{"report_id":"f46eb8ba-d70b-4fe0-a3c0-73c780976d97","version":6,"status":"done","tags":["wellsfargo","financial","phishing"],"date":"2023-11-04T11:20:54Z","url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/spot2/index.htm","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"92.53.83.150","port":0,"asn":49505,"as":"OOO Network of data-centers Selectel","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/spot2/index.htm","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"title":"Wells Fargo – Banking, Credit Cards, Loans, Mortgages \u0026 More"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T15:54:55Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"static.wellsfargo.com","ip":{"addr":"23.36.79.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1993-04-28","domain_rank":12306,"first_seen":"2015-03-14 23:03:25","last_seen":"2023-11-02 02:35:32","alert_count":0,"request_count":11,"received_data":349834,"sent_data":4880,"comment":"","tags":null,"fingerprints":null},{"fqdn":"iframe.arkoselabs.com","ip":{"addr":"172.64.154.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2018-08-20","domain_rank":51227,"first_seen":"2020-11-18 08:01:23","last_seen":"2023-11-03 13:33:22","alert_count":0,"request_count":1,"received_data":20323,"sent_data":569,"comment":"","tags":null,"fingerprints":null},{"fqdn":"client-api.arkoselabs.com","ip":{"addr":"172.64.154.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2018-08-20","domain_rank":14767,"first_seen":"2019-03-01 21:59:26","last_seen":"2023-11-03 20:12:59","alert_count":0,"request_count":6,"received_data":229035,"sent_data":3909,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www01.wellsfargomedia.com","ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2009-06-25","domain_rank":20259,"first_seen":"2013-06-10 16:16:25","last_seen":"2023-10-21 23:30:22","alert_count":0,"request_count":26,"received_data":609306,"sent_data":13438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.wellsfargo.com","ip":{"addr":"23.36.79.18","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1993-04-28","domain_rank":10586,"first_seen":"2012-05-22 14:56:09","last_seen":"2023-10-30 13:09:27","alert_count":0,"request_count":5,"received_data":71377,"sent_data":2227,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www04.wellsfargomedia.com","ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2009-06-25","domain_rank":54757,"first_seen":"2013-11-17 05:06:52","last_seen":"2023-09-16 08:32:08","alert_count":0,"request_count":1,"received_data":1193,"sent_data":501,"comment":"","tags":null,"fingerprints":null},{"fqdn":"connect.secure.wellsfargo.com","ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1993-04-28","domain_rank":11812,"first_seen":"2017-01-31 16:32:35","last_seen":"2023-11-03 17:48:21","alert_count":0,"request_count":2,"received_data":191083,"sent_data":901,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www17.wellsfargomedia.com","ip":{"addr":"104.110.27.78","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2009-06-25","domain_rank":76964,"first_seen":"2021-07-19 14:03:45","last_seen":"2023-11-02 03:41:09","alert_count":0,"request_count":6,"received_data":37766,"sent_data":2978,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gutadevelopment.gutaweb.ru","ip":{"addr":"92.53.83.150","port":443,"asn":49505,"as":"OOO Network of data-centers Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2012-09-19","domain_rank":0,"first_seen":"2023-10-17 07:22:02","last_seen":"2023-10-30 11:23:25","alert_count":0,"request_count":7,"received_data":118195,"sent_data":5185,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rubicon.wellsfargo.com","ip":{"addr":"23.36.79.18","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1993-04-28","domain_rank":11786,"first_seen":"2019-12-17 21:15:25","last_seen":"2023-11-02 02:35:44","alert_count":0,"request_count":1,"received_data":2062,"sent_data":626,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Wells Fargo","verdict":"phishing","severity":"medium","comment":"Assest commenly seen with Wells Fargo phishing","tags":["wellsfargo","financial","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"client-api.arkoselabs.com/cdn/fc/assets/ec-game-core/bootstrap/1.15.0/standard/game_core_bootstrap.js","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1e114d58a67d4fa2e47fdc3b7255c5b","sha1":"bd002741d8fd9d1ce75c2d06490bc8bc88930171","sha256":"b0673438702fadbcc093b00e83eced5fea967161d4dbdcf88b6900dbb48062f8","sha512":"34d512dfbeb898d01f949455f340d95b229c51a237573e44c3f0dc968b37318f24cfe51018c5f337aafb187b859bf40124765769be5d8c903c7e0b1c0b727fef","ssdeep":"768:y9Sd7D6Uq57iUUNSwdDQHn0qsT9PGAwK3lC6uKTDk8Z3JkL12jXn:yaTqNilYwd8H0pTLwmJTDk8Z3au3","tlshash":"b053a48df6c1b4e103f764e5416fa60ae17a6a45b84ee5c1d2a5e0d0ecbca4e5027f3c","size":61931,"data":"","first_seen":"2023-11-04T00:29:38Z","last_seen":"2024-08-20T21:01:47.323972Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f310e2e2a558d76b916e137aee73462","sha1":"c7ff0190c9c2c414321211f3863e9e27f32b713e","sha256":"385196f0fce7cea80c2c99d971780ecb73df9dea6e5b2d95d19df3aa849c7b1f","sha512":"57bdfce66ff89336b5c8cf25b4db3a2242d0dc18d8de96f1d7f1cf9a8a50530f942c64b69578013607230bd850c5462472f814d003142d398ab15943bda02e84","ssdeep":"","tlshash":"","size":45340,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-20T19:44:20.596162Z","times_seen":328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aeccb854b0a76aa9f478e466c8011b29","sha1":"625d31cbeb8978cf2419f58d14bba92a42dbb45c","sha256":"7f0d10bc282c3d7b0eb4d7527303490f8d3b86a1c65e293c2d9f0793006441e6","sha512":"a0e4fec306ede63869b30befee8c54de38694d724ad86306587e59d641921119659852241a9316da80c56c2a560eeaa73b537a3f8725c87abd11b0be551fff31","ssdeep":"","tlshash":"","size":48109,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-20T19:44:20.495154Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/ga.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8402e9ebdf9290c018b0617018227681","sha1":"2d840fcd6c3008d9aca747ba0ce056b496db8e1b","sha256":"0b2af045acafbdf14516bf55f310568036ace959946d16edb1acebcd58029d22","sha512":"45e7359043e0076da916475f5294e62f139c85fe42cb0d53e1dccc08e8dcb39e717b3c3d4b291b21e059fe760bfb4ec2ae224ec06744df9b25b177784a3c9d9b","ssdeep":"","tlshash":"","size":49189,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2025-11-11T10:30:37.393011Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wellsfargo.com/js/global/homepage_iaoffer.js","fqdn":"www.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.18","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"50531e993ab6f5b96259dfa3fae1980a","sha1":"701400a91461c0f080ff1e011270b7d10ad87709","sha256":"0155efc4c50ae4da41c1ca1f6407912cbe62c0f7cb77f6464aee5bedf1267cbc","sha512":"302cafc9e0381a2bcdb0b8febc5df3a2b4d580e85d5c5db0a9edd135a78cd2849b7ae23c17353f24946721d4a6dde2ad3f6de0ab29a92f741f266bd84a627256","ssdeep":"","tlshash":"c9619622736127b3abd80025a53eb7a47231a631291bf5a0c16df8543bdcc47cb3af90","size":3251,"data":"","first_seen":"2023-03-07T01:17:17Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-api.arkoselabs.com/cdn/fc/js/6af2c0d87b9879cbf3365be1a208293f84d37b1e/standard/funcaptcha_api.js?onload=loadChallenge","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3763ca5c6d75616a43468902aff7b465","sha1":"c99f810044c67e4e69687161c8bb0c94f50c6666","sha256":"0bc6e12937bf14b898184c6d4c863cd33ca09732c43d2e0a322eafc9f5c61557","sha512":"11b5a28a0eb1bb57414c433e699f12b754fd254c11557afee3b3eba3f20d58709136ae4e1cdcb6bf9454233729a0d96d75e7d1f3930e8df6d364a7f24172554d","ssdeep":"3072:wk/nh1SbqGT23rCnfTjnBHJ/KY5YuBvkp:wk/nLHG8UjnBHJ/AW4","tlshash":"f6e3b4a21385a11a05c237bb663b7deef6564b0c324cf95cf813bc56b998f6cd218d60","size":150608,"data":"","first_seen":"2023-05-18T06:11:28Z","last_seen":"2025-05-10T19:32:22.437774Z","times_seen":1042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wellsfargo.com/js/global/homepage_per.js","fqdn":"www.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.18","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a289ca774321a32c6530d93d2f2eb967","sha1":"a53876434c3dcda6fbe5fee5b14cf59151092029","sha256":"10023d37f9ccd474e4710fe222ebc1e051359ce1830a96ab03ce4608346797b8","sha512":"2a190c3893f8827c799502473e6b8191f11c87d70af1e9b62bf9f2227ba3346fa628a79cfe8f85ae72199ba39d092632c37b466982cfd5fad146ce7ac778cb03","ssdeep":"1536:pGwi1ohQF3FkxnTNP8ebLi5yz4YpJFvV6XTmGhOc7P8hAGb+:ji1oIFfebL1a5hOcQhLb+","tlshash":"81731a19755034b246fe32bb243f960ab0716d32ae05f994e066ccbd1fb8d45896bf1c","size":78683,"data":"","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/spot2/index.htm","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"1389750a5b26a8394ff2405a0d60e8ef","sha1":"c5f8367a025fcc08232ec33d384be6c96990897d","sha256":"a1feccafb3923815892573d58b61b801304556cbeae58eff937f35ed7a1b0d61","sha512":"ca53c1c6e3e24f646e4e3042a0322d169657beb8184e1c11995c56c4cd30149a8b92bbfa14f2b9fd802cf47ca18b576e391d2d3174f6183bd096e5018421f60c","ssdeep":"","tlshash":"b4b092b871018838066f380cb27c93d83c340882a64bb602f0bc21a51f30ec29800e98","size":123,"data":"","first_seen":"2023-03-07T01:17:17Z","last_seen":"2024-08-21T09:33:25.152878Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/prefs/login-userprefs.min.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2dc29aca8a53aff6dad31ed472566be","sha1":"5bfa67079b1353abcfd84e185a613bd607471b29","sha256":"c2d7ae9fb3c6c841e34ff9ea05f801a50b95f1cea45edb282f8586596905d28c","sha512":"4284cb1371db1723efedeb3eebef310f19c7e4f439b37254eaa0f75ac8c178fac7639660c34f45d6f71b637fec2fbd1ca9f298c4bf0c403544abf929f04f4e15","ssdeep":"6144:VQkhNwPTmontmcy7+4sq6Jm0HdN7cnMz0T6jHnM/MS+a5P:VRihnd0L6JJH90MHunt","tlshash":"ec648e97cfc583b8830868d105ae0646a4bee83178bdfa295673e4d71637f7ca46cc19","size":327513,"data":"","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/spot2/index.htm","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c1e707ec0638175527208e9afeaf933","sha1":"02ff079b25820f1c4d6b4c7d6540cf659bcb9cbe","sha256":"807f3b8550e429c251f67cc4337eaf94a19e829653cceda60d4cc9c5bba90bdd","sha512":"1346c6ff70ae139b7f28eab3498f1837a6b742de2a35181f06f8e5639a577b68280eeed77a984b37c2129a36086f6102d980a30500d81aa65fffe57a9bef0943","ssdeep":"","tlshash":"57d08cb2ad9179987e2049e800de0434a08282bf0164ce88f59d9a194b09a94498cae3","size":195,"data":"","first_seen":"2023-03-07T13:20:49Z","last_seen":"2024-08-21T09:33:25.153876Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/toppages/utag.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"82d89f6aa57c115299d09d24d3e4ae52","sha1":"433981d3725741af8d48181cb7cfd139c6fe09d2","sha256":"ceda9e2359f747419d7f6285d3d47352e4b3c8cb62d18503130db76f8ec27053","sha512":"4e13a3607de7936a6067dae2bbda3c65e0b57db96e7672db584eacf73a9c1e6829941fcd89814844c0afa37c58056f2842952e50fea5a8719c0f7e3bfa51671b","ssdeep":"3072:c0x5l16rxc2GcrzCrOgD8kd/oRlu1bk1WAw95:c0Xl16rxc1cirOq/oTu1MWAw95","tlshash":"f4243a49b2f4b13e83e571a8802f1704f27bb5571896846af168dcd0ab24d4f61b7f2d","size":218466,"data":"","first_seen":"2023-03-08T01:59:26Z","last_seen":"2024-08-21T09:33:25.156762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/ga_conversion_async.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a40602db7616a31c9da4548ee920190","sha1":"878e01cb0c90cb247aabc137327655a6fcffcbd5","sha256":"6c771bd1c269646a76015f2f6410a40c031e5adea88f665bfe9ae15a972ab6ab","sha512":"f300ef35835ccfa6cde375b24bd2dcfc8374d6e698e857431bed0404d5dd3634e09c92a0efa7f2015b92a80831c06ae7363f2ebf8407854e04d2970b8363eb48","ssdeep":"384:y8QkSSXI2OCj27cj1Dfo2Y2rJLO+Pv5H9AeHAmvApNkStktL5/CohDAI5jUWZ1V0:y8/Sip1g+zAL1NkW01jZUT0dX2knK","tlshash":"3ef209caba45b06bc3a3a1a4217f4907f37e9d96a888d4d0d941d4807d34bdd02b7fad","size":35889,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-02-25T12:49:52.55026Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/spot2/index.htm","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"df5df7d2d2839ad1234e0f328f52d62f","sha1":"0e9178e9867bdaada3b0916422df0accd5e43345","sha256":"2b4115862800e355bdc8c64662a999f13e9d2c4d66ac558b183a8a64cdb50f15","sha512":"140da068df0013c9bfeb7062990466f5e5304e4dbef8074b7b623125707fd6786b06cd99536aa2bdbda5e92383dbb3dc26697186aa2e7e6dd8894c85fcf16531","ssdeep":"","tlshash":"79a011a022e2800e28080e0080ac00a88ea08b32802cca8c228bc8288800ae2a22220a","size":79,"data":"","first_seen":"2023-03-07T01:17:17Z","last_seen":"2024-08-21T09:33:25.15471Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/spot2/index.htm","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"37b772fc90365259570e42d72dd225fa","sha1":"39e41faadaebe0ce6ef6e475a0e051fa1c663f27","sha256":"502e95d528ba164c40d2de425816b44c529f5f706c11d97419bd804d5424baba","sha512":"80a89eaa2adadcf05931013b3ba25cbdbbd012540e0886985386be0b2afc1ff28b16a7d3745fefa861feb34fa3c6390a99428ed3c1f1bd898a6d41dda8d89cad","ssdeep":"","tlshash":"fbe07dc134e68bed3fe47a5c948e8e2ad067c647459c2873b7b84560c3c01ea362d705","size":330,"data":"","first_seen":"2023-03-07T13:20:49Z","last_seen":"2024-08-21T09:33:25.155615Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","size":106326,"data":"","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7cf4c458b327ab7ed31e0936ccd404f","sha1":"970bf05073f91ad6b8f21521f7c9886f71f2af1d","sha256":"52b687a685d2239142be0db5335c5710951ba8c2b39a44431a40f156b4d9312d","sha512":"23bc667efa366db075822438f4ae00e3344cfea8e78646eb70515546497a91039b9983b13f7a8fa82905903e17a3b33f4fabdb5292cda2fda108162acb533749","ssdeep":"","tlshash":"","size":1952,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-20T19:44:20.608532Z","times_seen":328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/ec.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ae62a83927125e9b9dfa97f89af9d3f","sha1":"efb68f49f2b9b6b5567bf26a17015ede289e429d","sha256":"618688d9849fef712931832c71e01be145d1791d6da917a702ab86a74ce66089","sha512":"f568efba8e55b52e66baa9ad4d9e3ca8fc0b95b002c57583fd58701c7fff2424a4dd81cdab21a4f8fc1ef5b27a691cc054fd434087f4958197f45c7625d5f0cd","ssdeep":"","tlshash":"","size":2797,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2024-08-21T09:33:25.148754Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wellsfargo.com/js/vendor/jquery.min.js","fqdn":"www.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.18","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d49f5bd057488231fdcc675e2fe9f568","sha1":"c81be8cda5beab5bd767a63bee8aafc08e037ce4","sha256":"3c536cede8c67b4bda531f82b77f3678e52026398492010245d3870c87a1623e","sha512":"d00bc0d962dcbcdd26ebe0c0ae67a8a698cdef74a1c83eb282bb4cdec492f2db34067b34e02cf9a3e247dc766f6b5ea2b3978c0ce26b278250fce1fc0b611685","ssdeep":"1536:HAvUXrr5nSDjotcZxhMV1Ez9tgn1Emi7G6S9tXE79aCBsU1+TU5G2q0sBQCpu9Lv:H8XzmB6SLIH1+TUd5fCpuhQ47GK0eaO","tlshash":"7493f8ddb2c670224bbb60b9107f550bf236189d284d9414f228d8e5bd78a4ac27bf7d","size":97628,"data":"","first_seen":"2023-03-07T01:17:17Z","last_seen":"2025-01-27T13:54:12.086712Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-api.arkoselabs.com/fc/a/?callback=__jsonp_1699096836719\u0026category=loaded\u0026action=game%20loaded\u0026session_token=5011794679271a907.2827717105\u0026data[public_key]=9B8ED233-984B-4DE5-A7B6-3A370D9FF48B\u0026data[site]=https%3A%2F%2Fiframe.arkoselabs.com","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"178330f3d0c67b1f339de7409359597a","sha1":"2184f010e60e815cfaf48249affef2ed53085c77","sha256":"86ede0b4a1517ed1a01a69997335d9a6ceb406b725109cbcdee917ba8a60448a","sha512":"8cc67a6c97700689249ba66b5bcde0229c14062d7b20e46cdf20e43dabede067bd9777cdf03d9fab5ef2b7f7a4ac6e377a374a3bd2fdfbe3c48280342f2df662","ssdeep":"","tlshash":"9780045350444137c04c030cc3005f711711047d44045070f11f7007313310147fd507","size":38,"data":"","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iframe.arkoselabs.com/9B8ED233-984B-4DE5-A7B6-3A370D9FF48B/index.html","fqdn":"iframe.