{"report_id":"077c7b28-4acd-4490-85ae-b3afcd4cde97","version":6,"status":"done","tags":[],"date":"2026-04-09T01:07:13Z","url":{"schema":"http","addr":"facebook.apps.waypoint.agency","fqdn":"facebook.apps.waypoint.agency","domain":"waypoint.agency","tld":"agency"},"ip":{"addr":"158.69.193.122","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"facebook.apps.waypoint.agency/","fqdn":"facebook.apps.waypoint.agency","domain":"waypoint.agency","tld":"agency"},"title":"facebook","dom":{"size":22167,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (556)","md5":"4684866ed1f55c4e6454edbdc5004dbc","sha1":"88e688b4955759ec30f5d750c0ed8fc80467e108","sha256":"90a5dd76a764e0525649be7b39ed7e61820fa698d1bb95676b78ba9ba96f70e0","sha512":"45e12891dddc24114e31260d8dcdb3c3dafd588f7d53ba952527fd307bd1510485ccb1c53b6688f618f7aa39ba05c9445c910e2049ff85323819e628199bf12a","ssdeep":"384:Br0J2l0ZtjK/SviL5m5A5T5iZMLtx/sgY7cxiBika:A2l0vjKaKL5m5A5T5iOLtx/sgY7cxi0","tlshash":"88a2613922f0256fa4e3c172f7623f2bae64da97c50b9548b16d46903f87c44cd472b4","dom_hash":"domhash63c07e7410caeaa2e81bf77f6dc45cc3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"facebook.apps.waypoint.agency","fqdn":"facebook.apps.waypoint.agency","domain":"waypoint.agency","tld":"agency"},"ip":{"addr":"158.69.193.122","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-14T01:07:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-09","alert":"Phishing Block","trigger":"facebook.apps.waypoint.agency","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"facebook.apps.waypoint.agency","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"facebook.apps.waypoint.agency","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"facebook.apps.waypoint.agency","ip":{"addr":"158.69.193.122","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"2020-11-01","domain_rank":0,"first_seen":"2026-04-09T01:07:13.361102Z","last_seen":"2026-04-09T01:07:13.361102Z","alert_count":12,"request_count":4,"received_data":37609,"sent_data":1886,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-04-08T13:38:10.748921Z","alert_count":0,"request_count":2,"received_data":124518,"sent_data":1162,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"facebook.apps.waypoint.agency/","fqdn":"facebook.apps.waypoint.agency","domain":"waypoint.agency","tld":"agency"},"ip":{"addr":"158.69.193.122","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5e3b7d272e8b28bf7b335fc3d87908f","sha1":"cb792e66ce56b32353beef95fd6f26e05c7c7a4b","sha256":"9156c6bf22ec5eefe8660ade7d2560e7d8228ae2eaf5d61eded2e5b8837526c9","sha512":"abf6e645c79e4a43633c7b8fcf4c0d6b5eefa7064daf6b619114c55ac30f4ff32bbb58ef22236a336ef5ecb41f6e70c5d4f9f153cb3d3b091bffb310c970877c","ssdeep":"","tlshash":"e1017d2f427504f50173765b939f57427132008f3442e60a3e5d8b441f10e641ae0f59","size":794,"data":"","first_seen":"2026-04-09T01:07:14.580632Z","last_seen":"2026-04-09T10:59:06.883325Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook.apps.waypoint.agency/assets/index-BW26M4sI.js","fqdn":"facebook.apps.waypoint.agency","domain":"waypoint.agency","tld":"agency"},"ip":{"addr":"158.69.193.122","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecade416f429813a6fa1e1d969883c66","sha1":"7a2613dd8fe3b82021cf37b0845cb73de5a3ee38","sha256":"d2a32840421496e872ade591618d2fa5c33797605d1aec04301717e5a90757d0","sha512":"6b54ce8b3c94e8aa8f5fb503f48c0f0385b455f1475e178aecfebc45d366351b74d4bda0fa378e8b7198cfdf4de0778096d92ab538dc2d1c14edc7e8c3a3930b","ssdeep":"","tlshash":"4201c0e83496e106115a0eadf1b3c618fa94345238a6e4c0d05c2cd9a76bcc0a5a5d4d","size":711,"data":"","first_seen":"2023-05-24T13:14:00Z","last_seen":"2026-06-17T23:44:59.736499Z","times_seen":1770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"facebook.apps.waypoint.agency/favicon.ico","fqdn":"facebook.apps.waypoint.agency","domain":"waypoint.agency","tld":"agency"},"ip":{"addr":"158.69.193.122","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook.apps.waypoint.agency/","date":"2026-04-09T01:06:52.