{"report_id":"0dac38c8-a5ae-4f4c-a539-671515767ec9","version":6,"status":"done","tags":[],"date":"2026-01-30T01:16:39Z","url":{"schema":"http","addr":"santandorbank-us.com","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"santandorbank-us.com/","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"title":"Online Bank Account | Personal Banking | Santander Bank - Santander","dom":{"size":38904,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4288)","md5":"494edb6325ad777df6f7f8478189f627","sha1":"76a46ed7bdcc19cec75f0fea992be1e6892095f2","sha256":"4f73ddf7ad23ee9f390c5ffe9bcfd8c4e49aaf78d28f508dc7de80e102d9b6b5","sha512":"a342673160500677ac39d89994db7fcaf6ee21b01a0be5db1ef8079c3e61adfe5b4a6a516d40d8f1e2d7d80b41327586b6cefcb5aa8cc2d22009a09772b95f16","ssdeep":"384:S5pbdPlHmosWfDEUUIPVzGIPKknQXhathRVrtMgk7NMa90ejJcn8hEJ9bDaP91Rn:6pbds/etk3xKn8hEf/PZWShV4F","tlshash":"15036333a744387f0693024bb7d81b9fbb7a5c07a32d299255ac439a63c1c51fa7d389","dom_hash":"domhash1fd3b1d17f50c25a124918660e655a46","first_seen":"2026-01-30T00:30:51.510526Z","last_seen":"2026-01-30T01:16:39.476251Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"santandorbank-us.com","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T01:16:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"santandorbank-us.com","ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2026-01-29","domain_rank":0,"first_seen":"2026-01-30T00:30:47.438654Z","last_seen":"2026-01-30T00:30:47.438654Z","alert_count":18,"request_count":9,"received_data":60312,"sent_data":4158,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"santandorbank-us.com/js/calculators.js","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab39251d10a7e1ea415bf36c89790d2","sha1":"dafb9c59461187e25ad6162e1947b19b4c896ef1","sha256":"8ca02d9472f4a20d2927816ac6fdb1460c6edfe5ffa873723d2a02354d26ca3c","sha512":"eda3edfbdd237330ce286f4f7748e303ffae673f03252c370d4e63967c0d76bdc4268b6691269565edc29be66931966535025b4634903715b5872ec008f3471e","ssdeep":"","tlshash":"0b7130a9b5b71121923311b11fbf95112f3c39573249d5c9b98cc2a04f838489a6fede","size":3628,"data":"","first_seen":"2026-01-30T00:30:51.516125Z","last_seen":"2026-01-30T01:16:39.480133Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santandorbank-us.com/js/main.js","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ec54846e5552a0e08060668550941e9","sha1":"6dfdbb287c809e8ca3953f70a64893f87434eb3d","sha256":"964baea138e477fc4cb9887f296522c5f673f77c1dbb8f3480590290389ef474","sha512":"412978b1707c240baf28f8164a25f9d5344f3d692ca724d43f7d4d79b2d77f332dc2d367924bd1928a116a9484e733a98af5f7460fce1269f4130edd45ded1bd","ssdeep":"","tlshash":"99f02d2f20f500310db300cfcbab53c2363000db3446c9267e5c0e49dfc294006b8aea","size":654,"data":"","first_seen":"2026-01-30T00:30:51.518393Z","last_seen":"2026-01-30T01:16:39.480782Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"santandorbank-us.com/","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T01:16:17.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santandorbank-us.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:59:12 GMT","end":"Wed, 29 Apr 2026 16:59:11 GMT"},"fingerprint":{"sha1":"1F:9A:DB:A9:CE:92:E6:9A:98:20:FC:65:31:CA:F5:D1:D4:7B:92:29","sha256":"1F:0B:A2:45:FB:7B:D0:00:9C:F4:44:50:BB:DC:D3:6F:14:9A:D1:51:F8:51:8C:10:B7:29:7B:07:48:20:9B:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: santandorbank-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Fri, 30 Jan 2026 01:16:17 GMT\r\nContent-Type: text/html; charset=utf-8\r\nLast-Modified: Thu, 29 Jan 2026 17:01:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"697b926d-979e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38814,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4288)","md5":"fe1ea37aaa05d565034e4532aae7af6d","sha1":"a1babe55313f2205d9ce212c6be4c1b36a8e1f48","sha256":"f7b5c84c701b186bdfe6f809fdbba7ddeae1a38c92f976835100ae83e10026fb","sha512":"129ea167aeac5623dc5791b28b97fb844ec99c80b85ebc72d9aa9c8891f46be3dc9dee42d32862ffe98b353187ee83941b21f43bc99d3524cadc6df14e14babf","ssdeep":"384:60pbdWlHmo1WfDEUUIPVzGIPKknQXhathRVrtMgk7NMa90ejJnz8wJ9bDaP91Rk9:9pbd3Uetk3xNz8wf/PZWShV4W","tlshash":"59036433a744387f0693024bb7d81b9fbb7a5c07a32d299255ac439a63c1c51fa7d389","first_seen":"2026-01-30T00:30:51.512414Z","last_seen":"2026-01-30T01:16:39.477506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":60,"dns":0,"connect":27,"send":0,"wait":27,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santandorbank-us.com/css/fonts.css","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://santandorbank-us.com/","date":"2026-01-30T01:16:17.