{"report_id":"017ea7be-45c0-45b0-ad24-0de8347954a4","version":6,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-04-15T04:54:48Z","url":{"schema":"https","addr":"facebook-clone-rho-six.vercel.app/signin","fqdn":"facebook-clone-rho-six.vercel.app","domain":"facebook-clone-rho-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"facebook-clone-rho-six.vercel.app/signin","fqdn":"facebook-clone-rho-six.vercel.app","domain":"facebook-clone-rho-six.vercel.app","tld":"vercel.app"},"title":"Facebook","dom":{"size":4843,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4843), with no line terminators","md5":"947e41de71438bf3039dc4034d0d32e5","sha1":"482c15b49ebac8f405b924144c480b36d92de0d5","sha256":"3d77c873f026bff7c65184a7d6a10230c8f96a8580225fb83e3a26bc5413699a","sha512":"4f278cd7527beb89110dd17abb56cfd6824c69c88a0fd846fb64214190a9db6177c9937f32fa2c1577add62deabef476a10c43d940a188c2dea83126251f0597","ssdeep":"48:n6pXjGCwC7RBojc1uD7E6MTgHVDnU2LltDR6TKTjTHsxjXyLaAQL:n6JXwC7RB91uvVMMHVzU20TKT8ko","tlshash":"9aa140107c12dc2a62cf0edc6872162855b99309c66315cdf9a5c3f62bafebcc273855","dom_hash":"domhash4c71b32f675c0938cf564f0afbfe55f2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"facebook-clone-rho-six.vercel.app/signin","fqdn":"facebook-clone-rho-six.vercel.app","domain":"facebook-clone-rho-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T04:54:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-15","alert":"Phishing Block","trigger":"facebook-clone-rho-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"facebook-clone-rho-six.vercel.app","ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-17T19:12:14.066669Z","last_seen":"2026-04-15T00:11:25.642906Z","alert_count":20,"request_count":5,"received_data":204955,"sent_data":2423,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"facebook-clone-rho-six.vercel.app/static/js/main.22dc50cb.js","fqdn":"facebook-clone-rho-six.vercel.app","domain":"facebook-clone-rho-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"72d25bdf7999d9a197a05e36cc0fbcf7","sha1":"af84e29ac599e0842a92953200a9baed376d6b8a","sha256":"6410f0750e088fb9e50eed39f16fd68e9dce7510a60407e41e77cf23c2e8a6ea","sha512":"1110cd96ab80ea2d95d685a02f7b0747e104fff5aa0e16db0876b8888bb76253cf406d4a68df729f7367dc86b73e8afd3faf47b0fae78ef3e49f0334be8c3e66","ssdeep":"3072:ThUWgLViBXVqkvkUA6uYQ3eqo9IESwYBY2Y:2W8iBXVLv+D75ESo","tlshash":"82041ae83551f5956fb302a740af540a737d1a1f280d8960a210fc9eb4f885eb27bf9d","size":188814,"data":"","first_seen":"2026-02-17T19:12:16.207549Z","last_seen":"2026-04-15T04:54:49.139925Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"facebook-clone-rho-six.vercel.app/static/css/main.ad53a877.css","fqdn":"facebook-clone-rho-six.vercel.app","domain":"facebook-clone-rho-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://facebook-clone-rho-six.vercel.app/signin","date":"2026-04-15T04:54:26.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /static/css/main.ad53a877.css HTTP/1.1\r\nHost: facebook-clone-rho-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-rho-six.vercel.app/signin\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2001\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"main.ad53a877.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 15 Apr 2026 04:54:26 GMT\r\netag: \"8baede8efa1c554bd41299769dd661c2\"\r\nlast-modified: Wed, 15 Apr 2026 04:21:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t7w7k-1776228866040-3943ea4862d4\r\ncontent-length: 1322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4648,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4603)","md5":"9d679e45fb591223e88f2612b98bfb67","sha1":"5cb8db9042222a378053377b7fb52f2ccac4f956","sha256":"8ff16078e7c8a9a1f4cb97a9fcdf2d29d0ce6ae45615444832dfbafe2021401c","sha512":"aad17a41ba86b9bc50eed0f806df52a40edc3170a4b087e182e7f9925da3dd1b214905818e6779d86c405c5b900fede81fbfd5ce6fab20679dfbdecd38dead5c","ssdeep":"48:aGDeEr1OHFxITT2qptihiwxrIuE4SSa1FtJQ+qTSm/CNJL1n/rBZbYYv/johOaD+:tAHFWLihiwqPfGJKNjf7M4Qu+ez","tlshash":"43a132616b14163af53ad87c789662c6b145e823e36785d8bc52933eccc64a32774f4c","first_seen":"2026-02-17T19:12:16.208685Z","last_seen":"2026-04-15T04:54:49.127528Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-15","alert":"Phishing Block","trigger":"facebook-clone-rho-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-rho-six.vercel.app/logo192.png","fqdn":"facebook-clone-rho-six.vercel.app","domain":"facebook-clone-rho-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-rho-six.vercel.app/signin","date":"2026-04-15T04:54:26.