{"report_id":"1cbdd6fd-2705-4946-a892-7c3079a5880f","version":0,"status":"done","tags":[],"date":"2026-08-24T05:38:14Z","url":{"schema":"http","addr":"santander-invest.org/","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"santander-invest.org/","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"title":"Plataforma de trading cripto con IA en España | Santander Invest","dom":{"size":59617,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1335)","md5":"86b72d9cd203cf275cff31b8dd485b8b","sha1":"23d686466da316cdb5389cf4f83d5d1e871ce35d","sha256":"dc17d6d03a02343b006a0c9b65e2ead7a6790ca9d5546a7dd91a0afcaf07d39e","sha512":"8bb9c76d26a7b428bdb9b5d8fdfd20c88c8bca0b21e7b652b611ef7bcd8ead60aee3cd2bfc260962e26b5e0d0353463ca0c0c72617d4b720745b5fe11a7f56ee","ssdeep":"768:4wDfjmclrXaPxO6Ug41Ug4REmFx0/GygKFp:TmJxO6Ug41Ug4REm/0/hvf","tlshash":"2843862516f215b6119381a87b66bf2a7f95da03c917c911b6ec1bd10fcac82ce9734c","dom_hash":"domhash5070330f275ae10097acf566330433ad","first_seen":"2026-08-24T05:38:16.142319Z","last_seen":"2026-08-24T05:38:16.142319Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"santander-invest.org/","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T05:38:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"santander-invest.org","ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-21","domain_rank":0,"first_seen":"2026-08-24T05:18:33.530591Z","last_seen":"2026-08-24T05:18:33.530591Z","alert_count":41,"request_count":41,"received_data":349444,"sent_data":23543,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-23T23:05:01.76831Z","alert_count":0,"request_count":4,"received_data":382572,"sent_data":2224,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"santander-invest.org/","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"767c9e54b3526e8052444110bbc43053","sha1":"148271e0f12ab3b3be57d7a9782963ab25d5dab3","sha256":"6134f9db9d4986c922ff0dded66fe456e4b86367621fde0355d385485e29e246","sha512":"b5dcbeab905fc0998c2165ed3f4279a0637d158d3c9ffc7d66236ef4cc6c776b356683475b61be799def7694236c27ce9b5276d5a7ef65b2ba0ea6bf3300b874","ssdeep":"","tlshash":"abe0d8b1d4e964b091eaf176195ed5151e71444ba5486518388c0d098f440980bf7a82","size":353,"data":"","first_seen":"2026-08-24T05:18:37.048947Z","last_seen":"2026-08-24T05:38:16.173864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2e23874853a3585dc5387ebeb636842","sha1":"599af0f04787701d8db5e50faa4f46f060a3f58f","sha256":"7c0a512362d8a2a44ebbf4e16168e32e1172538b410f074b5c13a3bab7701535","sha512":"9896957b8236710e30c93435fa9d87fd6451b77c5d66ab1f41472905de1ee455dc7a89ca0a07023d27a2b9a854e4af42be4cb341ceda4ae406888121412dd0a2","ssdeep":"192:wL1r+J8n4bB7FJ/mpB+YWoLRvU/S23ZqgWyGqS0hQLdY7th52ce:ERm44bB7FJ+pB+YWoLpaGiyCxhc","tlshash":"72326325ebe721b05173f13d27df61283a7a801b0d56c9203daca7881fd586252bafdd","size":11038,"data":"","first_seen":"2026-08-24T05:18:37.051169Z","last_seen":"2026-08-24T05:38:16.174533Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f89a7c8c8956a447f1c64e2abf7e3411","sha1":"33028a30367ec4df08cd0ad7bcd344cae7aa0b68","sha256":"7a150816184c59a1376a5c781dd2b6b3db858234ffe40aebf7d985e16970d049","sha512":"08b310bda9fd84d0ae0baac276a7c62b9da250fd4a1d94535bdaaefb3737058740e432150a910be5dd35d7d40eeb4e29120357189b589e4ac84f9d8d260d4c39","ssdeep":"","tlshash":"2e21047a56623231c2af313ab74ba3553a2110432301cc01ff0c89dc5f29b76a9e7b8d","size":1147,"data":"","first_seen":"2026-08-24T05:18:37.053588Z","last_seen":"2026-08-24T05:38:16.175535Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4f951987fcc8ccf427d75412b98b883","sha1":"8be29afbb27f21a421ee15a1a9b082a222d60874","sha256":"d73a5bdd2a718d1542c2bbcd0c482c1f2615fcdab953bedc8ee0d12b72b5e96d","sha512":"3eb9ba394cb518d64de48fdce21864f30bdce2fd0e703f09046e5aafa6ad7833561579ee1e3eef39ccd15861b38df156ffe493236443f97cb0a5ccf879070dc4","ssdeep":"","tlshash":"a2a0223e00208e38ca322be3b0e222c000a0038e320220cb08eea30038f0ce0e220b0c","size":74,"data":"","first_seen":"2026-07-13T09:10:13.59432Z","last_seen":"2026-08-24T05:38:16.176094Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf3ecc13199a4a618b76ad7572664949","sha1":"e6e5a8d637e477d024a54fa3801ef4ab5d7db21c","sha256":"ede51eeaceae5a1025069fa6fe7d178ea2a334160a5030eb44da60f0d7d22535","sha512":"e84bc44d56aa95442d94ad096d96da47ebf1b6ea2521ebd94ae771c4d7c34f8f3003fd8881f7c52fc902073923775dbe3f090eb069071d49593dabfa59db7e51","ssdeep":"","tlshash":"14d05e66be9b148926630844cb7e010225944513169be410b82df6a61f71e19507d4fe","size":251,"data":"","first_seen":"2026-08-24T05:18:37.056725Z","last_seen":"2026-08-24T05:38:16.17659Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","size":29872,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-08-24T05:38:16.154197Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-08-24T05:38:16.166924Z","times_seen":2096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"santander-invest.org/offer_index/btc.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.525Z","timestamp":1787549867525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/btc.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-7c1\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UikpQWZOIuVU9iJyv6rWcIXbdkn27TPbEOxl9faSkMKMC6jxrdomlbmk%2ByJFecMCGxJvlrb6R5HAAmiHjJpxL91PpnvRCuw%2Bz5V99%2FwuodDXWoBXuXuK1wRCXB6jMB8BZ%2FajzidgGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d00cbe0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1985,"size_decoded":1810,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e31c1f49d64f1fb1b3f3da92d61da5e9","sha1":"a72735e050d12d6def6dcadc3866d8a11d87cc6c","sha256":"f22bdc2d6ed4e414edcf3796c283f205ff7cb74c3fbf472da84c913136e76089","sha512":"99f266a28f33cccf16992d322cd3e11a68d7e2874422f8bf304c9f7cb78f416b63cb1ec9e91877d590ab8f2acd645b2bb53c216195efdab3a991894b6e647668","ssdeep":"","tlshash":"b14133f5d3c4f6e0d54ed3309218b070366b34f56f259f0887e8aa96e55102d094ccd2","first_seen":"2025-06-05T06:27:24.625529Z","last_seen":"2026-08-24T05:38:16.143625Z","times_seen":246,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/stars.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.530Z","timestamp":1787549867530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/stars.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-12e8\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zW3sRs3O2qa893RirGeo2SsvcOUQGSYHB7U8MmtntNYlwTGABQ9hD75KTx9Qg4z3JcaNyz8qRq3Yc%2BEI8tcJ32ez1%2BSaw04sbbnjFogD84%2Fb9fAkfallZLlBYwFgtbQCig1JF9FxWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d00cc20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4840,"size_decoded":2225,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc97174e8145d9b88397bd7fa3465cfe","sha1":"d934b7e62b30a9db1623f59cd5556bc26ac43571","sha256":"e8312616bc73385e7b7e25037cabc5920ef526ef61cad4b0ac988314d4402527","sha512":"e4bc0c3c6a2ee5786b5267dd6bcdacf6b3eaa23531e93d06cefef5e55119c4618316e527776cc428fce871a789a64f0ffa10d7accde1378151c26bd894dfd877","ssdeep":"48:GPzbtnY+YNpQOFACEPBh3PXLNBHaeO4LVEDagpXPfQE6LSlXkOSY0KPepJwhQ6l6:KWL7ACe3PLLLLVEtH+jCWXIdQ+kcbAzn","tlshash":"eea184f1b2a6a3e4d20bfbd8da33c8b4be55097377d0db87c1e24d84640586dc898c46","first_seen":"2025-06-05T06:27:24.601597Z","last_seen":"2026-08-24T05:38:16.144781Z","times_seen":240,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/pros-3.