{"report_id":"2589e866-c95b-430d-b275-3e2409152b75","version":6,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-05-07T15:55:49Z","url":{"schema":"http","addr":"www.facebook-clone-nu-nine.vercel.app/","fqdn":"www.facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"title":"Facebook","dom":{"size":18953,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ea2919fa40c1f123226fd33cd60ae93c","sha1":"6872bf2db4b0c2647bb40328f2411c559e9dbca6","sha256":"c8768bbc5c01ebaa4c9299e7fe89524213dd5cfc028a5e4572bf535281891a16","sha512":"a5629374b0609ad998a61d7314a5a4ec7dbcdb4e453da6016acc13acedebd624ae00ff20037d5b37eaa4c3001723f2942771c3541bce95e198e535ee0c5bcce1","ssdeep":"96:nAn3KwEPKXqjd8N483SD6ylYaLyC9MAnCCnInj2ngnananan0NMKxD3q:AYk6kpYUACCIj2gaaaKLu","tlshash":"c082432091f521a744cae5917f758f1f2f81aa07da2aaa0137ec4bc99f93d83cd17709","dom_hash":"domhashdfbe8bb2db7b69d984ef3ba543a52650","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.facebook-clone-nu-nine.vercel.app/","fqdn":"www.facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-11T15:55:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"facebook-clone-nu-nine.vercel.app","ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-03-05T12:33:02.689566Z","last_seen":"2026-04-19T12:35:48.492759Z","alert_count":152,"request_count":38,"received_data":2829595,"sent_data":18613,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-03T22:34:13.116124Z","alert_count":0,"request_count":4,"received_data":337488,"sent_data":2217,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.facebook-clone-nu-nine.vercel.app","ip":{"addr":"64.29.17.195","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-01-27T22:59:02.310718Z","last_seen":"2026-04-19T18:56:08.292236Z","alert_count":12,"request_count":4,"received_data":19542,"sent_data":1940,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/WreZVYrGEZH.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/WreZVYrGEZH.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623576\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WreZVYrGEZH.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:30 GMT\r\netag: \"0acb12cf989e74189687c1275cf9c724\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::slqx5-1778169330014-d5b527ffaf8d\r\ncontent-length: 2115\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"0acb12cf989e74189687c1275cf9c724","sha1":"d583ef3fb7a354a7fcd89491ae0150a0f6c0802c","sha256":"664072a37b8f8e1f4b72d834cfde3ff3a1dd2ceb471c8520b02197d8694a530a","sha512":"08b2978e310d4b974d8572befe2d3c59f74cd486c9ae64097f25146e1f9e5856cf5feac4919ad08818ae30ee75c23da745bb3323cd08275c276a92b419eeb017","ssdeep":"","tlshash":"bd412ec0cd674d70f006ab3a261d0d42ff625f927de5cf16700a55679a9165ccf81f89","first_seen":"2023-10-04T02:56:16Z","last_seen":"2026-07-11T19:26:26.823783Z","times_seen":52,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/xH4w-lk44we.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/xH4w-lk44we.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"xH4w-lk44we.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:30 GMT\r\netag: \"f0ddf93a09bc285b73316b3260ae2486\"\r\nlast-modified: Thu, 07 May 2026 15:55:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sv2lv-1778169329968-ede4a69bb746\r\ncontent-length: 2200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2200,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"f0ddf93a09bc285b73316b3260ae2486","sha1":"d91dd1f8ed8f6a6f3c2ab73499d2abc879ad77c9","sha256":"7617b9614f0434da23e607790da90ed3ea9e3d30e21ebf1b03b54bf9ee69ba82","sha512":"54994223fa698b81ba488ebced0f85dab91398641cdf0a28b24937b34ffbcfcb9e5e04c43c60c7c0f97fbfca9c5530c3e82471ced4a012cb7f51382d7ad4e51f","ssdeep":"","tlshash":"fe411cb4e587865cd05cfe7c43875b9848a7180bd35eb88e4ee9d12127797f70f46045","first_seen":"2023-10-04T02:56:16Z","last_seen":"2026-07-11T19:26:26.831647Z","times_seen":55,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://facebook-clone-nu-nine.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 15:55:30 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 122760\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"61498362-1df88\"\r\nlast-modified: Tue, 21 Sep 2021 07:01:54 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 135103\r\nexpires: Tue, 27 Apr 2027 15:55:30 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBRKbE56%2FAGp%2BbxgJzwNK8KSL4EBEgUsnjWBCygKUB5%2BzUR%2F9HaW5I5fVLb9Nagdy%2BF8%2F7d80ubQNFpwteMMLDqSCxpwALzclm8w1XMLG%2Bv27EUpEAewHNK5OVdb54DithHYPxMv\"}]}\r\ncf-ray: 9f8168c9bf744c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122760,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 122760, version 768.66","md5":"d1bea16f470ff27ca26131a867131fda","sha1":"c1e34985d239716f1f236b932f2ecf4fb4c167d2","sha256":"57deb9ccde6d49564a916cc58a799d8ebd793c7aff69a7f3cce48cbfb0c48777","sha512":"42649dd7a0ea45d09c2af4da8948a60287c244519ed6cac5c2455cdcef416d8b01485b5ed5ac27e2e776246a0492cf58f7fcbb26d6b0275ca8f53010b53ff836","ssdeep":"3072:hM6miztL/IXreldjYx7AuvIDhSB4Hlh0R7QkXt+0rH:a6m0h/6reldd4cK7Qetn","tlshash":"ebc312108f6a2e12cb988d7c749db6227508e5f0c1a7cc9299efb45d31c52eef1ed258","first_seen":"2023-04-14T08:43:31Z","last_seen":"2026-07-24T03:07:50.441321Z","times_seen":1736,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/EWFR9xI64Mg.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/EWFR9xI64Mg.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623578\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"EWFR9xI64Mg.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"7c29bf3c0103d9bfb6b53833cc2c46a9\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rb5w2-1778169329955-b77e748f5f6c\r\ncontent-length: 2301\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"7c29bf3c0103d9bfb6b53833cc2c46a9","sha1":"05437501186657f93114912e805289db1fd14816","sha256":"6c3f1a9a5ba5f9237bea54771979f49e2dec25adfada8cc639935565ca9bea30","sha512":"78b743675eb183b56677ffd47a11b05f041d01276fe0bfad2df7e90fd7aa9fae7193120849882870395dee14601197b04da8a4c1e19aab516504245538c5c90d","ssdeep":"","tlshash":"e04119f4fc9d9a18f87fd3b982b60cd589f4c06f8a85e5149b87b7aff209ac50158181","first_seen":"2023-06-27T14:39:42Z","last_seen":"2026-07-11T19:26:26.805577Z","times_seen":52,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/A1HlI2LVo58.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/A1HlI2LVo58.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623578\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"A1HlI2LVo58.