-bridge.js
8.39.193.5200 OK 5.9 kB URL HTTP/1.1 tag-wellsfargo.nod-glb.nuance.com/tagserver/frame-bridge.js
IP 8.39.193.5:0
ASN #54396 NUANCE-MOBILITY
Hash 0ceb2e3aaf3130b64517eee5e5583179
49fb8fbb16b1585e19a8911f59cd7ea234c5b607
9d486489da6c1ff7c439641bc384a2e0c9e4da32c2ab73f71d1fffc4bacefc5b
GET /tagserver/frame-bridge.js HTTP/1.1
Host: tag-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: max-age=3600
P3P: policyref="http://tag-wellsfargo.nod-glb.nuance.com/w3c/p3p.xml", CP="NON DSP LAW CUR ADMi TAIi PSAi PSD TELi OUR SAMi IND
ETag: "+YmUhczVC0A"
Last-Modified: Wed, 09 Nov 2022 03:50:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Content-Length: 5926
Date: Tue, 06 Dec 2022 00:27:44 GMT
connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D%3D&cid=15%2C16&si=2&e=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com&t=jsonp&c=qemyxpgtprumcxfk&eu=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F
23.36.79.34200 OK 90 B URL HTTP/1.1 connect.secure.wellsfargo.com/AIDO/vyHb?d=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%3D%3D&cid=15%2C16&si=2&e=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com&t=jsonp&c=qemyxpgtprumcxfk&eu=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F
IP 23.36.79.34:0
ASN #20940 Akamai International B.V.
File type ASCII text, with no line terminators
Hash 04d3a820810f99dbfc0ff40dd1176c2e
048fcb4609e32152371d91a0d354abb7d5a0d206
f41b3ccc4e30027a9fc4eeb04c9b3623800c7a9b8aa8c3a2c95c694ee6081ce1
GET /AIDO/vyHb?d=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%3D%3D&cid=15%2C16&si=2&e=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com&t=jsonp&c=qemyxpgtprumcxfk&eu=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 90
max-age: 0
Expires: -1
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
PICS-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) "http://www.icra.org/ratingsv02.html" l r (nz 0 vz 0 lz 0 oz 0 cz 0) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0))
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Vary: Accept-Encoding
Date: Tue, 06 Dec 2022 00:27:45 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=+Q+s4J+vvHTYvqePEzvhoIs7yy1tgG5VBBHKTipIHWF01SJDrAJHopwXWFkU1c02; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:44 GMT;Httponly; Secure
_abck=4A9044DB2445BB31E9286E0D687021B3~-1~YAAQHk8kFyFm2IKEAQAAK9jU5Am9dgV7r9XAJMgCI/Ao4pajyqW+aGGyj3hIqDZG2gbhVNm/lPbzlvl7dbV10bjeVX/Ta61cXTXOQV1h4tQt3b/ljXbtXHVzDBCjyL1v+EzRvupqpTlY+1E7ebolJL6rzQnuUasiPFEYNqZksgirzVBuI4L1ooTIJIh/sXXBSp4+C6pKINNly6YFJytAmlep9x2In8YzWCiow7ncXTYoDei7aFF1Bho4TroeVMbQYMPT6Tc3n21aUif69vnQfgLfAsQqFKL04YYXzOy/BhrNLhxnnoAIAGwtjzfLa9lonFTSCazvCg46z7oUI+I3prvhejYuifwSHQPjr950gRM3aufHusFGYDrKGuio58UiLA==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Wed, 06 Dec 2023 00:27:45 GMT; Max-Age=31536000; Secure
bm_sz=70BE11C0B7174D414CE3F3D16EA6AA26~YAAQHk8kFyJm2IKEAQAAK9jU5BI0XHDrF8F97Rb+BlyZlIfanRl9vup9AWezbvPTY1ka3dUYeDPzkenWxLLQwl6++3Suh/2VfYbioYboSHkOiUOwlXPCaJ6ydLcEjsk/E+fVchCHwH2mpXwCYQ56fwK7zeAWQcdV6hKpq+5GkbrPvsM1vX1/4KX0YF3qP/wjntzAMYP3UquNFbVda5akWUC4esR2pqoo1ShfPnouySPkFs3Y2BsZ/itiplbC1hllAJqnIPP1B9fR3cS4DHNx7PB2zQWGoGhPZDpPEjScAioPe5D4czVP~4342576~4277570; Domain=.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 04:27:44 GMT; Max-Age=14399
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
connect.secure.wellsfargo.com/jenny/nd
23.36.79.34200 OK 17 kB URL HTTP/1.1 connect.secure.wellsfargo.com/jenny/nd
IP 23.36.79.34:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2285)
Hash 862309933e03f65952380d18f0e816ff
a1253923cdfaf5377d10fceaa9af7e60ba9d7b76
82254d79571805a998ae22b2bebe0487ff1764083c5e590ef519281da04dcdf9
GET /jenny/nd HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript;charset=ISO-8859-1
Content-Length: 17012
Date: Tue, 06 Dec 2022 00:27:45 GMT
Connection: keep-alive
Set-Cookie: ADRUM_BTa=R:55|g:c89b877b-1f01-4215-880e-51e4bebdf93d; Expires=Tue, 06-Dec-2022 00:28:15 GMT; Path=/; Secure