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.544Z","timestamp":1787549867544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/pros-3.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-f32\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUuGsmlVubyJUUDq%2FBAjORZ%2Bvvwo%2BPcUyYX8L0rgEqpBWCC0Wxcx%2BvibRqjkoxBHWydb6uovhunF0urIRJAnMQYNyHZH3VFISdQ4FrnPzbS7ZZP9KOC%2BPdzkmfbOrUYwHIME70zjZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d02cca0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3890,"size_decoded":2177,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db543edeecbc620698dcfee15ef2a4b4","sha1":"9cc2a3ff148ce931784fceb50109431194308864","sha256":"4bcf4b261678812e7703debd2c45a5eeafcf87889f0187213c521531d0991435","sha512":"02659050ebe92c60bad1293d7a3ce26075e3a5fce41938a32f3b990df514248e0ceaaa849dc74e40b896dcc5e06461dc1b16e9d7e42ed0c4ef83fa176b2c1bd8","ssdeep":"","tlshash":"b88174053358a97cb93323aae7427130682239d397887288dbb22c35954d45d6fbf9e9","first_seen":"2025-06-05T06:27:24.604709Z","last_seen":"2026-08-24T05:38:16.145735Z","times_seen":303,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/kraken.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.546Z","timestamp":1787549867546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/kraken.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-9f4\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3OvTPbbZeG%2FYm9rmnRIZe7HsihaxIilauKZL0qPJiWqgJbio%2FjcZb5zWZ6iEUvRPuuR7KbRMf4PEXZ2M4HH8yLxlhk2dGkRWwHIzyhCNTpAPucwCzRN5iIvmGYyq%2FO%2BchBveqjmsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d02ccc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2548,"size_decoded":2026,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e4512518635ba7d0db27a761cda0942","sha1":"470cd87500f58efef70becdbbe7e3348ad6decfc","sha256":"83fe2d1a14e5336da34635bcd27abcd25d29b1c42bcc0cd4ad6074391a41be65","sha512":"3b42624c342b92ee4bdc50a65b312957dbd18424b9c1a2d8af6e71108ad96d5e85213ac168ca8fa50e1395c51fc7e8bc56dee4c418a25cc4ccd47cd7486870e6","ssdeep":"","tlshash":"cc5154afe7b9b158e34497e0432aa47876531cf4be22d82d96d91c5ac0d211f0c72ec7","first_seen":"2025-06-05T06:27:24.617718Z","last_seen":"2026-08-24T05:38:16.146773Z","times_seen":246,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/polonex.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.547Z","timestamp":1787549867547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/polonex.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-32f\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z09Q0x7GDBj%2FgzE%2BuAc4ruqul1LXLv0FV2%2BAEo8Gf8aQ0mYqM5zwv9vw4hAd820vy9DWKhQ8mI9nSatsimTuh0cmQCN%2F1yN%2BBjMaoT1hriS5K57AVtrevjPnn5StQ4uqcE9OTMRrQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d02ccd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":815,"size_decoded":1187,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"694d67869527cba7d4a4c98869fc085a","sha1":"ff80a8d1388b2e94b21038dd9563b571a753421f","sha256":"afa9ab62c69986474d4861fb231a34ccb172eb8309643100b791ec256f4b7107","sha512":"d10d0d85fb8a78411cf6aea3f71aa20546d5ec67bc372230c642412c3690e43684bdef7256446eeb44829386b26f116cfc66e6edac5a22f4739d13141775064c","ssdeep":"","tlshash":"940189ed6268915e1d0c97903b7ea866117b72dca101c74bb5c0a9afaa4e06f0cbb1d0","first_seen":"2025-06-05T06:27:24.682146Z","last_seen":"2026-08-24T05:38:16.147418Z","times_seen":246,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/fonts/inter/Inter-Bold.ttf","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.629Z","timestamp":1787549867629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /fonts/inter/Inter-Bold.ttf HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8yDA0BZsQ9EeyjkXk%2B0OIAiId01nw%2Few3Rtz19f4iBVLocMuzo9eCTg20esCZZoUM0XJvJku0wthAWC64OfeHt0sKXsENV6jmuhOg%2FN30AkVjMh1jFQd%2Fk2P%2F7aUHBE%2FDUTGn6JVQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d0acd90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":891,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"32c91e64f8ccb2d4f462a29521d237c7","sha1":"b2ec596381e8860de8b7565a49ecf6b1dda83c52","sha256":"84f5a53069275e93dde41d550cce5449c9447b135b7b100d44c6b07ccdbb3de1","sha512":"7d849105ca803e7d02d45623c2c4192ed550d0d6cbc6a7a7012cb56e83df499f825fb3c7bffc7be0536aa721a6ccd3cebcbacd64bdba44166e736532aa2b7245","ssdeep":"","tlshash":"2ed02b9e5043728b4922146039c125c6274d13f6f43a41a86d86d58752a853fcd9eacc","first_seen":"2026-08-24T05:18:36.998426Z","last_seen":"2026-08-24T05:38:16.148124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/header-avatar-2.webp","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.642Z","timestamp":1787549867642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/header-avatar-2.webp HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\npriority: u=4,i\r\netag: \"6a39acd0-29a\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vj6cVrpXkZ%2B%2F6vRgjrNoXpYx%2FDIOupyNu%2FSIrbGXdv3DpvFzCZz91ykzWxGWQxVIHpY65SIYCabdRHKzRD0t6d1WRsDX7bH9cvR2ngp62B9sCDCb%2BuC70AYq72nEh%2F4wVUnQI9%2F72Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d0ccde0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 666\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":666,"size_decoded":1467,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60eaa37bab2562b4e23df82d82cfcb7f","sha1":"475817ecf0b40fd41e4df7b0b96b11534801f93d","sha256":"9f779398d4bfd79a71ff5cab9d351742005229b0d3b62e29faf1a0c9c6e5fd66","sha512":"cd1abe8a0a5ae064fdd7305041bac6ddbc7fdb8709a09a666b98541716a69e02f027a4325ce550c8daef1527f58b9541b23ed9478e9c75e669efe2991641eaca","ssdeep":"","tlshash":"3001687973754f75fd960d2223de271e31015154d523b7d41fea92632605156c16bf00","first_seen":"2024-06-21T13:38:29Z","last_seen":"2026-08-24T05:38:16.148781Z","times_seen":502,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/apple-touch-icon.png","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.866Z","timestamp":1787549867866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 00:27:46 GMT\r\npriority: u=6,i=?0\r\netag: \"6a3b2482-6bb8\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Abu4wz3Z4OzVRFtfGVaGbUY%2BNpnK%2Fpw15sw10%2F0EhGbirpRLpNZ%2B2YoeTvpOOqfS9mMBSEwIo6y8K74ocynzJsDKbDA4TJLsPrIGZlT1rRANKw9JD%2FkVhmLWTUj%2BQkbquomsj6LVQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d22d0b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27576,"size_decoded":28380,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"c758cd27d87395d2ff2bd3915bc9fdaa","sha1":"cdc416b69f7c1350232927dad012dc9b7e050397","sha256":"da973e634897f95d29755362a716586f9df4f44a351c5f7d0b92e71cc20b82d3","sha512":"529a74a9503d0244c5b835eb2b5e95ca51f345bd347df42e1c802ad1bff997e3a8ee5c352f57a9ff1366c8dbfe1b79d541aa09de412182b948ce131be296bf7d","ssdeep":"384:t7lQa6kpqIBMDVPdL5XJ2fdaTenWZqz2TCfv+FXyyRi70xaobJ4gpStHRYKnAODv:tokpPO/5Z2cGIq6Twv6XwobOltxDAHy","tlshash":"53c2f24fcb6dda2ef321395b61871082c3032ca1476bdc45abc2f906d94eb6c752927e","first_seen":"2026-08-24T05:18:37.030419Z","last_seen":"2026-08-24T05:38:16.149341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/favicon.