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"d880ee15d1076183d9d486905e65c12b\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b6nj9-1778169329963-3c6c37f94967\r\ncontent-length: 1826\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"d880ee15d1076183d9d486905e65c12b","sha1":"e9a836a8ba484e84169304f546aed4c6655954a7","sha256":"a768bca83814d7606fb621982e1c0f0fa439e6e87f128aa849c126835b54efb2","sha512":"b145cdc5fefbe2f14405443641339df4bcfafebbffef8eb19dbb64dad6e57e0b301f88b853e3f53ef5dd54e92875bdd02c4fe71ccae9612fd16937af5fb64c76","ssdeep":"","tlshash":"00312d57edc5905e3b135b6220b7b694bd10157a52cb8307a698c51dc72d0d2d331b47","first_seen":"2023-06-27T14:39:42Z","last_seen":"2026-07-11T19:26:26.808921Z","times_seen":52,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/i7hepQ2OeZg.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/i7hepQ2OeZg.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623577\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"i7hepQ2OeZg.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"1cf8190befba8fef128d266c4f9c5dc2\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wkjtt-1778169329961-1da148224c89\r\ncontent-length: 1725\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"1cf8190befba8fef128d266c4f9c5dc2","sha1":"b71826649b2f368b585746aea6de884d390e60b1","sha256":"3d87b4b537932df3a4d14907f71067ef12ef9f03fe8d59f11dd885d56e7ef89b","sha512":"7c10ac1764ca826f61a52bf107a6067162fc1f1b714031ebb1e27fa9952932a984bd0829a11dd885ed7831999ef799af77a648e8abd389e2c9b19cfbd3c70d7c","ssdeep":"","tlshash":"bc311aa6218c867ffe4d5a3f113fb39826205723900126a5872eea23835aad06a04299","first_seen":"2023-06-27T14:39:42Z","last_seen":"2026-07-11T19:26:26.818498Z","times_seen":52,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/9-o1e6LN_TX.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/9-o1e6LN_TX.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623574\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"9-o1e6LN_TX.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"827424291202c0ff85151ff6635d5ab2\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sl97r-1778169329964-8194b025af58\r\ncontent-length: 2690\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"827424291202c0ff85151ff6635d5ab2","sha1":"e710dbbc8e45576415ba88bc3350d9df622624c7","sha256":"6b814349c168a72adb6ddf424893e589db15749afe3581a9294fa04c43b68eb2","sha512":"377ed1c91435d57bb1bc7ceb1db34ec74fa86f34ada4135c23cdda6fe0990805f86f733e567f9ba672c158fc0802ac7d58a04aa667dc91dc8362b6a372dacc4c","ssdeep":"","tlshash":"3c513ceb871e4575d5868e7256f2f0541824a2b7dc716f8b2d72889a94c409dcb408d3","first_seen":"2023-10-04T02:56:16Z","last_seen":"2026-07-11T19:26:26.829405Z","times_seen":49,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-9889915.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-9889915.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623574\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-9889915.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"3db5656dee148d50409d87f46e09fb4e\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wkjtt-1778169329966-67db457d6f95\r\ncontent-length: 20651\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":20651,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x667, components 3","md5":"3db5656dee148d50409d87f46e09fb4e","sha1":"e1c8dcea5d9659a7f49d586f8b1d94d35bd09dd0","sha256":"bc5492d52ba1be76f31d9808fe8c8b879375091572a2cf1c484558008d69c495","sha512":"da85cff3aa4f2bde05fb187a2717bceb30efc15c3eb0c451338147f09e597bf0bbd0ee28e7c6476fd740a0fa265faa85c827dd7f68e0138af2dc9d434facd8d7","ssdeep":"384:MmQp6QzpxsLNhbjmxLO4RTFOx0WSxn+MAM9CHEtUGZar1:Yp6QTsphmxLOUwSx+MAMXCqaZ","tlshash":"1a92d169c7014826f6a2a0b512f3bb045f9e9b46537b074ca25a4245f7f78c9fc862f2","first_seen":"2025-11-09T21:51:05.977998Z","last_seen":"2026-07-11T19:26:26.829999Z","times_seen":51,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-4691417.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-4691417.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 523151\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-4691417.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"50ff371ae1c4c501080d74d2c49d865a\"\r\nlast-modified: Fri, 01 May 2026 14:36:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n5467-1778169329969-d89c89fa6036\r\ncontent-length: 59523\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59523,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x750, components 3","md5":"50ff371ae1c4c501080d74d2c49d865a","sha1":"e67e566717725babbeec759f8cba0383eae7c723","sha256":"7133d6600e79ade240cd2ebcb94bdfceede3a319335f40f68ca441a1eb9f4ce1","sha512":"5312fd50247b88864372065686a44a6efd08434e6aaaaf92512f77350334c9388886c39f34c29215a22e24fc358e07f45fa31d7d2466b8e297a43d9f1c452163","ssdeep":"1536:nzjkXuO/9OPhQOwFHpAEuvJFzjirESJ1LTRps207:nzjkXr/9qhdwe7zSESJ1LX2","tlshash":"5b4302dda7d382c3ec1191f431385c5f97a6a7235a2d111d7ec46414af2ea8ea8f20b7","first_seen":"2025-11-09T21:51:06.011215Z","last_seen":"2026-07-11T19:26:26.82106Z","times_seen":51,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-1043474.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-1043474.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623569\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-1043474.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"9a0281bf344aeb4c588b175616684c51\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cqhx4-1778169329971-640b27885d77\r\ncontent-length: 46158\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x711, components 3","md5":"9a0281bf344aeb4c588b175616684c51","sha1":"bccd5800d7a7e4d33337c225356ae587f5cd77d2","sha256":"6ec76da32c4edbfbb197e2fde78bd68546355dd92b97f3b9425bcb3da1466a65","sha512":"289ee3c049f400fc442e24ea32a913ae28df2c154dba79f726a59c8441a6cb17186ca442a3d2dcda5b8b808dfbed19e55e8e669d9d7489beaf0520be2e1d1f78","ssdeep":"768:ltiWgmQWoh/xsVCkYFcc8dGPhhLvRy0DVY9jaJ/5WBjA4lFG5lEPX8lZtBLvBd1:lrrEsVoL8AJy0yhtSUYlDNvBd1","tlshash":"122301e24d4dd3fffa93f5fa9ffd80d5a619981dc68e4c9a9380205467a15b008e90cd","first_seen":"2025-11-09T21:51:05.997725Z","last_seen":"2026-07-11T19:26:26.826998Z","times_seen":51,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/2uPlV4oORjU.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/2uPlV4oORjU.