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook.apps.waypoint.agency","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:45:06 GMT","end":"Thu, 02 Jul 2026 08:45:05 GMT"},"fingerprint":{"sha1":"E8:54:25:C7:29:5F:C6:59:37:32:20:55:C0:A3:59:F2:F7:12:59:26","sha256":"E7:23:64:06:9E:33:60:E6:70:59:24:16:E7:6D:6C:18:6A:78:E6:68:89:F7:C2:56:98:C8:CE:1F:B0:AA:05:CB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: facebook.apps.waypoint.agency\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.apps.waypoint.agency/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx/1.29.3\r\ndate: Thu, 09 Apr 2026 01:06:52 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"081a13638ed281461cb09336ad21b6fb","sha1":"cc9ebc649b67f820379059cbc057ebc061423d10","sha256":"dc1df912dd39e99b6f2c13a2a5a1e7eb3f47dc76ca8c85ac0405cde8133e2fb4","sha512":"f88b1a84e4af99903435b23e225e7b94578e2fbd0e2d8e21994c045433ef1292f5a68b7a79ec132a6c834c489cd254d8352d7dfe3657841a3e892141b6ffacf1","ssdeep":"","tlshash":"4fc02b6d3513bc4cc563317422c37090d0c6833764ba41228440810331cf3998ac339f","first_seen":"2025-11-01T18:14:24.981314Z","last_seen":"2026-06-17T16:03:00.836586Z","times_seen":355,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-09","alert":"Phishing Block","trigger":"facebook.apps.waypoint.agency","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"facebook.apps.waypoint.agency","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"facebook.apps.waypoint.agency","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook.apps.waypoint.agency/","fqdn":"facebook.apps.waypoint.agency","domain":"waypoint.agency","tld":"agency"},"ip":{"addr":"158.69.193.122","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-09T01:06:51.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook.apps.waypoint.agency","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:45:06 GMT","end":"Thu, 02 Jul 2026 08:45:05 GMT"},"fingerprint":{"sha1":"E8:54:25:C7:29:5F:C6:59:37:32:20:55:C0:A3:59:F2:F7:12:59:26","sha256":"E7:23:64:06:9E:33:60:E6:70:59:24:16:E7:6D:6C:18:6A:78:E6:68:89:F7:C2:56:98:C8:CE:1F:B0:AA:05:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: facebook.apps.waypoint.agency\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Thu, 09 Apr 2026 01:06:51 GMT\r\netag: W/\"692f5f04-566e\"\r\nlast-modified: Tue, 02 Dec 2025 21:49:56 GMT\r\nserver: nginx/1.29.3\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22126,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (556)","md5":"7c6a5c50d076b8b552a0f363f49e9aa6","sha1":"6cb13e41d86c9d98c3821e60a899504e04abae9a","sha256":"6d97775ff26a70907107867c630c0b66b228e5173c721185d4bfe00af6b33c3f","sha512":"161b350d9be69042b23af1749a4c35076b72bde356ef84b851e37a8ab6140a291c909a8c6b98508df2c7e553d3e9d422120caf56f3b247bb2a03930e7f47bc39","ssdeep":"384:vr0F2l0Ztjx/SvdL5n5P5o5fZMLtx/sgY7cxiBikI:K2l0vjxalL5n5P5o5fOLtx/sgY7cxiC","tlshash":"96a2613922f0256fa4e3c172fb623f2bae74da97c50b9548b1ad45a03f87c44cd476a4","first_seen":"2026-04-09T01:07:14.576176Z","last_seen":"2026-04-09T10:59:06.8824Z","times_seen":4,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":238,"dns":10,"connect":104,"send":0,"wait":105,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-09","alert":"Phishing Block","trigger":"facebook.apps.waypoint.agency","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"facebook.apps.waypoint.agency","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"facebook.apps.waypoint.agency","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook.apps.waypoint.agency/assets/index-BW26M4sI.js","fqdn":"facebook.apps.waypoint.agency","domain":"waypoint.agency","tld":"agency"},"ip":{"addr":"158.69.193.122","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook.apps.waypoint.agency/","date":"2026-04-09T01:06:52.