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.867Z","timestamp":1787549867867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 00:27:46 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"6a3b2482-733\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SpS4sNusIvq%2FRgG2KkGGQqY6QLSrrdh1XRT0kdkqwkDLlMjGMN507C%2BTn%2FQYt3fz8XIbd%2BUj3ffZ0RZIxx91MhC6BvBqWgSkIbqMz07zOS4vUj8j8NWLd%2BJXInpZYM0LBT7Hjkiaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d22d0c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1843,"size_decoded":2162,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8e57e6730f4998dd38a4f1e06c375e5","sha1":"f561a69f26d69cc7865b7b0ed56df963286858b7","sha256":"d0bdbc3f0c2ff5b2d0a2b205488c6784de96461a99e0e16595c314ff207a7b1e","sha512":"644281789250bfc905c0ec1bb2003279bad2b9c2ed898f26b52d2b04a234dcbfc663550663276bbf46f89502f4639e634593c77e832d7ba1d1b63f62d049034a","ssdeep":"","tlshash":"8b31f7ee6558342aa2620bc652f4b00fcc3b649ba9c4c417fdd43e5fa13d29436b476c","first_seen":"2026-08-24T05:18:37.013734Z","last_seen":"2026-08-24T05:38:16.149969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/comment.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.712Z","timestamp":1787549867712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/comment.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=4,i\r\netag: W/\"6a39acd0-8e7\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PsYdPybuvS8PUjBPWFRW5mbAsyuHYStCD7S2ie5mzv1NlzMUO6LBghX%2FxI1vOeOZFIjLwDcfhSTTxosus6FUBSfhMXU6K3Ql%2BCWMHwLk8FYPVUhyNSBUwRBW4J8B%2FvTjFPQSNI7w3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d12cee0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2279,"size_decoded":1562,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a06eaa753fbaaba9bdf0bed9cbf5ca47","sha1":"3f4f269677c9425611bf67afd7e21fa0d68df23d","sha256":"6129cb8a6e9c9c964c27cc45dd9c1a7e8da7460b660d63c509597e782fc5c70a","sha512":"e3a099078845b0321c0e3a5da0565c7028ecd49951296de1c680984e5483a82a3f0a21b57d569d04a8e841c8112ee69496ebdfb6b43f1e5a06df20ce25007b72","ssdeep":"","tlshash":"73412cd193709656940ae38db4b97d31798e88fbbbe4dcd8d3548dc759f08ae8ae0043","first_seen":"2025-06-05T06:27:24.66904Z","last_seen":"2026-08-24T05:38:16.150664Z","times_seen":162,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/phones.webp","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.730Z","timestamp":1787549867730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/phones.webp HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\npriority: u=5,i\r\netag: \"6a39acd0-5364\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JSUpP5%2Fb20m%2F4L17ID1NEKM%2BZP5QcQk76xqfVcxz8L03nVYaASs4pdOw1uhhPOlac7SUCdp5TCvF8o11sGZ3Z0%2Fle6rGGhf%2FckjaKYoLdJQaufLEVenySVrCTm87AOIqWpouLUMZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d14cf40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21348,"size_decoded":22148,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1512a6351dfe4629586371c175efb42","sha1":"bc00fdbd8ac68dd630195877639d972395523832","sha256":"c7a93e4f43651077084225d7dd30706e3601d9327b97de040c8ddee47c1a55da","sha512":"4a8c65a35767f5ab35c5249273be8d7baacf999f3010f6744cf20045cd960e02072a4d86a6561d4212647c6fa4a2764f942451db709ab630dcee5f099bf39365","ssdeep":"384:SeS41XsINxJ+lqtJHoQNVpLvcyf4OedeXHn3PU:SOx4q5NVxcWLX3PU","tlshash":"fda2e19f1fd9b32436f277046a6e39121de2d8b57ed4031788c88c8ce595bacd28f290","first_seen":"2024-06-21T13:38:29Z","last_seen":"2026-08-24T05:38:16.151257Z","times_seen":342,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T05:37:46.899Z","timestamp":1787549866899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2BT5MsquC9TpZfUMGzWmu1NQLZwzt9lADzoF%2B91je74jsuHk6Bi8nJU6qUD7cGCql2zfYnqF1rGbz%2Bp7focEPEUTVJzF2i6XG22Pyve4tkvEvO2z61WyNeMhoQeY3IIedNjWb%2B4rfg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a30001cc3c7b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"d36t0v5sdjpeq2blh0miaij0vk","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58943,"size_decoded":13692,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1335)","md5":"5aff99032534643f731e43e30cedd412","sha1":"8c81013680532254eb32ca01bc72d053ced24491","sha256":"29676bcf9a61b06e294cf5ec372b78aecc7fc0dd76bc55a0335a9d9aeb6eacbc","sha512":"3acc0d64d45b53b426cff5698e548f46151f63c238a011ef32daaf2526402f131ac84e79c11c2f0257f9c4b68fef01436a58d2f8212e3835417f1d318d4cbf91","ssdeep":"768:ZwEqjmclbXaPxO6Ug41Ug4REmFx0/GygKFX:emfxO6Ug41Ug4REm/0/hv1","tlshash":"0b43972515f215b6119381a87b66bf1a7f95db03c917c911b6ec1bd10fcac82cea738c","first_seen":"2026-08-24T05:38:16.15191Z","last_seen":"2026-08-24T05:38:16.15191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":5,"connect":13,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/glow.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.704Z","timestamp":1787549867704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/glow.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=4,i\r\netag: W/\"6a39acd0-1cf\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evwpttyAFTL4jr9aNnQYLge%2FNMhDmhibHn2J5t5YMKXDJkNV%2Bkfza%2FfCbXUsvkHu1N%2Fn83NgZom1lP1pmanv7p1EYKF6hiakxlL4KWmn3bb2pQLYJ0mWuho600rPzrYbDvCEx6uXKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d12ce90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":463,"size_decoded":1096,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cef5ec07244d6c4bf4ee119da56dcee","sha1":"fea488487df53d78cc73ff551cbb5f3931a263fb","sha256":"f10503863a97f428aadb6813c2da886c675074dbc2ea3c9bf8b1aab9bfb1d4a6","sha512":"e75c82845ce0fba6b2e420f2a2e9df58e6b83e3966e0b07e1746714da4f0b184e0c3fd7d496a2b9dd9352fda4cae3c86b90a44990b29b3cdeeee933dbca81eda","ssdeep":"","tlshash":"63f05c79d3ada829ff04c04cd5eb8444277e81a392848146f1819f6f44a4c9a3d8d3b4","first_seen":"2025-06-05T06:27:24.623989Z","last_seen":"2026-08-24T05:38:16.152961Z","times_seen":324,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/amancio.webp","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.727Z","timestamp":1787549867727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/amancio.webp HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Jul 2026 10:00:40 GMT\r\npriority: u=5,i\r\netag: \"6a6094c8-74be\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bK3c4pX3IPD7KMm383Z8v68Ac9nHKxycJ8MtdoU3fpc5asKqGh43b5vK9I1UrPLnBZBBbe0sXoCr5FxCP5EIyWhPF2zRAvf5bwwPLMyfCUTBTL%2BGUxQKO%2Fy%2B0o%2BYoJjRlNqc4uA25A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d14cf10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29886,"size_decoded":30684,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3a5c39bdea79312cb5f0079ad853c907","sha1":"53dcf6b7ed8b9952e1422fb167d1aa97a639ddc7","sha256":"7b7558b6547cfa94150612b8849bca093a3b3366222ee7f7dd502d9946d04262","sha512":"34e7db1667329630bedee0d69b4443d83468c5edff26e26d94e145d36c753c467932b13cfa3d2c8bede42102dded224a3f354bb507fd6de1588cc32b4fc0f591","ssdeep":"768:jCfics6s8nXD85yZGpaTq29GHSl/kIM/dYxaGV:jCaN6BnXD4yFWRwsR/GaGV","tlshash":"7bd2e1426600e43764cec25211c3d2f81d9965f7fa5a32f24eabb39f58c0b73bd25916","first_seen":"2026-08-24T05:18:37.002302Z","last_seen":"2026-08-24T05:38:16.153616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.515Z","timestamp":1787549867515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"74b0-Fu5cDWBeWjC59YEH297UqXupv6I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\nage: 1738839\r\nx-served-by: cache-fra-etou8220042-FRA, cache-bma-essb1270021-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11469\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29872,"size_decoded":12265,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29515)","md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-08-24T05:38:16.154197Z","times_seen":457,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/usdt.