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623577\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"2uPlV4oORjU.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"1084dbd7230a09b7b84e7483ed56a9a9\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hrb9j-1778169329960-22691ac8e1ba\r\ncontent-length: 1453\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1453,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"1084dbd7230a09b7b84e7483ed56a9a9","sha1":"aea15953f2deff7a929baf7b6a0c5b6f1fd438ff","sha256":"72cf71f0b4414efb2a6de0f06b2b8fdf9404c3f50502eb1fe84b701beef46885","sha512":"bdb7c69cb16720af06b3c1c7d9b58eaaa607f752fc44f9150a1ecc99b27b7881c4e9e96c8831232e7b3a6db63de502857f7ca91213c6e7311850ed862592f220","ssdeep":"","tlshash":"953119f8a18f0b2010383838f3aa4a06f05341c601925a843376df9e6c7fefa22e2153","first_seen":"2023-06-27T14:39:42Z","last_seen":"2026-07-11T19:26:26.817989Z","times_seen":52,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/tInzwsw2pVX.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/tInzwsw2pVX.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623575\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tInzwsw2pVX.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"bb9b98dfe5ab7a1154d6dad042894860\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2nzsl-1778169329964-f877ddbd09c5\r\ncontent-length: 2213\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2213,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"bb9b98dfe5ab7a1154d6dad042894860","sha1":"f457301baa074bbcee3625572342fba9917e5155","sha256":"3a65deb5fa9cda3459ded95da2b336ef5c457d23cd9bc889856dc026d975ce04","sha512":"5ff9938fb160dcaf6b53b85e3eed96073217c4d3acdb0881ae9371ad44a83231dad43dcec50b51940341a16a302c08fb3eefa72ea8da68ebe9d9926ce2ea94ed","ssdeep":"","tlshash":"4f412b2ffe069b58dcab2b3b6562836f289c29111f2f0c2e0346c5a81b082d15e78135","first_seen":"2023-10-04T02:56:16Z","last_seen":"2026-07-11T19:26:26.824328Z","times_seen":56,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-8120091.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-8120091.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-8120091.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:30 GMT\r\netag: \"1c11482f7ba921304b21fd4ee3586005\"\r\nlast-modified: Thu, 07 May 2026 15:55:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b6nj9-1778169329967-397d64423c13\r\ncontent-length: 62978\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":62978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x667, components 3","md5":"1c11482f7ba921304b21fd4ee3586005","sha1":"4913fd4c23df67d8e56fafd926f6a88d08bf6a05","sha256":"efd1ff49f7d80d1d0345870c33bf10043bb8e58b206b7a2ed94d8247003bfd35","sha512":"460ef970bad9a33596c24a6fff6f78bb97af572ee420228e007648825d683d1b72e8edcd6213351390daf2298201172500abaabdac121d63b3da20530d6c4f5f","ssdeep":"1536:LWUpi4+HCWlabR9rK6lC4IznHIx7AaFaXQ/7qX0DOHS0r:Bz+NlgczUAKaXQOX0Dr0r","tlshash":"7a5301ea4231ee8dca6f8538485b7330dbf9ab64c79c11018162cb8fadb64b170b544f","first_seen":"2025-11-09T21:51:06.01781Z","last_seen":"2026-07-11T19:26:26.830591Z","times_seen":48,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-yaroslava-borz-10013081.jpg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-yaroslava-borz-10013081.jpg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623570\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-yaroslava-borz-10013081.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"318932c7a2143abc1a7dc64496b44faf\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dzkrk-1778169329970-31c6b2dfaee4\r\ncontent-length: 899002\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":899002,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2000x2712, components 3","md5":"318932c7a2143abc1a7dc64496b44faf","sha1":"9308d67330e95d16bd1c2a40afd68352a9ea9378","sha256":"6cd9fa94a94f8d08f63916c5457aa576b9c7081a41507a384f6f842b14d0f491","sha512":"f7782235806f795c4627491604c97fe28ff405b44ce2cc5891f22fbcb7ff7ce4d4cc231747d4190464c06598dc2ed9bd15b6a389bfdd66a9e93286e4909eaeb5","ssdeep":"24576:Qx42zmUk8rBnDXqPDlvQaSyX7n4IaGIZAsa9QaE:QKmrD2QaSyXz4d/Na9C","tlshash":"0915233bd65ade07fc673438f5e12ae4a0d83ca5284a2fb8e1d1af04a751d742d152ec","first_seen":"2025-11-09T21:51:06.021324Z","last_seen":"2026-07-11T19:26:26.806151Z","times_seen":47,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-8910400.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-8910400.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623568\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-8910400.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"fd95d51712ff6f19e5db65a77ef5a7b5\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sl97r-1778169329972-eba22f0595a0\r\ncontent-length: 40983\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":40983,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x333, components 3","md5":"fd95d51712ff6f19e5db65a77ef5a7b5","sha1":"bcd1cf4081e31fd42a9afe5a8f3d98c883381170","sha256":"276d3169c3937258d4e9f4f2b0c104036d693eb90720c58e4b7bcc82df3dc85b","sha512":"d962fb3bc9b873bee3379e7daf8ef4642fc66f3dbb638654c25e3f2ab580f0f31b621268f71cdc833820ba21e6a0566e913e2ffb22c7d2a5cbe1cf3c1ad1a716","ssdeep":"768:CY6DOi3UA/JeXKqkA6/N2a5JtQ6FGVOPcM4qHlIDN2IzNtH:ODb3znN2aFQbVOPcVslIAIzN1","tlshash":"7203f1d22b8ec941c7cb7bb628d58b6c5e7b061748d6510bf8e623c34f6c3d20ad4628","first_seen":"2025-11-09T21:51:05.979963Z","last_seen":"2026-07-11T19:26:26.828029Z","times_seen":45,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/251050403_6248445298689_4362938409879778268_n.jpg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/251050403_6248445298689_4362938409879778268_n.jpg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623567\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"251050403_6248445298689_4362938409879778268_n.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"ef43322402d624f315a2756224ee931b\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8blql-1778169329976-72a6d8d5f9f2\r\ncontent-length: 22086\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22086,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 476x249, components 3","md5":"ef43322402d624f315a2756224ee931b","sha1":"88eed5e22de20f9dd8c0da83921c256856fc7064","sha256":"cb0ca73415570593519f95e811976c0735efcccd7dbe47edb47f58f7325d00a7","sha512":"3e9e49485c782c46e359001aca38f3b7aaa6322af89cb072f7741181a61054e62c36065c53d5aa72b8d8d705f691975619d1f8cfe0c82cc13a96be68e27ca798","ssdeep":"384:PmfZ97mwUSzemj6w270hkn1JdDOq5aTRWiJ5asKoyev4:PmEzmGxohk1GIU5zL4","tlshash":"8fa2d003bf786e12ed68c0be67ec178c3610fe812b596c3f646b3f5444126b27ca5260","first_seen":"2023-10-04T02:56:16Z","last_seen":"2026-07-11T19:26:26.807279Z","times_seen":49,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/AYj2837MmgX.