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santandorbank-us.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:59:12 GMT","end":"Wed, 29 Apr 2026 16:59:11 GMT"},"fingerprint":{"sha1":"1F:9A:DB:A9:CE:92:E6:9A:98:20:FC:65:31:CA:F5:D1:D4:7B:92:29","sha256":"1F:0B:A2:45:FB:7B:D0:00:9C:F4:44:50:BB:DC:D3:6F:14:9A:D1:51:F8:51:8C:10:B7:29:7B:07:48:20:9B:3B"}}},"request":{"raw":"GET /css/fonts.css HTTP/1.1\r\nHost: santandorbank-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://santandorbank-us.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Fri, 30 Jan 2026 01:16:17 GMT\r\nContent-Type: text/css\r\nContent-Length: 546\r\nLast-Modified: Thu, 29 Jan 2026 16:58:40 GMT\r\nConnection: keep-alive\r\nETag: \"697b91c0-222\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":546,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"463775ee2acffcf060b991fa8801e7b5","sha1":"d7e61f840f09622e9764c0bbb14a8e94a253c4b1","sha256":"5a2932a6bae75968427726145e3f35dc4cdde8e100d6f766a7de689eb5b7185b","sha512":"7e126e16c3b7806ce20ec40102c082221d76a980238b8d283ef73a665f8e95148460c9b8cf84362b23cfb9e72ad6c3317680d27dbdb3b708d8ecf6a42b1cd921","ssdeep":"","tlshash":"d0f0b4000e2a6928c9724c9533db7f763c2d213bb045cada5b6e488e6cf15211769b3c","first_seen":"2026-01-30T00:30:51.514325Z","last_seen":"2026-01-30T01:16:39.478387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santandorbank-us.com/assets/logo.svg","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santandorbank-us.com/","date":"2026-01-30T01:16:17.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santandorbank-us.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:59:12 GMT","end":"Wed, 29 Apr 2026 16:59:11 GMT"},"fingerprint":{"sha1":"1F:9A:DB:A9:CE:92:E6:9A:98:20:FC:65:31:CA:F5:D1:D4:7B:92:29","sha256":"1F:0B:A2:45:FB:7B:D0:00:9C:F4:44:50:BB:DC:D3:6F:14:9A:D1:51:F8:51:8C:10:B7:29:7B:07:48:20:9B:3B"}}},"request":{"raw":"GET /assets/logo.svg HTTP/1.1\r\nHost: santandorbank-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://santandorbank-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Fri, 30 Jan 2026 01:16:17 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 6100\r\nLast-Modified: Thu, 29 Jan 2026 16:58:40 GMT\r\nConnection: keep-alive\r\nETag: \"697b91c0-17d4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6100,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"41900638372d473eab2f91ab2f43e2c0","sha1":"181076ed4ef7f6ea13f657a0bc90dae068adcae1","sha256":"a286b3352c1810724adc73bbde1ee0f0db8846e9744196f088b95529cf4fef90","sha512":"6d50c9ea906c217f5514ae009b83ba211558f0c23d704ce9c4ceb625adf39b3d6908b54a4621295f135a6ec84ccdf7984574d3f51fd6101700678935d4d2a387","ssdeep":"96:IHzcyMPgAXdIiZH1hMi4KciQ75fcGlJDtIhhQso+0zs/c5J0t1hEao838FTeD26:ZyCgsdzhe26R+0Hb8MoC6","tlshash":"a0c1bad9f77021b4a9ca53dee7349da83e6a617d37224684c23cf7e45a83d4cca48c51","first_seen":"2026-01-30T00:30:51.51518Z","last_seen":"2026-01-30T01:16:39.479306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santandorbank-us.com/js/calculators.js","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santandorbank-us.com/","date":"2026-01-30T01:16:17.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santandorbank-us.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:59:12 GMT","end":"Wed, 29 Apr 2026 16:59:11 GMT"},"fingerprint":{"sha1":"1F:9A:DB:A9:CE:92:E6:9A:98:20:FC:65:31:CA:F5:D1:D4:7B:92:29","sha256":"1F:0B:A2:45:FB:7B:D0:00:9C:F4:44:50:BB:DC:D3:6F:14:9A:D1:51:F8:51:8C:10:B7:29:7B:07:48:20:9B:3B"}}},"request":{"raw":"GET /js/calculators.js HTTP/1.1\r\nHost: santandorbank-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://santandorbank-us.