ADRUM_BTa=R:55|g:c89b877b-1f01-4215-880e-51e4bebdf93d|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Tue, 06-Dec-2022 00:28:15 GMT; Path=/; Secure
SameSite=None; Expires=Tue, 06-Dec-2022 00:28:15 GMT; Path=/; Secure
ADRUM_BT1=R:55|i:302812; Expires=Tue, 06-Dec-2022 00:28:15 GMT; Path=/; Secure
ADRUM_BT1=R:55|i:302812|e:2; Expires=Tue, 06-Dec-2022 00:28:15 GMT; Path=/; Secure
ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=XTRJnij28cpGaZIm66UfJbP9+0RmOT+pMVRq%2fErQIOo%3d; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:45 GMT;Httponly; Secure
_abck=854C64BE0F8CDE845859A2795325EC16~-1~YAAQHk8kFyNm2IKEAQAAW9jU5AkAQvLzvmM+oVe7W6QOyUxbT81WD5gyZku8jOlxxO8Cb3LUfmPyIskt3Gq2he+Aa2kcDVippcKvqfQjaSCItfE5CpXqEoneRfh86TCODJ08BeAIOnlNw4AY5dTEGjdaPTtKgLBUsHXXUZfVlJ6rGL1PVgk0iogFnHnEJX5z1mBHtjxzJOutaTQtcs00VZGUpNGylbhm7QXYFRbtaAnIx2HUJUReIssdMwY4MlCG769RId1NA3wp3pABeacizFjmx0Ah/9uK66eu53B3Wl0irSbnORLrz/O2RzHTkCyFjhda+P7rc+1g/ft2QQS7XG3nHD3dGnG9yyTvum/rFDKic+p4WmdszcgrbpnU+fzB/Q==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Wed, 06 Dec 2023 00:27:45 GMT; Max-Age=31536000; Secure
bm_sz=8AEFB6BD7069E9BC80F57C3529DB536F~YAAQHk8kFyRm2IKEAQAAXNjU5BLGWXZILEo9yPq63LIEtAMo7iFh+qNkx5THT4CCIdpArJ1KpbIqVyuHza7jx3x8cK/GSXfhJGxfSuI2l/NpRwDG8wICYXweEhPyGTi7yv6oSDJU8rC27g9p1LpJugpIzghjJv8njY8tQdJy/vr6Mfd1HvtHc3Pjo/e6evMk5c/R3TN2qAxAzzt7CUWEeOGyWxBep059rdprU0oI/sb7Djm6QbL830YdcDPbRk0csBetdbbhdzQph4o/rQe0QeOpMgfx0VHofbI6Ejjf9Hfiv6c7FKJ1~4342576~4277570; Domain=.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 04:27:44 GMT; Max-Age=14399
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
connect.secure.wellsfargo.com/PIDO/pic.js?r=0.9402861674826228
23.36.79.34200 OK 42 kB URL HTTP/1.1 connect.secure.wellsfargo.com/PIDO/pic.js?r=0.9402861674826228
IP 23.36.79.34:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash fb3e26ea6aee089386cf320a79e4170d
2a029f5c925b08849ab5e9cbd8c0990333d16164
16c1adaacaf2f4928e4590e2ff54601016e6f219bb951660eda6eff03f94033c
GET /PIDO/pic.js?r=0.9402861674826228 HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 42457
max-age: 0
Expires: -1
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
PICS-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) "http://www.icra.org/ratingsv02.html" l r (nz 0 vz 0 lz 0 oz 0 cz 0) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0))
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 00:27:45 GMT
Connection: keep-alive
Set-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=PG1ekhkJ0gnWtibhjJlNCL4+aRyC2lhR677aPTe2wBWCiBe+4OJhrO+h9efDBxxJ; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:44 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash da99a2b4661e2adc71782ed838797be6
808f9f02f70ccdfdbb8e0e3dfbe143dd232b175a
74b6a569e4149ebe2f87c5c916f1086a2704475aa30dd5353bce89e721137476
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6484
Cache-Control: max-age=150349
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:45 GMT
Etag: "638e1b7a-1d7"
Expires: Wed, 07 Dec 2022 18:13:34 GMT
Last-Modified: Mon, 05 Dec 2022 16:25:30 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash da99a2b4661e2adc71782ed838797be6
808f9f02f70ccdfdbb8e0e3dfbe143dd232b175a
74b6a569e4149ebe2f87c5c916f1086a2704475aa30dd5353bce89e721137476
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3952
Cache-Control: max-age=147817
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:45 GMT
Etag: "638e1b7a-1d7"
Expires: Wed, 07 Dec 2022 17:31:22 GMT
Last-Modified: Mon, 05 Dec 2022 16:25:30 GMT
Server: ECS (amb/6B81)
X-Cache: HIT
Content-Length: 471
www--wellsfargo--com--8449329d48d6c.wsipv6.com/dti_apg/api/dip/v1/dip
163.171.131.129200 OK 206 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/dti_apg/api/dip/v1/dip
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash bb40ba3de582fbe08586198af3838f44
b168bc5806c5446e268ad47b46d3164b9f558a97