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/AYj2837MmgX.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623577\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"AYj2837MmgX.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"4eaee2dfb812138035cebb92d8f22baf\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8blql-1778169329960-8b79db7009ef\r\ncontent-length: 2322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"4eaee2dfb812138035cebb92d8f22baf","sha1":"64af340256615285780c22e740598576f6a9be1e","sha256":"23ef1f47465163d128c1786d69314c78a1b792f3e0c2c723319ac18cdd82c653","sha512":"b915f890ac9cedd64f0e85a1febdf169c7cf041e9d32e9d59c013e85a69e024b38e7acc607c92ef9f1da87da0c58571d53a38085a70243b31ab180fa14e49547","ssdeep":"","tlshash":"b8412d5c4f6052e9d86c4071d13665ebab1c88a4110391eaed02b6ea1a8c1bb16b235b","first_seen":"2023-06-27T14:39:42Z","last_seen":"2026-07-11T19:26:26.811809Z","times_seen":57,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"http","addr":"www.facebook-clone-nu-nine.vercel.app/","fqdn":"www.facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T15:55:27.503Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 308 Permanent Redirect\r\nContent-Type: text/plain\r\nLocation: https://www.facebook-clone-nu-nine.vercel.app/\r\nRefresh: 0;url=https://www.facebook-clone-nu-nine.vercel.app/\r\nserver: Vercel\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/-XF4FQcre_i.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/-XF4FQcre_i.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"-XF4FQcre_i.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:30 GMT\r\netag: \"e515adefd106eaf83f424f12a28f1aa3\"\r\nlast-modified: Thu, 07 May 2026 15:55:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mb95v-1778169329955-11e9d0eaeecb\r\ncontent-length: 2189\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2189,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"e515adefd106eaf83f424f12a28f1aa3","sha1":"aabf02dcecc1530bffd0d201c064599f8c2c46de","sha256":"523c743ddcc100fff163d43f9cadb44c81379b2c9dd96b37e4d2395f5451eb43","sha512":"4b76b0c9e3bc5f369f196511aa84ec67ae77e21bd510c7657d43f1511ed4a5bedbca5b313fef68a2b1ba31e725c8abf9fee58378ef949d8c9dd0e8cb744cdc97","ssdeep":"","tlshash":"e041e9169864c6ace590a43e8557f276ff814769564b3003a8d27aa73c1329f9f34152","first_seen":"2023-06-27T14:39:42Z","last_seen":"2026-07-11T19:26:26.804415Z","times_seen":52,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/qR88GIDM38e.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/qR88GIDM38e.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623576\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"qR88GIDM38e.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"e0ccd5a06fc84d4ae99d4b7cd5f443d3\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::88vkd-1778169329964-2f893ad3d54b\r\ncontent-length: 1488\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1488,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"e0ccd5a06fc84d4ae99d4b7cd5f443d3","sha1":"b5b4a853347feaafd47d95ead710e807023b6464","sha256":"41a72d39145b4146a954e0929e19f87a91d405f0e6baab9cfe24b5e9dc209d4c","sha512":"041616ae67258e0538a3d682b0bbf3ba8f2c29670df8de48561f3a64f20166c002db5e90c466e2aad0fa1997e8c7ee8db9663ff93101b459a6dffcf0e885217f","ssdeep":"","tlshash":"f431e9ddad69c967e902f398515084deae494f4069ab68e42f2d08538187fc598405ad","first_seen":"2023-10-04T02:56:16Z","last_seen":"2026-07-11T19:26:26.823382Z","times_seen":56,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-1239291.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-1239291.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623567\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-1239291.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"f9f91b19d607b4c08ec04b2c35b172e7\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n5467-1778169329974-ec0a067755a1\r\ncontent-length: 22735\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":22735,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x333, components 3","md5":"f9f91b19d607b4c08ec04b2c35b172e7","sha1":"a8c5175c672eb9c1e35417d296b30fc6c25caa3d","sha256":"94079f64e89e3d4e45ab0b7a1402f4dd64c01d444f59dd242b006bfe1cbedf2b","sha512":"f4c844cf73a91aac1090aca482db959472af080dd87e154336f582afdf9ff1276aff38f6a1362628947aaa7948fe5057b28cbcacefee05cb7485666a5c485556","ssdeep":"384:z8qosHJoRgNcNSP+dk4l8G9qa31J+hBsd8p+PBEfg8xUvnYQvW+nb:z8NsH+7xzl8OcsC+POfVUvnYQvWMb","tlshash":"aba2e17f9f14b2f1e6a2ca7196e1273c773a9a7947a41d6d5272e01fc3e41da27000c2","first_seen":"2025-11-09T21:51:05.999504Z","last_seen":"2026-07-11T19:26:26.809433Z","times_seen":45,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-1681010.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-1681010.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623565\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-1681010.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"8940d80032f4d3983d59fbe85c2bad1b\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rb5w2-1778169329980-aea64cde6b9b\r\ncontent-length: 41990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":41990,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x750, components 3","md5":"8940d80032f4d3983d59fbe85c2bad1b","sha1":"5d4272e304d6b30296ac672b77880bf91747f604","sha256":"72f11d66bf7c9495932d178dd04590b9dece2d1e4e847c4213a6e683a8086870","sha512":"a912d58b5ec736b2f071c707ed37d5c4af4133669ac4df2802ecede91076474b775b2a60233ba7996b499fc66731bfe3b3b977eb34252e101ee440951aa70fc8","ssdeep":"768:LKPNJdrm2MScwcXdKTW/grg5s4M+CgPqZ4DZAtAdaEXy/GnrkBG+:LKYNJeg5s4M+vPqZ4Wt8Ji/Gnrkj","tlshash":"6f13f103573bd9e7cf4b93f4105504dea64b68a7a3c519897cd8143c23766fa1009abf","first_seen":"2025-11-09T21:51:05.960577Z","last_seen":"2026-07-11T19:26:26.809975Z","times_seen":47,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/style.css","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 623564\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: W/\"8e7fe51e5cbbee9886f9d2c7948fb858\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b6nj9-1778169329954-94b1c9298a16\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7511,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8e7fe51e5cbbee9886f9d2c7948fb858","sha1":"ab93ac7b36a256e9a6bb39e1fdb4fa1fe00400ec","sha256":"9c378d4bde02341b5e7f0f1467b37400f9cbb3383058ed808205e8d12c144666","sha512":"04248b905e57d0a7c92ebd7a04cb03f07b95f37e0841d3b6ab9380cf8c832e3f0526c73a1afe68487cbe9ef0f93b60306c6d304f0afdd83734b2db2be68f3334","ssdeep":"192:vJZieqFBn2yAFf8bF5//6Al2CgxzF5HkelQcV+5rKIgYpkzbKIUr1RTA/QRfu:vu/FtYFmFJuxzF1kQ4f6Jv","tlshash":"dbf1cfe78aa31546bc1fd5582fb887c223aa4047905ec16d3fd9724ccf855e5e863f88","first_seen":"2026-01-27T11:27:46.847382Z","last_seen":"2026-05-07T15:55:54.503128Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/_JPdPzLmp9j.