{"report_id":"4e47070d-4028-4594-a5e7-584d22777d0a","version":0,"status":"done","tags":[],"date":"2026-08-30T11:39:01Z","url":{"schema":"http","addr":"securerollsantanderbank.com/","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"ip":{"addr":"104.21.41.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"securerollsantanderbank.com/","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"title":"securerollsantanderbank.com","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T15:22:58.187444Z","times_seen":18186736,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"securerollsantanderbank.com/","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"ip":{"addr":"104.21.41.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-04T11:39:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"securerollsantanderbank.com","ip":{"addr":"172.67.165.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":6,"received_data":2021846,"sent_data":3267,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":4,"received_data":654819,"sent_data":2435,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"securerollsantanderbank.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"ip":{"addr":"172.67.165.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa086e17e4f8a9ab4ea58e4174b0bcf0","sha1":"4ebb545cf4351565d24e66c2f140d6333b86b86d","sha256":"8d3c3d4a10d2c3873c91bb14f353513e31ee0f6795b81c4a04171f17eab3961b","sha512":"c489cfa9cafc6fd585f7d32a0d8c19be1e5d62d84a5ebb6fe5101cfb0d032845d47feda5a82b157df5d75f92311c99ed15260ba18087e5a83f3ed20fe426f773","ssdeep":"","tlshash":"d361a659eb7538df33fa01f3653a0d4beb604436e784d038c9ae631414b1893c375a0a","size":3441,"data":"","first_seen":"2026-08-30T11:39:03.831144Z","last_seen":"2026-08-30T11:39:06.757385Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securerollsantanderbank.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"ip":{"addr":"172.67.165.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-30T15:29:28.955875Z","times_seen":45498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"securerollsantanderbank.com/","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"ip":{"addr":"172.67.165.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T11:38:24.449Z","timestamp":1788089904449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securerollsantanderbank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 09:12:23 GMT","end":"Fri, 27 Nov 2026 10:10:54 GMT"},"fingerprint":{"sha1":"07:9C:81:C9:49:5D:1B:9C:8F:56:30:89:1D:87:04:99:C6:A7:02:92","sha256":"00:66:61:B8:04:F3:51:9E:06:7D:7B:2B:5A:AA:E3:53:EF:B1:32:68:B9:86:42:F1:2D:18:A3:51:FE:23:1D:8D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securerollsantanderbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 11:38:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nlink: \u003chttps://securerollsantanderbank.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://securerollsantanderbank.com/wp-json/wp/v2/pages/4\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://securerollsantanderbank.com/\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQN%2F7MX6mNeJqXLCROCROU5s1X7apPtPoKu4wmV51y3yw5If4neaB9fxIBOy%2FJPLEQvK0u64u8ZLxB1e1JyDuf4Ch%2F%2Ffeta470S27SEOA7aRvZmjVUHLyZaKPFNXRARKaokx9MQ%2BTsIXyv1nhXY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a333824ef986120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":97726,"size_decoded":15894,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (20316)","md5":"52cb3a61b6f18de2728f3d3b218dbd6f","sha1":"da2d058ba70b5de1d72f6b915acd5d1fe6529a8a","sha256":"1d3788db993070fcdec65d53ca85bc5d1f0ee9f50d10bb648fc4a7ba81bf4acd","sha512":"b698531f7e3ccd28e4379efc45434d89ad544216a16601d9302411d6ec8d40543ccec4b269b08806c511afa8cb6f38f9764e88837620470ad6784f1668ad0136","ssdeep":"1536:Tl/eJ+pi36DdXELLdhaG5MypTVIrNnhgLB/3UFtYGXGgCgBXULyRG:T9eJPhyk","tlshash":"faa3d811126584fdb89b9faa368fbb1476096c11c5484beaf07dd0649fcadab41e3f0c","first_seen":"2026-08-30T11:39:03.823827Z","last_seen":"2026-08-30T11:39:06.74083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11556,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":11418,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securerollsantanderbank.com/wp-content/themes/business-identity-mvp/assets/images/coming-soon/coming-soon-bg.webp","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"ip":{"addr":"172.67.165.