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.527Z","timestamp":1787549867527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/usdt.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-490\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ApvqAvActAMiHoeO6tXOEil1bkBZKvZPjmN0D8SN0OzoobgtcsmjqsjAHoNqSfpkRo0uR%2BxHEz18NQEUtvbW%2BmZfz4AXcKvuJxezbl%2FYz2UwBy%2FpfttKyJUeEAZCIi8W0mK4XivkQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d00cbf0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1168,"size_decoded":1400,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce179a2ff3fabd5b3197822f9b8a7b04","sha1":"1f8094a36b01f3e012436f67300ee6abc84c48fa","sha256":"250cc03fa5e2ba77000e7253f63478ec0669ae6c37145e4ea709dafd8f5e69cc","sha512":"36ed803b0132a378fb136cacdc3f6801f60df479ae4aa0d12737cc01d87244e42a60b32e6b0bfc100c57cb2a45bf47c3bee24bedbc2debb21c7da00f3887332c","ssdeep":"","tlshash":"a421e1d4b1cca0bab105b3e4d27a64f63af324fb7614c75486f43da9f0101ad1c8ad66","first_seen":"2024-08-19T18:25:59.872659Z","last_seen":"2026-08-24T05:38:16.154813Z","times_seen":247,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/binance.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.528Z","timestamp":1787549867528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/binance.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-3f2\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CfqJPzj4tqOp2trbh6gW4K1pbXgBrJcjMX5d%2FQFoNDNyZZshLg203fiP3fF6RiA2FLfIbJ5qHnOyy1H3lxWCG1wrmY9aeenJ6SdAYBDTX%2FODVmAu%2BtNy1tkVmoJhkH43E%2FQu3DVHAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d00cc00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1010,"size_decoded":1330,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e57ebd7b23add614122084bdd819e198","sha1":"f934cb473117dc9095c778a994f868e9c928ead0","sha256":"17fcfc2e298768b950b40c819aabb99488903e79230f66754fbf04cb4f1a5d9c","sha512":"cf810e6c4ee7d6f63d4b6bd4f344c059a6cca60d178eeb1984206206a6d01da89c1724e410d1c94985bac1781bd01e394e6d3b258a8c1e88d961e79ecd7d5790","ssdeep":"","tlshash":"e01114c99101a4926d0b4b7c893b54f111f21dca9c2eca1da7f05c6d68b246f4c7fd91","first_seen":"2025-06-05T06:27:24.65892Z","last_seen":"2026-08-24T05:38:16.155552Z","times_seen":247,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/info-arrow.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.549Z","timestamp":1787549867549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/info-arrow.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-1d0\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DS7CBrCnQOZAg7WD73Lu7dpDf1guw8zbWl08OhLlulVORj5HGgPHs89Whtjn8l1MgKoq7jn%2FQWYC%2FvuUqoCRviHKFLEFeE9oBtJqRKuWko8iUUnHpw4SqralC7SfGNg1lunSkhEXWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d02ccf0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":464,"size_decoded":1080,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b360510b74b51926215399116c590fd","sha1":"2394babce41fc6b864a9b3667e2f23c1b52ff4b8","sha256":"7bc40bec63129ccab5422f4f6b03be76894f6beabda2d5bc10581cc1a06addad","sha512":"45b2d223b17ca84f61a09fd8620e2d489e0ef0e6f4699c7be0d39206ef4757adca8e40481fc70899f76617800155bbafdd7a74a7a05a6e28afadc401b7b8a8de","ssdeep":"","tlshash":"58f05c4e301456c2951df771f52cd01e2c436cc37d81551dee546aeaf2c12646e85de8","first_seen":"2024-08-19T18:25:59.871149Z","last_seen":"2026-08-24T05:38:16.156175Z","times_seen":281,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/loader.holder.css","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.520Z","timestamp":1787549867520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/loader.holder.css HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a39acd0-6c9\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvxY%2BIRMBKMb6LuuLR5rzmG8cF7%2FipgKaqionak5O%2BkX1UtDBr%2B%2FzSzefWNQJMHhcKqq8sDo9m18DwQDceJI8Z33xRiTj5K2xPGIxkmbjWAA6593MPt2PPWpBZUT%2FyTnn9FKUan6bQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001cffcbc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1737,"size_decoded":1296,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"312d22b3842df51de14bcf55842b4616","sha1":"761be37b42f1b598185389112533d3cf5ac811f6","sha256":"c2e5ee8ff6477491e00430caa5805a7b959a4e3a5b8ebdceeb52b71a0e915e3c","sha512":"748d4341b5b253524f328bb170eba28726577bb9c22e3e931d372e1c00ec017ae7a8c356e91bd673b5b10f4d1b18169641c6448f7869214c8d8bc6399ea6cbe2","ssdeep":"","tlshash":"4831cd529902ca884932e374cfe10969c1646137a69385f9f79c108e8ff649ccd69fdf","first_seen":"2025-07-08T22:31:33.052248Z","last_seen":"2026-08-24T05:38:16.156763Z","times_seen":17,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/ana.jpeg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.728Z","timestamp":1787549867728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/ana.jpeg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Jul 2026 10:00:40 GMT\r\npriority: u=5,i\r\netag: \"6a6094c8-7c7e\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHkXkSNQZooHIpB8gQaKufAAwze02c7MiNwpXEJ%2B8SdQdNHYE6pwqEod8IVoKoIWeAo4%2BqHPLOMcr7y6RJ%2FYkSpfP7I4FIppGdhsIYsE2QSWg%2FlkKaDvDnBOT%2F6ZgqL%2FQwQf9wxi1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d14cf30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31870\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31870,"size_decoded":32672,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 365x547, components 3","md5":"2739f8d5aac2922aeb77a5eac4c694f6","sha1":"b20f7d0559885bef1ca6a9e31484305ff508163b","sha256":"77d12205f9cbdb6d1a0629f4d79e1e2e2b8550853f05787b31256570442998b7","sha512":"b42916c7d1369fbfa097aed2f4e5e3087a38e768cbf8b2dd297dc8136663b3822dce4061fff72f5f53ed9792ee8d46598e097ceba05b0fd87bba3e98b827157e","ssdeep":"768:rv7h2fHRGaGQHpEWkNpUKTv/J8SSNHBq8fs0TLuW5S:rDha00JXkNPTp8dHk8E0TU","tlshash":"20e2e03c292bd038f79a4446e66160f5c35fead615ee306b15cd779b76ca9e48b020f0","first_seen":"2026-08-24T05:18:37.021433Z","last_seen":"2026-08-24T05:38:16.157874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/style.css","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.313Z","timestamp":1787549867313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/style.css HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 23:17:36 GMT\r\nvary: accept-encoding\r\npriority: u=0,i=?0\r\netag: W/\"6a42fd10-99d9\"\r\nexpires: Tue, 25 Aug 2026 05:18:02 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mANvxbZsdcK7VvjTBBOK1f7JyG4SE5DhNcmyf0LTTQBttDhC6QQm5mKkBpLIna7NnHJuEIcqN00v8vijRQgzOrjGgqIXwpd5Eu%2BYgiS8nFLv2yFvOl0ezDFApB%2FsxmV18Ar7I2%2BtcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001cebca90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39385,"size_decoded":8339,"mime_type":"text/css","magic":"ASCII text","md5":"b7be738ca765add9ceed060566702b06","sha1":"2b226413091cea1f9b83ab9c981e8d0fc87e770d","sha256":"d5bc7b823067d7987ccb69dbaf498ee7f5363feb669403d962433cb25c2b25a0","sha512":"d7e4a33fa510a8cf863a97dc5aad735a6c7beefdfb5dc99bc76bc98edc6120eb20662f4dbc064151ad15761ec6e0cecf4d677ce11fbd143ceddbbe2519ebc731","ssdeep":"384:psKno3WuhgyH8bXWqu6kO5lxCuZfF3km7KEwK0e6oeIPmFPYFAKk:pdnceWqu6z5vCuMGr6oPPmFgFlk","tlshash":"2303a80459a684117c2a18f5b34fbe987b2e1089de1ecdaebee510248fc93b15de5f4c","first_seen":"2026-08-24T05:18:37.015527Z","last_seen":"2026-08-24T05:38:16.159243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/header-arrow.