{"report_id":"ddfe57e7-8dd3-46a4-9839-818daa40d42f","version":0,"status":"done","tags":[],"date":"2026-09-25T22:38:20Z","url":{"schema":"https","addr":"santander-gt.com/","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":0,"asn":23352,"as":"DEFT.COM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"santander-gt.com/","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"title":"SANTANDER Global Trade","dom":{"size":23831,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (409)","md5":"e45ae5cb8b7308c2b11d46abb00c7b2e","sha1":"047ca439cb5dddad5cc41b7e8c42d7958a2d7550","sha256":"ef6b20e35c73c520cec71fdda77cd80306d3382b63f610bc12bcf5eabba83efe","sha512":"d5cc1872bee4ceec306ebbf8786494bd898a913dfa4e472aef366a46664b934fc598748506f10b2ead47790f2ba0aa75fc1c952f711e2f8c505ba168afc8f5ec","ssdeep":"192:1AO5saI8EB39bFa9UnjLFLewc7Jp/I1MKPUPUC7Eg9p+W03Mn8aWrICjp1x6SLyi:qZWfU/GFng0lKMcoGWwT84i1W","tlshash":"8bb2955a69f71142681791ad2fe35b162ab5c103d10ecd2c3e9c6788cfca684ce6378c","dom_hash":"domhashebc2e2dcb880c1c1592d347cfb6fe782","first_seen":"2026-09-25T22:38:26.945266Z","last_seen":"2026-09-25T22:38:26.945266Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"santander-gt.com/","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":0,"asn":23352,"as":"DEFT.COM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T22:38:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"santander-gt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"santander-gt.com","ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":27,"request_count":9,"received_data":1705161,"sent_data":4672,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"santander-gt.com/","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c491dd503e78a65c524d10d92ef86598","sha1":"60c78548fa0ab4e6dddaf13fc0d6abb0283a0f89","sha256":"a36a472c852b2eef934a675788485e94c737ab731304fb8e2111ec48c210f95a","sha512":"790e13c2ccebfa67ccbbdc6a84ce171ee9d97a29845e9b03252b31cfc812fde54bd28e49c8a3870b82861b4908db44ce23c8db8da79fa62bb76deba4086eb68f","ssdeep":"","tlshash":"28f0a7a7f2e9057282d7686a2347e24939b300433840da34397c5b4f3fc4d8080e2bd8","size":495,"data":"","first_seen":"2026-09-25T22:38:26.961163Z","last_seen":"2026-09-25T22:38:26.961163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"santander-gt.com/Fotos%20Travel/FondoTravel.jpg","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-gt.com/","date":"2026-09-25T22:37:51.446Z","timestamp":1790375871446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.santander-gt.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 19:54:25 GMT","end":"Tue, 08 Dec 2026 19:54:24 GMT"},"fingerprint":{"sha1":"C9:25:02:B4:93:19:1C:58:FD:78:49:63:DC:20:11:49:C2:1B:D8:D2","sha256":"E6:FC:19:1D:51:81:C2:F8:90:47:29:19:1E:5A:19:7D:FF:89:37:1C:81:42:6D:CF:32:81:3D:28:CE:42:65:83"}}},"request":{"raw":"GET /Fotos%20Travel/FondoTravel.jpg HTTP/1.1\r\nHost: santander-gt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-gt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 22:37:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 11 Sep 2026 17:04:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88107\r\ndate: Fri, 25 Sep 2026 22:37:51 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88107,"size_decoded":88355,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=9, description=Suitcases in airport. Travel concept. 