Skip to main content
Solved

Unexpected POST calls to www.fullstory.com from IFS

  • April 16, 2026
  • 4 replies
  • 52 views

NimeshE
Sidekick (Partner)
Forum|alt.badge.img+5

Hi Community,

It is noted that, from IFS in any page, there are POST calls being sent to www.fullstory.com.

This has been seen in different customer environments where no customizations present. Even in our internal Core enviroronment (25R1) has sending these requests as well. Payload seems to be encrypted, however, sending any data to a 3rd party is concerning.

 

Does anyone know what this is and why this is happening?

 

 

Appreciate any input.

 

Thank you.

/Nimesh

Best answer by NimeshE

[Update]

It seems this is an existing IFS System setting according to Behavior Analytics - Technical Documentation For IFS Cloud.

I assume this is by default set to TRUE since I checked this setting on a build place new environment and it was set to TRUE.

 

In our internal environment, I did set the below value to FALSE and logged out and logged back in. Then IFS stopped sending these requests. 

 

 

Thanks.

4 replies

NickPorter
Superhero (Customer)
Forum|alt.badge.img+18
  • Superhero (Customer)
  • April 16, 2026

Wow.  I’m really hoping that isn’t standard; it looks seriously suspect.  The site has legit uses but also some that could be used for nefarious purposes.

A quick Google search shows that it is for capturing and replaying user interactions on websites and mobile apps, which is very concerning.

Are you sure your company has not deployed something to capture things for digital experience tracking, training purposes etc?

 

 


NimeshE
Sidekick (Partner)
Forum|alt.badge.img+5
  • Author
  • Sidekick (Partner)
  • April 16, 2026

Hi ​@NickPorter,

No, we didn’t deploy any. In fact, checked this in few other customer environments as well and they have the same behavior. 

 


NimeshE
Sidekick (Partner)
Forum|alt.badge.img+5
  • Author
  • Sidekick (Partner)
  • Answer
  • April 16, 2026

[Update]

It seems this is an existing IFS System setting according to Behavior Analytics - Technical Documentation For IFS Cloud.

I assume this is by default set to TRUE since I checked this setting on a build place new environment and it was set to TRUE.

 

In our internal environment, I did set the below value to FALSE and logged out and logged back in. Then IFS stopped sending these requests. 

 

 

Thanks.


Forum|alt.badge.img+4
  • Sidekick (Partner)
  • April 17, 2026

It is enabled by default as per the documentation. Such a tracking feature should be disabled by default. But I guess it's the new trend (taking on from social media, search and AI tools) where data gathering options are enabled by default.