e6303fbad0a26bd64c6a58faa76ddb125ed83d91320cce06ed8d004aa3a2a8cf
Analyzer Verdict Alert fortinet Phishing
POST /dti_apg/api/dip/v1/dip HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
ADRUM: isAjax:true
Content-Length: 2028
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:2$_ss:0$_st:1670288261388$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; __ts_xfdF3__=644595675; dti_apg=%7B%22_rt%22%3A%22DTc5Vdc7qCTJ8CmqqBv%2F%2FdF%2Bc622wCW%2F0Q1r1EL6vZ8%3D%22%2C%22_s%22%3A%22RhsXJu0S%22%2C%22c%22%3A%22VllpcW1hUUZRd0hpMERjSA%3D%3D3-JOSpGgQpzdm91YsvQrj6kIa56ZugC_tBwIFkl51v4gpSTm4hjNLKG0NFSvKpvEVHlhjDvm_krX_DXISGIzmgpOohHgXUHtp3M%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C76963200357020620460081861805267954113%7CMCAAMLH-1670891261%7C6%7CMCAAMB-1670891261%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-808324926%7CMCOPTOUT-1670293661s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=bf202fa2-555c-4809-91c5-751e24d6316e; _cls_s=5906cf04-d563-48e5-9d8e-da9d71bf73d7:0; _gcl_au=1.1.53503492.1670286462; ADRUM_BTs=R:34|s:f; ADRUM_BTa=R:34|g:4891eef5-7fb8-4a7b-90eb-86aa56468844|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206915|e:16|d:0; _ga=GA1.2.717038692.1670286462; _gid=GA1.2.470294191.1670286462; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiZkZMNkZpaDNQTmFrRU5VOW1MSnVUdz09IiwiZSI6IkpUZkEydVJubjlQTVJaOUlmY3l1M3hXTVhSMHl6TzV3c3hQU0RsOExHblZSYUlDT1krQ1BzazR3Umluemh5TXZhUHFjMEdTdFdwd0ZBTE5OWXZzelpEbDFQNjlyTUFYSms3bkpWTnVvYVlqS1JGSXlwaFFhcVF6aXRjYWZJb1hORWxLdDlMYzlwMU92cUZWQUd1MUVKQT09In0%3D.68db2e7a3f8d33cf.MTI0NWU0ZjMzZDBkYjIwYzdlOTY2MTRlNDNhOTk5NTRiOGIwMzg4OTBkZDQxOTE1OTgxMzA2YzI0YTJiYzg0Ng%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:45 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 206
Connection: keep-alive
Access-Control-Allow-Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
x-envoy-upstream-service-time: 8
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=CPaz3VYZ%2fiKdO7kpovVp+328Dv82kNQVhK3Cy3etjT4%3d; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:45 GMT;Httponly; Secure
_abck=7BA9E6691B86F88970C37E5240918FFF~-1~YAAQJmgRYKrnS8aEAQAAb9nU5Ak8aeQKul3Cjc8Jzn8KOZIRt4igk7yf+jJeEAYYZKzW1QiBptdtWI32hz1XIKaT7LWMrppaGyz7GJnLNQ6Bdb6z2X68h7alVowl+YmsCGa3kmH0JM+ydFXeZZYX4FWlbQEmZzYJqNLdjjPjZJRVBolQWfYDFvgU2yGTUUepTrkox9CuwcgTTbisNYm2DKX8H34UjBRdd5uFlb4cBimVZmOPqUt93XZWo+CZGJfdXAi3N7CiBhvW/oj4DJSZdvw4RDMCyR7kwveRkTxOJTZoELUz3XfDVu7A2sMavyBDmpjZVo6qZXYSWIQw07pd8PFbKukrz/EPg7fhPO/UXWY5vupnbbCAAxHGMzM4++uQ+A==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Wed, 06 Dec 2023 00:27:45 GMT; Max-Age=31536000; Secure
bm_sz=FC2E97B34E6CA79C3699BEA5B2F4D2F9~YAAQJmgRYKvnS8aEAQAAb9nU5BIo4jrLgw6v16FC9b+zEm4NxB6FvVamwI0hwqc1WzPCYopWOKLyXNVp2liR9ADiDeXmHXPBUITbxMczQatMjMVDj3m/o+HzI5jTaLG8f7LA0xV15phKBWqbPss/oLCeLy2sdGyhMUDgPnwo0NIEWGymrWBu0SQ+JiSF3KoJdgiSvDktMoFXLhF7RZVy67aYf//zjS6/169T9RYyh+gHye+vLdYV7OpGjOM2vV8xjxGcgRFxvN43R2SpOpv1LkQVOp/lDCiss1D+Ef0RZEm9YIrHCUx6~3223601~3421497; Domain=.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 04:27:45 GMT; Max-Age=14400
X-Via: 1.1 bl22:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c81_bl21_19190-52166
tag-wellsfargo.nod-glb.nuance.com/chatskins/launch/inqChatLaunch10006005.js?chatVersion=sdk
8.39.193.5200 OK 2.0 kB URL HTTP/1.1 tag-wellsfargo.nod-glb.nuance.com/chatskins/launch/inqChatLaunch10006005.js?chatVersion=sdk
IP 8.39.193.5:0
ASN #54396 NUANCE-MOBILITY
File type ASCII text, with very long lines (1087)
Hash db767c3f8b28936b033b16eaaf7b8a5a
989c393cf3f0651fd9b866b8ed7e1a4e853307c4
c6ab54c548bdcc5af75db476c8e17a20e5c2aa33d34559663d9817b6ec9f665e
GET /chatskins/launch/inqChatLaunch10006005.js?chatVersion=sdk HTTP/1.1
Host: tag-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: no-cache
ETag: "DKis/LFNPJm"
Last-Modified: Wed, 09 Nov 2022 05:25:13 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Type: application/javascript