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.529Z","timestamp":1787549867529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/header-arrow.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-1d2\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dRvXarZNoNyfVrdDFOnOgEfkDvXMNphq4z4ND5SFJccjAmxD2cfd8TzVu7lMbdE3RPI1uVMwXxwWFfODUGzoKT7By%2BgwLnYutpbnQH3tgnAUoLYklD2FYuIuyDcgverBIsHZxrVRXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d00cc10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":466,"size_decoded":1082,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63051981db45788eba652923477b47cb","sha1":"b3455c370b9a725a846405297e8f3bf3de5a64dd","sha256":"08c0a2f627a1fe480642788cca5aae36e3159d811a490b0f02f8985a6763e2cf","sha512":"ac7353bd240759c7dd8bb6f87cff9cb5b4d5a30326321d237423351851aaebfb3b0fa826938d96ba6e5ff24cb954e4f3fba1f95f27eb3dc70c5e87c9a6738307","ssdeep":"","tlshash":"8cf027b8d30c880cfc4a10d6f0756c4b45e39b55df4843c1a1505c5259e64a64c7aedb","first_seen":"2024-08-19T18:25:59.874364Z","last_seen":"2026-08-24T05:38:16.160262Z","times_seen":280,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/payment.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.535Z","timestamp":1787549867535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/payment.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-9787\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hIpWruBsFqoRGuNMLJ2k0weJCiBE2aAjonY0jQqu%2FZEdEyoqT9FAypEnF3hhmqkHhvPUKVgWMdOLw5aF6FejtLxju0bwymBA2uTpyK5YfyPjZp2H%2Be6C%2F1kbBDg8hRJWc8A7riN%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d01cc30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38791,"size_decoded":15627,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c173702907cdb121d126a413b0b41ec3","sha1":"fffe7cd5348871e554c27518f25f992f90cdf154","sha256":"023a2d63e219cb6af607abfc451d4605e66c400832f9b065a18903a84684a6e0","sha512":"4a5b91f9796b5f31fd20c325631681e0d189ac40407789e09311e352bee4b5592833832f557f041e74e1d170114e62647a532b8a3b6fb6f87082ca9114d8d292","ssdeep":"384:oDfRWvdU9k564GmmM3kNu1cs+SMaxWzKQhIcAxxoT/xWuY0gB2xze9iPklALzBH9:+fkVUf4GNSz9eIcmI56/GT7Gq6k/Zx5","tlshash":"17030aeebbf563f8c440ebf66f4084b87e2765f71fa9c52cc7a99e289a8141c4c54841","first_seen":"2024-06-21T13:38:29Z","last_seen":"2026-08-24T05:38:16.161158Z","times_seen":246,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/ltc.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.539Z","timestamp":1787549867539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/ltc.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-3ac\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPTv1IfsOGDpwr4MxcUrBlrVTgeIZQRPilF1Yk1k0xVSqfmEe3Rd%2F94eImtum%2B4qDxmmlwWZzHXweQmerLasXP7jCfFZRGxYy3%2BS68dJi6uj8ikg1QcKJ383d9zo0hrdpq8kIa69Dg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d01cc60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":940,"size_decoded":1361,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01724ccdfdc1788e3cadfed16381ce9a","sha1":"b35a991108061306c9611d1847c7d21ac559148f","sha256":"f0c491a330a14edef9484986a542129517beb7b92c95190526011c2e671e0368","sha512":"f83f2e5aedc7347a487cbe3fb1d6a457bf4bb689a1e10d188d5ab09b2c8ad5774b796883766fa19b40269c752038f95c2ad7a8685bd55cac85f3a7d2d6db8692","ssdeep":"","tlshash":"f81110f6b7e8e2a14a085370d13eb4f2b05574f12e72869992e12f16fa0205d6458960","first_seen":"2025-06-05T06:27:24.587958Z","last_seen":"2026-08-24T05:38:16.162053Z","times_seen":245,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/bittrex.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.548Z","timestamp":1787549867548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/bittrex.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-278\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VtdSOSOSI5E0A5UGIyiGmVPfV9pMcb86p%2Fyds3GoV%2B3KwMIUnd6RT8n0gq3nyiYpQAm%2Fo8Ldlxo8QdsO1T5nK%2BY2M5UTcm1AlN%2Btqeft3scUMF%2FG%2BYCJVVp3NW%2BywrDgY8nrJfTqyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d02cce0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":632,"size_decoded":1159,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd03f406007836de4b9e2efcb0f627cb","sha1":"4c8146b7e75baeb8273e6c6de2b6c4f5f1855f33","sha256":"0b21c9562cc05170129aac8a06cd538ce7e7decf1c59c971288b0ff4f57026dc","sha512":"182344066261cdfdf30f985c263b9d09afb19d2aa3a057cd8e51ca65aa29e5b838cd41cf83440aadc5b85ff47127515e34177badcd5b0f7cd15f1a5780ab4442","ssdeep":"","tlshash":"85f028e6135cf10e965813440b69307d10a2a5c8ee568f55bed2f233b88e51b1cfe6c8","first_seen":"2025-06-05T06:27:24.637799Z","last_seen":"2026-08-24T05:38:16.162741Z","times_seen":280,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/quote.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.536Z","timestamp":1787549867536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/quote.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-5fd\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y67uls%2BPf3KxINE8Ls1cyrFbb0u0A7cl%2FHGdhDZZV4YeRZVblYLACrh7AyOxGvoF1OmVtH7wEyxDNfIXPOIGWU6TH50E9to6MMtv77wdajg5DrfmQyWJ6UIuv1vbHyvxDS8TUdMp8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d01cc40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1533,"size_decoded":1622,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3a6e115deda84e54c26b44dc2c53777","sha1":"ffbeae283a9d22b6fe6279ac1433926d3c4b37b6","sha256":"f4c75b63721a9a4baa6eeb8d0f1d36f6ed5fb1aaba116b3c69060dfb79f50a7a","sha512":"9546658cbaffdfeb7d1e57d6b6eeccf4237e68edbade89958b20ae8b6d11f241a23bcb7aacc2ce7cb1cc92621e5e8d781c27668df4f0ccdb2a4d88f5458c2e53","ssdeep":"","tlshash":"2031538553ecd2d4b881e3f0a12994b539bf00fa59b5deb5c3a57de0f59940e984c8e0","first_seen":"2025-06-05T06:27:24.647803Z","last_seen":"2026-08-24T05:38:16.164179Z","times_seen":225,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/eth.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.538Z","timestamp":1787549867538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/eth.