{"report_id":"3462f589-c211-45a7-8655-0b9cf97c6705","version":0,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-09-11T17:25:44Z","url":{"schema":"http","addr":"fbads24.com/","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":0,"asn":213802,"as":"Tianfeng (Hong Kong) Communications Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"fbads24.com/#/invite","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"title":"Facebook","dom":{"size":7863,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6783)","md5":"38168f05097e7ebc3ceb0af794902544","sha1":"37354f0e9f76bb2911e10048229cac2716a77552","sha256":"e6e93da27fb3f96e78bfbea9653afce377317617b75e3cd4fbe3589b3fb0012e","sha512":"366773332f3d81d7a17c58483a71ce4ace77e8c6abdafdbd2ead370b541c49a2ac8daebe8461cddd2a510cd4e69abdcc23063e770771dde3f397185a92e9b29b","ssdeep":"192:kHro0H9S9Tc0nyK8lPHhfzm+axaxaxa0X6uW:GS9BnyxtPAAAxXpW","tlshash":"46f1b6316c5160467937c6f0e0aabf5998d1ff7b81182ad0bee840b91ff2de0b910762","dom_hash":"domhash6cc3d01675ad2cc66bd82a3c4975a2a1","first_seen":"2026-09-11T17:12:45.006673Z","last_seen":"2026-09-11T17:25:47.027997Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fbads24.com/","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":0,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T17:25:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"fbads24.com","ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"domain_registered":"2026-09-09","domain_rank":0,"first_seen":"2026-09-11T17:12:40.699285Z","last_seen":"2026-09-11T17:12:40.699285Z","alert_count":60,"request_count":10,"received_data":1087676,"sent_data":4688,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"fbads24.com/static/js/chunk-vendors.b56b647b.js","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e98a4bda4604358ccb32315fc25cbb64","sha1":"f74bd28cb8164b206333479e678341e7f823edd7","sha256":"eedbd0dcacc0db940ed9204150f3ac6e46a8116f1195e0356e3d5b7a8ac3210c","sha512":"e01b2a7f0571c4ac53d07630f4435b34999f00ea4ae3ff7ee1e9fa4e559ddfc155b98e2f2b6e4cd9e2364ffa58bf14bee354cd9c57ea37e426905a10367818fc","ssdeep":"12288:UM3CayK6RE+i2C53AzjVHWd5xEK7mhTeIPp3:UM3t6RE+hC53q5WCK7sTes","tlshash":"adf43bce7186b522479711b1403f290ab23e2f58680e8458faa5f4da7d78d6c523bf7c","size":761364,"data":"","first_seen":"2026-09-11T17:12:45.008764Z","last_seen":"2026-09-11T17:25:47.040028Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbads24.com/static/js/app.98608064.js","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e85639f110a0cf4d653b065243439d","sha1":"0febdaf47115f6b17db733a782c7003ac9e06d49","sha256":"c06a1a8b7880006167ea5ee4d0c52249052e4724ae159b4d54ac72562b239244","sha512":"2c2e5aa8172307b32aa94d239bc10c4c918268c0fb1ea99ec2f91e430e8ecc6bbccced5f2a62befa9fdc81d81ff21fc3967f1e1e58d6325c97024f97a35bbd04","ssdeep":"1536:XGkAYJ38+1zxE/KBguxFyu/LgJZSbLohHxG11lMG9mjBB:XGZ8zx0aZ/EJZS0GlMR","tlshash":"7b637ecd33c926fa125702b0a02b1596213b1ac3a11d8c75f5b9f5dc3ea538e9373ad5","size":72952,"data":"","first_seen":"2026-09-11T17:12:45.019035Z","last_seen":"2026-09-11T17:25:47.043224Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fbads24.com/static/js/964.00788588.js","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9fbaac1dd6b5baffb6705bf0d2239c2","sha1":"2b1a05ef6fd4cee0d095cdb44c40bc350ea78a48","sha256":"34c4e75b75315d0d8783c23ee15c600664b85e62e3351022850950e7ae1bff0d","sha512":"2e9bc43f8ebbc7463f4b33724087f0f8f6711709be1cb004c4cc05ca3aef0a4f274888aa8aedf981ff22b837f0b9cba3f5150ff3e732dec37a122cd23f88a488","ssdeep":"96:DuTs3Ltb1KDZURtNFYrx0og88lI6GohOmzm+axaxaxa0fOJ6ts/QwuVUeHcQBf8n:STc0nyK8lPHhfzm+axaxaxa0GMipb","tlshash":"00d10934e49395a6dc39a421805d17b0cc210ff75114a893fbbcd9a963a58b9670cef8","size":6590,"data":"","first_seen":"2026-09-11T17:12:45.024429Z","last_seen":"2026-09-11T17:25:47.035594Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fbads24.com/static/css/chunk-vendors.0d6e9997.css","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbads24.com/","date":"2026-09-11T17:25:11.097Z","timestamp":1789147511097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbads24.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:33:41 GMT","end":"Tue, 08 Dec 2026 17:33:40 GMT"},"fingerprint":{"sha1":"3E:E3:BB:5A:DB:64:B5:F9:28:45:54:E0:E5:BF:DA:85:A1:D1:46:73","sha256":"2C:48:D1:F3:1E:F5:7A:89:4F:C4:E5:E2:82:EB:13:9E:00:DA:39:D2:C1:DC:DE:08:7F:E8:04:B6:00:87:70:35"}}},"request":{"raw":"GET /static/css/chunk-vendors.0d6e9997.css HTTP/1.1\r\nHost: fbads24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fbads24.