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/_JPdPzLmp9j.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623576\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"_JPdPzLmp9j.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"58b70f56bcdef3e27ebb6a4b98ed8c8e\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j4qj5-1778169329961-890b012e9044\r\ncontent-length: 2264\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"58b70f56bcdef3e27ebb6a4b98ed8c8e","sha1":"36fe64928ce70d67e3348e0d55e97e9bb3c46229","sha256":"d2064a958c120711e4266bcbb78ecf4e32eb19a4df5791526bfc98da3d07f42f","sha512":"4f453bcfa4bd3ea07e9f960a72787c97b616f02223bef359ac353283bab30732ef0c4f26008ee4128e06b00d90bc2c4dd68a55ebf7f106ffb825d50248b13ade","ssdeep":"","tlshash":"e7413c9782dcbb15e63839762c04e463de86935420cf82900fa5f75d5dec249340a741","first_seen":"2025-10-30T18:03:56.071845Z","last_seen":"2026-07-11T19:26:26.812756Z","times_seen":55,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-774909.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-774909.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623568\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-774909.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"6c2199f1e2d800a1ddd6891a7a5b1c5a\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wkjtt-1778169329972-54fc31d89d0d\r\ncontent-length: 54539\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":54539,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x750, components 3","md5":"6c2199f1e2d800a1ddd6891a7a5b1c5a","sha1":"bfa767a9a91dff7ce8011c96e47985347f058521","sha256":"4fcf4fad7dbd9577063f06a7ec6a6b0d97ab42d07ce37e3f0ac78f71b04b0b11","sha512":"7eb8f09e2ccf40aca264832b3118c24c3083fe14b82cc9c150ef239a27553aaf5352e8f76c95d4b1069ba8294d1be808f95d3f51a3c09b8b3958526bcfe3a1df","ssdeep":"1536:LhmpsWfWlMfcr2sqwdSJoehba5YN2v7XKn65ybOK:VS9fWmfcr2sqwdSuGbeXv7XEV","tlshash":"b833f113a63ed04ee2d258fb01b4c5b23f8ee962e606f075a59d13216f74d9c29fc056","first_seen":"2025-11-09T21:51:05.982111Z","last_seen":"2026-07-11T19:26:26.819957Z","times_seen":45,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/child-childrens-baby-children-s.jpg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/child-childrens-baby-children-s.jpg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 754136\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"child-childrens-baby-children-s.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"db99d0d1a3bae5ac6cbbea1bc853765b\"\r\nlast-modified: Tue, 28 Apr 2026 22:26:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2nzsl-1778169329974-40296840cfde\r\ncontent-length: 250548\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250548,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1880x1236, components 3","md5":"db99d0d1a3bae5ac6cbbea1bc853765b","sha1":"74d960634240f568bbd5121ac074169165cc4cf0","sha256":"b7e86fe4a8450eed1d3438aa83f05c258018e90f4c3704c7b5b6fbf073c032e9","sha512":"014dd80e342b124e37d2515e6437bf309279fd6ba9df7fa0d4e44d57da368bac84f85fd13d55211d55a50ca11be497cac1e9f2ad42c5426eccc306ef10aff676","ssdeep":"6144:QonW0HZxIzRYSQkkeD1LkdGhtOFNGAWAxpFGkKWiOP:rHZxrkFLAnFNGNA5GbnOP","tlshash":"f534233d2ad90359d12f5233796e5c401b5fba3d2976dc44084cbe956262ee0cceadcb","first_seen":"2025-11-09T21:51:05.971425Z","last_seen":"2026-07-11T19:26:26.806744Z","times_seen":47,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/236592212_23848122439070201_4651578862776998849_n.jpg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/236592212_23848122439070201_4651578862776998849_n.jpg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623566\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"236592212_23848122439070201_4651578862776998849_n.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"5b74ec055d542bd9c6984bb83aaeee6e\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j4qj5-1778169329977-2aba2c6cbdcd\r\ncontent-length: 174700\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":174700,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x960, components 3","md5":"5b74ec055d542bd9c6984bb83aaeee6e","sha1":"1b437752400bbbe4a8817fb51190815f9264b9f2","sha256":"d69c286e249610b5656706fdf57c545c607a79ab2ae11d30f02acc33418cd9c8","sha512":"c3763ad4622521a9aaf2efeb93ec15d485c372bef3b542bf4c33c4cc3cee8b76a56ff521d42e0d0a3d533278a20969d0d271c19d742efecc424f1312e8f10ebd","ssdeep":"3072:Z7owWrEkjYRcMD4s0RdmdjP3flewbw2AkdxDnPD5yY15UjZ2Pc1XmD4w2:VxCrURcMD1tRPhw2jxDRksc2D4J","tlshash":"900413f5ef521191c11c5ff0c6ea5623a37c8db4e4ef93248aa44d9b3b78e2f5845860","first_seen":"2023-10-04T02:56:16Z","last_seen":"2026-07-11T19:26:26.820483Z","times_seen":49,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-1300402.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-1300402.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623566\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-1300402.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"1cca0972f2ddf02a662b4fac99ebeed3\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::88vkd-1778169329980-d3ae43446e5e\r\ncontent-length: 20400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20400,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x333, components 3","md5":"1cca0972f2ddf02a662b4fac99ebeed3","sha1":"dd6dcdce2cc9c964b57c11aadd8fb78a82c161c1","sha256":"6f16e50a4ea87909428ad9c66b57d949050c6092796f16eaf4c17a73820ba2cc","sha512":"dfa44f6495aa8945cba73491072b709aff9fc3a056c53d55476384c5cf7aa7ad45696abec03915f7fdc9622fd7f39a69a0b1a70106ace95e9db817b58c5af21b","ssdeep":"384:dEjeOtPT0ehVZeuKDGY7xR6RiVXxB11M5Rch3XoiROo5wN+:dmxtb0ehVYOQ+GxBY43tNaN+","tlshash":"5a92cf8b5858b1bfc0761bb67b8b4f313a4d37d7d33eda8a2d40d644415aaca08b096d","first_seen":"2025-11-09T21:51:05.957589Z","last_seen":"2026-07-11T19:26:26.814905Z","times_seen":47,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/facebook3.