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-2cd\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYl49yyvEDy0JO%2BKYUEnbGitChz3Kp3K6fldU0WUsry%2BQILMPF5DUVyruxg4AvFzV8%2FUKOV7hqtKfRp09cCVRQ%2FcHv1YGMynyY9TOc5l91hwzlQSNTXVEsHLaREXSgIohMhnAPvI7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d01cc50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":717,"size_decoded":1126,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46567e5dacf115348b4daa4634c4986b","sha1":"df4fe5e2871ed6e02ac702bd07b555020f152259","sha256":"0f45e1f21fbc05c517fdf004e8569341328a8bbf5878eaf97e081dcea4fda0f0","sha512":"b897f9438383eac49cfe2f3b3ceead307e50a2d710a0ad382202f7b91b330380de78f28b93b0a92d8385dfa2df3ce9fffca42b8597369ea94228f4772cc3d90f","ssdeep":"","tlshash":"e10184d576c9c21145c5fb184bbabc3f01362dfa6b07aa4021011b2aec766eb9c68ad4","first_seen":"2025-06-05T06:27:24.591064Z","last_seen":"2026-08-24T05:38:16.165704Z","times_seen":306,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/fonts/inter/Inter-SemiBold.ttf","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.626Z","timestamp":1787549867626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /fonts/inter/Inter-SemiBold.ttf HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T6X9OBc650A9%2BwxdFbJHyntY3O%2BHA82rBDMli5cgLjWTYb2izfJs%2FOl7XOf96hQsWS5uWI1j5%2BWzvO8rG0p9GLLIORnRoXNPfNoyBnORif62luIZzdoYy3GFHCJ7nEE5KzVAEvBOxA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d0acd70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":887,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"32c91e64f8ccb2d4f462a29521d237c7","sha1":"b2ec596381e8860de8b7565a49ecf6b1dda83c52","sha256":"84f5a53069275e93dde41d550cce5449c9447b135b7b100d44c6b07ccdbb3de1","sha512":"7d849105ca803e7d02d45623c2c4192ed550d0d6cbc6a7a7012cb56e83df499f825fb3c7bffc7be0536aa721a6ccd3cebcbacd64bdba44166e736532aa2b7245","ssdeep":"","tlshash":"2ed02b9e5043728b4922146039c125c6274d13f6f43a41a86d86d58752a853fcd9eacc","first_seen":"2026-08-24T05:18:36.998426Z","last_seen":"2026-08-24T05:38:16.148124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/like.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.711Z","timestamp":1787549867711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/like.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=4,i\r\netag: W/\"6a39acd0-5ab\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRUxcsKs0aiz%2FgJVJSFSBKzhvgoRwHUoXMK6sy6o8XAqE93E%2FeGoTK1eRGeZeLcLsbMP8R%2F7%2FZJ024Yn83llTF6IdDwWdPpu9kZEcaGxpcW7N%2Fl3euu65YrtTgYTu2Z%2F2ux3bFoBkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d12ced0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1451,"size_decoded":1432,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fc45eec3fc9fdb6edb9f8905c0ce0bf","sha1":"01854e838899ef899c95bce45b94fc285a6d3dae","sha256":"b6800222846b1e2574b2d203a9edd78c78d5eace6b6be63cb65c910031719c2f","sha512":"88d784067d21731df67cef404fa150ed46475a1427739f1c23f97752ed3c06b3933a01876a1175fe2e5d81121430de70130c1098628b95d1b03adf3996f68598","ssdeep":"","tlshash":"c531e2f2d3c063bc4d21b358b6bab9b0e2ea18f574c0cc99a3502e44d9799dfd95144b","first_seen":"2025-06-05T06:27:24.667407Z","last_seen":"2026-08-24T05:38:16.166364Z","times_seen":190,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.879Z","timestamp":1787549867879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js\r\nOrigin: https://santander-invest.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 61923\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\nage: 2164471\r\nx-served-by: cache-fra-etou8220128-FRA, cache-bma-essb1270077-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258914,"size_decoded":62700,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-08-24T05:38:16.166924Z","times_seen":2096,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/header-avatar-1.webp","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.641Z","timestamp":1787549867641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/header-avatar-1.webp HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\npriority: u=4,i\r\netag: \"6a39acd0-2fc\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvdtdLrh7xhZ5g5yT4pp95sfvfqMl7RnDR%2FzZlVQuTdtHyBWkCVgEU%2BIPaiUE3PyBJHNsVwPLmHGfEXZJOG5HBb2FwQnOI%2B%2F8YUEbFUe14JEyJJssOQnvo3EGgSts9eSRYrXD5i2lQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d0bcdd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":764,"size_decoded":1559,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3eb88b0cf9a5588f0f3c4419a6e730f6","sha1":"e0c23b349192ba101b36ddad0c1c1e3454c13022","sha256":"fc12031e15905eea555899fb3a169d3157ed9fdabb2e7660dbd6ea03d1ce52ca","sha512":"42a3de3610fb5a43b6bab7410a513414b3324f6ce960d621f73af06d4d02e0ed988728326f3d508cff59de5d0447ff06a802138d73a2f91eb05d8202427cc902","ssdeep":"","tlshash":"c001702af341bc0af8fc3c3043db3e3ba9448a865556dec80ac1992ba1322c38247651","first_seen":"2024-06-21T13:38:29Z","last_seen":"2026-08-24T05:38:16.167641Z","times_seen":502,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/pros-bg_2x.webp","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.709Z","timestamp":1787549867709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/pros-bg_2x.webp HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\npriority: u=4,i\r\netag: \"6a39acd0-4b8e\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFVtQipWRGFS%2FEHFcNbOkZUupgAYGkAoCCwFp0%2Fv4HGc7y2cOq45C9U1Pk%2FZyth3R2mj1XgrtmzU6WOcj%2FSp9ZrERw5Ecl%2FfzzagAULTpYLnrU2MCsGkLnM6EgLeaZ3lQgEIFiJIMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d12ceb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19342,"size_decoded":20142,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d06511af92842712e6966d7f3ab462e9","sha1":"fbc66b38ee16624f9a73996c23ab5f79a76298cd","sha256":"60e92e2aaeba130a20310fde2ac52e5d07e6ce31ac615edf22f0d4f0f72b18dc","sha512":"2a8cffcd3d300e8970090ba845cc286f04fa75cd959929e517f19c7942e38eecad92e89a245edd07d9eccd887a208f415c250e8f07d8042e10c9c3d32031e51f","ssdeep":"384:z+XPXP+87uHW4Duw9TizpV0cu23puSetGlXwoUnz1Wqtw/0:z+XPf+q4ywodV0c4ttQXvUbe0","tlshash":"6e92d1fc29f5acdd0a78ff0157c6e2686058c816215d0bd69d628ce083efd9e24b4d57","first_seen":"2026-05-05T00:28:01.528698Z","last_seen":"2026-08-24T05:38:16.168317Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/fonts/inter/Inter-Regular.ttf","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.627Z","timestamp":1787549867627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.ttf HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqFrmJQ58GR3sgPn9bhvjaHRdCUQUID%2Bhyro1O2Iy%2BqqgLmwa7coNzF4t9ZAhjGg5nqfP3lDEqmhfAWlOS03iBRTEwTxquHP8KJP1atfNIqaMfJ2rdD56sDbVqgsPDMyVqtsCN4flQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d0acd80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":883,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"32c91e64f8ccb2d4f462a29521d237c7","sha1":"b2ec596381e8860de8b7565a49ecf6b1dda83c52","sha256":"84f5a53069275e93dde41d550cce5449c9447b135b7b100d44c6b07ccdbb3de1","sha512":"7d849105ca803e7d02d45623c2c4192ed550d0d6cbc6a7a7012cb56e83df499f825fb3c7bffc7be0536aa721a6ccd3cebcbacd64bdba44166e736532aa2b7245","ssdeep":"","tlshash":"2ed02b9e5043728b4922146039c125c6274d13f6f43a41a86d86d58752a853fcd9eacc","first_seen":"2026-08-24T05:18:36.998426Z","last_seen":"2026-08-24T05:38:16.148124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/img/flags.png?1","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.732Z","timestamp":1787549867732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/img/flags.png?1 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 