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook.apps.waypoint.agency","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:45:06 GMT","end":"Thu, 02 Jul 2026 08:45:05 GMT"},"fingerprint":{"sha1":"E8:54:25:C7:29:5F:C6:59:37:32:20:55:C0:A3:59:F2:F7:12:59:26","sha256":"E7:23:64:06:9E:33:60:E6:70:59:24:16:E7:6D:6C:18:6A:78:E6:68:89:F7:C2:56:98:C8:CE:1F:B0:AA:05:CB"}}},"request":{"raw":"GET /assets/index-BW26M4sI.js HTTP/1.1\r\nHost: facebook.apps.waypoint.agency\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.apps.waypoint.agency/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"692f5f04-2c7\"\r\ncontent-encoding: gzip\r\nserver: nginx/1.29.3\r\ndate: Thu, 09 Apr 2026 01:06:52 GMT\r\nlast-modified: Tue, 02 Dec 2025 21:49:56 GMT\r\nexpires: Fri, 09 Apr 2027 01:06:52 GMT\r\ncache-control: max-age=31536000, public, immutable\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (710)","md5":"ecade416f429813a6fa1e1d969883c66","sha1":"7a2613dd8fe3b82021cf37b0845cb73de5a3ee38","sha256":"d2a32840421496e872ade591618d2fa5c33797605d1aec04301717e5a90757d0","sha512":"6b54ce8b3c94e8aa8f5fb503f48c0f0385b455f1475e178aecfebc45d366351b74d4bda0fa378e8b7198cfdf4de0778096d92ab538dc2d1c14edc7e8c3a3930b","ssdeep":"","tlshash":"4201c0e83496e106115a0eadf1b3c618fa94345238a6e4c0d05c2cd9a76bcc0a5a5d4d","first_seen":"2023-05-24T13:14:00Z","last_seen":"2026-06-17T23:44:59.736499Z","times_seen":1770,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-09","alert":"Phishing Block","trigger":"facebook.apps.waypoint.agency","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"facebook.apps.waypoint.agency","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"facebook.apps.waypoint.agency","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook.apps.waypoint.agency/assets/index-C9mq1_vB.css","fqdn":"facebook.apps.waypoint.agency","domain":"waypoint.agency","tld":"agency"},"ip":{"addr":"158.69.193.122","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://facebook.apps.waypoint.agency/","date":"2026-04-09T01:06:52.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook.apps.waypoint.agency","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:45:06 GMT","end":"Thu, 02 Jul 2026 08:45:05 GMT"},"fingerprint":{"sha1":"E8:54:25:C7:29:5F:C6:59:37:32:20:55:C0:A3:59:F2:F7:12:59:26","sha256":"E7:23:64:06:9E:33:60:E6:70:59:24:16:E7:6D:6C:18:6A:78:E6:68:89:F7:C2:56:98:C8:CE:1F:B0:AA:05:CB"}}},"request":{"raw":"GET /assets/index-C9mq1_vB.css HTTP/1.1\r\nHost: facebook.apps.waypoint.agency\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.apps.waypoint.agency/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Fri, 09 Apr 2027 01:06:52 GMT\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000, public, immutable\r\ndate: Thu, 09 Apr 2026 01:06:52 GMT\r\nlast-modified: Tue, 02 Dec 2025 21:49:56 GMT\r\netag: W/\"692f5f04-34f8\"\r\nserver: nginx/1.29.3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13559)","md5":"f200039dfab2dcc9e5d6a3bd88998c8e","sha1":"b4694fb259ba6e4a7a64e7c4e8b7b737808e778b","sha256":"625155dce37cfd4605891ce4adf604acd2b3f78066567118a58ff91dbc5ebf7c","sha512":"f750dc73c01a0948d0d04e80b1c3a083eff62a0a12599426fc9a78a093ac948181005acc2c16f173d8cb5e935d97dfb58e6d78ff0ee41747397a8a163c81a090","ssdeep":"192:O9JyW9JyyxwOw6bzyIhNAUQaHCS+8RrAEDloQSl6:kwANAUdNrACB","tlshash":"7152556e6710102e7c67c0e6d995ba6eb226b0c1de3e96eaec435101bbd73f61cd7204","first_seen":"2026-04-09T01:07:14.57762Z","last_seen":"2026-04-09T10:59:06.874639Z","times_seen":4,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-09","alert":"Phishing