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/facebook3.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 523150\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"facebook3.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:30 GMT\r\netag: \"33d9a21735c9624f2febaf18a1d14e05\"\r\nlast-modified: Fri, 01 May 2026 14:36:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dc6dh-1778169330230-50e2f345e57b\r\ncontent-length: 1224\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 192, 8-bit colormap, non-interlaced","md5":"33d9a21735c9624f2febaf18a1d14e05","sha1":"8cae8e1c6b175d4e02ff9e75ff064161a4ea6640","sha256":"a6215866ce61e70d4c48a0e1f71cb98efb27bd0a0966b72bb7714cecaead849d","sha512":"40a746bd15bba8f32135f240ac8d16ce202fc6c3e373f88485e76bd86913c2c08298b52f8e516fd433062bc4d99ea7744d80716a13a9fe29428a6468f4da44a7","ssdeep":"","tlshash":"4e2187f637dd64bef8e2bd5d4a14118a67d9c32522545634f80818733afb1081d985ed","first_seen":"2026-01-27T11:27:46.828261Z","last_seen":"2026-05-07T15:55:54.519552Z","times_seen":10,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"www.facebook-clone-nu-nine.vercel.app/","fqdn":"www.facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T15:55:29.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\nlocation: https://facebook-clone-nu-nine.vercel.app/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-id: arn1::8v4nb-1778169329704-47105d8af0a1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18982,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":347,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":343},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/main%20story.jpg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/main%20story.jpg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623580\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main story.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"ec4b16057cfbba392aec94550efe3c2d\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmcd2-1778169329955-66822f7807c5\r\ncontent-length: 199130\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":199130,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x1600, components 3","md5":"ec4b16057cfbba392aec94550efe3c2d","sha1":"e564f5afed83578afa1ad33077688354099c6612","sha256":"33f7132983a8bb17172a612c2b5b9abb93e195e6d02f60d9ccfaf2967a15f79c","sha512":"bb3ad31cbcec3ab63b95774e0cc9aea53b1d66781d4ead324b7fd5cb18d5a76ed13af510c17ff8903555c31aa0b2a058079cda9aa3d9e54d4dad314fec658e63","ssdeep":"3072:aBw//vBgmH0oFvWEQLz0sKU90ZxJuWrF2r/2JByS3UCyUoW1AgK7AgaDZ:q0BFH0UvWEMzKUCZeWrFO4rU93AgaDZ","tlshash":"2b1423861d034600d36f0577b3c653270336aa2a1f5c9d64dff98fd40a5efaaae63095","first_seen":"2026-01-27T11:27:46.848616Z","last_seen":"2026-05-07T15:55:54.521245Z","times_seen":10,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/c.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/c.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623575\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"c.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"a25fdf5a116b2d5e6d3a01051ec3e5f3\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dzkrk-1778169329964-c50b7745b5f1\r\ncontent-length: 2253\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"a25fdf5a116b2d5e6d3a01051ec3e5f3","sha1":"9342b0952ce6ed2f82639528af26aa638521e0bf","sha256":"217c55e6651fff3002ea6689c2eb8b604ebae91d719c52fde584dfad0521a5b0","sha512":"5a4217d5e7728d3a3015ddd996f017b18cabd96d224ea33a785b46de396548604d87e8a21d8ca12ac093b0ce6661dd3c8c41033a9c674817eb3c26fd39af26f4","ssdeep":"","tlshash":"1e413bcdae611a58d63039704a4101e8d462d08b6529b30dd9db14db2a2ddcf2c53cf2","first_seen":"2023-10-04T02:56:16Z","last_seen":"2026-07-11T19:26:26.824885Z","times_seen":57,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-1024311.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-1024311.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623569\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-1024311.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"8abdbf152878728aed8972f6385a790e\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j4qj5-1778169329971-e9718cad3c70\r\ncontent-length: 23821\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23821,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x750, components 3","md5":"8abdbf152878728aed8972f6385a790e","sha1":"37d21b33f08359952dba3de1cf86285bac8b7fed","sha256":"4574817f5909b5692c0762141b3b637c0b1cf7c8e4d6b3b750f0d38c3f60668d","sha512":"044f52107f6d8f6e8aea59cf6ca1594a7aef51998c94d4f6689978c9c191398c9cdb46360f700d802bac76cda2e147b362169d15097cec0b7ca700fdc7ac48c9","ssdeep":"384:sSuWNBn4ioWa+gZS+79qTOVjgt/lE82lV4vpLV1Q0D4uVqmdClM9VEFzoG6:BuWNyWK39yAjgt/7WVQlQ2RVdAuVuM","tlshash":"60b2e15f1fce5f11ca67dc3c1792affc7a2198424a534b509b42f5222940ef52e58397","first_seen":"2025-11-09T21:51:06.029933Z","last_seen":"2026-07-11T19:26:26.831132Z","times_seen":45,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"www.facebook-clone-nu-nine.vercel.app/","fqdn":"www.facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T15:55:26.742Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":374,"dns":0,"connect":1,"send":0,"wait":0,"receive":0,"ssl":375},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.facebook-clone-nu-nine.vercel.app/","fqdn":"www.facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T15:55:27.894Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":0,"receive":0,"ssl":354},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/beaty.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/beaty.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623573\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"beaty.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"9a0281bf344aeb4c588b175616684c51\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rb5w2-1778169329966-cbe085607719\r\ncontent-length: 46158\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":46158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x711, components 3","md5":"9a0281bf344aeb4c588b175616684c51","sha1":"bccd5800d7a7e4d33337c225356ae587f5cd77d2","sha256":"6ec76da32c4edbfbb197e2fde78bd68546355dd92b97f3b9425bcb3da1466a65","sha512":"289ee3c049f400fc442e24ea32a913ae28df2c154dba79f726a59c8441a6cb17186ca442a3d2dcda5b8b808dfbed19e55e8e669d9d7489beaf0520be2e1d1f78","ssdeep":"768:ltiWgmQWoh/xsVCkYFcc8dGPhhLvRy0DVY9jaJ/5WBjA4lFG5lEPX8lZtBLvBd1:lrrEsVoL8AJy0yhtSUYlDNvBd1","tlshash":"122301e24d4dd3fffa93f5fa9ffd80d5a619981dc68e4c9a9380205467a15b008e90cd","first_seen":"2025-11-09T21:51:05.997725Z","last_seen":"2026-07-11T19:26:26.826998Z","times_seen":51,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-846741.