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Fri, 30 Jan 2026 01:16:17 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 29 Jan 2026 16:58:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"697b91c0-e2c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3628,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5ab39251d10a7e1ea415bf36c89790d2","sha1":"dafb9c59461187e25ad6162e1947b19b4c896ef1","sha256":"8ca02d9472f4a20d2927816ac6fdb1460c6edfe5ffa873723d2a02354d26ca3c","sha512":"eda3edfbdd237330ce286f4f7748e303ffae673f03252c370d4e63967c0d76bdc4268b6691269565edc29be66931966535025b4634903715b5872ec008f3471e","ssdeep":"","tlshash":"0b7130a9b5b71121923311b11fbf95112f3c39573249d5c9b98cc2a04f838489a6fede","first_seen":"2026-01-30T00:30:51.516125Z","last_seen":"2026-01-30T01:16:39.480133Z","times_seen":2,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":47,"dns":1,"connect":26,"send":0,"wait":25,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santandorbank-us.com/js/main.js","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santandorbank-us.com/","date":"2026-01-30T01:16:17.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santandorbank-us.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:59:12 GMT","end":"Wed, 29 Apr 2026 16:59:11 GMT"},"fingerprint":{"sha1":"1F:9A:DB:A9:CE:92:E6:9A:98:20:FC:65:31:CA:F5:D1:D4:7B:92:29","sha256":"1F:0B:A2:45:FB:7B:D0:00:9C:F4:44:50:BB:DC:D3:6F:14:9A:D1:51:F8:51:8C:10:B7:29:7B:07:48:20:9B:3B"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: santandorbank-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://santandorbank-us.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Fri, 30 Jan 2026 01:16:17 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 654\r\nLast-Modified: Thu, 29 Jan 2026 16:58:40 GMT\r\nConnection: keep-alive\r\nETag: \"697b91c0-28e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":654,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6ec54846e5552a0e08060668550941e9","sha1":"6dfdbb287c809e8ca3953f70a64893f87434eb3d","sha256":"964baea138e477fc4cb9887f296522c5f673f77c1dbb8f3480590290389ef474","sha512":"412978b1707c240baf28f8164a25f9d5344f3d692ca724d43f7d4d79b2d77f332dc2d367924bd1928a116a9484e733a98af5f7460fce1269f4130edd45ded1bd","ssdeep":"","tlshash":"99f02d2f20f500310db300cfcbab53c2363000db3446c9267e5c0e49dfc294006b8aea","first_seen":"2026-01-30T00:30:51.518393Z","last_seen":"2026-01-30T01:16:39.480782Z","times_seen":2,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":50,"dns":0,"connect":29,"send":0,"wait":25,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santandorbank-us.com/assets/fonts/SantanderText.woff2","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://santandorbank-us.com/","date":"2026-01-30T01:16:18.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santandorbank-us.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:59:12 GMT","end":"Wed, 29 Apr 2026 16:59:11 GMT"},"fingerprint":{"sha1":"1F:9A:DB:A9:CE:92:E6:9A:98:20:FC:65:31:CA:F5:D1:D4:7B:92:29","sha256":"1F:0B:A2:45:FB:7B:D0:00:9C:F4:44:50:BB:DC:D3:6F:14:9A:D1:51:F8:51:8C:10:B7:29:7B:07:48:20:9B:3B"}}},"request":{"raw":"GET /assets/fonts/SantanderText.woff2 HTTP/1.1\r\nHost: santandorbank-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://santandorbank-us.com/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Fri, 30 Jan 2026 01:16:18 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 153\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8259bd2dc96b69fffb7c7e1f3411275e","sha1":"e945be7ea901f4a7cf170e184711c81bcd3527e6","sha256":"c375e42b6328de1880de1424a93267d573a1afa2ed37f72a35d8218f6880dd58","sha512":"b6c638e4421bf99ca1c8156247c5af6233e696f956f72cfccc88ac1521bc3d9c4ec6d2fc33e9ad78dd7eb95735543d9eea96dd5caa27878b8bc5c6a5a7dcb8c9","ssdeep":"","tlshash":"48c02b2d35137c4cc5a3317432c37080c0da833764ba41128440800331cf2a98ac7397","first_seen":"2025-05-03T23:55:22.499243Z","last_seen":"2026-08-17T04:17:56.183573Z","times_seen":18237,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santandorbank-us.com/assets/fonts/SantanderHeadline.woff2","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://santandorbank-us.com/","date":"2026-01-30T01:16:18.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santandorbank-us.