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securerollsantanderbank.com/","date":"2026-08-30T11:38:36.156Z","timestamp":1788089916156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securerollsantanderbank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 09:12:23 GMT","end":"Fri, 27 Nov 2026 10:10:54 GMT"},"fingerprint":{"sha1":"07:9C:81:C9:49:5D:1B:9C:8F:56:30:89:1D:87:04:99:C6:A7:02:92","sha256":"00:66:61:B8:04:F3:51:9E:06:7D:7B:2B:5A:AA:E3:53:EF:B1:32:68:B9:86:42:F1:2D:18:A3:51:FE:23:1D:8D"}}},"request":{"raw":"GET /wp-content/themes/business-identity-mvp/assets/images/coming-soon/coming-soon-bg.webp HTTP/1.1\r\nHost: securerollsantanderbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securerollsantanderbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 11:38:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 29 Aug 2026 01:00:43 GMT\r\npriority: u=5,i\r\netag: \"6a922f3b-1cd268\"\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DF5opuaZfDpI0aE5ovdwKB17mYI0dlz%2FTfjh%2BY7hRYNyYHnTbzpIfFAmT%2Bgqt%2F%2BS%2B%2BdwQAaS%2FGKGJ8hO0Dv6cMxJ707kRkF6vN2Kjbbk6nmZpuY9WTSfpy05l06kDjczxje1I9M7dMsRy%2FhuZKQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3338297fcff120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1888872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1888872,"size_decoded":1889601,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"49da6a4dc68c8fbc5ccd3c719454c696","sha1":"05c1d9c1aeeb8b715f379ad61b78990ab23f2ff7","sha256":"725c772904613b7b68eac52ac0a5c4a730e97aac104915bf22c6412aff5cb97f","sha512":"d65063672fbbc9b5a825b79dea9896927b82a08bfcc9dd6eb2db7d9c6ac372fce6d5fdbd9d9868c10ec0bf595ac55763d36e98601815edac4429073fe00fc59a","ssdeep":"12288:veR0cWEXfdzztoGCF26deojb37X3kvnye+sASInxcBPGelN/s03Be5diN2l6lRkQ:Bu1iMarX0ZnBPHTj8LQkqOZWh","tlshash":"122533158b5233d9d859e370f98b92b94beb0c75e43a12cb3f7cc5acddb16a42c52182","first_seen":"2026-03-08T09:45:18.813762Z","last_seen":"2026-08-30T11:39:06.743931Z","times_seen":48,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securerollsantanderbank.com/wp-content/themes/business-identity-mvp/assets/images/coming-soon/circle-bookmark-sharp-solid-full.png","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"ip":{"addr":"172.67.165.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securerollsantanderbank.com/","date":"2026-08-30T11:38:36.158Z","timestamp":1788089916158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securerollsantanderbank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 09:12:23 GMT","end":"Fri, 27 Nov 2026 10:10:54 GMT"},"fingerprint":{"sha1":"07:9C:81:C9:49:5D:1B:9C:8F:56:30:89:1D:87:04:99:C6:A7:02:92","sha256":"00:66:61:B8:04:F3:51:9E:06:7D:7B:2B:5A:AA:E3:53:EF:B1:32:68:B9:86:42:F1:2D:18:A3:51:FE:23:1D:8D"}}},"request":{"raw":"GET /wp-content/themes/business-identity-mvp/assets/images/coming-soon/circle-bookmark-sharp-solid-full.png HTTP/1.1\r\nHost: securerollsantanderbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securerollsantanderbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 11:38:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 29 Aug 2026 01:00:43 GMT\r\npriority: u=5,i\r\netag: \"6a922f3b-1a64\"\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWyLFhSR9%2FYqFBX1WZeKfd6I9VVal2uuEJKY%2BHshKxilxeIzaNFfaqcszM0PmVSiCsHM4WCE60F8H%2BrAOlYh%2FmHM4V2LWe2NyDr478c3T6sO%2BhEwnaZ6%2BHoc3ToqEs5JEEdV6eb93iSKhTDtlIo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3338297fd00120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6756\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6756,"size_decoded":7473,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit