{"report_id":"9fc71df3-15d3-488d-aa40-19c9f7c7b3fe","version":6,"status":"done","tags":[],"date":"2026-01-14T14:44:48Z","url":{"schema":"https","addr":"santander-connectchat.com","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"santander-connectchat.com/support","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"title":"Just a moment...","dom":{"size":18335,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (627)","md5":"6b3810af7bca03deb5d70a73d8c37f39","sha1":"3211a18c036504e8cd0c6279ba06f82b59dd73bc","sha256":"bd0338b1591d2d3e2b369c78cf4773c04699607f20e7b9368f495e86a0a65e94","sha512":"7c1db6988757641a3b9655e17929fca21ef13dfdc8d7873bba1718d9b5cd9a5655e8b2e53f7404f34c36450008b548ef92785d61bd01fda03d8122a164e4c704","ssdeep":"192:jtB1v134ufyJoWB1vmCOGthlAVQ8PJiO2hEXQr9n9Z6JcXWHmi2jMXfe+:hOu3OtOUxh98rmtU","tlshash":"da82e61b85b6114728139ab523ff62105334f243db0ade6efe9d5b84cf4ca156da13ac","dom_hash":"domhash27190cc66a574c8f226f7f3d93884058","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"santander-connectchat.com","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-18T14:44:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"santander-connectchat.com","ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-01-14T13:46:17.622983Z","last_seen":"2026-01-14T13:46:17.622983Z","alert_count":75,"request_count":25,"received_data":179116,"sent_data":12110,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-01-11T22:38:37.608027Z","alert_count":0,"request_count":6,"received_data":307024,"sent_data":2898,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50465,"data":"","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/support","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"43d308546b2f6c0a09b69acabd38c7cd","sha1":"d02ae8145392dd7853be9802d75332c320e282d7","sha256":"8305d75592f1c142c4b66cfa84324ae633ef06a4ef878b59fede963c1d0453e2","sha512":"80855ef2bb7f651da4459f6c58dcecf487c6027e7cd16e549a6faf1c7e77d5c336f15cc82924004168201aeb0acdb98367b4625c9bc73c638c8931e687324dbc","ssdeep":"","tlshash":"6ab0228a23b080c033a3c02208c3020c202300eb0883cc003b0e3000af88bab82e3bce","size":104,"data":"","first_seen":"2025-07-10T23:23:02.094073Z","last_seen":"2026-01-20T18:54:51.374588Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50465,"data":"","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50465,"data":"","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50465,"data":"","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50465,"data":"","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50465,"data":"","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"santander-connectchat.com/support","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T14:44:41.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /support HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3662\r\ncontent-encoding: gzip\r\ndate: Wed, 14 Jan 2026 14:44:42 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (627), with CRLF line terminators","md5":"06308d3cca291245c498ba1dc9a4dd53","sha1":"12fa281b28d35b852dbc89bfcd7ed9ec5802e6b7","sha256":"3b2e08678a4fa9621cdf2540c9b3035a4e4f267090754abc75255bcc692546eb","sha512":"3b29103e6493a89e4a1de02c530ef23713b9c44e27361fbbe574387c13d2a9ddcc003b86ad7a7af08b525659eaaef4a9043a2cffaa162801011fbb023e467a0a","ssdeep":"192:AB1peQA0kB1p92XIoERf+JV1ZwrEAmgF6vW4DB9f+5hQT:IUQbEr2SRjlFGpBV/T","tlshash":"8182091b8502104724339bb5dbb7a228eb15a253d303927effed5b814fb89045996fec","first_seen":"2025-07-10T23:23:02.089633Z","last_seen":"2026-01-14T14:44:49.152799Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1335,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1334,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:28.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://santander-connectchat.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 14:44:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Jan 2026 17:21:54 GMT\r\ncache-control: max-age=600, stale-if-error=10800, stale-while-revalidate=600, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://santander-connectchat.com\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=6Uv9fibwmaqJcS7KCjXLX3GD._BI4NquMiRC0FGFs.s-1768401868684-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bdde95f2cac8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50464)","md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:35.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:35 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:35 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/support","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T14:44:37.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /support HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3662\r\ncontent-encoding: gzip\r\ndate: Wed, 14 Jan 2026 14:44:38 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (627), with CRLF line terminators","md5":"06308d3cca291245c498ba1dc9a4dd53","sha1":"12fa281b28d35b852dbc89bfcd7ed9ec5802e6b7","sha256":"3b2e08678a4fa9621cdf2540c9b3035a4e4f267090754abc75255bcc692546eb","sha512":"3b29103e6493a89e4a1de02c530ef23713b9c44e27361fbbe574387c13d2a9ddcc003b86ad7a7af08b525659eaaef4a9043a2cffaa162801011fbb023e467a0a","ssdeep":"192:AB1peQA0kB1p92XIoERf+JV1ZwrEAmgF6vW4DB9f+5hQT:IUQbEr2SRjlFGpBV/T","tlshash":"8182091b8502104724339bb5dbb7a228eb15a253d303927effed5b814fb89045996fec","first_seen":"2025-07-10T23:23:02.089633Z","last_seen":"2026-01-14T14:44:49.152799Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1338,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:39.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Wed, 14 Jan 2026 14:44:39 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:39.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:39 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:39 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:35.