Content-Length: 2008
Date: Tue, 06 Dec 2022 00:27:45 GMT
pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50
52.25.25.165200 OK 61 B URL HTTP/2 pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50
IP 52.25.25.165:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6cea234e98ece6237af6d262ad5f9c1c
cb4a8796ed084f7dd8a9c84a5b0eb6e144f5cb51
6dc3156289f7db61ed812b122efd508a04dc8624ea8ee71da0cd95c452b9975f
GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50 HTTP/1.1
Host: pdx-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 00:27:45 GMT
content-type: image/gif
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
expires: 0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 0
server: envoy
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5006b8e985c5838b7fd2f2b558a65bc4
183ff15e0faedf346305fd6fe1c70c9c7a1eef4a
fcbfec9f5fd0e10d44778c1df64d8612281cd39881cdfd0aa8ca30d13655655a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 00:27:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=717038692.1670286462&jid=40318666&_u=4GBACUAABAAAAC~&z=1965075217
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=717038692.1670286462&jid=40318666&_u=4GBACUAABAAAAC~&z=1965075217
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=717038692.1670286462&jid=40318666&_u=4GBACUAABAAAAC~&z=1965075217 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 00:27:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/984436569/?random=1670286462088&cv=9&fst=1670286462088&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635470&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&tiba=Servicios%20bancarios%2C%20pr%C3%A9stamos%20e%20informaci%C3%B3n%20para%20peque%C3%B1as%20empresas%20%7C%20Wells%20Fargo&hn=www.google.com&async=1
172.217.21.162302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/984436569/?random=1670286462088&cv=9&fst=1670286462088&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635470&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&tiba=Servicios%20bancarios%2C%20pr%C3%A9stamos%20e%20informaci%C3%B3n%20para%20peque%C3%B1as%20empresas%20%7C%20Wells%20Fargo&hn=www.google.com&async=1
IP 172.217.21.162:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/984436569/?random=1670286462088&cv=9&fst=1670286462088&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635470&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&tiba=Servicios%20bancarios%2C%20pr%C3%A9stamos%20e%20informaci%C3%B3n%20para%20peque%C3%B1as%20empresas%20%7C%20Wells%20Fargo&hn=www.google.com&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 00:27:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/984436569/?random=1670286462088&cv=9&fst=1670284800000&num=1&fmt=3&bg=ffffff&guid=ON&eid=376635470&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww--wellsfargo--com--8449329d48d6c.wsipv6.com%2Fes%2Fbiz%2F&tiba=Servicios%20bancarios%2C%20pr%C3%A9stamos%20e%20informaci%C3%B3n%20para%20peque%C3%B1as%20empresas%20%7C%20Wells%20Fargo&async=1&is_vtc=1&random=2249205922&resp=GooglemKTybQhCsO
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Dec-2022 00:42:45 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=717038692.1670286462&jid=40318666&_u=4GBACUAABAAAAC~&z=1965075217
142.250.74.132200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=717038692.1670286462&jid=40318666&_u=4GBACUAABAAAAC~&z=1965075217
IP 142.250.74.132:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=717038692.1670286462&jid=40318666&_u=4GBACUAABAAAAC~&z=1965075217 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 00:27:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
media-wellsfargo.nod-glb.nuance.com/media/launch/sdkChatLoader.min.js?codeVersion=1667971496381
8.39.193.5200 OK 2.3 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/sdkChatLoader.min.js?codeVersion=1667971496381
IP 8.39.193.5:0
ASN #54396 NUANCE-MOBILITY