colormap, non-interlaced","md5":"4f21ea451aa3bd917219b9a10e42660f","sha1":"5f8b04cfd10685a34c74800b4770b22d2c58b045","sha256":"afcc2d91ff1a298b4fe7d72782a52ed0f347f8b121eaa992e2c04a559e032828","sha512":"9721947866d3ef7b9b5cd2d49fe591ff4b80d5b5ccf9b3385eb016764e16555e031ae51d5835106e71cb567b330871489bf36f03d828feda14aa79ec2b56b884","ssdeep":"192:LBPX1t50KagejzUqIBBu+pnA1ZDkW0ZEy2jT4HCCF:1rmUrB/A1p0sj8HCCF","tlshash":"d7d1159482a2ed326905a4be64a1fcc2dcc7cc40305c22296a98f43b2c757f479ddb8f","first_seen":"2026-03-08T09:45:18.818751Z","last_seen":"2026-08-30T11:39:06.745012Z","times_seen":49,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securerollsantanderbank.com/favicon.ico","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"ip":{"addr":"172.67.165.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securerollsantanderbank.com/","date":"2026-08-30T11:38:36.232Z","timestamp":1788089916232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securerollsantanderbank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 09:12:23 GMT","end":"Fri, 27 Nov 2026 10:10:54 GMT"},"fingerprint":{"sha1":"07:9C:81:C9:49:5D:1B:9C:8F:56:30:89:1D:87:04:99:C6:A7:02:92","sha256":"00:66:61:B8:04:F3:51:9E:06:7D:7B:2B:5A:AA:E3:53:EF:B1:32:68:B9:86:42:F1:2D:18:A3:51:FE:23:1D:8D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securerollsantanderbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securerollsantanderbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 11:38:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGDMkTvja3lSR0R%2BsLCee5%2FkYBsontzOGv2ZcszjsMg8ZIlk7mzq%2Bhfub%2B2j4dVeYXCoaGSC%2FOb6tQIps32RWh1kBmdqFhjylqh8F1k9mjKiYhjh9Ynyt8PTMT%2BGpvtytEMlWy6D97%2Bp64a8rso%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33382987d1f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":778,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-30T11:45:34.96663Z","times_seen":39085,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVs9pYCPNLA3JC9c.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securerollsantanderbank.com/","date":"2026-08-30T11:38:36.482Z","timestamp":1788089916482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVs9pYCPNLA3JC9c.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securerollsantanderbank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securerollsantanderbank.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 89683\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 30 Aug 2026 04:49:08 GMT\r\nexpires: Mon, 30 Aug 2027 04:49:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 24568\r\nlast-modified: Mon, 18 Jul 2022 19:36:04 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":163276,"size_decoded":90540,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409, Copyright 2010 The Raleway Project Authors (impallari@gmail.com), with Reserved Font Name \"Ralew","md5":"88079335418f389bfb2d86bc4f1ced64","sha1":"fd799b6fb4aff1a9402e071ab02d1ddea731b868","sha256":"85c6a818e33ae8b62d15672522c0b12f2e602680f75c4414ee815a73596ad365","sha512":"5105d0f432cda4de9749e4e0dd09f9687d06ad17b7e02f98dc9d0b2ffc3d959c386302f8882c3a3f1021c39ecf88e60f5e630b929fb905eec48bead923b47e11","ssdeep":"3072:1W1pfYY0W4TJrGSJUQYaq7Ml4AJpGmCPwPE+LS:o1p10WwruaGMl4AJJPNS","tlshash":"01f36cb2b3160b48dc339ef446a9db18b3866c157aa7c70f5474729c9c8f4879e712ca","first_seen":"2023-09-27T11:57:48Z","last_seen":"2026-08-30T15:05:23.919094Z","times_seen":218,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":38,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securerollsantanderbank.com/wp-content/themes/business-identity-mvp/style.css?ver=7.1","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"ip":{"addr":"172.67.165.