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Wed, 14 Jan 2026 14:44:35 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:42.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://santander-connectchat.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 14 Jan 2026 14:44:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Jan 2026 17:21:54 GMT\r\ncache-control: max-age=600, stale-if-error=10800, stale-while-revalidate=600, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://santander-connectchat.com\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=5KseUaj.k277.ruUlcPQbk749bWfjqWvwnCFgGhrrig-1768401882491-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bdde9b58813b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50464)","md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/support","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T14:44:27.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /support HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 14 Jan 2026 14:44:28 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (627), with CRLF line terminators","md5":"06308d3cca291245c498ba1dc9a4dd53","sha1":"12fa281b28d35b852dbc89bfcd7ed9ec5802e6b7","sha256":"3b2e08678a4fa9621cdf2540c9b3035a4e4f267090754abc75255bcc692546eb","sha512":"3b29103e6493a89e4a1de02c530ef23713b9c44e27361fbbe574387c13d2a9ddcc003b86ad7a7af08b525659eaaef4a9043a2cffaa162801011fbb023e467a0a","ssdeep":"192:AB1peQA0kB1p92XIoERf+JV1ZwrEAmgF6vW4DB9f+5hQT:IUQbEr2SRjlFGpBV/T","tlshash":"8182091b8502104724339bb5dbb7a228eb15a253d303927effed5b814fb89045996fec","first_seen":"2025-07-10T23:23:02.089633Z","last_seen":"2026-01-14T14:44:49.152799Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1325,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:35.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://santander-connectchat.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 14 Jan 2026 14:44:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Jan 2026 17:21:54 GMT\r\ncache-control: max-age=600, stale-if-error=10800, stale-while-revalidate=600, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://santander-connectchat.com\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=h3A1QebHaB.FtxoUyNN8qLB1aDbD0LJibM1gaPDsgYM-1768401875583-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bdde98a48f0b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50464)","md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:35.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:35 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:35 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:39.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://santander-connectchat.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 14 Jan 2026 14:44:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Jan 2026 17:21:54 GMT\r\ncache-control: max-age=600, stale-if-error=10800, stale-while-revalidate=600, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://santander-connectchat.com\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=bmyFnuPNfk.3uN2Y3XrY27eviAvhlztjsfT_VbA2U1w-1768401879043-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bdde99ff86db515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50464)","md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:42.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:42 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:42 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/support","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T14:44:44.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /support HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3662\r\ncontent-encoding: gzip\r\ndate: Wed, 14 Jan 2026 14:44:45 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (627), with CRLF line terminators","md5":"06308d3cca291245c498ba1dc9a4dd53","sha1":"12fa281b28d35b852dbc89bfcd7ed9ec5802e6b7","sha256":"3b2e08678a4fa9621cdf2540c9b3035a4e4f267090754abc75255bcc692546eb","sha512":"3b29103e6493a89e4a1de02c530ef23713b9c44e27361fbbe574387c13d2a9ddcc003b86ad7a7af08b525659eaaef4a9043a2cffaa162801011fbb023e467a0a","ssdeep":"192:AB1peQA0kB1p92XIoERf+JV1ZwrEAmgF6vW4DB9f+5hQT:IUQbEr2SRjlFGpBV/T","tlshash":"8182091b8502104724339bb5dbb7a228eb15a253d303927effed5b814fb89045996fec","first_seen":"2025-07-10T23:23:02.089633Z","last_seen":"2026-01-14T14:44:49.152799Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:39.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:39 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:39 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:45.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Wed, 14 Jan 2026 14:44:45 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:28.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Wed, 14 Jan 2026 14:44:28 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:28.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:28 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:28 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:32.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Wed, 14 Jan 2026 14:44:32 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:45.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://santander-connectchat.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 14 Jan 2026 14:44:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Jan 2026 17:21:54 GMT\r\ncache-control: max-age=600, stale-if-error=10800, stale-while-revalidate=600, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://santander-connectchat.com\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=bdf5X3f8OyZhD9ZWKl.4qIQCyvoxFcaGJidNcsvTwf4-1768401885958-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bdde9cb2e66b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50464)","md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:46.