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"35ef76cdc9126f8741d1aaf8b67d5f10","sha1":"27f5bbd508aadff4a048736a3cf2fb8e6bd99443","sha256":"2831745ed08e018935489127aa8bc4da0561b947047f7d4118f885ae01548d28","sha512":"ecf48a328ff091e1c2bef45cdcfa81b5aec6ebfc1ff17106dbb6aed2bd64a38c415b88685b1920c1a31783e99faf8f8df60dcdd6d9751e8e0a6d1ef1bda0651e","ssdeep":"","tlshash":"7551536e3541942a0d552b3124fb3c941137f12a3c4dcd609652bcdaee72faa1332b55","size":2450,"data":"","first_seen":"2023-11-04T00:29:38Z","last_seen":"2024-08-20T21:01:47.328838Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.js","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"582c4d6ebf4a660c6f75dd75e7bb032c","sha1":"6b9d8f8ee3ac6eaf577952e665a4072993b367ff","sha256":"61ca811d2eabdf7d7f01e28029493aeb5b14ac6615953f75c0cbaff2c03bd414","sha512":"43a0ab9d08036bd01bd9ee08dfe0e8fd55c284868c54ebda88fa9df595befb326cf9475b3fd6308ee1b73f2de970a44c3cd6d220e92f9e12e533b895727a89d5","ssdeep":"1536:OWVXAsD8x1QYw3TalyU69NsSP8AYuleqPCFhwtpY3ptfSojJOJ4:OWVnq1Q5DHP8AYkekCFGep1dOJ4","tlshash":"2db3d68df2d2b4b203e764a1416f520bf27a6949740ad8d0e261e5d1acbcd8f9067f3d","size":112793,"data":"","first_seen":"2023-09-12T21:03:35Z","last_seen":"2024-08-21T07:00:13.896491Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/prefs/atadun.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"566dda94252f1860a7a28665c715b530","sha1":"6aa0455dc8ea41441b1f3a733985758dc40af736","sha256":"43dd833f33570535401d009e6b6f9cde54bdac4e210fc6c89cfdcfcbaa9fc903","sha512":"0f65aab67ec34437d411e7532a894dfa47bb34e0d74263e5b0feae12a37507321431bc872e49f8916bbbf5e05fa34375ae36e832e0d4aaf2aa5d9727a64aa362","ssdeep":"","tlshash":"","size":1184,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2025-11-11T10:30:37.390843Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/gb/detector-dom.min.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c71e354b6a3fbb7e60e42b5cd392761e","sha1":"b0abcc1cda4144fb29550225f7c3dd0342d11fbf","sha256":"c5efd80b0945674f1ffbb895395fb45f44b6030a3d2c6380b03202e667c51923","sha512":"f44336bd68f7a3836730d2c7dfb88f7df74e559199d80d16b67bf4e6798a81e12cc32dabd000ae2dfe55e04277d14b11ab842d440c313fd2ecc844c83ad0568f","ssdeep":"","tlshash":"","size":459932,"data":"","first_seen":"2023-03-12T19:18:07Z","last_seen":"2023-11-04T12:20:57Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/spot2/index.htm","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"e44d2fa9597a5c84770f274097d6ce7c","sha1":"ce6555bf21828f6398aa96f84a42b855bbbebb8f","sha256":"5060b66b563702b4445d68fff42f373aa22ef9571a92a6a1e3131dc7a4be6c2a","sha512":"e1d977ca025a8e102bf82fb67639782988a4e853940892d879611eee1131847cef799c006122b4d0895cdd5886ac8b52abb716f74da2ffec98a197a24d91c447","ssdeep":"","tlshash":"b7d0a738f53a9f82094a57ea604f620442489d10cd04ec800adab03103680d5f20cd29","size":207,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2024-08-21T09:33:25.157708Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/spot2/index.htm","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"24ca2a81fa070f86b0d0128504f46720","sha1":"bf568a64f7e39c584612f2f4739ab7fefd4bf8fb","sha256":"672e63c777af31f4419492306403c58eaffa08162269e5a97f50994d359f595d","sha512":"5d07aec8227972a1840cdb7cc71931bdae6ba25779fdf390bd75911030789151e591b91c60fb1c4ee7ae2631d90f44a849a55cda1160ed0df5ee2938eb84834b","ssdeep":"","tlshash":"c6d09597705d08595fe310645377c51cf086b3387a7c2d23e54dd4803758de4443c64c","size":256,"data":"","first_seen":"2023-03-07T01:17:17Z","last_seen":"2024-08-21T09:33:25.158645Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/toppages/utag.sync.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"227e73140309b2893bbe0ce57cde75da","sha1":"2abb03fe834e4a4469dbe6037f258c88c074c081","sha256":"95b962bda7dcd5140caed5bc45236ff538c3d5841c7a91136b751db076d19382","sha512":"7554e5b035dc53db3858baa882432abd4d8eab1c2197db61f922679aa5286cc9e217505003664466b0347e4ec50b07520871edac221b4494e62f83437198f927","ssdeep":"","tlshash":"1a90041550135075431133c14fd53f155375c34030d344111ccf35c0c74404f473d000","size":41,"data":"","first_seen":"2023-03-07T01:17:17Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-api.arkoselabs.com/v2/9B8ED233-984B-4DE5-A7B6-3A370D9FF48B/api.js","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a329bc8dd64e523e19bd58f0964d467","sha1":"a74045c769ecb86e278b3bc9f7c9c6aca281fe48","sha256":"818f7d3e746ca9d585efc917b764ed8e01a98598a27ff46230b4edfdfbaaf841","sha512":"ca8668f961ae9d01faffd9df19cd336b74f7ec3b66d304d8cf81b0cef0d1daec87fc2aa8f7c707aa71c87eb5032b39ad9cee7efcae49cebf43b8dd1284ccc2ca","ssdeep":"1536:ZFYY7SnTcT8BUzbFery+eYPf1YaiRNytw0doO:ZFY0ABUzbFeW+eYPORkw0doO","tlshash":"4843d9cd7781b4b2439765a5403f520fb23a6eaa741cd450e262e8e07cb8d9e9173f39","size":56987,"data":"","first_seen":"2023-09-12T21:03:35Z","last_seen":"2023-11-18T19:40:05Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:34.726105956Z","timestamp":1699096834726,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/js/wfui/appdynamics/appdEUMConfig.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 20 Jan 2022 02:38:25 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"61e8cb21-7a0\"\r\nCache-Control: max-age=31536000\r\nAccess-Control-Allow-Methods: POST\r\nAllow: GET, POST, OPTIONS\r\nContent-Encoding: gzip\r\nContent-Length: 901\r\nDate: Sat, 04 Nov 2023 11:20:34 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=TtLcKqe6ycnWlxtzU4mFuQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":901,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (1952), with no line terminators","md5":"e7cf4c458b327ab7ed31e0936ccd404f","sha1":"970bf05073f91ad6b8f21521f7c9886f71f2af1d","sha256":"52b687a685d2239142be0db5335c5710951ba8c2b39a44431a40f156b4d9312d","sha512":"23bc667efa366db075822438f4ae00e3344cfea8e78646eb70515546497a91039b9983b13f7a8fa82905903e17a3b33f4fabdb5292cda2fda108162acb533749","ssdeep":"","tlshash":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-20T19:44:20.608532Z","times_seen":328,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/css/template/homepage/homepage-horz-logo.svg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.602Z","timestamp":1699096834602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/css/template/homepage/homepage-horz-logo.svg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\netag: \"5ce357f3-15b8\"\r\nlast-modified: Mon, 09 Oct 2023 07:19:02 GMT\r\nserver: Akamai Resource Optimizer\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1977\r\ncache-control: max-age=13554799\r\nexpires: Tue, 09 Apr 2024 08:33:53 GMT\r\ndate: Sat, 04 Nov 2023 11:20:34 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1977,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML 1.0 document text\\012- XML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (4948)","md5":"5b661f1f0045dece3b8d90f28de4ebc0","sha1":"13de4a39fb5908ddbd2dbe220b1f2c1e5a6044fa","sha256":"780b98a3861aa8d4afe428953ad3b9e988a74cd5f064b4a1eb453f5d901221e7","sha512":"f007138b4cdb4d494731bec68f6a5b4ed20e64691d8975790b4b29d43695c4c79483ec62c32a65e750887a80834beac5052c5f9cf3444acccc37d3d9e1e6da8c","ssdeep":"96:S9cCqTEb4CXNcC9I8H0WXd76I0D35rJyoShzesVOxf6AifyQQGonPCAJ09tqeHu4:OcCq4b4CXNVfH0WV65rcD4sVOxfafyhO","tlshash":"4ab164a4b31f47d6fe5985dcc860a082386a347933a397b4eabf5c24b9088b50d3557b","first_seen":"2023-05-09T16:36:10Z","last_seen":"2026-05-26T02:07:41.671715Z","times_seen":145,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/global/homepage_footer_stagecoach.svg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.621Z","timestamp":1699096834621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/global/homepage_footer_stagecoach.svg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\netag: \"5c81bc53-3708\"\r\nlast-modified: Fri, 20 Oct 2023 14:21:32 GMT\r\nserver: Akamai Resource Optimizer\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 5974\r\ncache-control: max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:34 GMT\r\ndate: Sat, 04 Nov 2023 11:20:34 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5974,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (14088), with no line terminators","md5":"a9bfb53f143baa23495976f40514699e","sha1":"d0bfa9f5448c98115402368b3aba8bc55ebcdd97","sha256":"d6e3a5a263a697df3e5989b893e27ac29972dd9346b01da3e5476becb9a73a25","sha512":"a3465259d03414ba15f961a0760122c4314be0a8c3f6199b5f27b6de78c526fcc9a0abaee5af34555bd17cd56ca3d70a7b096585d4556c3377aaba3c2752a6f3","ssdeep":"384:5uQa86MMa+MRClRdzWHVysaaaraYurd3V9AmQI:M5wMa+boysSiAI","tlshash":"ec52a8c59bb4e28c5bc5f58eef26cad9650fe0be9776c581827dcf845087d89f502804","first_seen":"2023-05-28T15:10:43Z","last_seen":"2026-04-06T22:53:45.054467Z","times_seen":10,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/css/template/homepage/home-sprite-image.png","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.615Z","timestamp":1699096834615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/css/template/homepage/home-sprite-image.png HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"2b6a-58d3025f03880\"\r\nlast-modified: Thu, 26 Aug 2021 02:05:05 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1525\r\nx-check-cacheable: YES\r\ncontent-length: 11114\r\ncontent-type: image/png\r\ncache-control: private, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:34 GMT\r\ndate: Sat, 04 Nov 2023 11:20:34 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 314 x 382, 8-bit colormap, non-interlaced\\012- data","md5":"8ebe5a2c71c1629d58823f7e753aee5d","sha1":"644b6803f13fdeebee2cea85f3e418c354446585","sha256":"11fa95cade4d31642d17ebba420d3706837b9a91090992b2d2aecc74a6b6ab88","sha512":"1a765da43ac41dc99b2915d15be547455aea9aae2e620dd75e217d15c59c03bf48b82eaa24f77092daef2b22c3805fdc86e8ee8a0f513d83989db82df272d5c8","ssdeep":"192:rEaZBkJhrR3uV25udcq/ztZs4uZ7HATKQvrAuOZLEEkyyDtKs+BZz8Tf+cvxgwbo:AajknFzjUztZsTZ7HEKuAusEc0tKs+vT","tlshash":"9c32b005a21ffbddd521bcaa5a8f49f16ce64eb88757c597004de0c46ea1231d1ba310","first_seen":"2023-05-02T13:09:55Z","last_seen":"2026-03-25T12:16:31.55661Z","times_seen":9,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/toppages/utag.sync.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.600Z","timestamp":1699096834600,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/toppages/utag.sync.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Fri, 14 May 2021 19:00:22 GMT\r\nETag: \"609ec8c6-29\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 61\r\nDate: Sat, 04 Nov 2023 11:20:34 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=SU5LY5F7zEewtOpp7NhpYQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"227e73140309b2893bbe0ce57cde75da","sha1":"2abb03fe834e4a4469dbe6037f258c88c074c081","sha256":"95b962bda7dcd5140caed5bc45236ff538c3d5841c7a91136b751db076d19382","sha512":"7554e5b035dc53db3858baa882432abd4d8eab1c2197db61f922679aa5286cc9e217505003664466b0347e4ec50b07520871edac221b4494e62f83437198f927","ssdeep":"","tlshash":"1a90041550135075431133c14fd53f155375c34030d344111ccf35c0c74404f473d000","first_seen":"2023-03-07T01:17:17Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":111,"dns":102,"connect":1,"send":0,"wait":125,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wellsfargo.com/js/vendor/jquery.min.js","fqdn":"www.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.18","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.623Z","timestamp":1699096834623,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 21 Jun 2023 00:00:00 GMT","end":"Sun, 21 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:C4:13:C4:E9:73:7F:6B:2D:36:B1:67:AD:66:3B:89:87:6F:69:58","sha256":"61:AF:8D:94:33:85:2B:10:65:67:D1:A2:0D:9E:EE:4E:37:37:BE:87:69:7A:FD:BA:E4:04:D4:A5:C0:0E:07:A1"}}},"request":{"raw":"GET /js/vendor/jquery.min.js HTTP/1.1\r\nHost: www.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nExpires: Mon, 16 Oct 2023 08:51:36 GMT\r\nLast-Modified: Mon, 09 Oct 2023 07:15:26 GMT\r\nETag: \"6523a88e-17d5c\"\r\nCache-Control: max-age=1800\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\nContent-Security-Policy: frame-ancestors 'self' *.wellsfargo.com\r\nContent-Length: 33308\r\nDate: Sat, 04 Nov 2023 11:20:34 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=vFyFhcVpNC3eRHtajZi4OQ%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33308,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (8077)","md5":"d49f5bd057488231fdcc675e2fe9f568","sha1":"c81be8cda5beab5bd767a63bee8aafc08e037ce4","sha256":"3c536cede8c67b4bda531f82b77f3678e52026398492010245d3870c87a1623e","sha512":"d00bc0d962dcbcdd26ebe0c0ae67a8a698cdef74a1c83eb282bb4cdec492f2db34067b34e02cf9a3e247dc766f6b5ea2b3978c0ce26b278250fce1fc0b611685","ssdeep":"1536:HAvUXrr5nSDjotcZxhMV1Ez9tgn1Emi7G6S9tXE79aCBsU1+TU5G2q0sBQCpu9Lv:H8XzmB6SLIH1+TUd5fCpuhQ47GK0eaO","tlshash":"7493f8ddb2c670224bbb60b9107f550bf236189d284d9414f228d8e5bd78a4ac27bf7d","first_seen":"2023-03-07T01:17:17Z","last_seen":"2025-01-27T13:54:12.086712Z","times_seen":18,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":78,"connect":4,"send":0,"wait":122,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/homepage/wfic638_ph_b-jk_0224_4057_489x234.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:34.853458726Z","timestamp":1699096834853,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/homepage/wfic638_ph_b-jk_0224_4057_489x234.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\netag: \"6182-5936c3ea05800\"\r\nlast-modified: Thu, 26 Aug 2021 01:34:52 GMT\r\nserver: Akamai Image Manager\r\nx-akamai-ew-subworker: 8096267\r\ncontent-length: 19108\r\ncontent-type: image/jpeg\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:34 GMT\r\ndate: Sat, 04 Nov 2023 11:20:34 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":19108,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 489x234, components 3\\012- data","md5":"a7eb5edc757e5903909182a07f316857","sha1":"992fdb3018bd9dd9a773ef94006a26b0cb9e9494","sha256":"3d1833e56f85cb5da7f97d9b6742dd183fbf68ea61c8a4b4baca4374a07bb264","sha512":"9a44f77e8a35e96b561fe80c09e9fc78445e625b11630cb100e50aca66430ebeeeac2bb8b18d552d2333d10b3be528cc30c68b37e6b3b0fdb21cb8ab6ebcf0cf","ssdeep":"384:ZvCQAbCSNjg/Hq3NKXjkQlNpMXluUuqQ2d89c2CoPGKScg7:ZvXAbCSZg/ANKXjkpTQXb35S97","tlshash":"1182e077b6ed6bf728e2261f661eba7531325c7170b4cc01d45569b81334c86cb1e1d1","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.095238Z","times_seen":5,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wellsfargo.com/css/home/homepage_ret.css","fqdn":"www.