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://securerollsantanderbank.com/","date":"2026-08-30T11:38:36.146Z","timestamp":1788089916146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securerollsantanderbank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 09:12:23 GMT","end":"Fri, 27 Nov 2026 10:10:54 GMT"},"fingerprint":{"sha1":"07:9C:81:C9:49:5D:1B:9C:8F:56:30:89:1D:87:04:99:C6:A7:02:92","sha256":"00:66:61:B8:04:F3:51:9E:06:7D:7B:2B:5A:AA:E3:53:EF:B1:32:68:B9:86:42:F1:2D:18:A3:51:FE:23:1D:8D"}}},"request":{"raw":"GET /wp-content/themes/business-identity-mvp/style.css?ver=7.1 HTTP/1.1\r\nHost: securerollsantanderbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securerollsantanderbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 11:38:36 GMT\r\ncontent-type: text/css\r\netag: W/\"6a922f3b-483\"\r\nlast-modified: Sat, 29 Aug 2026 01:00:43 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZiiWeIBr%2FsNvwbg36%2FLENyKvVAZucAoIHWo2G0zm3%2Bn9y2Ra%2BWr84oPUPV4V%2FVhw0b7eAKHTt8yU%2FdQRGf5iwJI6Zms5pwFH69G3RYaGv1JnuM0gRyyTAzFybtH0JKV9NaE3H2nf2Ckk9ZZayc%3D\"}]}\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3338297ecfd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1155,"size_decoded":1302,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"ed96c063a09f0bf9eb0bbec319ffb9ed","sha1":"0e76c8092e4b1d7b874114a280279b263d11b4e4","sha256":"f6a2d109ba140c71e905a715149dfe216c07a059b388ecb1752adc7a448b2ce8","sha512":"a0b3db3fba1ddc7d07cf96a7438307a63af4cfe1d69f4e45478ab6e08cdd1f764c80591032ea47dadac50bb3ddd205485539162a2fd5ad2d45147ea3d64e1d2d","ssdeep":"","tlshash":"38210201b520229632d3425afe4f22c1f28a8334d7fbe6d1c46bd168329df6815e6f5b","first_seen":"2026-06-29T19:00:07.301669Z","last_seen":"2026-08-30T11:39:06.74943Z","times_seen":15,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVuEooCPNLA3JC9c.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securerollsantanderbank.com/","date":"2026-08-30T11:38:36.473Z","timestamp":1788089916473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVuEooCPNLA3JC9c.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securerollsantanderbank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securerollsantanderbank.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 87484\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 29 Aug 2026 01:01:55 GMT\r\nexpires: Sun, 29 Aug 2027 01:01:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 18 Jul 2022 19:46:48 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nage: 124601\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":163404,"size_decoded":88342,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 22 names, Microsoft, language 0x409, Copyright 2010 The Raleway Project Authors (impallari@gmail.com), with Reserved Font Name \"Ralew","md5":"ed645c2b20d22612c4985bc4e4b4a7ff","sha1":"c66216ca77ce237387bb324c3cee39cf4aeefbf4","sha256":"56d3585bb750839c26c00719c450fb10eebb05ef6360923fea4f2372ad5d9345","sha512":"8e53dd938b65a8526ab6be61425e7a9086b42b8d541bc6401fa88e094e41592fca4f513c1b9fe64e1296f4fc3cdb6a7426ad8384fad419d3d53e60773c62ef02","ssdeep":"3072:+fgqBdPL+C7QLsxN25g5dZUQrFq7Ml4r837LivycRXE0OAyii:OgYPL3pN26tFGMl4nyii","tlshash":"c0f35c62b3531f48dd326eb441f9db5472867d01babbc30f90b8525cac8f58a9e316c9","first_seen":"2023-09-15T14:19:15Z","last_seen":"2026-08-30T11:39:06.750801Z","times_seen":82,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":2,"connect":34,"send":0,"wait":30,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v28/1Pt_g8zYS_SKggPNyCgSQamb1W0lwk4S4WjMPrQVIT9c2c8.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securerollsantanderbank.com/","date":"2026-08-30T11:38:36.481Z","timestamp":1788089916481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v28/1Pt_g8zYS_SKggPNyCgSQamb1W0lwk4S4WjMPrQVIT9c2c8.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securerollsantanderbank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securerollsantanderbank.