File type ASCII text, with very long lines (7108), with no line terminators
Hash 69248df2e4cd19badf361961108eec5e
86054d9394816797a159f91274bf9c97033a9024
4879bdd8f9d0bd0597e5df3170a4164ca2ca3aaab294b91dd49332db9d36f290
GET /media/launch/sdkChatLoader.min.js?codeVersion=1667971496381 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "6Cu8yUJ1UkL"
Last-Modified: Wed, 09 Nov 2022 03:48:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Content-Length: 2292
Date: Tue, 06 Dec 2022 00:27:46 GMT
media-wellsfargo.nod-glb.nuance.com/media/launch/site_10006005_default_helper.js?codeVersion=1667971496381
8.39.193.5200 OK 32 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/site_10006005_default_helper.js?codeVersion=1667971496381
IP 8.39.193.5:0
ASN #54396 NUANCE-MOBILITY
File type Unicode text, UTF-8 text, with very long lines (59866)
Hash ae63647529d393339b3047ff634e597a
f6d48c440c71eee2228d02e2ccf22e01910db07c
d6c38b7cfe0fc72dfaa43f83aa760b98804f5d28ab6e6a4f95c9f0d649f01c77
GET /media/launch/site_10006005_default_helper.js?codeVersion=1667971496381 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "71AbJaNkxPY"
Last-Modified: Wed, 09 Nov 2022 05:25:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Tue, 06 Dec 2022 00:27:46 GMT
media-wellsfargo.nod-glb.nuance.com/media/launch/site_10006005_default_jssdk.js?codeVersion=1667971496381
8.39.193.5200 OK 26 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/site_10006005_default_jssdk.js?codeVersion=1667971496381
IP 8.39.193.5:0
ASN #54396 NUANCE-MOBILITY
File type ASCII text, with very long lines (5905)
Hash ab9a5d124c70c5f6aad76fe7dc248173
88f56a0a1ecb70d5a180f384a1618e567b5c51d8
9d4fb62d5be57b8d696f328343dcea3abdb0893a45c3f0c65c1e725171d35a4a
GET /media/launch/site_10006005_default_jssdk.js?codeVersion=1667971496381 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "FgykOpD8Czx"
Last-Modified: Wed, 09 Nov 2022 05:25:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Tue, 06 Dec 2022 00:27:46 GMT
www--wellsfargo--com--8449329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?m&fq=load
163.171.131.129200 OK 265 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?m&fq=load
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash a9da3214bf8af1e847790b7f4b5bc98c
10335d72467ab13d83ec5f14087e6bc1f4f571ae
2589cf63058ef7bdc1183678cbc61edc830c2be4275eb6b6a6cf4b52a87e9a94
POST /dti_apg/api/imp/v1.0/report/?m&fq=load HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
content-type: text/plain;charset=UTF-8
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Content-Length: 668
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:2$_ss:0$_st:1670288261388$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; __ts_xfdF3__=662654841; dti_apg=%7B%22_rt%22%3A%22DTc5Vdc7qCTJ8CmqqBv%2F%2FdF%2Bc622wCW%2F0Q1r1EL6vZ8%3D%22%2C%22_s%22%3A%22RhsXJu0S%22%2C%22c%22%3A%22VllpcW1hUUZRd0hpMERjSA%3D%3D3-JOSpGgQpzdm91YsvQrj6kIa56ZugC_tBwIFkl51v4gpSTm4hjNLKG0NFSvKpvEVHlhjDvm_krX_DXISGIzmgpOohHgXUHtp3M%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22AYGMjmMAAAAAVJkl2GfPKGRJ7v6qpywf%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A10000%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C76963200357020620460081861805267954113%7CMCAAMLH-1670891261%7C6%7CMCAAMB-1670891261%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-808324926%7CMCOPTOUT-1670293661s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=bf202fa2-555c-4809-91c5-751e24d6316e; _cls_s=5906cf04-d563-48e5-9d8e-da9d71bf73d7:0; _gcl_au=1.1.53503492.1670286462; ADRUM_BTs=R:34|s:f; ADRUM_BTa=R:34|g:4891eef5-7fb8-4a7b-90eb-86aa56468844|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206915|e:16|d:0; _ga=GA1.2.717038692.1670286462; _gid=GA1.2.470294191.1670286462; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiZkZMNkZpaDNQTmFrRU5VOW1MSnVUdz09IiwiZSI6IkpUZkEydVJubjlQTVJaOUlmY3l1M3hXTVhSMHl6TzV3c3hQU0RsOExHblZSYUlDT1krQ1BzazR3Umluemh5TXZhUHFjMEdTdFdwd0ZBTE5OWXZzelpEbDFQNjlyTUFYSms3bkpWTnVvYVlqS1JGSXlwaFFhcVF6aXRjYWZJb1hORWxLdDlMYzlwMU92cUZWQUd1MUVKQT09In0%3D.68db2e7a3f8d33cf.MTI0NWU0ZjMzZDBkYjIwYzdlOTY2MTRlNDNhOTk5NTRiOGIwMzg4OTBkZDQxOTE1OTgxMzA2YzI0YTJiYzg0Ng%3D%3D; ndsid=ndsac37ebii7v8jlbbhfmst; _imp_di_pc_=AYGMjmMAAAAAVJkl2GfPKGRJ7v6qpywf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:47 GMT