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.18","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.601Z","timestamp":1699096834601,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 21 Jun 2023 00:00:00 GMT","end":"Sun, 21 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:C4:13:C4:E9:73:7F:6B:2D:36:B1:67:AD:66:3B:89:87:6F:69:58","sha256":"61:AF:8D:94:33:85:2B:10:65:67:D1:A2:0D:9E:EE:4E:37:37:BE:87:69:7A:FD:BA:E4:04:D4:A5:C0:0E:07:A1"}}},"request":{"raw":"GET /css/home/homepage_ret.css HTTP/1.1\r\nHost: www.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 09 Oct 2023 07:15:26 GMT\r\nETag: \"6523a88e-ce5e\"\r\nExpires: Sat, 04 Nov 2023 07:30:34 GMT\r\nCache-Control: max-age=1800\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' *.wellsfargo.com\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 9985\r\nDate: Sat, 04 Nov 2023 11:20:34 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=bPROqSZXo5fbpCGkmK5Ftg%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9985,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8236)","md5":"5587a8cbb0d3fb99a8e6722262acff54","sha1":"51d3ef07782a9d024f479230a093cf2d6902853a","sha256":"a5123b8dce22962086470430fcd9124a2f5b0c9c189278b834d5f89ddf95afe5","sha512":"bd332d4aa2c0054c3c00148b23ccf6a7e03ccc554ba7dcff45f607496d370ea232b97496f72c61baac5d2b1817136fc3ca595d8f5a7786eed47d3f9665430185","ssdeep":"768:WloEcIab1NbPMvQUoMbzdJNCFE+1HvaDxVo6w:WGbMbzdJNCFR6w","tlshash":"2533c622aa90206efb67d0b6b0d2b79932348156b1635bfff5d03a34c5c1ad60337b59","first_seen":"2023-04-05T13:34:12Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":115,"dns":104,"connect":4,"send":0,"wait":133,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wellsfargo.com/js/global/homepage_per.js","fqdn":"www.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.18","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.624Z","timestamp":1699096834624,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 21 Jun 2023 00:00:00 GMT","end":"Sun, 21 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:C4:13:C4:E9:73:7F:6B:2D:36:B1:67:AD:66:3B:89:87:6F:69:58","sha256":"61:AF:8D:94:33:85:2B:10:65:67:D1:A2:0D:9E:EE:4E:37:37:BE:87:69:7A:FD:BA:E4:04:D4:A5:C0:0E:07:A1"}}},"request":{"raw":"GET /js/global/homepage_per.js HTTP/1.1\r\nHost: www.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 09 Oct 2023 07:15:32 GMT\r\nETag: \"6523a894-1335b\"\r\nExpires: Fri, 03 Nov 2023 08:32:28 GMT\r\nCache-Control: max-age=1800\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' *.wellsfargo.com\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 21375\r\nDate: Sat, 04 Nov 2023 11:20:34 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=FWOdnxJfhH+NpfdFKxuuLw%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (8078)","md5":"a289ca774321a32c6530d93d2f2eb967","sha1":"a53876434c3dcda6fbe5fee5b14cf59151092029","sha256":"10023d37f9ccd474e4710fe222ebc1e051359ce1830a96ab03ce4608346797b8","sha512":"2a190c3893f8827c799502473e6b8191f11c87d70af1e9b62bf9f2227ba3346fa628a79cfe8f85ae72199ba39d092632c37b466982cfd5fad146ce7ac778cb03","ssdeep":"1536:pGwi1ohQF3FkxnTNP8ebLi5yz4YpJFvV6XTmGhOc7P8hAGb+:ji1oIFfebL1a5hOcQhLb+","tlshash":"81731a19755034b246fe32bb243f960ab0716d32ae05f994e066ccbd1fb8d45896bf1c","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":77,"connect":4,"send":0,"wait":155,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wellsfargo.com/js/global/homepage_iaoffer.js","fqdn":"www.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.18","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:34.902757627Z","timestamp":1699096834902,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 21 Jun 2023 00:00:00 GMT","end":"Sun, 21 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:C4:13:C4:E9:73:7F:6B:2D:36:B1:67:AD:66:3B:89:87:6F:69:58","sha256":"61:AF:8D:94:33:85:2B:10:65:67:D1:A2:0D:9E:EE:4E:37:37:BE:87:69:7A:FD:BA:E4:04:D4:A5:C0:0E:07:A1"}}},"request":{"raw":"GET /js/global/homepage_iaoffer.js HTTP/1.1\r\nHost: www.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 09 Oct 2023 07:15:26 GMT\r\nETag: \"6523a88e-cb3\"\r\nExpires: Sat, 04 Nov 2023 11:50:34 GMT\r\nCache-Control: max-age=1800\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' *.wellsfargo.com\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1370\r\nDate: Sat, 04 Nov 2023 11:20:34 GMT\r\nConnection: keep-alive\r\nSet-Cookie: DCID=4p1%2fp3JNQesK40Q+sw6S+kyhJtMXwskI5CqiuC7r4uojS0L7QoSl63Hzmo1fvHcB; Domain=www.wellsfargo.com; Path=/; Expires=Sat, 04 Nov 2023 11:35:34 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1370,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (3251), with no line terminators","md5":"50531e993ab6f5b96259dfa3fae1980a","sha1":"701400a91461c0f080ff1e011270b7d10ad87709","sha256":"0155efc4c50ae4da41c1ca1f6407912cbe62c0f7cb77f6464aee5bedf1267cbc","sha512":"302cafc9e0381a2bcdb0b8febc5df3a2b4d580e85d5c5db0a9edd135a78cd2849b7ae23c17353f24946721d4a6dde2ad3f6de0ab29a92f741f266bd84a627256","ssdeep":"","tlshash":"c9619622736127b3abd80025a53eb7a47231a631291bf5a0c16df8543bdcc47cb3af90","first_seen":"2023-03-07T01:17:17Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www04.wellsfargomedia.com/assets/images/css/template/homepage/homepage-lock.svg","fqdn":"www04.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.603Z","timestamp":1699096834603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/css/template/homepage/homepage-lock.svg HTTP/1.1\r\nHost: www04.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\netag: \"596d0953-6f8\"\r\nlast-modified: Wed, 11 Oct 2023 11:58:33 GMT\r\nserver: Akamai Resource Optimizer\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 668\r\ncache-control: max-age=13554799\r\nexpires: Tue, 09 Apr 2024 08:33:53 GMT\r\ndate: Sat, 04 Nov 2023 11:20:34 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":668,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML 1.0 document text\\012- XML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"21ebce5afa61a8cc8ea7913c4a4c3310","sha1":"ad5b77867a48c3e240f04611f25d27af0c1be59b","sha256":"7bfab3d904c5effc47fe1577c20615a1efcf84f2a6e1b8e5ccaa501ac657fcab","sha512":"8b63d23de9d23477d68aeb6c17c107f0bb50b5aa5d0e0b94b1e520c66ea54bf89dc41a637fc661ba81a11bdebcdc271aacc7439d6e6055b505231dd12f42215e","ssdeep":"","tlshash":"963146074351dfd9ebdc43689754e09976f0ecc770b190d8bb672808e6598d5bd8c2ac","first_seen":"2023-05-09T16:36:10Z","last_seen":"2026-05-26T02:07:41.652783Z","times_seen":133,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":291,"dns":0,"connect":1,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/photography/lifestyle/970x485/paying-phone-beach-banking-made-easy-970x485.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.615Z","timestamp":1699096834615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/photography/lifestyle/970x485/paying-phone-beach-banking-made-easy-970x485.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"5c81bc53-8326\"\r\nlast-modified: Thu, 02 Dec 2021 11:54:19 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1401\r\nx-check-cacheable: YES\r\ncontent-length: 33574\r\ncontent-type: image/jpeg\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:34 GMT\r\ndate: Sat, 04 Nov 2023 11:20:34 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33574,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 970x485, components 3\\012- data","md5":"84432ac1807c4228ebdba910e98c2a89","sha1":"bb4b9ca8b506fc9cb231abd097435601cf9facd3","sha256":"7b1acbecc92198d28a194bab0fa46dd84878d9cb78f3e2bbbd4ba771ef168ebd","sha512":"a728e599b0461654d72ecdcab483ddbd2e6479eafb8a2cbdf6941f0ea0f5f90fb378e9c8f487a383f10d5650be92e632b2292dcaef6067ec5755c1b91d522ff4","ssdeep":"768:VW5nLX9WbPObadBgw86QT/wpj+Duc+mZEDtc0LQ1zxWxTw:VSZWbP0k2w85T44Duc+m6DvLEzxL","tlshash":"7fe2df4345982f4b5867f7fcba024f2d6f0a173c1fed29e79172560baa20792425d41f","first_seen":"2023-04-05T16:48:14Z","last_seen":"2026-05-09T06:04:46.619215Z","times_seen":30,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/prefs/login-userprefs.min.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.622Z","timestamp":1699096834622,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/static/prefs/login-userprefs.min.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=UTF-8\r\nExpires: 0\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-XSS-Protection: 1; mode=block\r\nPragma: no-cache\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp\r\nAllow: GET, POST, OPTIONS\r\nAccess-Control-Allow-Methods: POST\r\nX-Frame-Options: SAMEORIGIN\r\nETag: W/\"65204e55-17fa\"\r\nLast-Modified: Fri, 06 Oct 2023 18:13:41 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\nDate: Sat, 04 Nov 2023 11:20:34 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive, Transfer-Encoding\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nWesdAksn=Aw4zEJqLAQAAgDYABI9GbhAWtf-PaygPiaQVMcpXFGmlWG35VWG4rDZ5aeutAVtaKpqcuNk0wH8AADQwAAAAAA|1|0|fac3801dd0ac3cf858ef3fbabf4e64f0b850f90b; Path=/; Max-Age=1577847600; Domain=wellsfargo.com; Secure\nDCID=JBpVQ6%2fW3Ifdzm8f+z3OEnhmBqFsvJ0tV0rqXzTZDdHZD9vMTh4zH1lmiwLZpJMv; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 04 Nov 2023 11:35:34 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":188230,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2dc29aca8a53aff6dad31ed472566be","sha1":"5bfa67079b1353abcfd84e185a613bd607471b29","sha256":"c2d7ae9fb3c6c841e34ff9ea05f801a50b95f1cea45edb282f8586596905d28c","sha512":"4284cb1371db1723efedeb3eebef310f19c7e4f439b37254eaa0f75ac8c178fac7639660c34f45d6f71b637fec2fbd1ca9f298c4bf0c403544abf929f04f4e15","ssdeep":"6144:VQkhNwPTmontmcy7+4sq6Jm0HdN7cnMz0T6jHnM/MS+a5P:VRihnd0L6JJH90MHunt","tlshash":"ec648e97cfc583b8830868d105ae0646a4bee83178bdfa295673e4d71637f7ca46cc19","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":110,"connect":1,"send":0,"wait":234,"receive":15,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wellsfargo.com/assets/images/css/template/homepage/homepage-signon-lock.svg","fqdn":"www.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.18","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.029135291Z","timestamp":1699096835029,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 21 Jun 2023 00:00:00 GMT","end":"Sun, 21 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:C4:13:C4:E9:73:7F:6B:2D:36:B1:67:AD:66:3B:89:87:6F:69:58","sha256":"61:AF:8D:94:33:85:2B:10:65:67:D1:A2:0D:9E:EE:4E:37:37:BE:87:69:7A:FD:BA:E4:04:D4:A5:C0:0E:07:A1"}}},"request":{"raw":"GET /assets/images/css/template/homepage/homepage-signon-lock.svg HTTP/1.1\r\nHost: www.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 08 Mar 2019 00:50:27 GMT\r\nETag: \"5c81bc53-f91\"\r\nExpires: Fri, 26 Apr 2024 23:58:09 GMT\r\nCache-Control: max-age=15552000\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\nContent-Security-Policy: frame-ancestors 'self' *.wellsfargo.com\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1816\r\nDate: Sat, 04 Nov 2023 11:20:35 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=tF1K7N1QLX31KYA8cs1Y2g%3d%3d; Domain=www.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1816,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image\\012- XML 1.0 document text\\012- XML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3457)","md5":"adb58d3b43729c87e4291c698520c7c3","sha1":"5c92214abf67b6cdb95c64928965f4d8e6b0e248","sha256":"ea4b20ddecd76a86c3dc31d488970cf15e6284756c271b1d983f597652ebeb61","sha512":"a82c99271f8db0cda2aa0ba39dcaa5245534f260ea6b10c9a6450af2cb3b99e91afd5c859ffd2b44fbbc6e94e00192521c5316827b04791438e6fa714c71c6bf","ssdeep":"","tlshash":"018175fc16bc43de308a8ebcf932295e6d7138f1258481e8d495c9acb2764f2a651cf4","first_seen":"2023-05-28T15:10:43Z","last_seen":"2026-04-06T22:53:45.039361Z","times_seen":11,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/photography/lifestyle/970x485/couple-moving-in-homelending-970x485.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.117141728Z","timestamp":1699096835117,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/photography/lifestyle/970x485/couple-moving-in-homelending-970x485.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\netag: \"875e-5838a9bd97ac0\"\r\nlast-modified: Thu, 26 Aug 2021 01:46:17 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1611\r\nx-check-cacheable: YES\r\ncontent-length: 34654\r\ncontent-type: image/jpeg\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":34654,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 970x485, components 3\\012- data","md5":"0ae6b7f013ef25adc455993d7ace2e34","sha1":"3dbd9d6795f969425e514b54f2f1634829118e3c","sha256":"d6fdad356ecabcdcfb77a0486b3e240f450369e0304739e55c71a112d5f3d2df","sha512":"c54add62c41a2722a9bf29edaddd912c6dd69970ea13b31300f4ac2149658858c9c85e76b8580b5c7e47d85dfc4c0f91fd4c3a21db011d79c21f3d983878ab98","ssdeep":"768:VXCOZXTo4yRneA2BehU5pjbBv5HHldpoNEEVA7/946qG11sl0PQaMhTL:VXCOZjo4yRneF7lT+EF946qAsXaoTL","tlshash":"e6f2e0af98496ba2e96ed3d2ba625c194d5583b3e36179ed22c19cff3c740034c680d5","first_seen":"2023-04-05T16:48:14Z","last_seen":"2026-05-09T06:04:46.604817Z","times_seen":26,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/photography/lifestyle/970x485/FICO-phone-borrowing-and-credit-970x485.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.614Z","timestamp":1699096834614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/photography/lifestyle/970x485/FICO-phone-borrowing-and-credit-970x485.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"8a28-5838a9bd97ac0\"\r\nlast-modified: Thu, 26 Aug 2021 01:34:57 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 26996\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 970x485, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"256e21139d15b167372a1c1bdd1dce6a","sha1":"e75684700b62733f17573bed55f65ef3f7f3f5e4","sha256":"09504bdecbf274d2b3322b86c6cc699a186b4656cc220d563fcbfb08df220b08","sha512":"838603a748fb742dde3af62eb13b1a4b5dd3228ebf20a30cf7674d8dbdb15295663a9e7783c3ddf15406ceb48c20810619a101aa864fa118eebf6d3ac35d4b14","ssdeep":"768:vDCpEHMfdXlUZbvMa1ZInKkIrRmKDSRZCMjdD5DdK7X:vaEGiNfrRpeRsshd2","tlshash":"bac2e1b85a570f08e0f93feba50d575837e5d276bf9952ad5e43bfe890f240448484c8","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.103295Z","times_seen":6,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":433,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/contextual/banner/enterprise/1200x532/wfi000_lg_b-wf-stagecoach_rednoborder_1200x532.gif","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.195390668Z","timestamp":1699096835195,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/contextual/banner/enterprise/1200x532/wfi000_lg_b-wf-stagecoach_rednoborder_1200x532.gif HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\netag: \"5d04f2a0-73a4\"\r\nlast-modified: Sat, 16 Jul 2022 02:29:02 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 20748\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":20748,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x532, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"c5aa492084bbceb30f82879fc2f1ee49","sha1":"0c5c60e3f23fb7c658fbff1de959d84a449cd6d8","sha256":"810ea129e1e766e362f316f0605f1d3938e2feb01e4d6643d2645b51f3a8d3b8","sha512":"d5ebe42f8149aa4e9015e8769b378d5a77490fcf8a0ed52bef01417bdec175ac0d5baf3995a7dca133b6d42e31f2d534181dc9e952db4c3f62e62a5409908b2c","ssdeep":"","tlshash":"","first_seen":"2023-05-02T13:09:55Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/homepage/wfic693_ph_b-jk_1027_3356_304x194.