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-846741.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 523151\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-846741.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"22be5d83183ef74d45d6d99ba202e27a\"\r\nlast-modified: Fri, 01 May 2026 14:36:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2nzsl-1778169329970-4aedd93b0dd9\r\ncontent-length: 27431\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":27431,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x334, components 3","md5":"22be5d83183ef74d45d6d99ba202e27a","sha1":"aa4f38e4d8173ea9061f593810f95823585eec20","sha256":"baee5cd72248bde1ccb08a04d0d5fe8af4fd4a7cdb9913834da3d56d6fd80c76","sha512":"4d7359352700e4d707b73045fb45e3c3629ade4f058da95a1226141c157b90e61479c5f350dcc05516c03932fa1df5273818533dbbaf504a685c004c1772179f","ssdeep":"768:V2PAruhV8UPTuIVmia0BfNiBwFGlpbBSkQ8vsixsyQLeB:4hdqI4gfObBSyslMB","tlshash":"c2c2e154d9547208f27ba37149fb9fd49f9948b00a6e5ee099c08c4e4a2f2eb5fc2f44","first_seen":"2025-11-09T21:51:06.019833Z","last_seen":"2026-07-11T19:26:26.821549Z","times_seen":48,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-156934.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-156934.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623566\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-156934.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"b1437944e1a267d9612ad559ce057087\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hrb9j-1778169329979-d17a220d031d\r\ncontent-length: 58201\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":58201,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1007x750, components 3","md5":"b1437944e1a267d9612ad559ce057087","sha1":"4fb64ba359aa837e1e868a78d61d4537f0f74bd0","sha256":"f32577bbeedef4f73f22e2f0e3d9a6fe23d18142d30557a732f95acf10f93608","sha512":"039704be79a9af473878c092d28428721a7da8d2241daf9791e8f92fddc26dc9a27ba1d0b69561a7ed3a3b6698a705f47df6ef550a6ea092c457e9b501171d29","ssdeep":"1536:Pc/JsCjITqD+6FDSX7WGpWbew+OeENlqvsad:kxsCj9rDgRWlsx","tlshash":"d943f138bf8f0669de53067048a4a36accb96c11d9dc0869a556aa6c55a0fb83cccc73","first_seen":"2023-10-04T02:56:16Z","last_seen":"2026-07-11T19:26:26.81429Z","times_seen":49,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://facebook-clone-nu-nine.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 15:55:30 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 105264\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"61498362-19b30\"\r\nlast-modified: Tue, 21 Sep 2021 07:01:54 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 596326\r\nexpires: Tue, 27 Apr 2027 15:55:30 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9g4DcjGvvQkAYdhdTCMaXkTrwhQPuhGxbs9%2FSoHLxpKG8FtYaL9Oii2JR62Zh8%2BAowXpUp2hAbHHYtazOLpgkDS4iKkkt2uKotcORFt99WgG6gdsIlxs3ARv8NwFtoRL3a5X1ais\"}]}\r\ncf-ray: 9f8168c9bf714c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105264,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 105264, version 768.66","md5":"ef9332780500ea981e97dff51cc30669","sha1":"4020ed1a099b98c421f09ceb9a92f4a1d8d5d9c8","sha256":"ec372177b8e8df39d755e16551dfbbddcc53938ca52765fd730d0925885c964e","sha512":"16d23ce383fe5e79337c7a8c577d12f2ca6e6314daac46de1ef3d5e5319af60aff15ebf8bc868f2e128551ae1fe8da6f9016163e12fe34902a0be2c6aa249bac","ssdeep":"3072:mhmHwGfysGNjLr/qYt2cd/wfD6v23TJtE23hA4R:mEHRELek/mmu3F9h3R","tlshash":"11a3025c1bcedc37edd4e10beee576447390768a490f78684d36a512f3c22d9e32a826","first_seen":"2023-04-14T08:43:31Z","last_seen":"2026-07-16T12:19:19.40384Z","times_seen":1241,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:30.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta2/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://facebook-clone-nu-nine.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 15:55:30 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 23456\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"61498362-5ba0\"\r\nlast-modified: Tue, 21 Sep 2021 07:01:54 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 589019\r\nexpires: Tue, 27 Apr 2027 15:55:30 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A78OdI1Cj9kNEipMVEGdVmqbZIv6OUYR57OUsXitm5QgJMZv3WAwghEeJ85EPyQMAEH7wgTuNJqD3sUa5YiRKmxDliADP%2F2RzIfuQfpr5rOTYtwGzU4LHNjPghelm6SqpFxq6enZ\"}]}\r\ncf-ray: 9f8168c9bf774c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23456,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 23456, version 768.66","md5":"e3e5eef95eb3652d939b8c86ecb47fac","sha1":"ff36e7b2a956a05de0b94dbe7b1bf7e2d6d44cb2","sha256":"445189de22489c06a549b75c8f8e95cc56639d4128cd72e76896b4d2a7c40ce2","sha512":"249c67228cea82d1e6de0c0d53b42c795305efdf081e6129a39f349b1ec0baec9ed9bdd11b75f7beece74020171f70313be8c247c74d651d30661cafc148b8eb","ssdeep":"384:1u08LNFInjYnYrz3PwDAZ9phl+EiGB3jyLsU93rmEcGWmDPVbsGyCN8XBWEyhHQ:o08PC6Y/PkQeOVjjmcGWmDus5w","tlshash":"12b2e0a2835f7dc2e776ecb4595f779ae7622c1f562680a8a87ec0112c461df85ac340","first_seen":"2023-04-14T08:43:31Z","last_seen":"2026-07-11T19:26:26.825414Z","times_seen":1008,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T15:55:29.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1106863\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: W/\"fb2266baf0b48faca4d10d3d6555d63d\"\r\nlast-modified: Fri, 24 Apr 2026 20:27:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b6nj9-1778169329784-ee37a076e176\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18982,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"fb2266baf0b48faca4d10d3d6555d63d","sha1":"0bd80121e4bfe9b5a336fcfa467fbcdf02591a54","sha256":"fe1249ba04b7f8006b647ad408201c07a05778564bef23c61166425b33981cb0","sha512":"5b01362ac463ebda0c6f5aebcb4e700a3ec121bdf2f0fd8c31c1214625222af0a5ecb7b2c4fafae95f7e7cda6f4de49eb3657447df764b21e5e85a803e8793d9","ssdeep":"96:ii3KwEPKXqjd8N483SD6ylYaLyC9MAnCCnQnjqngnananan0NMKxD3Y:ipk6kpYUACCQjqgaaaKLs","tlshash":"c882432091f521a744cae5817f758b1f3f81aa07da2aaa0137ec4bc99f93d87cd17709","first_seen":"2026-01-27T11:27:46.829732Z","last_seen":"2026-05-07T15:55:54.531286Z","times_seen":10,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":60,"dns":33,"connect":1,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://facebook-clone-nu-nine.