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 89045\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 29 Aug 2026 01:01:55 GMT\r\nexpires: Sun, 29 Aug 2027 01:01:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 18 Jul 2022 19:39:16 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nage: 124601\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":161320,"size_decoded":89903,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 19 names, Microsoft, language 0x409, Copyright 2010 The Raleway Project Authors (impallari@gmail.com), with Reserved Font Name \"Ralew","md5":"b88299f8225ae49ce121b1f6aa456dbc","sha1":"acbf4a7df226ed1991f9b8dc5b8ea31f92f19ab7","sha256":"0276f04a000550c6f2409f817322400bacd99051fc9ff5eb44288ab6e36d24c3","sha512":"87e43e3a0bedac60af70a8988c37f629a07cc0bd5d5cd4889f9ad8cbd1ff585ae561b4de8cbd8870a6b1251180e1ebaa88eefa81a558e285e8db11ef512ed54e","ssdeep":"3072:4YsmGjx2S2kWh2iAcnV6+8MOond1DtHXCo+dDY8lnQvkRo9bA3mhXQO:dsmGfW4iAgBjdJVCo+d5lnM7bA0t","tlshash":"85f36ca2f7034b49ec3259b54aaac360b3067d187ae7c30f643d750dba5b5478e325ca","first_seen":"2025-10-02T13:42:41.081927Z","last_seen":"2026-08-30T11:39:06.751994Z","times_seen":67,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":25,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaooCPNLA3JC9c.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securerollsantanderbank.com/","date":"2026-08-30T11:38:36.487Z","timestamp":1788089916487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaooCPNLA3JC9c.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securerollsantanderbank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securerollsantanderbank.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 88052\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 29 Aug 2026 01:01:55 GMT\r\nexpires: Sun, 29 Aug 2027 01:01:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 124601\r\nlast-modified: Mon, 18 Jul 2022 19:36:06 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":163388,"size_decoded":88910,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409, Copyright 2010 The Raleway Project Authors (impallari@gmail.com), with Reserved Font Name \"Ralew","md5":"20d41940068e45b114d32b48d684ef39","sha1":"c01aaff04ead4a08b89bcb81d3d3d954345eb67f","sha256":"de90cc4f3bf8c7e949cabfc25884a4bd7d095cc199a868aa272e2299037ef763","sha512":"77b5e7f86dd3c8a5e3307a43fde21279c5f5ac7b241e82aa8962cfbd13f4fc683e3324d1f8900c2f9ae3698bc5b0f6ee5bf56227f907845160d9baa0c9ede4d9","ssdeep":"3072:hlUnEu8xr0z02Na1FSgEUQeaq7Ml4Y4IvL0mVTrq+1VP94GNrir:cnT8x92N6FSiaGMl4Yz/pir","tlshash":"b6f37df2b7174b49ec3359b446f9db5073867c157aa7c30fa0b8624cac8b48a5e316c9","first_seen":"2023-04-07T13:40:05Z","last_seen":"2026-08-30T15:05:23.973017Z","times_seen":322,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":18,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securerollsantanderbank.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"securerollsantanderbank.com","domain":"securerollsantanderbank.com","tld":"com"},"ip":{"addr":"172.67.165.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securerollsantanderbank.com/","date":"2026-08-30T11:38:36.532Z","timestamp":1788089916532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securerollsantanderbank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 09:12:23 GMT","end":"Fri, 27 Nov 2026 10:10:54 GMT"},"fingerprint":{"sha1":"07:9C:81:C9:49:5D:1B:9C:8F:56:30:89:1D:87:04:99:C6:A7:02:92","sha256":"00:66:61:B8:04:F3:51:9E:06:7D:7B:2B:5A:AA:E3:53:EF:B1:32:68:B9:86:42:F1:2D:18:A3:51:FE:23:1D:8D"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: securerollsantanderbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securerollsantanderbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 11:38:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a213250-58e0\"\r\nlast-modified: Thu, 04 Jun 2026 08:07:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ZR%2BiRh%2BRSKg2oyS%2BNPnevWLHkC6cd0XHdA2TiGsDH%2FSyj25xixLYhOSkxBm56OPVxCz4Z5ds5Zw0U8X66%2Fo1bYa7MMFF4NSujWpYKu0qt%2BeOGsynCwmwSo%2FoUKahjs30blCw%2BVX3mI82%2BRUcp0%3D\"}]}\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a333829a5d6e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22752,"size_decoded":6331,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-30T15:29:28.955875Z","times_seen":45498,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"securerollsantanderbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}