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.621Z","timestamp":1699096834621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/homepage/wfic693_ph_b-jk_1027_3356_304x194.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"9ba7-5aceb06e0b615\"\r\nlast-modified: Thu, 26 Aug 2021 01:32:21 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1337\r\nx-check-cacheable: YES\r\ncontent-length: 9458\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 304x194, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"173f9287cd31765a0c56d1a2f7a3c9aa","sha1":"1c32f7e4346aa0d936c930690abaa96db7528acc","sha256":"fbe240520ac06a89f4bc6dd3bd580d5ee2ffa5c2adcf8f5934abf16ac8eeccd3","sha512":"3f2d57e90950880d93338a83774452df6f61a404ea947eedf922818ed471d7fcb893d1a11fefe33b8aee9341fbc5c4152e2af2bc7ca63112a72c919e906164e0","ssdeep":"","tlshash":"","first_seen":"2023-05-02T13:09:55Z","last_seen":"2026-05-09T06:04:46.605639Z","times_seen":26,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":488,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/contextual/banner/credit-card/50x50/task_icon_credit-card_50x50.png","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.270328373Z","timestamp":1699096835270,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/contextual/banner/credit-card/50x50/task_icon_credit-card_50x50.png HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\netag: \"6d2-5a9edb120b8c5\"\r\nlast-modified: Thu, 26 Aug 2021 01:32:29 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 2020\r\nx-check-cacheable: YES\r\ncontent-length: 516\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":516,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"c73e8cdefead986c81ee32c0a049e215","sha1":"68321f3dcd23983395de25c16f4898d08543dac3","sha256":"14ebe41c047e0cfca8e17b68f81bc0f980b75321c35d784360cf3491b1f9a06d","sha512":"23026bb14232b04b48d389ccb58b057da2a56fd77a288b61370f3f6546f99fd7d30c6da9c82b78f63ff5e193a3a7545c122415452ce2ae5abbb96e27e1a9cc9f","ssdeep":"","tlshash":"","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.100806Z","times_seen":3,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/contextual/banner/checking/50x50/task_icon_house_50x50.png","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.298540493Z","timestamp":1699096835298,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/contextual/banner/checking/50x50/task_icon_house_50x50.png HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\netag: \"745-5a9edb120b8c5\"\r\nlast-modified: Thu, 26 Aug 2021 01:32:31 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 584\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"03a09017d851c53b4deae9c1208828e9","sha1":"bc730f9631df8094a7a4c53e756474b705347d34","sha256":"53f20554e5a8e812764c7e8241e14c9117d2197e00f1b87248bf458aa8e55caa","sha512":"d32ed1f20f23fa8f8a959aee133f5ed9d30c5f248536f97e3b6e01c35f74cb74721a6af3bcd430e2b3cee7eef59671db45f68b8bc5f8c681edb98d9bea3e0f8d","ssdeep":"","tlshash":"fef041a1e000ac84c19e5873a10a8359386b8ec5ea0eae48486544269a87c70673b151","first_seen":"2023-04-05T16:48:14Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/photography/lifestyle/970x485/woman-tablet-investing-basics-970x485.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.619Z","timestamp":1699096834619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/photography/lifestyle/970x485/woman-tablet-investing-basics-970x485.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"7fe5-5838a9bd97ac0\"\r\nlast-modified: Thu, 26 Aug 2021 01:32:48 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1798\r\nx-check-cacheable: YES\r\ncontent-length: 28720\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 970x485, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"3cf1924606b8856e7f86f1395acb71cd","sha1":"fee658d1b3f07dce1c0e2988dafa4c112c00fd2e","sha256":"eb38bf6136b9b597e78c4a80f041d4e3bbc9231b348e999ba5aa1e52ec2bbd0f","sha512":"e54d85b1e0690df60dbb32989c4fbdc0c73dbcfbae6993772ac1e9d3f2286799f181390cfef27c16c29f2c6fb4aec77ccd978baed14804de1d2969dd40354001","ssdeep":"768:0DXJBH88e+tUZXsVEUJYXHIQ+Grr9FXCnY4oYESUL30BqB5Bpk:0DXTHe+S8VIHIFGHAYzxSUgqB5bk","tlshash":"99d2e12598b3277b80c845695575271a49fbb5333e936a80d4fea3beec3cf550a34812","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.096662Z","times_seen":6,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":566,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/homepage/task-icon-rates-50x50.png","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.613Z","timestamp":1699096834613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/homepage/task-icon-rates-50x50.png HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\netag: \"5c81bc53-a0a\"\r\nlast-modified: Tue, 09 May 2023 21:59:05 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 1268\r\ncontent-type: image/avif\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1268,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image\\012- data","md5":"400528f52063abd3fafea29a76accce6","sha1":"195b14f05d465c88fabd4914e84b9a105b780cfb","sha256":"7b01a4791bd97861ce3bdcc628a9814a0440e991f1d06f81b77c8c326d99c8c6","sha512":"a12eb0603d9a4406d7eb4ef7f59d7da6e9a29a4152d2ec5c893e92a8217ec7c1de95bc0c7b0735c72163344f17afbf192b3bd7a3e535c4b89193347f0d53934a","ssdeep":"","tlshash":"f22174847f782e04f989133582c61eb12231a7ad67676b139cc1b9144c70663eae2d2c","first_seen":"2023-06-15T13:25:30Z","last_seen":"2024-08-21T09:33:25.098744Z","times_seen":6,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2","fqdn":"www17.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.27.78","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:35.189Z","timestamp":1699096835189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www17.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 14 Apr 2023 00:00:00 GMT","end":"Sat, 13 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1","sha256":"18:D3:84:76:02:D5:5C:F3:D3:59:E3:2F:D1:E3:A6:91:83:82:D1:1D:0E:C2:C1:31:85:53:77:FA:E7:12:7E:1C"}}},"request":{"raw":"GET /assets/fonts/wellsfargosans-rg.woff2 HTTP/1.1\r\nHost: www17.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gutadevelopment.gutaweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wellsfargo.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 22424\r\nlast-modified: Fri, 03 Sep 2021 13:01:20 GMT\r\netag: \"61321ca0-5798\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nx-akamai-ew-subworker: 8096267\r\ncache-control: max-age=11492875\r\nexpires: Sat, 16 Mar 2024 11:48:30 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22424,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22424, version 1.13107\\012- data","md5":"0a1639ebe9fab396657a62aa5233c832","sha1":"9b58164729ad918dd7255e4856f9da7f3a90bfde","sha256":"631f3b6267a831a8d67c45e480b5d5a2601f10ff8708bcf3a45a41b377a129cc","sha512":"a3786f7c1188bcbddcabe54e40dfbc77d842b1a19d2cca56cedaeb3c1a8126b3c203ac8b6297268c94aedf270be2b822aa8ac0de9e1e5c6d42bc7866324d8128","ssdeep":"384:ZWomH3hR7XCKb7GSa5mSWAmtXnCe83/17wdTgm6keJR60vqy:ZWDL7va5mSWbn4cdEmhJvy","tlshash":"cda2e16e1fb4ae24ec1c3bb164a5d0ed75c744750470c45fa331a0d626c5d4c9d86ef9","first_seen":"2023-04-12T09:13:55Z","last_seen":"2026-06-01T18:49:25.084684Z","times_seen":973,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":124,"dns":112,"connect":7,"send":0,"wait":2,"receive":3,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www17.wellsfargomedia.com/assets/images/css/template/chevron-right-blue.png","fqdn":"www17.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.27.78","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.320094486Z","timestamp":1699096835320,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www17.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 14 Apr 2023 00:00:00 GMT","end":"Sat, 13 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1","sha256":"18:D3:84:76:02:D5:5C:F3:D3:59:E3:2F:D1:E3:A6:91:83:82:D1:1D:0E:C2:C1:31:85:53:77:FA:E7:12:7E:1C"}}},"request":{"raw":"GET /assets/images/css/template/chevron-right-blue.png HTTP/1.1\r\nHost: www17.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wellsfargo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\netag: \"519fc766-3fc\"\r\nlast-modified: Thu, 20 Apr 2023 01:30:32 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1189\r\nx-check-cacheable: YES\r\ncontent-length: 140\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=1361460\r\nexpires: Mon, 20 Nov 2023 05:31:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":140,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"a85905c05711d5485bbe67acee57123f","sha1":"131bd0f9affc5f1e8acdca358d70e3b15cc62977","sha256":"91b1ec7259a674b4306ca1cf680ba09852decefa9f3eb5f521a55de81d697102","sha512":"11035dbc753ff73cb1454cf28fe9a19674cf99304815abbbd6b75cc5428bcbe0926f780fc5fa2cfb7d330ee250ef0dab08bfad1d2892c10d84c21d60802ba37f","ssdeep":"","tlshash":"","first_seen":"2023-05-02T13:09:55Z","last_seen":"2026-05-26T02:07:41.664342Z","times_seen":84,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www17.wellsfargomedia.com/assets/images/css/template/homepage/homepage-magnifying-glass.png","fqdn":"www17.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.27.78","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:35.180Z","timestamp":1699096835180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www17.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 14 Apr 2023 00:00:00 GMT","end":"Sat, 13 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1","sha256":"18:D3:84:76:02:D5:5C:F3:D3:59:E3:2F:D1:E3:A6:91:83:82:D1:1D:0E:C2:C1:31:85:53:77:FA:E7:12:7E:1C"}}},"request":{"raw":"GET /assets/images/css/template/homepage/homepage-magnifying-glass.png HTTP/1.1\r\nHost: www17.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wellsfargo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\netag: \"59c2114b-12e\"\r\nlast-modified: Thu, 20 Apr 2023 01:30:35 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1349\r\nx-check-cacheable: YES\r\ncontent-length: 236\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=1642714\r\nexpires: Thu, 23 Nov 2023 11:39:09 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"8cf6735df721c60affadb70ad95732eb","sha1":"ae8a42ebbd6b60630e2c612e924c4fd66a4aca33","sha256":"8dc5436dce4423f0e53e85904b6dc0552c1c8bbde0dd4ec1c929a1c272201c4c","sha512":"cf1f8c4e7b66d67154abde401215736e063d3d466c3af6ca020952aa64fc3447d0c27341829b208c3cd9f9109c78306607e0e27b1735a1b74ccff584fb1ffdc1","ssdeep":"","tlshash":"88d0a7d9d37fea29c0551a9d946a51c32419ea1020ca9cd5584312b42e9091b6c5697d","first_seen":"2023-05-02T13:09:55Z","last_seen":"2026-05-26T02:07:41.656169Z","times_seen":134,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":133,"dns":117,"connect":1,"send":0,"wait":6,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/photography/lifestyle/970x485/couple-beach-retirement-970x485.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.616Z","timestamp":1699096834616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/photography/lifestyle/970x485/couple-beach-retirement-970x485.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"8275-5838a9bd97ac0\"\r\nlast-modified: Thu, 26 Aug 2021 01:44:55 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1372\r\nx-check-cacheable: YES\r\nx-akamai-ew-subworker: 8096267\r\ncontent-length: 31394\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 970x485, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"879c66aeb8e3c322f11a0841c7596791","sha1":"a79e6e66f3c68ff4d5b9513738db3fe338d8c742","sha256":"aee5245049750ff1e0f9368e3f69e0804e637539bb95c22db5325f884fbe5e9e","sha512":"7496feb076b0e5d48d180f83b69152977a20525b1fa43cbcbc1cf86266194aa878390fe98c1513f283d72e535eb6c32cdeb019635d1ceb2b695dbd46d82fa778","ssdeep":"768:K4LiglZSuPEcjGo6/D1n57i08PsT4Safnw/tpo3W4WcevI40lhet:K4Lim3Yo6/DR8Psktnwrf4WpvI7Det","tlshash":"89e2f09158396314e7b9724ba82e3fbe2c343b5291a365a5f518cf6b1036c5807ea4b0","first_seen":"2023-05-02T13:09:55Z","last_seen":"2026-05-09T06:04:46.613715Z","times_seen":30,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":602,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/photography/lifestyle/970x485/student-graduation-going-to-college-970x485.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.618Z","timestamp":1699096834618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/photography/lifestyle/970x485/student-graduation-going-to-college-970x485.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"891b-5838a9bd97ac0\"\r\nlast-modified: Thu, 26 Aug 2021 01:46:15 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 974\r\nx-check-cacheable: YES\r\ncontent-length: 35099\r\ncontent-type: image/jpeg\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35099,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 970x485, components 3\\012- data","md5":"f3fa5f93f064681db83dcf7a849e72da","sha1":"3b42253a1fcdecbea780336cb13e244373fc39bb","sha256":"cfd4c24ae595a860f108f4de55ce9a1744bad06d612d508c4d0bf39901b9862c","sha512":"7fcc45225bd01ab489837a1ae327d590518fea26bfed49cb29258c28c20737f7e6c0a1e76e570949a2aa695eb24d2fb9cdb0402a9bc6ebb89c23d94d056d0c08","ssdeep":"","tlshash":"","first_seen":"2023-05-02T13:09:55Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":603,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/homepage/task-icon-account-50x50.png","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.356693936Z","timestamp":1699096835356,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/homepage/task-icon-account-50x50.png HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\netag: \"4fd-5838a9bd97ac0\"\r\nlast-modified: Thu, 23 Sep 2021 01:44:15 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 960\r\ncontent-type: image/png\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced\\012- data","md5":"3e2b8c648c34cdcc1582c59a156f6b3b","sha1":"85115c4bcccebc94367c042df99872ddd2aa9542","sha256":"8dd5481f66610c830acc8ed072d8b7bfe7ddc27dc3d58c6651112d79b3c2f670","sha512":"56629ebabe888e505cbb73708a67ac3fc6d47e5e521facdaf24bb9843f45050d90fc405eb8e5f6fd7948275dcb60138153ffb539efd022bf55cd615d817343b9","ssdeep":"","tlshash":"ea11149af3982937d40171fbc37dc0b66863e09d6417c2d642b2afda482f645c0858dd","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.093632Z","times_seen":5,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/homepage/wfic765_pg_b-tm-0929-0626-c-1200x532.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.404418728Z","timestamp":1699096835404,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/homepage/wfic765_pg_b-tm-0929-0626-c-1200x532.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\netag: \"69a89-5a7ba6dd2bc97\"\r\nlast-modified: Thu, 26 Aug 2021 01:41:51 GMT\r\nserver: Akamai Image Manager\r\nx-akamai-ew-subworker: 8096267\r\nx-serial: 982\r\nx-check-cacheable: YES\r\ncontent-length: 132650\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":132650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"00c8fd78985a69f4ad4dce3b9d6a1128","sha1":"7847fcd17feec4a872190297ec4bec55e1b10df5","sha256":"903e17411dadc1daf3a299cec88db349ecc75bfb5a09a221613333fcb49fff9c","sha512":"c18e6ca89e103088c0a4da9972bba5d5b3d0806ef50945fab6612db64b0fd8e0611905ce29074cca8dc3a11eb0bc77a94ca0bf2ecbca8d1462c603e83bedff2a","ssdeep":"","tlshash":"","first_seen":"2023-05-02T13:09:55Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/photography/lifestyle/970x485/woman-card-security-center-970x485.