3d rendering, orientation=upper-left, xresolution=1318, yresolution=1326, resolutionunit=2], baseline, precision 8, 1280x720, components 3","md5":"36f16548f9376df90137a8026899e598","sha1":"71f8f395ee6df565bea745934a4c7880b8877508","sha256":"763508a68dd74f7e41419ee6646ecbba6143469dadfa0218d89e18e9fa078637","sha512":"46dbc5767620bcfd5048340a1e6156a2932df838e1cb57e745225bb08363462945ea398a1f26f6161d5d9a2104c53b134201969efa443e0685d89eef5cadb10f","ssdeep":"1536:6XgJJzhXqhRPHGVm94SO1VAW7Vn3uT2WH4C+9D8R6TqR8ZmOFtTzsXE1gA4:NJJz1qhlHGtAEMHZ+/TqKQOFtXs8F4","tlshash":"8b83d0626a08a643dbf5bf30f8fe4110c2e70cc5aa20e68e77ddf95657510462eca2d7","first_seen":"2026-09-25T22:38:26.947481Z","last_seen":"2026-09-25T22:38:26.947481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"santander-gt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-gt.com/fotos%20tech/Fondo.jpg?v=1607535378","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-gt.com/","date":"2026-09-25T22:37:51.449Z","timestamp":1790375871449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.santander-gt.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 19:54:25 GMT","end":"Tue, 08 Dec 2026 19:54:24 GMT"},"fingerprint":{"sha1":"C9:25:02:B4:93:19:1C:58:FD:78:49:63:DC:20:11:49:C2:1B:D8:D2","sha256":"E6:FC:19:1D:51:81:C2:F8:90:47:29:19:1E:5A:19:7D:FF:89:37:1C:81:42:6D:CF:32:81:3D:28:CE:42:65:83"}}},"request":{"raw":"GET /fotos%20tech/Fondo.jpg?v=1607535378 HTTP/1.1\r\nHost: santander-gt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-gt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 22:37:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 11 Sep 2026 17:04:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 93260\r\ndate: Fri, 25 Sep 2026 22:37:51 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93260,"size_decoded":93508,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image","md5":"3e802cad8fca72927f1f69c2f27eec41","sha1":"7184c7d5ca4a22e07aa888ff0d98e1657032d331","sha256":"f3319d4c5b4ed3fe322f7c6ebaeded67c3567bcfa3295df9c64d235bc1a35123","sha512":"4c39808f32f7396178d96cbd4b6b9b6c5e494b20219d0c0edfc31f1dacc5011fa284884c43278007bd57cb9e395e6863275663a749cadd392df95b330af8dc1c","ssdeep":"1536:sV8o/CbJ8bcpfiU0eJDd2sFYjEta7g/+HEzyykCq46q01akDU63R6:sV8oK8wpKODdvFYjEta74HhkCq45gauW","tlshash":"fc930228eff0ebb5ec0b47302cfb09b1ca14ea7255f186027e664dd857ed4e827541a5","first_seen":"2026-09-25T22:38:26.948936Z","last_seen":"2026-09-25T22:38:26.948936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":431,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"santander-gt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-gt.com/ImgSeparador2.png","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-gt.com/","date":"2026-09-25T22:37:51.452Z","timestamp":1790375871452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.santander-gt.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 19:54:25 GMT","end":"Tue, 08 Dec 2026 19:54:24 GMT"},"fingerprint":{"sha1":"C9:25:02:B4:93:19:1C:58:FD:78:49:63:DC:20:11:49:C2:1B:D8:D2","sha256":"E6:FC:19:1D:51:81:C2:F8:90:47:29:19:1E:5A:19:7D:FF:89:37:1C:81:42:6D:CF:32:81:3D:28:CE:42:65:83"}}},"request":{"raw":"GET /ImgSeparador2.png HTTP/1.1\r\nHost: santander-gt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-gt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 22:37:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 18:54:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1006273\r\ndate: Fri, 25 Sep 2026 22:37:51 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1006273,"size_decoded":1006522,"mime_type":"image/png","magic":"PNG image data, 2872 x 535, 8-bit/color