70325\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"112b5-tFG020MXScxAzCpfJx+YB8oh8dM\"\r\naccept-ranges: bytes\r\nage: 1166853\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\nx-served-by: cache-fra-etou8220095-FRA, cache-bma-essb1270077-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70325,"size_decoded":71052,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-08-24T05:38:16.168998Z","times_seen":6509,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/core/form.css?v=1787549867","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.516Z","timestamp":1787549867516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /core/form.css?v=1787549867 HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 00:34:06 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a3b25fe-901\"\r\nexpires: Tue, 25 Aug 2026 05:37:47 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5SWmO0nEEF1ML5%2BUrmNS%2BHkpQNOq8uT%2BB8hTif9Tsjgro7eR8yvn6k5jsJ%2BN7KzJAtBbX9cgvHKfYDThuZpdU4Aa9FTK3D6GuVXKVJLnnMrDWIy1jentHcm5sc%2Ft168l3yhrXzCcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001cffcbb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2305,"size_decoded":1544,"mime_type":"text/css","magic":"ASCII text","md5":"92e6fa39c25752a6530a61bf9068c37b","sha1":"5256252ab8d2d16bfa86183c0fd6de09911eb0fb","sha256":"35d1d9dc494a34e9239d9d45338fb50692d8804714e41bddd1797937f35918cb","sha512":"bee90b809a9925244341ac859a256e7a09126e7415c89bdfb6cf8e6d95f2b3a4e187914e288b3a26d4d0c3f543c1b5dde3d0d74168b5c60b06a119f9c5e490e6","ssdeep":"","tlshash":"3841bf917ab32680f00687a837ee63be739c78434157c9e43dd47278cf86a9095a1fc8","first_seen":"2026-08-24T05:18:37.006164Z","last_seen":"2026-08-24T05:38:16.169531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/logo.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.524Z","timestamp":1787549867524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/logo.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-34f\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UO%2BsuFeAfoe%2FUdfzyQpbCX8Jnig0OzTXZpTLyg5xxApGlYY%2BEVRdR3hbH2FVXH1fcZw5cEhftjJsRapiPwue04%2FE%2FiWoZFTUv7Mq7p0rwgQIH0Mroi0G8AfSjKtlgDhyutOZuuRh5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d00cbd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":847,"size_decoded":1166,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3aa7de7f66f77460fedb8b42cfbb5aef","sha1":"a4ae13008315e88c3559dddbc878e1a5754bdee3","sha256":"038c31bec130c4e079010106c88bd2e3e35d1bd91867d89677d606d5e130ce72","sha512":"3be1b06931f6329dc2646591ca54b4469bdaed32580f140b48685e0c4b1c48289d68dd3706ce5da04213ec41f90bd641751bfcb1a2ec9f51dbac4d19dd7e6134","ssdeep":"","tlshash":"9a01e9e4b28c64ecc958575e534ca4e6742fa4c9a2190188da513b07ad849d75c762ce","first_seen":"2025-07-07T11:42:21.486383Z","last_seen":"2026-08-24T05:38:16.17012Z","times_seen":75,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/coinbase.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.545Z","timestamp":1787549867545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/coinbase.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-313\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdhW7FBAgPW7xf%2Fecpg40eHJ2030osxT2zcNyHa%2F2iUaahCOtLBzWDlueUbva8awgkNGiHuL1Bvc9bQb1VkUrwBYFifHnhdn%2FS9ohWZVd9Npmu32U8xBvCoRimpuD2sjZpT%2BcsjlmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d02ccb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":787,"size_decoded":1207,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a71b361c4b52b45731498df9494f710a","sha1":"8c5fe235811d4b2e7734f05f7e5f7dc12fcadbac","sha256":"b97b8b22ce4448875509a1d4540decd2268dc6167a2adadc5787b9a4d7bee16d","sha512":"b129407e2a7432f350e91bf6451e9009a17e6b70d6c50d135c09a588d12773c27c7cb391a2b042fa811babbcc91213a8479560257edd0e1846b0ac05af778d8a","ssdeep":"","tlshash":"f1018eeb7374920cc718530923f4742d15f93998a30b8b016150e94d6c6e11d9d92edb","first_seen":"2025-06-05T06:27:24.627399Z","last_seen":"2026-08-24T05:38:16.170602Z","times_seen":246,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/fonts/kanit/Kanit-Black.ttf","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.624Z","timestamp":1787549867624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /fonts/kanit/Kanit-Black.ttf HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cqWLar92e52spcgsF1fzby7D2bqC%2FcbiqFmbJsTGn1osbXbwxG2e3sU80%2B6K36J7S288djz26dY6rGy8WVC5Vg8kNmd55H8EScdqhAezkrvse0cfKugpHHfl1SRYViVCY0HzhFUgiA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d0acd50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":883,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"32c91e64f8ccb2d4f462a29521d237c7","sha1":"b2ec596381e8860de8b7565a49ecf6b1dda83c52","sha256":"84f5a53069275e93dde41d550cce5449c9447b135b7b100d44c6b07ccdbb3de1","sha512":"7d849105ca803e7d02d45623c2c4192ed550d0d6cbc6a7a7012cb56e83df499f825fb3c7bffc7be0536aa721a6ccd3cebcbacd64bdba44166e736532aa2b7245","ssdeep":"","tlshash":"2ed02b9e5043728b4922146039c125c6274d13f6f43a41a86d86d58752a853fcd9eacc","first_seen":"2026-08-24T05:18:36.998426Z","last_seen":"2026-08-24T05:38:16.148124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/header-avatar-3.webp","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.644Z","timestamp":1787549867644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/header-avatar-3.webp HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\npriority: u=4,i\r\netag: \"6a39acd0-27c\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wU7q2sThKryV9o6KoeRW7fZ16uOIv2w8NWZXUAMAIc3YB9%2F99t%2BJ6XH%2F9bL5ifAWpOO3wiL1ovwDSa9othzz4%2FvnuYT%2F03OmMA%2Bc1Hd%2BKOL%2BkpAUb%2FNljIRU9AC0QzCzya90aUXJBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d0ccdf0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":636,"size_decoded":1441,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"161e87887cc81d508815f11d0079f766","sha1":"6c13fa48c3e2434758a42ba53ff062ac0a3492f7","sha256":"1f6573273535711213c34ad3da67cfa0bbcc7f2377ba7fe6ade2d10b2f03c864","sha512":"c611683460fd28112927e892244a17f8022b9eba03f048a2b9339b2443b576f4499bbe1fca4835a75f087a39c6bc10abc749bc5215d406d43f6bf928c354b55e","ssdeep":"","tlshash":"fcf0681af7b1751dfc1d2c60234a75459b4d01c1c473f1d4bd81e177f8212468263f48","first_seen":"2024-06-21T13:38:29Z","last_seen":"2026-08-24T05:38:16.171072Z","times_seen":440,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/fonts/encode-sans-expanded/EncodeSansExpanded-Light.ttf","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.720Z","timestamp":1787549867720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /fonts/encode-sans-expanded/EncodeSansExpanded-Light.ttf HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FrUTlR6Lo80nEJKA6BDV9qmGtz%2FvpytjmnjK85A3CdeX%2BUFLYRqh3XxpHHLLEeWpGyNPAw7Xo57rQoZMfTiLIOkFBffwXP%2F52Abyfw5cjHUlUoO%2FkK2aDRxCxCkeKKGxOK8Kvnca%2BA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d13cf00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":889,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"32c91e64f8ccb2d4f462a29521d237c7","sha1":"b2ec596381e8860de8b7565a49ecf6b1dda83c52","sha256":"84f5a53069275e93dde41d550cce5449c9447b135b7b100d44c6b07ccdbb3de1","sha512":"7d849105ca803e7d02d45623c2c4192ed550d0d6cbc6a7a7012cb56e83df499f825fb3c7bffc7be0536aa721a6ccd3cebcbacd64bdba44166e736532aa2b7245","ssdeep":"","tlshash":"2ed02b9e5043728b4922146039c125c6274d13f6f43a41a86d86d58752a853fcd9eacc","first_seen":"2026-08-24T05:18:36.998426Z","last_seen":"2026-08-24T05:38:16.148124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/pros-1.