Content-Type: text/plain
Content-Length: 265
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Allow-Methods: OPTIONS, GET, POST
Access-Control-Allow-Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=JoXw45g1IVCFFdgPPagfNuZJu7G79iYaO%2fvXQzSgvsk%3d; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:46 GMT;Httponly; Secure
_abck=AD247603C08B4D69FB12E9C636AB4BBC~-1~YAAQJmgRYL3nS8aEAQAA/eDU5An/xokRsxYOidU2upTF+3smyXDinBxNs7GLF4uacPxeESey7D1K2tYIyUCTc8HAZRj8YHWLrq6oPlLzgdBzqGwGAC2D1uen7ozDSo/wVVqpGQYoMW7W6fxPB/fD20DBTstA9C8oMNKhNUhuailjQw6T1zdcCQsWtlOYSjkBI0F8NIJscr2sbzR+DqYn2TZPmLSl31xDpGp8yPNQhU/75J7lp8fYtXmmzVhzW/vdIlWumaRTp7rHQT0ObrEaFTViMgmF+7PDajBH7WvgN/uPEBi+oRMn5Nl1A/j1P6uf2/ekf+2HnCfprju+UkSJYwl3zEOLV7d9J8cf9mv95Lnl2fTd9FYBKjbo7SzdpJ4ANg==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Wed, 06 Dec 2023 00:27:47 GMT; Max-Age=31536000; Secure
bm_sz=6B2F3FDC54A4CA02EBCC433D326F43AD~YAAQJmgRYL7nS8aEAQAA/eDU5BK3TYK4pFocL3kLRlcwnJdcApXebtQbGgpC7uNNlrRwTjECFlpK7RSOoyiv+FRiEOGWqcy3Ar6OaSwjKeSeVued55/Lk4abtf5oBaVUWviiUZMOiA5eS81KHFwwS07li+6Ke8M0wCUrM9Gfui4s4SmjTUoIBlN/qHvaYqieh5xsWQlLx427voQc3gvbAjBFgRdTb+VfGS8/Of5WFXSG076ocwt6zSFfsYZ2qopEWTPqzi7d8zncpQVvZhjLB+TNfdJv8Rb56iVnyXgzwrDxvIgpbjtC~3553328~4601648; Domain=.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 04:27:46 GMT; Max-Age=14399
X-Via: 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c82_bl21_19190-52284
media-wellsfargo.nod-glb.nuance.com/media/launch/all_10006005.json?codeVersion=1667971496381
8.39.193.5200 OK 138 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/all_10006005.json?codeVersion=1667971496381
IP 8.39.193.5:0
ASN #54396 NUANCE-MOBILITY
File type Unicode text, UTF-8 text, with very long lines (327)
Size 138 kB (137495 bytes)
Hash acf6c82982a4064fb23831dd20eb8486
479f72c643446b8415166e8118981a3178deeb09
729d4ab9151caffaaebeb27bb8fb426c2e964a85244c8442b5a6c46ef0d87361
GET /media/launch/all_10006005.json?codeVersion=1667971496381 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tag-wellsfargo.nod-glb.nuance.com
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "6IhG1ZzHri7"
Last-Modified: Wed, 09 Nov 2022 05:25:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/json
Transfer-Encoding: chunked
Date: Tue, 06 Dec 2022 00:27:47 GMT
media-wellsfargo.nod-glb.nuance.com/media/launch/tcFramework_jssdk.min.js?codeVersion=1667971496381
8.39.193.5200 OK 134 kB URL HTTP/1.1 media-wellsfargo.nod-glb.nuance.com/media/launch/tcFramework_jssdk.min.js?codeVersion=1667971496381
IP 8.39.193.5:0
ASN #54396 NUANCE-MOBILITY
File type ASCII text, with very long lines (65536), with no line terminators
Size 134 kB (134296 bytes)
Hash 998ad73f89a5f3ca6b581ef153a863b0
2b3fc491af856c5883c6ea039658a3ed00629778
f7457dcfc8e18b52c59b66cc8d87e952b4b73915972bb42357a57bb4ea3236f5
GET /media/launch/tcFramework_jssdk.min.js?codeVersion=1667971496381 HTTP/1.1
Host: media-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
ETag: "DNdd9Gt4x/7"
Last-Modified: Wed, 09 Nov 2022 03:48:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Tue, 06 Dec 2022 00:27:48 GMT
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffaf0de04-19bf-4944-9ac5-5178afafb192.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffaf0de04-19bf-4944-9ac5-5178afafb192.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7f2c354a00ab51d4a41221b6bf191c10
01ceb7233fe05ad8dff3a0a43eef879ea2b83ec4
7d3c8417e1db0db41ceb8b4bf3f506864392dd1ad29319a06a8a6055f6f2ed12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffaf0de04-19bf-4944-9ac5-5178afafb192.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11352