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14374\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61498362-3826\"\r\nlast-modified: Tue, 21 Sep 2021 07:01:54 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2454101\r\nexpires: Tue, 27 Apr 2027 15:55:29 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDDZcr7Z4KlWs26bjmDlhP%2FZjZCOzucHsIaMqBiCjwiEWHCqoPnnmXUStCdbcHLQvfuVLiLLpOxsYEPyXLOh1PRmGCITn%2B8kFYsar5REZzIdkgPKPBuI3L5l5O%2FTLZzJVsoexNHW\"}]}\r\ncf-ray: 9f8168c85ab04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82023,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65345)","md5":"b94102c568b10816907c96d987fc156c","sha1":"033d2cf8dc346fc5ae26677bb877155ecf3e72e3","sha256":"81735261671cd094376ce5c6d31058c64fa70ad0f3b0798ffce2f2d8eeb7ab51","sha512":"616ce128bdb0854ce08a178ca011705bc08a578aa91d0004baf8a583d1409f9549503c0a659c6424db863385e45ae93de160abaf0b2593cc96346998d4476e4c","ssdeep":"1536:9aY4MVMpY4MVM0Y4MVMYY4MVMisVM+dadWs79Klv3eEhUHrt+r:UdaUg9seEhULt+r","tlshash":"3d8386f9e04c05d56732c44baf55b378a1b5fb3cd5810ca9f02f590c6ad26a822c6f7a","first_seen":"2023-04-10T06:20:41Z","last_seen":"2026-07-24T03:07:50.446057Z","times_seen":1810,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo-4939461.jpeg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo-4939461.jpeg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 523151\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo-4939461.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"731d5b574da53d4f269a8063be479dda\"\r\nlast-modified: Fri, 01 May 2026 14:36:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8blql-1778169329968-b3c2c6fbaee2\r\ncontent-length: 43502\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":43502,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 500x750, components 3","md5":"731d5b574da53d4f269a8063be479dda","sha1":"a1a0a00d10d3915aa68551a65e8613c83a4ef0aa","sha256":"ffebab67735bb282796cf3bb6cf47daf4903338d5c88c09b079c269a8f212708","sha512":"8d7859f2754bc8694c022796531e9d5b650fa44db46421f16c4ef6cd60040c57d235b380b2ee3475b62abec0c6b82362ddf4b01900c96be9da38af69983d68ee","ssdeep":"768:Jf3Nzned77i+3/QNhtbhIhq9rSEFKt3yMH8CDPxKmiRvQRUynJVlmUFb:93VedHHvwfNQqAEF8y0tWYicP","tlshash":"5013f1a0ef459f07dc1d36f54607cb37679a9b2a2628279ba8c3cb3a09455e09cd0877","first_seen":"2025-11-09T21:51:05.995991Z","last_seen":"2026-07-11T19:26:26.81944Z","times_seen":45,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/pexels-photo.jpg","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/pexels-photo.jpg HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623572\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pexels-photo.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"c45b28fee88977ebbbcfc3017b6819b4\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hrb9j-1778169329968-2fa12486bce3\r\ncontent-length: 635100\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635100,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1880x1254, components 3","md5":"c45b28fee88977ebbbcfc3017b6819b4","sha1":"914c5acb4f2b1b30441fbfa8ebb02fe32c59e62b","sha256":"a3ecbef1ce695f87164f23613f774cf9772d803b2083f5d8fa0128d5773397c2","sha512":"a878f38c617202b90d9477fe90435d9760a16b3611c74ab4a58dacf5e92f38856d5ca0c291cd564bf0834ed010756a8decdfbad5411c5b90ff80ab6f6b114372","ssdeep":"12288:qCXJZcLPGAwgBQeui75+blw+Zy5FolCq/A+cqRDDVTrQ7/DxCRShaJ:qCXzcLeuQex75+Z3Z86Z/RcMDdc7/DAN","tlshash":"84d423488fbb710ad09840bd92edad0331fb65ce8c6539524d3ad24170a6f529be36f6","first_seen":"2025-11-09T21:51:05.969266Z","last_seen":"2026-07-11T19:26:26.813773Z","times_seen":48,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/9BDqQflVfXI.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/9BDqQflVfXI.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 523151\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"9BDqQflVfXI.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"40dd8b6bedfaf1cacebc6d8e0bf42888\"\r\nlast-modified: Fri, 01 May 2026 14:36:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sv2lv-1778169329956-cb5a3c227dcd\r\ncontent-length: 1948\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"40dd8b6bedfaf1cacebc6d8e0bf42888","sha1":"57d5d112684da8fe36398553928105fc75b92dfa","sha256":"d106a9df64a5a3db8902677ff08a499c074e107c95b4e2a712839054acbde5a2","sha512":"b3b800360d7006c33d287bff4c2497531c17e92a3118ac606737cdb9b740dbef1f9474a96392aa683f31f0a7c17618723d17a374d8f656b591a82ef4d423091d","ssdeep":"","tlshash":"e641e846f0ae6844c8aef977dc4c616762543a6023b191f9782465c3c3106562bfe78f","first_seen":"2023-06-27T14:39:42Z","last_seen":"2026-07-11T19:26:26.808366Z","times_seen":52,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-clone-nu-nine.vercel.app/images/tKwWVioirmj.png","fqdn":"facebook-clone-nu-nine.vercel.app","domain":"facebook-clone-nu-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-clone-nu-nine.vercel.app/","date":"2026-05-07T15:55:29.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/tKwWVioirmj.png HTTP/1.1\r\nHost: facebook-clone-nu-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-clone-nu-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 623576\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tKwWVioirmj.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 15:55:29 GMT\r\netag: \"2c5d4f2491d46959353f0e7da0009b29\"\r\nlast-modified: Thu, 30 Apr 2026 10:42:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cqhx4-1778169329964-fe8023d83636\r\ncontent-length: 2262\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"2c5d4f2491d46959353f0e7da0009b29","sha1":"cfbe583ba4e837ac85232d5377ac4b670b0fb874","sha256":"7d5b070372ea92eb8a13a8756d2b5fd162dd6be584556ef253f501cd5acc4622","sha512":"58001c510a79bfd81bd8b438c979a99be533730098a5b0387cfa517d8caaf54aa53dbc548cf1231691f48a3b7fb218be6ac14dd2e5e2e77f68326e37904d458b","ssdeep":"","tlshash":"e3410bb619d29f08fc6dc93b9f2ec746cb68c2d7544fa6114113d028c8978f840d2667","first_seen":"2023-10-04T02:56:16Z","last_seen":"2026-07-11T19:26:26.82857Z","times_seen":57,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"facebook-clone-nu-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}