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:34.619Z","timestamp":1699096834619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/photography/lifestyle/970x485/woman-card-security-center-970x485.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"896a-5838a9bd97ac0\"\r\nlast-modified: Thu, 26 Aug 2021 01:51:48 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 34590\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 970x485, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"f382c92b96c17c5ef9a6a6e112c6f603","sha1":"914c3b02ca645e282942883ce8a8e3d4f4cb4dd9","sha256":"b4e93c9fa44c1184b7d30d13a312489e5e820c1d88af5ad56e655f97b6aae5b5","sha512":"93b946b3dedc4c103d76e94f93f5530d2fb670f7d616da21c6f8955be3ee707d900bc0b3c1993e611a241db8280831d4fcb1cfa3a08408fbfc4b8a714d6b3c1b","ssdeep":"768:kWJoQdFLCsOnBRKT56qTmX0KtiuHAh47Y1caOkNUDRT4lEg:zdFxUB8T5fT+0Ktiu7eOkCJg","tlshash":"dff2f2f4e62f01f5a5be00d5dc98862449f99353650b413b1c577a16fef718f4708a98","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.094618Z","times_seen":6,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":692,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www17.wellsfargomedia.com/assets/images/css/template/homepage/alert-icon.svg","fqdn":"www17.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.27.78","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:35.184Z","timestamp":1699096835184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www17.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 14 Apr 2023 00:00:00 GMT","end":"Sat, 13 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1","sha256":"18:D3:84:76:02:D5:5C:F3:D3:59:E3:2F:D1:E3:A6:91:83:82:D1:1D:0E:C2:C1:31:85:53:77:FA:E7:12:7E:1C"}}},"request":{"raw":"GET /assets/images/css/template/homepage/alert-icon.svg HTTP/1.1\r\nHost: www17.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wellsfargo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\netag: \"5ebe9271-731\"\r\nlast-modified: Mon, 30 Oct 2023 06:24:24 GMT\r\nserver: Akamai Resource Optimizer\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 736\r\ncache-control: max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":736,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML 1.0 document text\\012- XML document, ASCII text, with very long lines (1204)","md5":"69ca8acc8e1f1de4c9172e36b1a78bfa","sha1":"92823880cffe6560e06faaa8d24ae5559459e295","sha256":"649dcf3e5665f599b97ab67a10b75f7f1246378806c243c22a6a4130aa12e622","sha512":"dc780b5f7f0feb82ff360b2193b2d725d97b7739a4c5768d04aafab57470c1d91deaed9df40b6c844df2faef47a03cc8819e42c4b402d48652ec9f8d0b292bc0","ssdeep":"","tlshash":"","first_seen":"2023-07-10T01:23:31Z","last_seen":"2024-08-21T09:33:25.113161Z","times_seen":3,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":128,"dns":115,"connect":0,"send":0,"wait":144,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/contextual/banner/student-loans/50x50/task_icon_laptop-50x50.png","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.532038413Z","timestamp":1699096835532,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/contextual/banner/student-loans/50x50/task_icon_laptop-50x50.png HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\netag: \"31a-5a9edb120b4dd\"\r\nlast-modified: Thu, 26 Aug 2021 01:38:17 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 93\r\nx-check-cacheable: YES\r\nx-akamai-ew-subworker: 8096267\r\ncontent-length: 540\r\ncontent-type: image/png\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced\\012- data","md5":"a230a7ea9d60dd2217f03824b3fd3ab6","sha1":"f75fd384266aa57659e1a620c1e0cebb8eec68ac","sha256":"ae6dd562558a0d6e692c910de53486132faa5c6ae81d0e85d67ba7f26b789a7f","sha512":"9cd1221733eac6a2245de0f986b6f2562aa309a04c12e3abc3bd139ab60010d0fbe9f10b76ff903c6442af2be3fbd27a3c87cdf12e14d2e182f2f8655fd64b0f","ssdeep":"","tlshash":"","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.092542Z","times_seen":3,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/homepage/wfi111_ph_hph_default1_1200x532.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.573414543Z","timestamp":1699096835573,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/homepage/wfi111_ph_hph_default1_1200x532.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\netag: \"e0ce-5548803b48180\"\r\nlast-modified: Thu, 26 Aug 2021 01:34:54 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1484\r\nx-check-cacheable: YES\r\nx-akamai-ew-subworker: 8096267\r\ncontent-length: 57550\r\ncontent-type: image/jpeg\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":57550,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x532, components 3\\012- data","md5":"f493d321f008d9aaac419fd8827beab5","sha1":"a1fdab6997c6d1b1cca4988e95a4e73adf0ffc60","sha256":"172b637e7559c7d6c2d3dbe28cd5d921d27e63ccff5298481cfc0918508b6e75","sha512":"9b33f7a94e0627f0f55017b8236e34ad6c1b6bd90458ee3c9cb5c55b0409ffa50d28debe6ca2b29a6a4a30c6a3489d3f567f99c305416f1219dbd6e8ec5fc85e","ssdeep":"1536:etyXPwjT+btH+IZz7h4kGYhZNy7VZkQ671WB4g+:i2g+dBGkDi+Q67keg+","tlshash":"63430259b87fbc636ccb662f6a404c6c426dd79bbd704b0ce990b540419033bc7fa995","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.099412Z","times_seen":6,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www17.wellsfargomedia.com/assets/images/css/template/homepage/icon-marquee-dot-inactive.svg","fqdn":"www17.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.27.78","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.897700897Z","timestamp":1699096835897,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www17.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 14 Apr 2023 00:00:00 GMT","end":"Sat, 13 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1","sha256":"18:D3:84:76:02:D5:5C:F3:D3:59:E3:2F:D1:E3:A6:91:83:82:D1:1D:0E:C2:C1:31:85:53:77:FA:E7:12:7E:1C"}}},"request":{"raw":"GET /assets/images/css/template/homepage/icon-marquee-dot-inactive.svg HTTP/1.1\r\nHost: www17.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wellsfargo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\netag: \"5c81bc53-24b\"\r\nlast-modified: Sun, 01 Oct 2023 12:46:00 GMT\r\nserver: Akamai Resource Optimizer\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 297\r\ncache-control: max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:35 GMT\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":297,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image\\012- XML 1.0 document text\\012- XML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"b5f500aab7ef4ae3bd9348b6cc36732c","sha1":"7f91b68b496b48bfa8f76712f7a0b8d37a37cc10","sha256":"16b5311ddbd849fd1808d3d855f79d9640417d7c65714ffec6f6bb6f17416883","sha512":"492e502e49bb0eca01dc5d177052b33a900037adf9364b3778e696b13b4d0ffd2658d67e03fa3c6dd47b6c6d9cdeb4f82f37b2812c0f931434296e8c25b12008","ssdeep":"","tlshash":"3bf0ac2803a988345611c721b3b8f1d24a7a50cb83cd15a8b4832925eb281f708672ad","first_seen":"2023-05-28T15:10:43Z","last_seen":"2026-04-06T22:53:45.034117Z","times_seen":10,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iframe.arkoselabs.com/9B8ED233-984B-4DE5-A7B6-3A370D9FF48B/index.html","fqdn":"iframe.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:35.909369206Z","timestamp":1699096835909,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /9B8ED233-984B-4DE5-A7B6-3A370D9FF48B/index.html HTTP/1.1\r\nHost: iframe.arkoselabs.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\ncontent-type: text/html\r\ncontent-security-policy: default-src 'self' iframe.arkoselabs.com client-api.arkoselabs.com; connect-src 'self' iframe.arkoselabs.com client-api.arkoselabs.com; font-src 'self' iframe.arkoselabs.com client-api.arkoselabs.com; frame-src 'self' iframe.arkoselabs.com client-api.arkoselabs.com; img-src 'self' iframe.arkoselabs.com client-api.arkoselabs.com data:; script-src 'self' 'unsafe-inline' iframe.arkoselabs.com client-api.arkoselabs.com; style-src 'self' 'unsafe-inline' iframe.arkoselabs.com client-api.arkoselabs.com;\r\npermissions-policy: accelerometer=*, autoplay=*, camera=*, display-capture=*, document-domain=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, midi=*, payment=*, picture-in-picture=*, sync-xhr=*, usb=*\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=UNdd5zMqyHrnBRnU0AxH_cm41k3VX086QbKCTatiZFk-1699096835655-0-604800000; path=/; domain=.arkoselabs.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 820c77f6cfbdb4f3-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":19019,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (2526), with no line terminators","md5":"5f73c1585a248877599d99037088541a","sha1":"bd919e5df31c86401d0f5d5b369d9c2ee2a28d19","sha256":"f32a9cc13aee0d99cbfb89f8448b13c515e625d82379a50825c12d844e9f2e13","sha512":"de2c6c9bad6daa084c9b9752a0dd85af8f87e7f0dd23a5c8adb45b37d152a6a061aa535eb1ba7bde21db9fd47bb1a1c39c031bda6f6cc67888e7be4d9a5edf95","ssdeep":"","tlshash":"8a5198663652683a0d54373128ea34442037b26e3c0d8e604e92fce39e67f9e17b37d5","first_seen":"2023-11-04T00:29:39Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/toppages/utag.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:35.635Z","timestamp":1699096835635,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/toppages/utag.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 22 Sep 2022 20:06:47 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"632cc057-35560\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 56759\r\nDate: Sat, 04 Nov 2023 11:20:36 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=gvN1bkB5F1DjIjppFDiqLQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56759,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9419), with CRLF line terminators","md5":"381b78b3c57c12eab98225e30a32c585","sha1":"43a9fdea9c3223c0a2ea3ddb508bcc03c928e6f8","sha256":"5f8168a3b54a5eae1e71019972943f03c83040d29020b1c04425fcc3e0f89f25","sha512":"5b0092155a9e1d38b151022895b8a1ca30195eb4894a6cefb37881861dd0af753828a872904eb867169a5a47f24fdc8511a635c05b11720c2b049e9188c5ed9c","ssdeep":"3072:c0x5l16rxc2GcrzCrOgD8kdcoRlu1bk1WAw95:c0Xl16rxc1cirOqcoTu1MWAw95","tlshash":"46243a49b2f4b13e83e571a8802f1704f27bb5571896846af168dcd0ab24d4f61b7f2d","first_seen":"2023-04-05T13:34:12Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":369,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.secure.wellsfargo.com/auth/static/prefs/atadun.js","fqdn":"connect.secure.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.34","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:36.192944862Z","timestamp":1699096836192,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.secure.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Aug 2023 00:00:00 GMT","end":"Sat, 28 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6C:EF:EE:BB:47:61:C2:5B:8E:E6:24:94:F7:88:53:E1:BB:3D:82:2C","sha256":"AD:05:B0:C6:12:10:AC:D6:D2:BC:6D:91:6C:B6:CA:75:55:A1:36:7F:34:1F:36:70:5B:10:0B:16:F9:85:B6:F8"}}},"request":{"raw":"GET /auth/static/prefs/atadun.js HTTP/1.1\r\nHost: connect.secure.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Fri, 06 Oct 2023 18:10:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65204d7a-4a0\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nAccess-Control-Allow-Methods: POST\r\nAllow: GET, POST, OPTIONS\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; object-src 'self'; frame-ancestors 'self'; report-uri https://ort.wellsfargo.com/securereporting/reporting/v1/csp\r\nContent-Encoding: gzip\r\nContent-Length: 607\r\nDate: Sat, 04 Nov 2023 11:20:36 GMT\r\nConnection: keep-alive\r\nSet-Cookie: ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly\nDCID=bAM2wgGLnPdk4+81LsOT2jxiduH9%2fq83mQ8VtH7JEMTsa3JCsks6E1%2fQ0%2fTbAG6o; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Sat, 04 Nov 2023 11:35:36 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":607,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"566dda94252f1860a7a28665c715b530","sha1":"6aa0455dc8ea41441b1f3a733985758dc40af736","sha256":"43dd833f33570535401d009e6b6f9cde54bdac4e210fc6c89cfdcfcbaa9fc903","sha512":"0f65aab67ec34437d411e7532a894dfa47bb34e0d74263e5b0feae12a37507321431bc872e49f8916bbbf5e05fa34375ae36e832e0d4aaf2aa5d9727a64aa362","ssdeep":"","tlshash":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2025-11-11T10:30:37.390843Z","times_seen":24,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www17.wellsfargomedia.com/assets/images/css/template/homepage/home_sprite_image.png","fqdn":"www17.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.27.78","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:36.342216466Z","timestamp":1699096836342,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www17.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 14 Apr 2023 00:00:00 GMT","end":"Sat, 13 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"34:8E:D5:B0:07:9F:99:05:97:81:77:30:96:DA:E2:A7:69:E6:4E:C1","sha256":"18:D3:84:76:02:D5:5C:F3:D3:59:E3:2F:D1:E3:A6:91:83:82:D1:1D:0E:C2:C1:31:85:53:77:FA:E7:12:7E:1C"}}},"request":{"raw":"GET /assets/images/css/template/homepage/home_sprite_image.png HTTP/1.1\r\nHost: www17.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wellsfargo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\netag: \"5f497e89-2bdd\"\r\nlast-modified: Thu, 20 Apr 2023 01:30:31 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1247\r\nx-check-cacheable: YES\r\ncontent-length: 11229\r\ncontent-type: image/png\r\ncache-control: private, no-transform, max-age=1633516\r\nexpires: Thu, 23 Nov 2023 09:05:52 GMT\r\ndate: Sat, 04 Nov 2023 11:20:36 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":11229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 314 x 382, 8-bit colormap, non-interlaced\\012- data","md5":"a6d5e1ea952cb751429428cbbd0dbc6a","sha1":"412169cc7c4e578e6b0b56721f503aa0e747d313","sha256":"bad076c316b96cc04b2df0418f986f332e01ff6016eab56fa116a4ef4c9ca594","sha512":"84f28f22ff66ff6ee95ad8b62d0e50a202656864421d34fcde5c11cc0e83ccd38eecb28474bb01b38a237fcc82ea69c69f915a8a8cf24c4ec06a670365c2d14c","ssdeep":"","tlshash":"","first_seen":"2023-05-02T13:09:55Z","last_seen":"2026-04-06T22:53:45.044511Z","times_seen":6,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-api.arkoselabs.com/fc/a/?callback=__jsonp_1699096836719\u0026category=loaded\u0026action=game%20loaded\u0026session_token=5011794679271a907.2827717105\u0026data[public_key]=9B8ED233-984B-4DE5-A7B6-3A370D9FF48B\u0026data[site]=https%3A%2F%2Fiframe.arkoselabs.com","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html#9B8ED233-984B-4DE5-A7B6-3A370D9FF48B","date":"2023-11-04T11:20:36.729Z","timestamp":1699096836729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkoselabs.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Wed, 23 Aug 2023 00:00:00 GMT","end":"Thu, 22 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6E:7D:85:B7:2D:33:4C:AC:9F:7B:5B:9A:0A:F8:4B:AB:6A:0F:E3:DB","sha256":"24:A9:F9:16:E0:72:02:DE:48:2F:82:04:50:78:69:6F:AB:63:97:E6:78:8B:81:A3:C2:4D:87:69:BF:63:A1:43"}}},"request":{"raw":"GET /fc/a/?callback=__jsonp_1699096836719\u0026category=loaded\u0026action=game%20loaded\u0026session_token=5011794679271a907.2827717105\u0026data[public_key]=9B8ED233-984B-4DE5-A7B6-3A370D9FF48B\u0026data[site]=https%3A%2F%2Fiframe.arkoselabs.com HTTP/1.1\r\nHost: client-api.arkoselabs.