RGBA, non-interlaced","md5":"0f86291f69b6c24610ae7ed671dad017","sha1":"6f39762593cc5d4e1ccdd16b0079d31960c953c7","sha256":"6ef91fc0846fcbbe3aab840ff7be8e71bb391906b7a9573752ae91cb74c9b65c","sha512":"9352e1c3d1383ad8d6959c15e6ba821c3fe7838a3e8ef338317991622f08db208c0e6a4b375153accab18a01ca62841e3635959aa6680bc8bb3761b1686886b2","ssdeep":"24576:Y4xeIrUkcNeCitjLp14wMtPxBNp4H7MeQbxSs83gBaWdUV:9F7JT3WTmYeQbsseWdS","tlshash":"e72523a4cab4ffc12d3756dc6e3d5ce28670e27ec4445ee486b49b4803abe9295318c7","first_seen":"2026-09-25T22:38:26.950396Z","last_seen":"2026-09-25T22:38:26.950396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":563,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"santander-gt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-gt.com/LOGOS%20SGT/icono.png","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-gt.com/","date":"2026-09-25T22:37:52.277Z","timestamp":1790375872277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.santander-gt.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 19:54:25 GMT","end":"Tue, 08 Dec 2026 19:54:24 GMT"},"fingerprint":{"sha1":"C9:25:02:B4:93:19:1C:58:FD:78:49:63:DC:20:11:49:C2:1B:D8:D2","sha256":"E6:FC:19:1D:51:81:C2:F8:90:47:29:19:1E:5A:19:7D:FF:89:37:1C:81:42:6D:CF:32:81:3D:28:CE:42:65:83"}}},"request":{"raw":"GET /LOGOS%20SGT/icono.png HTTP/1.1\r\nHost: santander-gt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-gt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 22:37:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Sep 2026 17:03:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16780\r\ndate: Fri, 25 Sep 2026 22:37:52 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16780,"size_decoded":17027,"mime_type":"image/png","magic":"PNG image data, 459 x 459, 8-bit/color RGBA, non-interlaced","md5":"65a2c36368e98f57cfc619ccaf6b17e6","sha1":"4b9b5075ebdcfa323ee18eda0e2f1607686d71c4","sha256":"31729dcffdcd9b984f0d95e81dbd19d556895060ff8c6e0ecbfd17c416706fa0","sha512":"31695b4ca18125fba8e216b9a65b697325a36180830c479c9c06ea3c7b2f550983d1a8100ae00b9939aebb65396f640726e3614d874f514e23b133fdb3008403","ssdeep":"384:Xy5b5V4YbObS/dTpXVeoL0H6TsJt5ggPx2lPDx+LRlo7gquiMe9:CbFtUoel5r2NORlobuiMI","tlshash":"1872e15150beeb2c682b12d0799898fbb62f54d15fe03823bdb01c9ad7142647e57fe0","first_seen":"2026-09-25T22:38:26.951842Z","last_seen":"2026-09-25T22:38:26.951842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"santander-gt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-gt.com/","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T22:37:50.611Z","timestamp":1790375870611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.santander-gt.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 19:54:25 GMT","end":"Tue, 08 Dec 2026 19:54:24 GMT"},"fingerprint":{"sha1":"C9:25:02:B4:93:19:1C:58:FD:78:49:63:DC:20:11:49:C2:1B:D8:D2","sha256":"E6:FC:19:1D:51:81:C2:F8:90:47:29:19:1E:5A:19:7D:FF:89:37:1C:81:42:6D:CF:32:81:3D:28:CE:42:65:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: santander-gt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Fri, 11 Sep 2026 23:00:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5018\r\ndate: Fri, 25 Sep 2026 22:37:51 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24580,"size_decoded":5308,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (409), with CRLF line terminators","md5":"e3df6283b2bec2f39dfc13f4851f339d","sha1":"7284bec0997e2316951e701e53e73cf131eb8237","sha256":"3dfde5c581bfec4044035bd39ce17e416817827f07149373eec0129b7fe8cb7e","sha512":"27bf8395df0fa93415341f71f1964105f6580ab4f1c6166c626f5618feae72fe60cd7bd79517b660f523cc34058f63f1e0078629e119341bfc1f78fe009e8f22","ssdeep":"192:MOrqXiPSz0HI6SJi9XBYRNNHHqSLJcTzGLfyO19RR8MrjCedM3Sw5fl6DpQKYoz/:7yHqsMzwNdQKY/DJ4dd144+u","tlshash":"8cb26415a9c521025437939d9fa29b5affa68103c306826c3eec63974ff6944ca23fdc","first_seen":"2026-09-25T22:38:26.953766Z","last_seen":"2026-09-25T22:38:26.953766Z","times_seen":1,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":265,"connect":117,"send":0,"wait":119,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"santander-gt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-gt.com/LOGOS%20SGT/LogoPNG.png","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-gt.com/","date":"2026-09-25T22:37:51.441Z","timestamp":1790375871441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.santander-gt.