x-amzn-requestid: 7c3fc7bb-eb1f-46ec-8e92-b6ffc6261848
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSwuF1ToAMFiIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64d1-7c53152a279f00595b9886bd;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:25 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aYf5d6wAJlPSXVwF5uQXUb1g_65z-v6tInk7IF64bBV-w31d3MKeIQ==
via: 1.1 b6d577696b14c86cbfeb5b3459f38c50.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:22:23 GMT
age: 7526
etag: "01ceb7233fe05ad8dff3a0a43eef879ea2b83ec4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tag-wellsfargo.nod-glb.nuance.com/tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1667971496381
8.39.193.5200 OK 6.5 kB URL HTTP/1.1 tag-wellsfargo.nod-glb.nuance.com/tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1667971496381
IP 8.39.193.5:0
ASN #54396 NUANCE-MOBILITY
File type HTML document text\012- HTML document text\012- HTML document text\012- Java source text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (807)
Hash 92c92a14d7348502d53a96ffb124e505
541bcbda5db19216712a37552092329b09a6301e
9f86b1cce23c8debd8f30ae3d4284689d83fe289f2e006e623e62eb0f90cbf67
GET /tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1667971496381 HTTP/1.1
Host: tag-wellsfargo.nod-glb.nuance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag-wellsfargo.nod-glb.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: TouchCommerce Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: max-age=3600
P3P: policyref="http://tag-wellsfargo.nod-glb.nuance.com/w3c/p3p.xml", CP="NON DSP LAW CUR ADMi TAIi PSAi PSD TELi OUR SAMi IND
ETag: "AN7QOU24IDr"
Last-Modified: Wed, 09 Nov 2022 03:50:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Content-Length: 6470
Date: Tue, 06 Dec 2022 00:27:49 GMT
www--wellsfargo--com--8449329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?x
163.171.131.129200 OK 0 B URL HTTP/1.1 www--wellsfargo--com--8449329d48d6c.wsipv6.com/dti_apg/api/imp/v1.0/report/?x
IP 163.171.131.129:0
ASN #54994 QUANTILNETWORKS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
fortinet Phishing
POST /dti_apg/api/imp/v1.0/report/?x HTTP/1.1
Host: www--wellsfargo--com--8449329d48d6c.wsipv6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain,*/*;q=0.9
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/es/biz/
content-type: text/plain;charset=UTF-8
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Content-Length: 304
Connection: keep-alive
Cookie: SameSite=None; ISD_WCM_COOKIE=!KNXQ6zH6/Im/JlVM7jMSAF8jYk3iBuOOUqmJpoJGSfSW8tdi8o8cOPVwQTgoqyMPeikw1NgOLggTed0=; utag_main=v_id:0184e4d4c1220063f92c9d5d287c00050003e00900918$_sn:1$_se:2$_ss:0$_st:1670288261388$ses_id:1670286459171%3Bexp-session$_pn:1%3Bexp-session; __ts_xfdF3__=46760704; dti_apg=%7B%22_rt%22%3A%22DTc5Vdc7qCTJ8CmqqBv%2F%2FdF%2Bc622wCW%2F0Q1r1EL6vZ8%3D%22%2C%22_s%22%3A%22RhsXJu0SwCrPXk64xFlCmH7%2B%22%2C%22c%22%3A%22VllpcW1hUUZRd0hpMERjSA%3D%3D3-JOSpGgQpzdm91YsvQrj6kIa56ZugC_tBwIFkl51v4gpSTm4hjNLKG0NFSvKpvEVHlhjDvm_krX_DXISGIzmgpOohHgXUHtp3M%3D%22%2C%22dc%22%3A%22ine%22%2C%22mf%22%3A0%2C%22diA%22%3A%22AYGMjmMAAAAAVJkl2GfPKGRJ7v6qpywf%22%2C%22diB%22%3A%22AYYOpcV5f1GoFBFrMLCX8tvA0ZV0Ouy9%22%2C%22_fr%22%3A20000%2C%22fr%22%3A%22ZQpfEX6KWC4s8tJeRaF9ig%3D%3Dq-cLU7iuJ_G4QeZSbPfg72If8EZCFYWvX-ZonOsyrO9lxRjs6L7k6zGqrw7WMgRMBJe7vU1eYRqX490DJiJ9kEnH9Qx_X9nF5IwblP1OMHGdCOBot7MF5aNB8buWcZqwA5Z6fYpuurasYVrTL39Xk3hz1BNcwKX3QBtKhOvL3iFxatIJHIm6NjuG%22%2C%22ct%22%3A%22N0xqfP9dvTHN%2FDf8tmCks8VRCPaS4h6m1XgB800%3D%22%7D; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C76963200357020620460081861805267954113%7CMCAAMLH-1670891261%7C6%7CMCAAMB-1670891261%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C-808324926%7CMCOPTOUT-1670293661s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=bf202fa2-555c-4809-91