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.541Z","timestamp":1787549867541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/pros-1.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-1c9a\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yo6ssYgXFJejmnZLWpfO9Q%2Bqu3q%2BcKrKn8NCWy8MjyVaWHHnM8dxYkrmMKm%2FU2KxPfx240%2BOXMADFWmBWPk1qkC8sOrv2gztfjIBJyXyljb2oSndydTyLRuzl40ARoXnce4jN5Px%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d02cc90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7322,"size_decoded":3770,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ef1f545b3c1f9db5e144e507ffe9ed6","sha1":"b985175f99d15996da24fcf3910cd3ffa5fdc57a","sha256":"5aca419e2087be1931d63cde96052a81e9e9ad879867dd254cf86909de6fe65b","sha512":"cf55e5e4808c2153db62efd956c35aa277737ad2959c496a032feb642042cf5962965985423128bbd89cf8c753549d6a3b3e7bf25c848902f55b0cbb38fa14d8","ssdeep":"192:H3SrOeLj7+VVEQQd9is8NMw6k7PYdV8nvDqNf:HZ47+I07MC7qNf","tlshash":"34e1858433b1e3f8f845f4fd0326b4e16f1169d5ba22d4a0c7972e12e8d644c5eaa9d3","first_seen":"2025-06-05T06:27:24.680855Z","last_seen":"2026-08-24T05:38:16.171541Z","times_seen":299,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.513Z","timestamp":1787549867513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"4f9c-YW++h4sxifKlsVyMHgLARnQAuWE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2671374\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\nx-served-by: cache-fra-eddf8230071-FRA, cache-bma-essb1270021-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20380,"size_decoded":4165,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"b46140e6a10359c79822e7b801f0391b","sha1":"616fbe878b3189f2a5b15c8c1e02c0467400b961","sha256":"def1a0f6d2bd2a01f1f842475b7e7da7f2596f2783fd8872c37624ae406425af","sha512":"3a44a85b26a849c8d784e9bced73b9843cf51396eebe6d9a024abee73266698a72940d0e289e67a39a9ce1946b980a686971205dcde7d22c954b5ab91608898e","ssdeep":"192:WTxfNDsX5uVsAPkkk8ii/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:IVsXk1kdCqE9y6mporr8LJj0H12o7U5","tlshash":"c5929e2346b00d3e965dc1fa38a2c1b5773f0c8a35eecc96eed9504a5887b90e5ebc54","first_seen":"2024-06-08T15:25:15Z","last_seen":"2026-08-24T05:38:16.172797Z","times_seen":1344,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/offer_index/pros-2.svg","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.542Z","timestamp":1787549867542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /offer_index/pros-2.svg HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://santander-invest.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jun 2026 21:44:48 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a39acd0-1872\"\r\nexpires: Tue, 25 Aug 2026 05:18:03 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 1184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FKUv5EkQfKZjiQcuavo2vKBwm8FxysXUnd2qtZiy046l6ZySmm9ICe%2FfnRffwlVfO9si%2BmeAMJTOpxKkVrD6fFdYQYE5A71o47Mme4FAWkGWXKPhsqxQQNXR9%2FMCTKz8S1gssMxPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d02cc80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6258,"size_decoded":3611,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1bbc24f9dfd3391d285058d87aa4c1e","sha1":"1aaccd4d96c254295f65e189d730a08ea789d70f","sha256":"4362a8a12dd96d6756c0ea036c8afe434c391f258ecb0227c596ec6a63354a89","sha512":"2d74140159451aac7b09928e1e639078116e07f65b5ad192444e93d02e015f5ef7207dd2ca3108b7e99a0c15b262939a1eee4de27a76b516b199c574d553ffc5","ssdeep":"96:YsnvsC61o+kMSLL00R8h94QafenqQ9CcD2GYGcl5kc+/U+6oM7FM:Xs9O+kzLtM4Qacv45n+9Mi","tlshash":"e0d192853769c3bef408f0fd531394343e42adc6b982c899c3646d22a9d611d2e79ddb","first_seen":"2025-06-05T06:27:24.661916Z","last_seen":"2026-08-24T05:38:16.173314Z","times_seen":297,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/fonts/inter/Inter-Black.ttf","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.719Z","timestamp":1787549867719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /fonts/inter/Inter-Black.ttf HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gh0h5LfS%2Bry3l%2FM0x7orlbV7qmKU%2FKvrELPgC4hwuFST7bn176yFR2SJ1FTJSxJVACbpWAC0zjoo8xaJEoPKDbgLdrojFrNqXaHgiW54oFQHd6tMub8VSeSyIv94qg2iD5L1zPY7fg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d13cef0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":885,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"32c91e64f8ccb2d4f462a29521d237c7","sha1":"b2ec596381e8860de8b7565a49ecf6b1dda83c52","sha256":"84f5a53069275e93dde41d550cce5449c9447b135b7b100d44c6b07ccdbb3de1","sha512":"7d849105ca803e7d02d45623c2c4192ed550d0d6cbc6a7a7012cb56e83df499f825fb3c7bffc7be0536aa721a6ccd3cebcbacd64bdba44166e736532aa2b7245","ssdeep":"","tlshash":"2ed02b9e5043728b4922146039c125c6274d13f6f43a41a86d86d58752a853fcd9eacc","first_seen":"2026-08-24T05:18:36.998426Z","last_seen":"2026-08-24T05:38:16.148124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-invest.org/fonts/encode-sans-expanded/EncodeSansExpanded-Black.ttf","fqdn":"santander-invest.org","domain":"santander-invest.org","tld":"org"},"ip":{"addr":"104.21.43.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://santander-invest.org/","date":"2026-08-24T05:37:47.625Z","timestamp":1787549867625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santander-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 19:15:02 GMT","end":"Thu, 19 Nov 2026 20:13:50 GMT"},"fingerprint":{"sha1":"87:9C:03:A6:8F:AD:54:B7:CF:43:74:EB:2D:17:52:15:87:87:63:2C","sha256":"EA:62:3B:3E:E9:20:A2:04:BE:55:00:36:72:FA:9C:12:00:04:ED:C7:C8:4D:12:5C:DE:9C:07:97:50:F1:0A:E3"}}},"request":{"raw":"GET /fonts/encode-sans-expanded/EncodeSansExpanded-Black.ttf HTTP/1.1\r\nHost: santander-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-invest.org/offer_index/style.css\r\nCookie: PHPSESSID=d36t0v5sdjpeq2blh0miaij0vk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:37:47 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Szabu3QP3d6pECeSYx%2BmG8k%2BHxZ3K%2BCp842VAQ53L1lqO0nZ%2BJ%2F7PHeYfjvM01CjH60ykf4Fko8y%2F2aZ2gu6bEn98ZDQCUEwX3egs388iaiGZ8oWJcDRr8Bnv73PwApAHt0s1gzcQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30001d0acd60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":891,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"32c91e64f8ccb2d4f462a29521d237c7","sha1":"b2ec596381e8860de8b7565a49ecf6b1dda83c52","sha256":"84f5a53069275e93dde41d550cce5449c9447b135b7b100d44c6b07ccdbb3de1","sha512":"7d849105ca803e7d02d45623c2c4192ed550d0d6cbc6a7a7012cb56e83df499f825fb3c7bffc7be0536aa721a6ccd3cebcbacd64bdba44166e736532aa2b7245","ssdeep":"","tlshash":"2ed02b9e5043728b4922146039c125c6274d13f6f43a41a86d86d58752a853fcd9eacc","first_seen":"2026-08-24T05:18:36.998426Z","last_seen":"2026-08-24T05:38:16.148124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"santander-invest.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}