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 19:54:25 GMT","end":"Tue, 08 Dec 2026 19:54:24 GMT"},"fingerprint":{"sha1":"C9:25:02:B4:93:19:1C:58:FD:78:49:63:DC:20:11:49:C2:1B:D8:D2","sha256":"E6:FC:19:1D:51:81:C2:F8:90:47:29:19:1E:5A:19:7D:FF:89:37:1C:81:42:6D:CF:32:81:3D:28:CE:42:65:83"}}},"request":{"raw":"GET /LOGOS%20SGT/LogoPNG.png HTTP/1.1\r\nHost: santander-gt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-gt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 22:37:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Sep 2026 17:03:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33784\r\ndate: Fri, 25 Sep 2026 22:37:51 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33784,"size_decoded":34089,"mime_type":"image/png","magic":"PNG image data, 1511 x 302, 8-bit/color RGBA, non-interlaced","md5":"f5911143056941c5d82c7d13bb6f1de0","sha1":"81113020573bf7869d77cfd85d59cb9b8f7b8cdb","sha256":"e68669133746e0cb0391fd75dfbaa36a6f3a4298ba0dc49b7ca13bca952cbb95","sha512":"bbd92a8712778d85549887e3ca496fff4cb2db5122d4f893b5e47bc6e72de8607994c663180b3d50193971d9e2542d5dda4f56cbedd561171bc75edb78491cd3","ssdeep":"768:BCg7JN6RFj3knbS4emHMAp07FUKXpEUlj3OwsF+Kqqx:nJ47knVtHMAp4XXaszsF+1E","tlshash":"53e2d0526d36e399dec544f6e1709edba32e8e0b7b5029090e5479fc3ac38a188d6198","first_seen":"2026-09-25T22:38:26.955161Z","last_seen":"2026-09-25T22:38:26.955161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"santander-gt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-gt.com/PRIMERFONDO.JPG","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-gt.com/","date":"2026-09-25T22:37:51.442Z","timestamp":1790375871442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.santander-gt.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 19:54:25 GMT","end":"Tue, 08 Dec 2026 19:54:24 GMT"},"fingerprint":{"sha1":"C9:25:02:B4:93:19:1C:58:FD:78:49:63:DC:20:11:49:C2:1B:D8:D2","sha256":"E6:FC:19:1D:51:81:C2:F8:90:47:29:19:1E:5A:19:7D:FF:89:37:1C:81:42:6D:CF:32:81:3D:28:CE:42:65:83"}}},"request":{"raw":"GET /PRIMERFONDO.JPG HTTP/1.1\r\nHost: santander-gt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-gt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 22:37:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 07 Sep 2026 21:37:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109130\r\ndate: Fri, 25 Sep 2026 22:37:51 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109130,"size_decoded":109379,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 2782x949, components 3","md5":"3c0aa283860d95ceff0bb8a294771df9","sha1":"c9b903a107c977321d82f94edcc26c5d044c0341","sha256":"081680f7a8948686d8aca18e4356549f1445c0db955e953f09e1e91734c76570","sha512":"ed6021b2699b1e8fd2a5e9f7712172aea7a03e65764676e0b45991f0bd5a1d0cab423e0816490c669682fa5bd0cc38403e949853c4c2902f34a374d35c1fcbcf","ssdeep":"1536:ScC5cE9ftJD5XtmNhsqXndrfQ2pEj85WNU2anG3fRMkqynYdz:IW0nt0rfQ2pEDyxGzqynYN","tlshash":"0fb3e8578d184e83f568c3a8ff034eac2b092a1df8473aff55651ec63f646260c5a43a","first_seen":"2026-09-25T22:38:26.95644Z","last_seen":"2026-09-25T22:38:26.95644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":446,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"santander-gt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-gt.com/Fotos%20Seguros/FondoSeguros.jpg","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-gt.com/","date":"2026-09-25T22:37:51.448Z","timestamp":1790375871448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.santander-gt.