c5-751e24d6316e; _cls_s=5906cf04-d563-48e5-9d8e-da9d71bf73d7:0; _gcl_au=1.1.53503492.1670286462; ADRUM_BTs=R:34|s:f; ADRUM_BTa=R:34|g:4891eef5-7fb8-4a7b-90eb-86aa56468844|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; ADRUM_BT1=R:34|i:206915|e:16|d:0; _ga=GA1.2.717038692.1670286462; _gid=GA1.2.470294191.1670286462; _gat_gtag_UA_107148943_1=1; LSESSIONID=eyJpIjoiZkZMNkZpaDNQTmFrRU5VOW1MSnVUdz09IiwiZSI6IkpUZkEydVJubjlQTVJaOUlmY3l1M3hXTVhSMHl6TzV3c3hQU0RsOExHblZSYUlDT1krQ1BzazR3Umluemh5TXZhUHFjMEdTdFdwd0ZBTE5OWXZzelpEbDFQNjlyTUFYSms3bkpWTnVvYVlqS1JGSXlwaFFhcVF6aXRjYWZJb1hORWxLdDlMYzlwMU92cUZWQUd1MUVKQT09In0%3D.68db2e7a3f8d33cf.MTI0NWU0ZjMzZDBkYjIwYzdlOTY2MTRlNDNhOTk5NTRiOGIwMzg4OTBkZDQxOTE1OTgxMzA2YzI0YTJiYzg0Ng%3D%3D; ndsid=ndsac37ebii7v8jlbbhfmst; _imp_di_pc_=AYGMjmMAAAAAVJkl2GfPKGRJ7v6qpywf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 00:27:49 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Allow-Methods: OPTIONS, GET, POST
Access-Control-Allow-Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=K3bvGlqAiPN3LRvEmqJCIS+RDG7rizQrtxiK7sPsIPk%3d; Domain=www.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 00:42:49 GMT;Httponly; Secure
_abck=A6D2497C8D2B760EEE24FED99D893B05~-1~YAAQJmgRYOnnS8aEAQAA1enU5AnTaMI8XTMWN9PORceoR/HT+96uQfCs+CjnhFY6kQUQcntn1QXj4wu5osCj/Ye/bNZABEgrpjxXfauGLycm4VelDkV6BKmjNg1LFfLvD5DGnt/eF/BnCSRWVyqsMX94Ta6ZZCCQY6+sa82cl9cPqqPiJjFA21T46LqnCD/0NzVTnSKZOo+LxIX9nGle99iKG9nlKEuKa85tBjEhvW6QkaWf0Iw4m6YM4JIN1eSQ0nbCqVegUKomTAUJv+O+JBvLb/iCvKbWg6CuHH6oFu3PaaY5cYfuMCjPTBumXVeQCNf2R0rEXzxSdmqtzwx0Jqz1PNYqM9A8u2VtJZDes9tm6v9CFUG/BEwFJX3ZDuZmcQ==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Wed, 06 Dec 2023 00:27:49 GMT; Max-Age=31536000; Secure
bm_sz=CDE8BC2AF6B12903F67A79DA32CA7779~YAAQJmgRYOrnS8aEAQAA1enU5BI6OaACmM2hLUxymYqlpZDlp+gX4kGjrLCuykXybIbDrNOcAiIz3snHYgcu7v6DCf8ZNV+oyXKaiJvLHiFNlQn4Y5mwt8920eZ+rsIHVMzvqNMsIs6c2Ucn2kduLfaCJO1v1jpemiYBTRPwQLroFSngA9K7NA1mE74YEjvYgTyZS1BBkINguW1E62oVnqUFnmIfNA9+sL4orHaQeNwn55/NvkjR+2kxmsdJDnGRg4k1O9vz7Lpk4HhvAwL/WpEsfbTYxPd/tpkpcJdBsF2GsZKO5MnH~3753267~4405048; Domain=.wellsfargo.com; Path=/; Expires=Tue, 06 Dec 2022 04:27:49 GMT; Max-Age=14400
X-Via: 1.1 bl22:8 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 638e8c85_bl21_19190-52420
pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51
52.25.25.165200 OK 0 B URL HTTP/2 pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51
IP 52.25.25.165:0
GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51 HTTP/1.1
Host: pdx-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 00:27:45 GMT
content-type: image/gif
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
expires: 0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 1
server: envoy
X-Firefox-Spdy: h2
pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum
52.25.25.165200 OK 0 B URL HTTP/2 pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum
IP 52.25.25.165:0
POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1
Host: pdx-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 13526
Origin: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com
Connection: keep-alive
Referer: https://www--wellsfargo--com--8449329d48d6c.wsipv6.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 00:27:45 GMT
content-type: text/html
expires: 0
set-cookie: ADRUM_BTa=R:55|g:3785f7e7-e7a2-465c-b21b-a8f07c54331e;Path=/;Expires=Tue, 06-Dec-2022 00:28:15 GMT;Max-Age=30
ADRUM_BTa=R:55|g:3785f7e7-e7a2-465c-b21b-a8f07c54331e|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e;Path=/;Expires=Tue, 06-Dec-2022 00:28:15 GMT;Max-Age=30
SameSite=None;Path=/;Expires=Tue, 06-Dec-2022 00:28:15 GMT;Max-Age=30;Secure
ADRUM_BT1=R:55|i:559461;Path=/;Expires=Tue, 06-Dec-2022 00:28:15 GMT;Max-Age=30
ADRUM_BT1=R:55|i:559461|e:2;Path=/;Expires=Tue, 06-Dec-2022 00:28:15 GMT;Max-Age=30
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 0
server: envoy
X-Firefox-Spdy: h2