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: facebook-clone-rho-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-rho-six.vercel.app/signin\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17067\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo192.png\"\r\ncontent-type: image/png\r\ndate: Wed, 15 Apr 2026 04:54:26 GMT\r\netag: \"33dbdd0177549353eeeb785d02c294af\"\r\nlast-modified: Wed, 15 Apr 2026 00:09:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fh5ht-1776228866332-961223e29a45\r\ncontent-length: 5347\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-07-24T02:21:06.498926Z","times_seen":11853,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-15","alert":"Phishing Block","trigger":"facebook-clone-rho-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-rho-six.vercel.app/fb.png","fqdn":"facebook-clone-rho-six.vercel.app","domain":"facebook-clone-rho-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-rho-six.vercel.app/signin","date":"2026-04-15T04:54:26.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /fb.png HTTP/1.1\r\nHost: facebook-clone-rho-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-rho-six.vercel.app/signin\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 16\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fb.png\"\r\ncontent-type: image/png\r\ndate: Wed, 15 Apr 2026 04:54:26 GMT\r\netag: \"d1fa54e286c450ab1a3b874b2c6cf90d\"\r\nlast-modified: Wed, 15 Apr 2026 04:54:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zd272-1776228866228-ace66dceb881\r\ncontent-length: 2734\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 160, 8-bit/color RGBA, non-interlaced","md5":"d1fa54e286c450ab1a3b874b2c6cf90d","sha1":"821a0e79e659946686b33855fda63d3ec5b1edda","sha256":"066e7845966d7a0bf115b1770a8360b477eb08feccfade007b43052b291b0712","sha512":"8b8ae5c2deb22daf130e47fa57e66e9155b653c826bf39becac4854b428cc7b36c125e09ea281fd31411c936685701a576ed9a713c3ba6b9cc620706d0491b21","ssdeep":"","tlshash":"315119e1ae8d3d0308386687492b954c2cca39d122e191770ef61f756c63ff7438114a","first_seen":"2026-02-17T19:12:16.204932Z","last_seen":"2026-04-15T04:54:49.136177Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-15","alert":"Phishing Block","trigger":"facebook-clone-rho-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-rho-six.vercel.app/signin","fqdn":"facebook-clone-rho-six.vercel.app","domain":"facebook-clone-rho-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T04:54:25.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /signin HTTP/1.1\r\nHost: facebook-clone-rho-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 16\r\ncache-control: s-maxage=0\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 15 Apr 2026 04:54:25 GMT\r\netag: \"084f1eaa9fecb14cecfe761dd52225d8\"\r\nlast-modified: Wed, 15 Apr 2026 04:54:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t7w7k-1776228865845-1393b5cab62a\r\ncontent-length: 638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":638,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (638), with no line terminators","md5":"084f1eaa9fecb14cecfe761dd52225d8","sha1":"ff7be63142b5e25690ad02dc68864cb9b7b87bf8","sha256":"4d7cbc9208718ee88c1a6347420ebeebc324d47fbba016e8387036bd691b959d","sha512":"5172092ad6a4516a35b36d684f4264c6181fb1553724028d481c07762b82658095e583ea55855758d572d3c2ee471ec82a20b5b7da7e12bf4d38b940e06107d6","ssdeep":"","tlshash":"95f07d52cc20c48d5230477bfd72b07cc94abd0cd692bc54b8c618aa59d4bb38d67d55","first_seen":"2026-02-17T19:12:16.206546Z","last_seen":"2026-04-15T04:54:49.138129Z","times_seen":6,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":10,"receive":10,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-15","alert":"Phishing Block","trigger":"facebook-clone-rho-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-rho-six.vercel.app/static/js/main.22dc50cb.js","fqdn":"facebook-clone-rho-six.vercel.app","domain":"facebook-clone-rho-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-clone-rho-six.vercel.app/signin","date":"2026-04-15T04:54:26.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /static/js/main.22dc50cb.js HTTP/1.1\r\nHost: facebook-clone-rho-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-rho-six.vercel.app/signin\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 276325\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"main.22dc50cb.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 15 Apr 2026 04:54:26 GMT\r\netag: \"af912c7b2e71e535d0b7166a27cfa1b2\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fh5ht-1776228866040-ca4320f6af9f\r\ncontent-length: 62714\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":188814,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"72d25bdf7999d9a197a05e36cc0fbcf7","sha1":"af84e29ac599e0842a92953200a9baed376d6b8a","sha256":"6410f0750e088fb9e50eed39f16fd68e9dce7510a60407e41e77cf23c2e8a6ea","sha512":"1110cd96ab80ea2d95d685a02f7b0747e104fff5aa0e16db0876b8888bb76253cf406d4a68df729f7367dc86b73e8afd3faf47b0fae78ef3e49f0334be8c3e66","ssdeep":"3072:ThUWgLViBXVqkvkUA6uYQ3eqo9IESwYBY2Y:2W8iBXVLv+D75ESo","tlshash":"82041ae83551f5956fb302a740af540a737d1a1f280d8960a210fc9eb4f885eb27bf9d","first_seen":"2026-02-17T19:12:16.207549Z","last_seen":"2026-04-15T04:54:49.139925Z","times_seen":6,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"facebook-clone-rho-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-15","alert":"Phishing Block","trigger":"facebook-clone-rho-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}