Block","trigger":"facebook.apps.waypoint.agency","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"facebook.apps.waypoint.agency","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"facebook.apps.waypoint.agency","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1522202176988-66273c2fd55f?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook.apps.waypoint.agency/","date":"2026-04-09T01:06:52.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1522202176988-66273c2fd55f?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.apps.waypoint.agency/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: f290d8961dc6be232f0c622b603f4d71786576e4\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 02 Apr 2026 11:26:23 GMT\r\nserver: imgix\r\ndate: Thu, 09 Apr 2026 01:06:52 GMT\r\nage: 567628\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220047-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 63827\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63827,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ca137bc08f92f52c85a55fd9c672cbad","sha1":"4e618918c3d32f27337212f35bdaf54693b1072c","sha256":"86054803421115919994517b8d88184203e8fff44d760bcf481bdb5a0174880d","sha512":"bab1df866e87d9b69564dd161eba5a9e2b1cd9231434aa3dc8664f210b0431802bc6c46454abfd24fa5028967eb083fee5ad9bd4c936f3ac5a3a8b50a03a199e","ssdeep":"1536:3Ilhvtq0Rh1lJqRX3RoigEjpn8vnqljxcK35A0fDbR/HST5dF:38hvtq0HTJqRnWig0n8G3pA0fDbAT1","tlshash":"a05302b49f719af4e32c5eb819730e68a248d648cf8272c91651b3c12e1aa4499dc79f","first_seen":"2026-01-25T19:02:00.767242Z","last_seen":"2026-04-09T10:59:06.876178Z","times_seen":6,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":38,"dns":14,"connect":13,"send":0,"wait":15,"receive":18,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1529156069898-49953e39b3ac?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook.apps.waypoint.agency/","date":"2026-04-09T01:06:52.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1529156069898-49953e39b3ac?ixlib=rb-4.0.3\u0026ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D\u0026auto=format\u0026fit=crop\u0026w=1000\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook.apps.waypoint.agency/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: d97e3c6fa6dd2ad48c9b418bc9d90a6d7ac3bc4e\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 22 Mar 2026 06:01:32 GMT\r\nserver: imgix\r\ndate: Thu, 09 Apr 2026 01:06:52 GMT\r\nage: 1537519\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220184-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 59436\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59436,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f49badff0f78e89b66e9b76dea459164","sha1":"40c752085d9a5d7c2b2ef1a0c061aacea78226f0","sha256":"4b80dc5a43714015ef7515b33669101065f1e0af06d3e164f5dcf99b8e3eb53f","sha512":"a19f20a57115c8a7384c849797b66eb9d14c2914bd255bd39a215dce0c1fb64060a3829554902447630047c72893e23096b8df1e440cd957e0798aaab37adddb","ssdeep":"1536:RiSkPXKmXAxHIdNcLilYFmwtf4ujdWGH/D6bvec:RC1XCIdNcLvdjdlfebvN","tlshash":"334301fe431824a5fe2822f1549bb66fb30e727e6d5415c4e2cf29d62c1680b0db38d2","first_seen":"2026-04-09T01:07:14.579712Z","last_seen":"2026-04-09T01:17:38.287304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":63,"dns":13,"connect":26,"send":0,"wait":14,"receive":6,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}