Is santandersharepoint.lcptest.co.uk safe?

No. MalwareAnalyzer scanned santandersharepoint.lcptest.co.uk on 22 Aug 2026 and returned a suspicious verdict with a score of 46 out of 100, categorised as suspicious-infrastructure. Treat it as hostile until it is re-checked.

How was santandersharepoint.lcptest.co.uk checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

santandersharepoint.lcptest.co.uk - suspicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned santandersharepoint.lcptest.co.uk and returned a suspicious verdict (score 46), categorised as suspicious-infrastructure. The page resolved to 104.18.2.241 on Cloudflare, Inc. in US. 1 domain and 1 IP were contacted, over 8 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 46) · Confidence 55%
Scanned URL: https://santandersharepoint.lcptest.co.uk/
Domain: santandersharepoint.lcptest.co.uk · IP: 104.18.2.241 · AS13335 · US
Server: cloudflare
Page title: Santander
HTTP status: 200 · text/html
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 6 15: · subject CN=santandersharepoint.lcptest.co.uk
HTTP requests captured: 8 · cookies set: 2 · outgoing links: 1
Scan tier: standard · observed 2026-08-22 10:51:02 UTC

Antivirus & YARA (1 of 48 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

Antivirus/YARA detection in page content: DLV_HTML_Smuggling
Algorithmically-generated (DGA-like) hostname
Valid TLS, no impersonation or off-origin credential post

Detected technologies

Cloudflare

Contacted infrastructure

104.18.3.241 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

santandersharepoint.lcptest.co.uk
104.18.2.241
https://santandersharepoint.lcptest.co.uk/
https://santandersharepoint.lcptest.co.uk/favicon.ico
https://santandersharepoint.lcptest.co.uk/appcode/index-D68nQba4.js
https://santandersharepoint.lcptest.co.uk/appcode/index-C27EqtU7.css
https://santandersharepoint.lcptest.co.uk/cdn-cgi/challenge-platform/scripts/jsd/main.js

Questions about santandersharepoint.lcptest.co.uk

Is santandersharepoint.lcptest.co.uk safe?: No. MalwareAnalyzer scanned santandersharepoint.lcptest.co.uk on 22 Aug 2026 and returned a suspicious verdict with a score of 46 out of 100, categorised as suspicious-infrastructure. Treat it as hostile until it is re-checked.
How was santandersharepoint.lcptest.co.uk checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of santandersharepoint.lcptest.co.uk

Scanned on MalwareAnalyzer by Cyble · Open interactive scan