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 19:54:25 GMT","end":"Tue, 08 Dec 2026 19:54:24 GMT"},"fingerprint":{"sha1":"C9:25:02:B4:93:19:1C:58:FD:78:49:63:DC:20:11:49:C2:1B:D8:D2","sha256":"E6:FC:19:1D:51:81:C2:F8:90:47:29:19:1E:5A:19:7D:FF:89:37:1C:81:42:6D:CF:32:81:3D:28:CE:42:65:83"}}},"request":{"raw":"GET /Fotos%20Seguros/FondoSeguros.jpg HTTP/1.1\r\nHost: santander-gt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-gt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 22:37:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 11 Sep 2026 17:04:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47103\r\ndate: Fri, 25 Sep 2026 22:37:51 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47103,"size_decoded":47351,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x667, components 3","md5":"5da82b3e0f2ecd21654cce5ce5f31760","sha1":"cfc7f8413a0ba895db3fe59b80c9d702f8de1375","sha256":"d18ec2ca9e9d9f74f6bf98a1c05c756d894c30ca87c9ceceac1b850a8d1fbffb","sha512":"7a293f111203f785a364e2cd57a6722d8c570bff98a412ff52ec3fd4b87cc0d915aacc69dc1161cfec25b35f8d8a3bc59415ef80056e6891cb565942f104fa17","ssdeep":"768:sDW6vquO0DYkGHumeXerlTYrZHu2p0QshOpLnI03yiAXpBRm7PoK+I+SuLApwWR0:sDhq30DvGHqMlWu2p0QshOxICyiAXpBp","tlshash":"a423f1cb32675ed1e1dbab79a3ab6f58b750c7a49a21ad4f70214d04b3de6232d04cc1","first_seen":"2026-09-25T22:38:26.958329Z","last_seen":"2026-09-25T22:38:26.958329Z","times_seen":1,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"santander-gt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"santander-gt.com/ImgSeparador1.png","fqdn":"santander-gt.com","domain":"santander-gt.com","tld":"com"},"ip":{"addr":"75.102.22.59","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://santander-gt.com/","date":"2026-09-25T22:37:51.450Z","timestamp":1790375871450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.santander-gt.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 19:54:25 GMT","end":"Tue, 08 Dec 2026 19:54:24 GMT"},"fingerprint":{"sha1":"C9:25:02:B4:93:19:1C:58:FD:78:49:63:DC:20:11:49:C2:1B:D8:D2","sha256":"E6:FC:19:1D:51:81:C2:F8:90:47:29:19:1E:5A:19:7D:FF:89:37:1C:81:42:6D:CF:32:81:3D:28:CE:42:65:83"}}},"request":{"raw":"GET /ImgSeparador1.png HTTP/1.1\r\nHost: santander-gt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://santander-gt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 22:37:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 13 Sep 2026 00:32:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 283812\r\ndate: Fri, 25 Sep 2026 22:37:51 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":283812,"size_decoded":284060,"mime_type":"image/png","magic":"PNG image data, 2779 x 634, 8-bit/color RGBA, non-interlaced","md5":"c29707152ee4df3a3675daecbb24d918","sha1":"d3a00082578ad6989829ef2cee698489991da1b3","sha256":"d3313c48096bcd7c28f7bafe9fb95b35010c6e28ce2ec061837ca0a13be9fe49","sha512":"c18f557665caeaa4795d1fce78c2190409446db0afb4b3ac73e638ae053210301cd42a302881b5f19f2e3fe7f8265b6d108a975a7afe5389127dcbfda54456c6","ssdeep":"6144:N0RNG/jtgJRJHEn/gdEKCcK/5NLigTrdMlaDrxmGsyiGS7:Tq3En4gt7LigTpM4DrxZiGS7","tlshash":"8c54126dd5bbe4c9dedf403369119bd3bf53055a1580347ccbb6226e288af3ae021226","first_seen":"2026-09-25T22:38:26.959721Z","last_seen":"2026-09-25T22:38:26.959721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"santander-gt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"santander-gt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}