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:46 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:46 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T14:44:26.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: /support\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 14 Jan 2026 14:44:27 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":18958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":136,"dns":1,"connect":67,"send":0,"wait":73,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/support","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T14:44:30.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /support HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3662\r\ncontent-encoding: gzip\r\ndate: Wed, 14 Jan 2026 14:44:32 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (627), with CRLF line terminators","md5":"06308d3cca291245c498ba1dc9a4dd53","sha1":"12fa281b28d35b852dbc89bfcd7ed9ec5802e6b7","sha256":"3b2e08678a4fa9621cdf2540c9b3035a4e4f267090754abc75255bcc692546eb","sha512":"3b29103e6493a89e4a1de02c530ef23713b9c44e27361fbbe574387c13d2a9ddcc003b86ad7a7af08b525659eaaef4a9043a2cffaa162801011fbb023e467a0a","ssdeep":"192:AB1peQA0kB1p92XIoERf+JV1ZwrEAmgF6vW4DB9f+5hQT:IUQbEr2SRjlFGpBV/T","tlshash":"8182091b8502104724339bb5dbb7a228eb15a253d303927effed5b814fb89045996fec","first_seen":"2025-07-10T23:23:02.089633Z","last_seen":"2026-01-14T14:44:49.152799Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1338,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:32.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://santander-connectchat.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 14:44:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Jan 2026 17:21:54 GMT\r\ncache-control: max-age=600, stale-if-error=10800, stale-while-revalidate=600, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://santander-connectchat.com\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=vwSDr_TNu8v89VcOsG2GS5B6C5wChIAFKyQzoAGyyUQ-1768401872116-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bdde974abc98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50464)","md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:32.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:32 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:32 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/support","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T14:44:34.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /support HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3662\r\ncontent-encoding: gzip\r\ndate: Wed, 14 Jan 2026 14:44:35 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (627), with CRLF line terminators","md5":"06308d3cca291245c498ba1dc9a4dd53","sha1":"12fa281b28d35b852dbc89bfcd7ed9ec5802e6b7","sha256":"3b2e08678a4fa9621cdf2540c9b3035a4e4f267090754abc75255bcc692546eb","sha512":"3b29103e6493a89e4a1de02c530ef23713b9c44e27361fbbe574387c13d2a9ddcc003b86ad7a7af08b525659eaaef4a9043a2cffaa162801011fbb023e467a0a","ssdeep":"192:AB1peQA0kB1p92XIoERf+JV1ZwrEAmgF6vW4DB9f+5hQT:IUQbEr2SRjlFGpBV/T","tlshash":"8182091b8502104724339bb5dbb7a228eb15a253d303927effed5b814fb89045996fec","first_seen":"2025-07-10T23:23:02.089633Z","last_seen":"2026-01-14T14:44:49.152799Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1354,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1353,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:42.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=932531c6bf87b5eb HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Wed, 14 Jan 2026 14:44:42 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:42.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:42 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:42 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:46.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:46 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:46 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:32.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:32 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:32 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-connectchat.com/favicon.ico","fqdn":"santander-connectchat.com","domain":"santander-connectchat.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-connectchat.com/support","date":"2026-01-14T14:44:28.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.santander-connectchat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 13:05:33 GMT","end":"Mon, 13 Apr 2026 13:05:32 GMT"},"fingerprint":{"sha1":"05:EA:AD:84:CE:42:B0:A2:C5:31:5E:55:F2:B1:F7:CD:BC:9C:9C:DA","sha256":"5F:AB:B0:AB:73:E6:0D:56:9A:5C:F2:77:45:23:ED:9A:F9:DC:5F:C5:C0:65:1D:5B:BA:6E:BC:27:1B:B0:B8:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: santander-connectchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://santander-connectchat.com/support\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Jan 2026 14:44:28 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 07 Jul 2025 17:28:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3126\r\ndate: Wed, 14 Jan 2026 14:44:28 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3126,"size_decoded":0,"mime_type":"image/x-icon","magic":"PC bitmap, Windows 3.x format, 32 x 32 x 24, image size 3072, resolution 3780 x 3780 px/m, cbSize 3126, bits offset 54","md5":"7aae90ebc4f50a35a497ccffcf817f15","sha1":"ca5a834c29003d0e18705ebdd9984b1fdbd78310","sha256":"0396d795adc0ebe6f1ecf8fc4165b92597b13987ffa43197698108c294feaaec","sha512":"736a25cafa747721382cf0fda331e93fb338d2ead9e8948ab6fb3a7b7cd043675c82e70553bff1232ef32a60bab325e2e7cbd007792d5c29e65ebc3b99a2874b","ssdeep":"","tlshash":"9c51f12057c4c717e4458eb393e1e5181d471c5d2d50e1e4e293bade4b792d121d34b9","first_seen":"2023-05-08T19:05:18Z","last_seen":"2026-07-19T03:03:04.234719Z","times_seen":157,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"santander-connectchat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}