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:59:12 GMT","end":"Wed, 29 Apr 2026 16:59:11 GMT"},"fingerprint":{"sha1":"1F:9A:DB:A9:CE:92:E6:9A:98:20:FC:65:31:CA:F5:D1:D4:7B:92:29","sha256":"1F:0B:A2:45:FB:7B:D0:00:9C:F4:44:50:BB:DC:D3:6F:14:9A:D1:51:F8:51:8C:10:B7:29:7B:07:48:20:9B:3B"}}},"request":{"raw":"GET /assets/fonts/SantanderHeadline.woff2 HTTP/1.1\r\nHost: santandorbank-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://santandorbank-us.com/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Fri, 30 Jan 2026 01:16:18 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 153\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8259bd2dc96b69fffb7c7e1f3411275e","sha1":"e945be7ea901f4a7cf170e184711c81bcd3527e6","sha256":"c375e42b6328de1880de1424a93267d573a1afa2ed37f72a35d8218f6880dd58","sha512":"b6c638e4421bf99ca1c8156247c5af6233e696f956f72cfccc88ac1521bc3d9c4ec6d2fc33e9ad78dd7eb95735543d9eea96dd5caa27878b8bc5c6a5a7dcb8c9","ssdeep":"","tlshash":"48c02b2d35137c4cc5a3317432c37080c0da833764ba41128440800331cf2a98ac7397","first_seen":"2025-05-03T23:55:22.499243Z","last_seen":"2026-08-17T04:17:56.183573Z","times_seen":18237,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santandorbank-us.com/assets/favicon.svg","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santandorbank-us.com/","date":"2026-01-30T01:16:18.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santandorbank-us.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:59:12 GMT","end":"Wed, 29 Apr 2026 16:59:11 GMT"},"fingerprint":{"sha1":"1F:9A:DB:A9:CE:92:E6:9A:98:20:FC:65:31:CA:F5:D1:D4:7B:92:29","sha256":"1F:0B:A2:45:FB:7B:D0:00:9C:F4:44:50:BB:DC:D3:6F:14:9A:D1:51:F8:51:8C:10:B7:29:7B:07:48:20:9B:3B"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: santandorbank-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://santandorbank-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Fri, 30 Jan 2026 01:16:18 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 642\r\nLast-Modified: Thu, 29 Jan 2026 16:58:40 GMT\r\nConnection: keep-alive\r\nETag: \"697b91c0-282\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":642,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c7c885a8b1b10a16a4d3a1cf773bae93","sha1":"d2468519bee9b74b870e19e7ec0ecfde15760f1d","sha256":"a136067c1582a25bf10f65033c44d05d2bc8422d0ca115866d6dd2887d8d4613","sha512":"de27665d7c91bd4b65c73318f336bc5af3e81832384c13ff17252371ca0db52ebcfaef0c316192d6741cd23a60ad22fd5927eed9ac1416a90b0eaa70d017658f","ssdeep":"","tlshash":"baf07dbde18061a9cd2ad1f595d161f0780da4be073f124192d08e34b3290dd85fdabf","first_seen":"2026-01-30T00:30:51.517525Z","last_seen":"2026-01-30T01:16:39.482178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santandorbank-us.com/css/styles.css","fqdn":"santandorbank-us.com","domain":"santandorbank-us.com","tld":"com"},"ip":{"addr":"62.60.226.179","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://santandorbank-us.com/","date":"2026-01-30T01:16:17.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"santandorbank-us.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 16:59:12 GMT","end":"Wed, 29 Apr 2026 16:59:11 GMT"},"fingerprint":{"sha1":"1F:9A:DB:A9:CE:92:E6:9A:98:20:FC:65:31:CA:F5:D1:D4:7B:92:29","sha256":"1F:0B:A2:45:FB:7B:D0:00:9C:F4:44:50:BB:DC:D3:6F:14:9A:D1:51:F8:51:8C:10:B7:29:7B:07:48:20:9B:3B"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: santandorbank-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://santandorbank-us.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Fri, 30 Jan 2026 01:16:17 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 29 Jan 2026 16:58:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"697b91c0-1d4e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7502,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"63a626a432ab84f0fde679efe04f93d0","sha1":"ef1c74a661e8fed94eedcbb012ba1d751daec903","sha256":"702d5092c4f9b6c4c1801fb683f3ba72f7334168051d1828d9d96ca6306da275","sha512":"f3a9b4d3b421421f731a71150c09bedcf3ce6f13508801504c4b0e3a76c9803fb2cf2d6a487c1e0da21256158d1a2c25832fb01fb238df73cc6b727431079c30","ssdeep":"192:k0A2bn2L6UaNwF6/VN2KCwju7wI1eCR62cHgC3v:k0bzN5/V0YycIHRtcn/","tlshash":"d0f196b22b30a2657477f594e9856e8f732ca013c42ad7fcaf94501cddcd2e79635a08","first_seen":"2026-01-30T00:30:51.513466Z","last_seen":"2026-01-30T01:16:39.48285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"santandorbank-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}