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=UNdd5zMqyHrnBRnU0AxH_cm41k3VX086QbKCTatiZFk-1699096835655-0-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Nov 2023 11:20:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38\r\ncf-ray: 820c77fd990d56c0-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nlast-modified: Sat, 04 Nov 2023 11:20:36 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' cdn.funcaptcha.com cdn.arkoselabs.com data:; media-src 'self' data:; connect-src 'self'\r\nhackers: www.arkoselabs.com/whitehat/\r\nsregion: eu-west-1\r\nversion: 2.0\r\nx-envoy-upstream-service-time: 3\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"178330f3d0c67b1f339de7409359597a","sha1":"2184f010e60e815cfaf48249affef2ed53085c77","sha256":"86ede0b4a1517ed1a01a69997335d9a6ceb406b725109cbcdee917ba8a60448a","sha512":"8cc67a6c97700689249ba66b5bcde0229c14062d7b20e46cdf20e43dabede067bd9777cdf03d9fab5ef2b7f7a4ac6e377a374a3bd2fdfbe3c48280342f2df662","ssdeep":"","tlshash":"9780045350444137c04c030cc3005f711711047d44045070f11f7007313310147fd507","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/icons/icon-hires-192x192.png","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:36.752Z","timestamp":1699096836752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/icons/icon-hires-192x192.png HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"166e-5873dab2a8a80\"\r\nlast-modified: Thu, 26 Aug 2021 01:34:17 GMT\r\nserver: Akamai Image Manager\r\nx-akamai-ew-subworker: 8096267\r\ncontent-length: 3972\r\ncontent-type: image/webp\r\ncache-control: private, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:37 GMT\r\ndate: Sat, 04 Nov 2023 11:20:37 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3972,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"028feee67027a9532419e6e64bf3aa99","sha1":"7ce90aa4f4c67a48e7fa1f1312f3c0f1a19b425d","sha256":"39f93c1ee2ab70d4ea560552617c7e7b16122fdbd5faee89741d70bae2c2b59d","sha512":"db6d68b9f2fff8c47bfcd52b9a5e810784eefa46c33a3289d5ae070d724f7124b4be5f9604dde4c70bd3a1b85e64ee60161aee0b5c611568e66ee253d8806984","ssdeep":"","tlshash":"","first_seen":"2023-05-02T13:09:55Z","last_seen":"2023-11-04T12:20:57Z","times_seen":2,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/gb/detector-dom.min.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.055Z","timestamp":1699096841055,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/gb/detector-dom.min.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 28 Mar 2023 20:08:12 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6423492c-7049c\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 138549\r\nDate: Sat, 04 Nov 2023 11:20:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=viJLqu4om38l%2fVdEaYdZ2g%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":138549,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65434)","md5":"c71e354b6a3fbb7e60e42b5cd392761e","sha1":"b0abcc1cda4144fb29550225f7c3dd0342d11fbf","sha256":"c5efd80b0945674f1ffbb895395fb45f44b6030a3d2c6380b03202e667c51923","sha512":"f44336bd68f7a3836730d2c7dfb88f7df74e559199d80d16b67bf4e6798a81e12cc32dabd000ae2dfe55e04277d14b11ab842d440c313fd2ecc844c83ad0568f","ssdeep":"","tlshash":"","first_seen":"2023-03-12T19:18:07Z","last_seen":"2023-11-04T12:20:57Z","times_seen":8,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?id=UA-107148943-1","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.056Z","timestamp":1699096841056,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/gtag.js?id=UA-107148943-1 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Oct 2023 20:05:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65400c94-19f56\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 41174\r\nDate: Sat, 04 Nov 2023 11:20:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=RTyH3l0ogri5qYWQlCzq5w%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65508)","md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:41.129583936Z","timestamp":1699096841129,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/js/wfui/appdynamics/adrum-ext.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 09 Mar 2021 18:36:55 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6047c047-b11c\"\r\nCache-Control: max-age=31536000\r\nAccess-Control-Allow-Methods: POST\r\nAllow: GET, POST, OPTIONS\r\nContent-Encoding: gzip\r\nContent-Length: 14304\r\nDate: Sat, 04 Nov 2023 11:20:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=KLSuqPYOhKBNS5TBkQZa4w%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":14304,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (32088), with CRLF line terminators","md5":"5f310e2e2a558d76b916e137aee73462","sha1":"c7ff0190c9c2c414321211f3863e9e27f32b713e","sha256":"385196f0fce7cea80c2c99d971780ecb73df9dea6e5b2d95d19df3aa849c7b1f","sha512":"57bdfce66ff89336b5c8cf25b4db3a2242d0dc18d8de96f1d7f1cf9a8a50530f942c64b69578013607230bd850c5462472f814d003142d398ab15943bda02e84","ssdeep":"","tlshash":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-20T19:44:20.596162Z","times_seen":328,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.123Z","timestamp":1699096841123,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/gtag.js?t=UA-107148943-1 HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 30 Oct 2023 20:05:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65400c94-19f56\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 41174\r\nDate: Sat, 04 Nov 2023 11:20:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=nnhyTbMJNo1RsY3Z5qD4Bg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65508)","md5":"ab34788bb0ff19e7da8ae85a28c60efe","sha1":"05756134a382e3ce923d55c033c07e91be60e7b4","sha256":"1eeda03edbc2bb72ab44077bd30e718f3a9b2a2dcb493b9cc05976a2a1d7f2ec","sha512":"01602fc7ecd215e43b0081b853a5c35618e10436bce6527fde255981aedfb701ca37deb38feb5d7ebe426851eaf90ae6fd1442c83b0c47767d05e8dfa6dc5e5a","ssdeep":"1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"dfa309d9b78a712682e3b0b4507f000ba17abd95f89cdcd4e146d5c02e78b9a017bf6d","first_seen":"2023-11-04T00:29:38Z","last_seen":"2026-02-25T12:49:52.535607Z","times_seen":38,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/target/offers?contentIdList=WF_CON_HP_PRIMARY_BNR_1\u0026pageID=per_home\u0026language=en","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"92.53.83.150","port":443,"asn":49505,"as":"OOO Network of data-centers Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:35.172Z","timestamp":1699096835172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gutaweb.ru","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Aug 2023 23:50:08 GMT","end":"Tue, 28 Nov 2023 23:50:07 GMT"},"fingerprint":{"sha1":"A5:6B:E8:7C:14:B0:D6:89:B7:A7:78:A2:C1:EC:9F:75:AC:6F:09:F6","sha256":"66:72:9E:CA:91:86:D3:70:5D:1B:8A:AE:00:24:EC:22:31:2F:8C:45:B2:D3:E6:7B:7A:E8:47:65:BC:E3:29:44"}}},"request":{"raw":"GET /target/offers?contentIdList=WF_CON_HP_PRIMARY_BNR_1\u0026pageID=per_home\u0026language=en HTTP/1.1\r\nHost: gutadevelopment.gutaweb.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/spot2/index.htm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Nov 2023 11:20:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.1.33\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43620,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58931)","md5":"c10f5bf7a60c0d644efb8791c154c12e","sha1":"4822056ffae8b8f8f620875e0c76f8a58f6a0d07","sha256":"c8b7a81857e8a6a1cced3908a3e898465f04074617a448d21da0420a2db2c4b8","sha512":"f121ecc31c3ca989e0219fa9c1c69e5a749606efc3ef0fdbeeda4b3e881f044e510d1313d0f7d0b745ad52918ec3e0668ae4c27b3b3b919bb98f7cba11616d61","ssdeep":"1536:Og5/eaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYw:O8GaQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"f4b31ad9b78a713682a3b0b4543f000ba17aad95f85c9cd0f18ad9c42f78b99407bf5d","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.157Z","timestamp":1699096841157,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 03 Mar 2021 23:46:24 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"60401fd0-bbed\"\r\nCache-Control: max-age=31536000\r\nAccess-Control-Allow-Methods: POST\r\nAllow: GET, POST, OPTIONS\r\nContent-Encoding: gzip\r\nContent-Length: 15970\r\nDate: Sat, 04 Nov 2023 11:20:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=SgPnJwRntG3m9YdMc+ZBWw%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15970,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (599)","md5":"aeccb854b0a76aa9f478e466c8011b29","sha1":"625d31cbeb8978cf2419f58d14bba92a42dbb45c","sha256":"7f0d10bc282c3d7b0eb4d7527303490f8d3b86a1c65e293c2d9f0793006441e6","sha512":"a0e4fec306ede63869b30befee8c54de38694d724ad86306587e59d641921119659852241a9316da80c56c2a560eeaa73b537a3f8725c87abd11b0be551fff31","ssdeep":"","tlshash":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-20T19:44:20.495154Z","times_seen":340,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/ga.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.226Z","timestamp":1699096841226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/ga.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 09 Sep 2021 17:30:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"613a44c0-c025\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 19477\r\nDate: Sat, 04 Nov 2023 11:20:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=LTDUBjlCHX+Rsy94mX0h%2fQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19477,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (49163)","md5":"8402e9ebdf9290c018b0617018227681","sha1":"2d840fcd6c3008d9aca747ba0ce056b496db8e1b","sha256":"0b2af045acafbdf14516bf55f310568036ace959946d16edb1acebcd58029d22","sha512":"45e7359043e0076da916475f5294e62f139c85fe42cb0d53e1dccc08e8dcb39e717b3c3d4b291b21e059fe760bfb4ec2ae224ec06744df9b25b177784a3c9d9b","ssdeep":"","tlshash":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2025-11-11T10:30:37.393011Z","times_seen":27,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/assets/images/global/s.gif?log=1\u0026cb=1699096835033\u0026jsLogging=iaCallLog","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"92.53.83.150","port":0,"asn":49505,"as":"OOO Network of data-centers Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:41.266506833Z","timestamp":1699096841266,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gutaweb.ru","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Aug 2023 23:50:08 GMT","end":"Tue, 28 Nov 2023 23:50:07 GMT"},"fingerprint":{"sha1":"A5:6B:E8:7C:14:B0:D6:89:B7:A7:78:A2:C1:EC:9F:75:AC:6F:09:F6","sha256":"66:72:9E:CA:91:86:D3:70:5D:1B:8A:AE:00:24:EC:22:31:2F:8C:45:B2:D3:E6:7B:7A:E8:47:65:BC:E3:29:44"}}},"request":{"raw":"GET /assets/images/global/s.gif?log=1\u0026cb=1699096835033\u0026jsLogging=iaCallLog HTTP/1.1\r\nHost: gutadevelopment.gutaweb.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/spot2/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Nov 2023 11:20:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.1.33\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":43620,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58931)","md5":"c10f5bf7a60c0d644efb8791c154c12e","sha1":"4822056ffae8b8f8f620875e0c76f8a58f6a0d07","sha256":"c8b7a81857e8a6a1cced3908a3e898465f04074617a448d21da0420a2db2c4b8","sha512":"f121ecc31c3ca989e0219fa9c1c69e5a749606efc3ef0fdbeeda4b3e881f044e510d1313d0f7d0b745ad52918ec3e0668ae4c27b3b3b919bb98f7cba11616d61","ssdeep":"1536:Og5/eaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYw:O8GaQaOYw58ISTT4esfbw3h9N+rKW","tlshash":"f4b31ad9b78a713682a3b0b4543f000ba17aad95f85c9cd0f18ad9c42f78b99407bf5d","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/ec.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.361Z","timestamp":1699096841361,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/ec.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 09 Sep 2021 17:30:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"613a44c0-aed\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 1313\r\nDate: Sat, 04 Nov 2023 11:20:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=KQRk9q2%2fDCoq+AoyJh6YWQ%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1313,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2771)","md5":"0ae62a83927125e9b9dfa97f89af9d3f","sha1":"efb68f49f2b9b6b5567bf26a17015ede289e429d","sha256":"618688d9849fef712931832c71e01be145d1791d6da917a702ab86a74ce66089","sha512":"f568efba8e55b52e66baa9ad4d9e3ca8fc0b95b002c57583fd58701c7fff2424a4dd81cdab21a4f8fc1ef5b27a691cc054fd434087f4958197f45c7625d5f0cd","ssdeep":"","tlshash":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2024-08-21T09:33:25.148754Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wellsfargo.com/tracking/ga/ga_conversion_async.js","fqdn":"static.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.359Z","timestamp":1699096841359,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Sun, 29 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D5:62:5F:81:10:26:38:2D:EA:E0:CE:CD:E0:C3:1D:E9:E6:4A:C0:3D","sha256":"77:A7:44:2A:1E:CA:1D:B9:4C:84:B9:6E:B9:9A:DD:B6:D3:56:59:15:66:A0:A7:3F:D4:D4:B0:13:A6:09:3D:36"}}},"request":{"raw":"GET /tracking/ga/ga_conversion_async.js HTTP/1.1\r\nHost: static.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 09 Sep 2021 17:30:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"613a44c0-8c31\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: max-age=1800\r\nContent-Encoding: gzip\r\nContent-Length: 13593\r\nDate: Sat, 04 Nov 2023 11:20:41 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: DCID=3weREYxpgFBidN4SbK5dfg%3d%3d; Domain=static.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13593,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (35846)","md5":"0a40602db7616a31c9da4548ee920190","sha1":"878e01cb0c90cb247aabc137327655a6fcffcbd5","sha256":"6c771bd1c269646a76015f2f6410a40c031e5adea88f665bfe9ae15a972ab6ab","sha512":"f300ef35835ccfa6cde375b24bd2dcfc8374d6e698e857431bed0404d5dd3634e09c92a0efa7f2015b92a80831c06ae7363f2ebf8407854e04d2970b8363eb48","ssdeep":"384:y8QkSSXI2OCj27cj1Dfo2Y2rJLO+Pv5H9AeHAmvApNkStktL5/CohDAI5jUWZ1V0:y8/Sip1g+zAL1NkW01jZUT0dX2knK","tlshash":"3ef209caba45b06bc3a3a1a4217f4907f37e9d96a888d4d0d941d4807d34bdd02b7fad","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-02-25T12:49:52.55026Z","times_seen":45,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-api.arkoselabs.com/cdn/fc/assets/ec-game-core/bootstrap/1.15.0/standard/game_core_bootstrap.js","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html#9B8ED233-984B-4DE5-A7B6-3A370D9FF48B","date":"2023-11-04T11:20:36.658Z","timestamp":1699096836658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkoselabs.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Wed, 23 Aug 2023 00:00:00 GMT","end":"Thu, 22 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6E:7D:85:B7:2D:33:4C:AC:9F:7B:5B:9A:0A:F8:4B:AB:6A:0F:E3:DB","sha256":"24:A9:F9:16:E0:72:02:DE:48:2F:82:04:50:78:69:6F:AB:63:97:E6:78:8B:81:A3:C2:4D:87:69:BF:63:A1:43"}}},"request":{"raw":"GET /cdn/fc/assets/ec-game-core/bootstrap/1.15.0/standard/game_core_bootstrap.js HTTP/1.1\r\nHost: client-api.arkoselabs.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=UNdd5zMqyHrnBRnU0AxH_cm41k3VX086QbKCTatiZFk-1699096835655-0-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Nov 2023 11:20:36 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 820c77fd28a856c0-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 4623\r\netag: W/\"b1e114d58a67d4fa2e47fdc3b7255c5b\"\r\nlast-modified: Fri, 06 Oct 2023 00:37:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: 7cqbZx/Z7GF+uPh5OETrGIDVJ+m7k+vz9K+130yI9qIskcgLc2j0n/RIZFeRALtvwESd2EL0HVYMCTZzmzkd3w==\r\nx-amz-request-id: 4ZQPF7R7K6096SFG\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ycksOfmrCoR78FR_O.u9o3G0UzYMZwYw\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33526,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (61894), with no line terminators","md5":"b1e114d58a67d4fa2e47fdc3b7255c5b","sha1":"bd002741d8fd9d1ce75c2d06490bc8bc88930171","sha256":"b0673438702fadbcc093b00e83eced5fea967161d4dbdcf88b6900dbb48062f8","sha512":"34d512dfbeb898d01f949455f340d95b229c51a237573e44c3f0dc968b37318f24cfe51018c5f337aafb187b859bf40124765769be5d8c903c7e0b1c0b727fef","ssdeep":"768:y9Sd7D6Uq57iUUNSwdDQHn0qsT9PGAwK3lC6uKTDk8Z3JkL12jXn:yaTqNilYwd8H0pTLwmJTDk8Z3au3","tlshash":"b053a48df6c1b4e103f764e5416fa60ae17a6a45b84ee5c1d2a5e0d0ecbca4e5027f3c","first_seen":"2023-11-04T00:29:38Z","last_seen":"2024-08-20T21:01:47.323972Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/homepage/redress_414x240.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.040Z","timestamp":1699096841040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/homepage/redress_414x240.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"5c756893-7595\"\r\nlast-modified: Sat, 04 Dec 2021 22:07:29 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1071\r\nx-check-cacheable: YES\r\ncontent-length: 18586\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:41 GMT\r\ndate: Sat, 04 Nov 2023 11:20:41 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18586,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 414x240, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"029d7823bd277819fbb52085b20b7935","sha1":"0511366bbbf70266edd2036d0a29b169b29820ba","sha256":"37822f946f1b79d00138a6e027d921492874dc7a79882dc5934277cccbd194b9","sha512":"fc4ed32e0d719162f305d40a447f57ee108b5d60a6878fbee6bf0a7f12078064ac7d12d8bdafe0bf2d19ee869140123fb0a4248a51e765748d4530e06fd5ccff","ssdeep":"384:zJRC0tqeE72c29yRagszbomvD+lcafjQW6wBdxEmwpaAm3FZ59l2lq:zptq3of4DKgxxwpr2zlOq","tlshash":"a582e1541bd54aca97d31ae9a8e74292232761433f1c9dc8bb8312c4a84336523d4db3","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.142631Z","times_seen":6,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/homepage/three-men-volunteer-house-414x240.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.042Z","timestamp":1699096841042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/homepage/three-men-volunteer-house-414x240.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"5eee-5548803e24840\"\r\nlast-modified: Thu, 26 Aug 2021 01:32:08 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1034\r\nx-check-cacheable: YES\r\ncontent-length: 24302\r\ncontent-type: image/jpeg\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:41 GMT\r\ndate: Sat, 04 Nov 2023 11:20:41 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24302,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 414x240, components 3\\012- data","md5":"00ef48d2553f9199f1a55645a2a2fb73","sha1":"530a839844ababa70273cd6867a42fc2cf84ffe4","sha256":"c550a26340fc6971f4767d351ae9c987603d3f5cf3cb18e91e3164d5fdca8be5","sha512":"e162cebd62ee95166b815154c2f45bb0b41f8e38474c8c6c356692d26c45eb728fb474d4c9932edd311805e657f061c4b26492a90c8b0d945acd87a15d59aad4","ssdeep":"384:ZH2XqCmvtep8M1D7sM6ipD3H4pQdXGcWyP75/cq1yJ3uFuXLkhnN4s1KnJ8b/r6G:ZH26Cv1r3H/X93kqUuhnNsnJKr6bH/hQ","tlshash":"cab2e03fc0c3315ac92669ebd6e3472ac83edc42bf56e256e560d00659780f384a725e","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.144625Z","times_seen":6,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/homepage/stagecoach-two-drivers-field-green-414x240.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":0,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:41.536745022Z","timestamp":1699096841536,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/homepage/stagecoach-two-drivers-field-green-414x240.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\netag: \"6d98-5548803e24840\"\r\nlast-modified: Thu, 26 Aug 2021 01:41:00 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1161\r\nx-check-cacheable: YES\r\ncontent-length: 28056\r\ncontent-type: image/jpeg\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:41 GMT\r\ndate: Sat, 04 Nov 2023 11:20:41 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":28056,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 414x240, components 3\\012- data","md5":"7f0e3e5e4133007f74bc39594f8c3471","sha1":"aa4ad52e8e419a7e29e982b311a2d9e4ba6b1a3d","sha256":"96c235d6343aaa272187a96413ebbd8fa15417c7591c02cf0d79fee2e03dfbbe","sha512":"47ce7b700e28436d6f39afea89e737ca411a43181f56f9ce68bf701bc984013eb2e4d789c864ecbcc43c4cd6856093817764981c5b7b721b5e5a036102ebb4dc","ssdeep":"768:DbXdFKM7ZhNn9/U4t5g+yj6QrMlQK5Ux1TOE:NFKM7ZhnXDHX/5Yh","tlshash":"dac2f139a795239bfc18b7dd85d3c28e7e6334c6c09406011b9cf01796e69e21dbb822","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.141782Z","times_seen":6,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=9effb968-8fcf-4e30-b1be-deec1785b111%3A0\u0026_cls_v=e708c609-414b-42d2-9bb0-fac0e8d9d23d\u0026pv=2\u0026f_cls_s=true","fqdn":"rubicon.wellsfargo.com","domain":"wellsfargo.com","tld":"com"},"ip":{"addr":"23.36.79.18","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.220Z","timestamp":1699096841220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubicon.wellsfargo.com","organization":"Wells Fargo \u0026 Company"},"issuer":{"commonName":"Wells Fargo Public Trust Certification Authority 01 G2","organization":"Wells Fargo \u0026 Company"},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Tue, 02 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"F0:DF:3B:07:70:09:2F:A0:0E:16:57:29:8D:03:C0:22:C5:63:5C:30","sha256":"5B:69:FD:50:A9:DA:26:4B:6D:8C:F3:CD:EC:83:D9:97:42:DE:E1:C5:98:7B:17:22:BB:71:F4:96:8B:82:9C:26"}}},"request":{"raw":"GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=9effb968-8fcf-4e30-b1be-deec1785b111%3A0\u0026_cls_v=e708c609-414b-42d2-9bb0-fac0e8d9d23d\u0026pv=2\u0026f_cls_s=true HTTP/1.1\r\nHost: rubicon.wellsfargo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gutadevelopment.gutaweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: https://gutadevelopment.gutaweb.ru\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\nContent-Length: 1040\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nVary: origin, Accept-Encoding\r\nDate: Sat, 04 Nov 2023 11:20:41 GMT\r\nConnection: keep-alive\r\nSet-Cookie: _cls_cfgver=c31911bd; Secure; SameSite=None;HttpOnly;Secure\n_cls_s=9effb968-8fcf-4e30-b1be-deec1785b111:0; Secure; SameSite=None;HttpOnly;Secure\n_cls_v=e708c609-414b-42d2-9bb0-fac0e8d9d23d; Secure; SameSite=None;HttpOnly;Secure\nROUTEID=.cligate1; path=/;HttpOnly;Secure\nISD_GB_COOKIE=!oFMSzC1EKFfmbyVhQ33NkiEXkjJdFANxmPDvxmbCcA/1cPZIZEawmFH8KlbMTRqVjwH3JkD7BFPAHw==; path=/; Httponly; Secure\nDCID=OaSEUvla+tFKOr2vxqai7CHMpNgQck5wbFYpEiJ9waKT8SAPxOqLUvtL7wB2DF2H; Domain=rubicon.wellsfargo.com; Path=/; Expires=Sat, 04 Nov 2023 11:35:41 GMT;Httponly; Secure\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1040,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , Unicode text, UTF-8 text, with very long lines (4264), with no line terminators","md5":"c6c0040f683bfde1aeb4aaa25c928c8e","sha1":"9f518fa30764966cfc5002f6f2e00b4f8154edb2","sha256":"296c42e59588e5005eeadaf5fd72fe32a5b8dbdf129f57bc04f06c36a8386bb7","sha512":"d481806161880279ebf9600f29ae565a7db7ee735aeff97f532f619a8d41fa48c4bd86de198b42a20c5784abc1d400b4bf1a3a95b425aa819f7581f71d59750b","ssdeep":"48:Y/7xWycOB4RHqh09IqlZCCu5ouWNVp9PONHsrP:G4OalpLQo70GP","tlshash":"84916a873b436ebeca6f4ac875227f66262029032a587f04bee45f1d275f59482043a2","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":69,"dns":61,"connect":0,"send":0,"wait":245,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-api.arkoselabs.com/cdn/fc/js/6af2c0d87b9879cbf3365be1a208293f84d37b1e/standard/funcaptcha_api.js?onload=loadChallenge","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html#9B8ED233-984B-4DE5-A7B6-3A370D9FF48B","date":"2023-11-04T11:20:36.019Z","timestamp":1699096836019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkoselabs.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Wed, 23 Aug 2023 00:00:00 GMT","end":"Thu, 22 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6E:7D:85:B7:2D:33:4C:AC:9F:7B:5B:9A:0A:F8:4B:AB:6A:0F:E3:DB","sha256":"24:A9:F9:16:E0:72:02:DE:48:2F:82:04:50:78:69:6F:AB:63:97:E6:78:8B:81:A3:C2:4D:87:69:BF:63:A1:43"}}},"request":{"raw":"GET /cdn/fc/js/6af2c0d87b9879cbf3365be1a208293f84d37b1e/standard/funcaptcha_api.js?onload=loadChallenge HTTP/1.1\r\nHost: client-api.arkoselabs.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=UNdd5zMqyHrnBRnU0AxH_cm41k3VX086QbKCTatiZFk-1699096835655-0-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Nov 2023 11:20:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 820c77f92d9456c0-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 721954\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"3763ca5c6d75616a43468902aff7b465\"\r\nlast-modified: Fri, 12 May 2023 04:07:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; media-src 'self' data:; connect-src 'self'\r\nx-amz-id-2: R+F9zz1XBJIir1lW1cbPpSDsO6ByZwShhHEZmFgyM6KO8as7SBcpyb6zbHKRDgnqIJFje7+4Wvg=\r\nx-amz-request-id: PN01VHYM5S1RGR8M\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: js6Xlp6Z7xNtDrBHyzcLHcTB0YN._K9R\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62538,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65392)","md5":"3763ca5c6d75616a43468902aff7b465","sha1":"c99f810044c67e4e69687161c8bb0c94f50c6666","sha256":"0bc6e12937bf14b898184c6d4c863cd33ca09732c43d2e0a322eafc9f5c61557","sha512":"11b5a28a0eb1bb57414c433e699f12b754fd254c11557afee3b3eba3f20d58709136ae4e1cdcb6bf9454233729a0d96d75e7d1f3930e8df6d364a7f24172554d","ssdeep":"3072:wk/nh1SbqGT23rCnfTjnBHJ/KY5YuBvkp:wk/nLHG8UjnBHJ/AW4","tlshash":"f6e3b4a21385a11a05c237bb663b7deef6564b0c324cf95cf813bc56b998f6cd218d60","first_seen":"2023-05-18T06:11:28Z","last_seen":"2025-05-10T19:32:22.437774Z","times_seen":1042,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/photography/lifestyle/wells-fargo-volunteer-gardening_414x240.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.035Z","timestamp":1699096841035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/photography/lifestyle/wells-fargo-volunteer-gardening_414x240.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"6b61-590dc93c63a80\"\r\nlast-modified: Thu, 26 Aug 2021 01:41:38 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1242\r\nx-check-cacheable: YES\r\nx-akamai-ew-subworker: 8096267\r\ncontent-length: 25210\r\ncontent-type: image/jpeg\r\ncache-control: private, no-transform, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:42 GMT\r\ndate: Sat, 04 Nov 2023 11:20:42 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25210,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 413x240, components 3\\012- data","md5":"fd4ff9a0b69ea2e7564ef15fad215cae","sha1":"5e6a7918ac60e57b56f63b8452b6656cabc6b6c0","sha256":"4519a61d26f153bd19bda2ffdca5d102c56d61f6f5ef6f29727ca878f6ea1947","sha512":"1b0e647f0b56d94c1cda9971701e93311d86a1a4550a6a27a0c0d32218f11687e7d709682c8b5c1595702dedfb39ab6b1a3fcb5ab26970788b3569ce94dc3647","ssdeep":"768:OsIQXJri11aY7ANVeRI0wSRoPN1mM8nSj:JIQw1E5epwzF18i","tlshash":"d1b2d0a520019ba3b3eee0b4f69c6e894512e7817958fe2f21841f2d858e2c58dd4fdd","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.140695Z","times_seen":6,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":974,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-api.arkoselabs.com/cdn/fc/assets/ec-game-core/bootstrap/1.15.0/standard/sri.json","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:42.733094398Z","timestamp":1699096842733,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkoselabs.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Wed, 23 Aug 2023 00:00:00 GMT","end":"Thu, 22 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6E:7D:85:B7:2D:33:4C:AC:9F:7B:5B:9A:0A:F8:4B:AB:6A:0F:E3:DB","sha256":"24:A9:F9:16:E0:72:02:DE:48:2F:82:04:50:78:69:6F:AB:63:97:E6:78:8B:81:A3:C2:4D:87:69:BF:63:A1:43"}}},"request":{"raw":"GET /cdn/fc/assets/ec-game-core/bootstrap/1.15.0/standard/sri.json HTTP/1.1\r\nHost: client-api.arkoselabs.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=UNdd5zMqyHrnBRnU0AxH_cm41k3VX086QbKCTatiZFk-1699096835655-0-604800000\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Nov 2023 11:20:36 GMT\r\ncontent-type: application/json\r\ncf-ray: 820c77fca85156c0-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 6069\r\netag: W/\"61f1d31d07aee1999c72c5ef945f84da\"\r\nlast-modified: Fri, 06 Oct 2023 00:37:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: lfdGBMZXcndZjPpzY8X7GXaBvGVR6ep5/czqczLFyUatuZCrSVREWhBorVKJZimzKQTUA56Iw+c=\r\nx-amz-request-id: 4ZQNR7WX44QSM412\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5xQ1.x5hOYP_n89SfgLWMFH9JEyQ89i6\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":14517,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"61f1d31d07aee1999c72c5ef945f84da","sha1":"b908554ba1f56fae51ad2a1be0700107839a4226","sha256":"e7b795d3de77c32fc920a7af2892471c4e7edc020af7483855e57626e7becb81","sha512":"e9eb8af58a0205a5617ad137f2b19d41299477f849441fc32871d89ccc201521c5290f20ae5eddd0b9720967c98e41f767337fe2cefdba852fdc5142f0b581c2","ssdeep":"","tlshash":"90b0121c4ce0e20c5db02f847c24688c45aa0d75993174400f5c33540d469a67721554","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/as/jsLog","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"92.53.83.150","port":0,"asn":49505,"as":"OOO Network of data-centers Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-04T11:20:42.740132084Z","timestamp":1699096842740,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gutaweb.ru","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Aug 2023 23:50:08 GMT","end":"Tue, 28 Nov 2023 23:50:07 GMT"},"fingerprint":{"sha1":"A5:6B:E8:7C:14:B0:D6:89:B7:A7:78:A2:C1:EC:9F:75:AC:6F:09:F6","sha256":"66:72:9E:CA:91:86:D3:70:5D:1B:8A:AE:00:24:EC:22:31:2F:8C:45:B2:D3:E6:7B:7A:E8:47:65:BC:E3:29:44"}}},"request":{"raw":"POST /as/jsLog HTTP/1.1\r\nHost: gutadevelopment.gutaweb.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 337\r\nOrigin: https://gutadevelopment.gutaweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/spot2/index.htm\r\nCookie: utag_main=v_id:018b9a1037f200067897199f02bc05046003200900918$_sn:1$_se:1$_ss:1$_st:1699098636084$ses_id:1699096836084%3Bexp-session$_pn:1%3Bexp-session\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Nov 2023 11:20:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.1.33\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2917,"size_decoded":0,"mime_type":"application/x-gzip","magic":"gzip compressed data, from Unix\\012- data","md5":"c367acf5eb223fafadac41d7e943958b","sha1":"2aa42dccc7e20b99904ba8d2abb190e735003b89","sha256":"a390c4429d221c1d23237d006ed62b8f98e6da33f4643995e6d3f5d24753aa28","sha512":"d7f39a6554dbcc1fd459d6e717e1375387ce838c421cf45fb92bc900b0ab93792859b95970686765a50b2a8942753171fc095606568587c207ec888a810e6b08","ssdeep":"","tlshash":"79517dbfb543981a0144f8bcaf567fb012a60c2fe6444cb04b3cab1e11e11e61a1f23e","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/assets/images/global/s.gif?Log=1\u0026Program=EventReporting\u0026Event=IADefaultOffer\u0026pageID=per_home\u0026EventDesc=DisplayCMSDefaultOffer\u0026offerType=cmsDefault\u0026cb=1699096835802","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"92.53.83.150","port":443,"asn":49505,"as":"OOO Network of data-centers Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:35.811Z","timestamp":1699096835811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gutaweb.ru","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Aug 2023 23:50:08 GMT","end":"Tue, 28 Nov 2023 23:50:07 GMT"},"fingerprint":{"sha1":"A5:6B:E8:7C:14:B0:D6:89:B7:A7:78:A2:C1:EC:9F:75:AC:6F:09:F6","sha256":"66:72:9E:CA:91:86:D3:70:5D:1B:8A:AE:00:24:EC:22:31:2F:8C:45:B2:D3:E6:7B:7A:E8:47:65:BC:E3:29:44"}}},"request":{"raw":"GET /assets/images/global/s.gif?Log=1\u0026Program=EventReporting\u0026Event=IADefaultOffer\u0026pageID=per_home\u0026EventDesc=DisplayCMSDefaultOffer\u0026offerType=cmsDefault\u0026cb=1699096835802 HTTP/1.1\r\nHost: gutadevelopment.gutaweb.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/spot2/index.htm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Nov 2023 11:20:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.1.33\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6577,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5810), with no line terminators","md5":"28697200eaba532e6287fc323d96e63a","sha1":"2db42838229f2b82367d09f33d2e538ae3067a88","sha256":"619e18c697346d3aad0de6699e47c463a067a24e11b574adb462a70666d7970f","sha512":"dbf26e1e9dca4f0daa31c340515cfccd78bcdda5e39f311f662875336387d3f90c0677e9538a3959af73aacaa5e256a3f77458ce1339524f8c45b17aa2db9f0d","ssdeep":"96:YljnBY1wYroXztSdajWs+SDTMxUNFehomwUzGlXGV2eWyDhBFeRzJNIIvSIe:MnK1whXAcpsyNFcomvzGtk2G7FIzcQe","tlshash":"b2e12e6251ca207a2109919bee166b6c3cd9b0bdfe6f071172fc1d9c37d7820c92ba19","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5503,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/assets/images/global/s.gif?log=1\u0026pid=222-147047-64\u0026pageUrl=https%3A%2F%2Fgutadevelopment.gutaweb.ru%2Fspot2%2Findex.htm\u0026cb=1699096840990\u0026event=PageLoad\u0026eventDescription=DisplayMarqueeCarouselItem\u0026clist=84-146961-16~91-146911-32","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"92.53.83.150","port":443,"asn":49505,"as":"OOO Network of data-centers Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:40.999Z","timestamp":1699096840999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gutaweb.ru","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Aug 2023 23:50:08 GMT","end":"Tue, 28 Nov 2023 23:50:07 GMT"},"fingerprint":{"sha1":"A5:6B:E8:7C:14:B0:D6:89:B7:A7:78:A2:C1:EC:9F:75:AC:6F:09:F6","sha256":"66:72:9E:CA:91:86:D3:70:5D:1B:8A:AE:00:24:EC:22:31:2F:8C:45:B2:D3:E6:7B:7A:E8:47:65:BC:E3:29:44"}}},"request":{"raw":"GET /assets/images/global/s.gif?log=1\u0026pid=222-147047-64\u0026pageUrl=https%3A%2F%2Fgutadevelopment.gutaweb.ru%2Fspot2%2Findex.htm\u0026cb=1699096840990\u0026event=PageLoad\u0026eventDescription=DisplayMarqueeCarouselItem\u0026clist=84-146961-16~91-146911-32 HTTP/1.1\r\nHost: gutadevelopment.gutaweb.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/spot2/index.htm\r\nCookie: utag_main=v_id:018b9a1037f200067897199f02bc05046003200900918$_sn:1$_se:1$_ss:1$_st:1699098636084$ses_id:1699096836084%3Bexp-session$_pn:1%3Bexp-session\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Nov 2023 11:20:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.1.33\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6577,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5810), with no line terminators","md5":"28697200eaba532e6287fc323d96e63a","sha1":"2db42838229f2b82367d09f33d2e538ae3067a88","sha256":"619e18c697346d3aad0de6699e47c463a067a24e11b574adb462a70666d7970f","sha512":"dbf26e1e9dca4f0daa31c340515cfccd78bcdda5e39f311f662875336387d3f90c0677e9538a3959af73aacaa5e256a3f77458ce1339524f8c45b17aa2db9f0d","ssdeep":"96:YljnBY1wYroXztSdajWs+SDTMxUNFehomwUzGlXGV2eWyDhBFeRzJNIIvSIe:MnK1whXAcpsyNFcomvzGtk2G7FIzcQe","tlshash":"b2e12e6251ca207a2109919bee166b6c3cd9b0bdfe6f071172fc1d9c37d7820c92ba19","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/favicon.ico","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"92.53.83.150","port":443,"asn":49505,"as":"OOO Network of data-centers Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:36.753Z","timestamp":1699096836753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gutaweb.ru","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Aug 2023 23:50:08 GMT","end":"Tue, 28 Nov 2023 23:50:07 GMT"},"fingerprint":{"sha1":"A5:6B:E8:7C:14:B0:D6:89:B7:A7:78:A2:C1:EC:9F:75:AC:6F:09:F6","sha256":"66:72:9E:CA:91:86:D3:70:5D:1B:8A:AE:00:24:EC:22:31:2F:8C:45:B2:D3:E6:7B:7A:E8:47:65:BC:E3:29:44"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gutadevelopment.gutaweb.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/spot2/index.htm\r\nCookie: utag_main=v_id:018b9a1037f200067897199f02bc05046003200900918$_sn:1$_se:1$_ss:1$_st:1699098636084$ses_id:1699096836084%3Bexp-session$_pn:1%3Bexp-session\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Nov 2023 11:20:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.1.33\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6577,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5810), with no line terminators","md5":"28697200eaba532e6287fc323d96e63a","sha1":"2db42838229f2b82367d09f33d2e538ae3067a88","sha256":"619e18c697346d3aad0de6699e47c463a067a24e11b574adb462a70666d7970f","sha512":"dbf26e1e9dca4f0daa31c340515cfccd78bcdda5e39f311f662875336387d3f90c0677e9538a3959af73aacaa5e256a3f77458ce1339524f8c45b17aa2db9f0d","ssdeep":"96:YljnBY1wYroXztSdajWs+SDTMxUNFehomwUzGlXGV2eWyDhBFeRzJNIIvSIe:MnK1whXAcpsyNFcomvzGtk2G7FIzcQe","tlshash":"b2e12e6251ca207a2109919bee166b6c3cd9b0bdfe6f071172fc1d9c37d7820c92ba19","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www01.wellsfargomedia.com/assets/images/homepage/woman-sitting-chair-tablet-screenshot-414x240.jpg","fqdn":"www01.wellsfargomedia.com","domain":"wellsfargomedia.com","tld":"com"},"ip":{"addr":"104.110.5.8","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:41.043Z","timestamp":1699096841043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www01.wellsfargomedia.com","organization":"Wells Fargo and Company"},"issuer":{"commonName":"GeoTrust RSA CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jan 2023 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"4C:0E:61:8D:6D:2A:EB:77:D2:6D:87:10:23:D6:0D:0C:68:7D:57:B6","sha256":"A7:71:A7:1F:FB:FD:5E:C8:E6:9C:E1:86:C9:E7:1E:06:55:A8:99:41:DC:6C:E4:93:0A:1C:95:EC:82:A3:C1:CF"}}},"request":{"raw":"GET /assets/images/homepage/woman-sitting-chair-tablet-screenshot-414x240.jpg HTTP/1.1\r\nHost: www01.wellsfargomedia.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"596d0959-2f6f\"\r\nlast-modified: Sun, 26 Dec 2021 03:30:59 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 81\r\nx-check-cacheable: YES\r\ncontent-length: 12143\r\ncontent-type: image/jpeg\r\ncache-control: private, max-age=15552000\r\nexpires: Thu, 02 May 2024 11:20:41 GMT\r\ndate: Sat, 04 Nov 2023 11:20:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 414x240, components 3\\012- data","md5":"7785db793f4b0ec285cd998da42d739c","sha1":"2cbf945d053e086e9870a376ecc616d61713656b","sha256":"3809cf83b36ac6b2f21dc1b73e22d2e594acf734d71e348dbd7f66ea38bfc658","sha512":"90f09168265987219d19d741c2d10e07afd598d57fe334e4baa9c754eeb3716b50b00c2947d322b291a5052fc59bcf53234395800d21391c0e405c590e59e236","ssdeep":"192:RW+HgIkGohbhB5WAmWwFl+jpK0Bx75JOial6mRkZfprVV:RWqDkJInSE0H7DOCZpVV","tlshash":"5c42cf1edf343240e189797e82c79c40289e2e019de1e8fa5aca4445229827ec9df73f","first_seen":"2023-05-02T13:09:55Z","last_seen":"2024-08-21T09:33:25.144Z","times_seen":6,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.js","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html#9B8ED233-984B-4DE5-A7B6-3A370D9FF48B","date":"2023-11-04T11:20:35.906Z","timestamp":1699096835906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkoselabs.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Wed, 23 Aug 2023 00:00:00 GMT","end":"Thu, 22 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6E:7D:85:B7:2D:33:4C:AC:9F:7B:5B:9A:0A:F8:4B:AB:6A:0F:E3:DB","sha256":"24:A9:F9:16:E0:72:02:DE:48:2F:82:04:50:78:69:6F:AB:63:97:E6:78:8B:81:A3:C2:4D:87:69:BF:63:A1:43"}}},"request":{"raw":"GET /v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.js HTTP/1.1\r\nHost: client-api.arkoselabs.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=UNdd5zMqyHrnBRnU0AxH_cm41k3VX086QbKCTatiZFk-1699096835655-0-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Nov 2023 11:20:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 820c77f87d0056c0-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 898670\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"582c4d6ebf4a660c6f75dd75e7bb032c\"\r\nlast-modified: Wed, 23 Aug 2023 04:04:30 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\ncache-tag: keyless,client-api\r\ncapi-worker-type: universal\r\ncf-request-time: 8\r\ncontent-security-policy: connect-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; font-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; frame-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; img-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn data:; script-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; default-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; style-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn;\r\npermissions-policy: accelerometer=*, autoplay=*, camera=*, display-capture=*, document-domain=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, midi=*, payment=*, picture-in-picture=*, sync-xhr=*, usb=*\r\nx-amz-id-2: 8ydIBdg7zNkXQuaplwsM4LV5P/Fg4wsLnU+g8xQ/1HtLaXc6SPG+HkIdsvofgSTBXgyoD873rI2bYWKae03t0A==\r\nx-amz-request-id: C0SWEPKJYSWSW508\r\nx-amz-server-side-encryption: AES256\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112793,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-01T19:10:54.373699Z","times_seen":16014693,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-api.arkoselabs.com/fc/api/sri/","fqdn":"client-api.arkoselabs.com","domain":"arkoselabs.com","tld":"com"},"ip":{"addr":"172.64.154.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html#9B8ED233-984B-4DE5-A7B6-3A370D9FF48B","date":"2023-11-04T11:20:35.993Z","timestamp":1699096835993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkoselabs.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Wed, 23 Aug 2023 00:00:00 GMT","end":"Thu, 22 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6E:7D:85:B7:2D:33:4C:AC:9F:7B:5B:9A:0A:F8:4B:AB:6A:0F:E3:DB","sha256":"24:A9:F9:16:E0:72:02:DE:48:2F:82:04:50:78:69:6F:AB:63:97:E6:78:8B:81:A3:C2:4D:87:69:BF:63:A1:43"}}},"request":{"raw":"GET /fc/api/sri/ HTTP/1.1\r\nHost: client-api.arkoselabs.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-api.arkoselabs.com/v2/1.5.5/enforcement.fbfc14b0d793c6ef8359e0e4b4a91f67.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=UNdd5zMqyHrnBRnU0AxH_cm41k3VX086QbKCTatiZFk-1699096835655-0-604800000\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Nov 2023 11:20:36 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 820c77f8fd7556c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":145,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"6a26d99b9846a468638ffecf252b9e0b","sha1":"63a8c7e97b0ca73cd10e84f5c66fba8ec51b00f4","sha256":"ef8c383530ef995ef5d2a60084aed73fb7eb82c9467fbf29cd300b3ccb078c0c","sha512":"ef624094c962f44ce9566bc1255ed65cab61855185c0cc68744dc802a40dd5ad24c731114ac5b06f2dac77435c698bfe7a75811dab20fc4b90d5f594fd93d0ce","ssdeep":"","tlshash":"71c08cdd392cc5af52b19b16117c1fa0aa1e11a768499698a448820a0c8286a22a3245","first_seen":"2023-05-24T15:43:04Z","last_seen":"2023-11-18T19:40:05Z","times_seen":18,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gutadevelopment.gutaweb.ru/assets/images/global/s.gif?log=1\u0026pid=222-147047-64\u0026pageUrl=https%3A%2F%2Fgutadevelopment.gutaweb.ru%2Fspot2%2Findex.htm\u0026cb=1699096843837\u0026event=LinkActivated\u0026eventType=autoload\u0026eventDescription=DisplayMarqueeCarouselItem\u0026clist=84-147036-16~91-146911-32","fqdn":"gutadevelopment.gutaweb.ru","domain":"gutaweb.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gutadevelopment.gutaweb.ru/spot2/index.htm","date":"2023-11-04T11:20:43.863Z","timestamp":1699096843863,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gutaweb.ru","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Aug 2023 23:50:08 GMT","end":"Tue, 28 Nov 2023 23:50:07 GMT"},"fingerprint":{"sha1":"A5:6B:E8:7C:14:B0:D6:89:B7:A7:78:A2:C1:EC:9F:75:AC:6F:09:F6","sha256":"66:72:9E:CA:91:86:D3:70:5D:1B:8A:AE:00:24:EC:22:31:2F:8C:45:B2:D3:E6:7B:7A:E8:47:65:BC:E3:29:44"}}},"request":{"raw":"GET /assets/images/global/s.gif?log=1\u0026pid=222-147047-64\u0026pageUrl=https%3A%2F%2Fgutadevelopment.gutaweb.ru%2Fspot2%2Findex.htm\u0026cb=1699096843837\u0026event=LinkActivated\u0026eventType=autoload\u0026eventDescription=DisplayMarqueeCarouselItem\u0026clist=84-147036-16~91-146911-32 HTTP/1.1\r\nHost: gutadevelopment.gutaweb.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nADRUM: isAjax:true\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gutadevelopment.gutaweb.ru/spot2/index.htm\r\nCookie: utag_main=v_id:018b9a1037f200067897199f02bc05046003200900918$_sn:1$_se:2$_ss:0$_st:1699098641068$ses_id:1699096836084%3Bexp-session$_pn:1%3Bexp-session; AMCV_1BAA15F354F731E60A4C98A4%40AdobeOrg=-1124106680%7CMCMID%7C06834333441041693657959776554314838989%7CMCOPTOUT-1699104041s%7CNONE%7CvVersion%7C5.2.0; AMCVS_1BAA15F354F731E60A4C98A4%40AdobeOrg=1; _cls_v=e708c609-414b-42d2-9bb0-fac0e8d9d23d; _cls_s=9effb968-8fcf-4e30-b1be-deec1785b111:0; _ga=GA1.2.456420031.1699096841; _gid=GA1.2.1834651369.1699096841; _gat_gtag_UA_107148943_1=1; _gcl_au=1.1.24232567.1699096841\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Nov 2023 11:20:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.1.33\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":6577,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5810), with no line terminators","md5":"28697200eaba532e6287fc323d96e63a","sha1":"2db42838229f2b82367d09f33d2e538ae3067a88","sha256":"619e18c697346d3aad0de6699e47c463a067a24e11b574adb462a70666d7970f","sha512":"dbf26e1e9dca4f0daa31c340515cfccd78bcdda5e39f311f662875336387d3f90c0677e9538a3959af73aacaa5e256a3f77458ce1339524f8c45b17aa2db9f0d","ssdeep":"96:YljnBY1wYroXztSdajWs+SDTMxUNFehomwUzGlXGV2eWyDhBFeRzJNIIvSIe:MnK1whXAcpsyNFcomvzGtk2G7FIzcQe","tlshash":"b2e12e6251ca207a2109919bee166b6c3cd9b0bdfe6f071172fc1d9c37d7820c92ba19","first_seen":"2023-11-04T12:20:57Z","last_seen":"2023-11-04T12:20:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}