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Fri, 11 Sep 2026 17:25:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 224812\r\nlast-modified: Sun, 31 May 2026 10:50:45 GMT\r\netag: \"6a1c1285-36e2c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":224812,"size_decoded":225055,"mime_type":"text/css","magic":"ASCII text, with very long lines (64226)","md5":"3f2d238f567878fc882262d15c0246e9","sha1":"afd22aa560041acb3ee50f1e8d102f84f598215b","sha256":"75724902161178f302b800e0a09bbce57cf0adab3ead8deac6722d8ca8ec2581","sha512":"6326237a5a5fc4abe3ae56e55abef9f70fd5ccf497a7235aeb00b239a4e2793d3439b9a2e152da800122f71475a68480b67c8fae00ed6940267ad3a283be1f0e","ssdeep":"6144:7kZUwh1nAukdDO3Xyr5Ir5eR0dTMA9S6fjKlWf:IZUwh1nAukdDO3Xyr5Ir5eR0dTMAEMf","tlshash":"6b24876f85d1135da1178e619fcc9ad8c22cc572a5520dedb242380e8fc7fde239a61b","first_seen":"2025-06-24T18:05:37.862283Z","last_seen":"2026-09-11T17:25:47.032991Z","times_seen":42,"resource_available":false,"data":null}},"time_used":1865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":1274,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fbads24.com/static/css/app.c61148ae.css","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbads24.com/","date":"2026-09-11T17:25:11.098Z","timestamp":1789147511098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbads24.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:33:41 GMT","end":"Tue, 08 Dec 2026 17:33:40 GMT"},"fingerprint":{"sha1":"3E:E3:BB:5A:DB:64:B5:F9:28:45:54:E0:E5:BF:DA:85:A1:D1:46:73","sha256":"2C:48:D1:F3:1E:F5:7A:89:4F:C4:E5:E2:82:EB:13:9E:00:DA:39:D2:C1:DC:DE:08:7F:E8:04:B6:00:87:70:35"}}},"request":{"raw":"GET /static/css/app.c61148ae.css HTTP/1.1\r\nHost: fbads24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fbads24.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Fri, 11 Sep 2026 17:25:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 2849\r\nlast-modified: Sun, 31 May 2026 10:50:45 GMT\r\netag: \"6a1c1285-b21\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2849,"size_decoded":3088,"mime_type":"text/css","magic":"ASCII text, with very long lines (2849), with no line terminators","md5":"a05ec05f7f24f821bfb569d15d783971","sha1":"a330b222421151b69c76e0d99cfcf16b8c21be1b","sha256":"59524caf8085f0d1319a1e694f37c7e3893b2638d2fed20a2276fc2517cf37cd","sha512":"4c6eb0490a89ef52043728ca38f416f38df8cc293f286d6b2cf1e225552420d734251ff0a8e51a128b5ab70d2647cd8af6a1588897f3d8bcacb30388432746f9","ssdeep":"","tlshash":"0d51dd2ef1c0922b7037007eea8dfda884190956d6244f77f11eb152af8738715b1726","first_seen":"2026-09-11T17:12:45.020545Z","last_seen":"2026-09-11T17:25:47.03409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fbads24.com/static/js/964.00788588.js","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbads24.com/","date":"2026-09-11T17:25:13.104Z","timestamp":1789147513104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbads24.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:33:41 GMT","end":"Tue, 08 Dec 2026 17:33:40 GMT"},"fingerprint":{"sha1":"3E:E3:BB:5A:DB:64:B5:F9:28:45:54:E0:E5:BF:DA:85:A1:D1:46:73","sha256":"2C:48:D1:F3:1E:F5:7A:89:4F:C4:E5:E2:82:EB:13:9E:00:DA:39:D2:C1:DC:DE:08:7F:E8:04:B6:00:87:70:35"}}},"request":{"raw":"GET /static/js/964.00788588.js HTTP/1.1\r\nHost: fbads24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fbads24.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Fri, 11 Sep 2026 17:25:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6590\r\nlast-modified: Sun, 31 May 2026 10:50:45 GMT\r\netag: \"6a1c1285-19be\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6590,"size_decoded":6844,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6392), with no line terminators","md5":"b9fbaac1dd6b5baffb6705bf0d2239c2","sha1":"2b1a05ef6fd4cee0d095cdb44c40bc350ea78a48","sha256":"34c4e75b75315d0d8783c23ee15c600664b85e62e3351022850950e7ae1bff0d","sha512":"2e9bc43f8ebbc7463f4b33724087f0f8f6711709be1cb004c4cc05ca3aef0a4f274888aa8aedf981ff22b837f0b9cba3f5150ff3e732dec37a122cd23f88a488","ssdeep":"96:DuTs3Ltb1KDZURtNFYrx0og88lI6GohOmzm+axaxaxa0fOJ6ts/QwuVUeHcQBf8n:STc0nyK8lPHhfzm+axaxaxa0GMipb","tlshash":"00d10934e49395a6dc39a421805d17b0cc210ff75114a893fbbcd9a963a58b9670cef8","first_seen":"2026-09-11T17:12:45.024429Z","last_seen":"2026-09-11T17:25:47.035594Z","times_seen":2,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fbads24.com/prod-api/facebook/notice/popupList","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fbads24.com/","date":"2026-09-11T17:25:13.108Z","timestamp":1789147513108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbads24.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:33:41 GMT","end":"Tue, 08 Dec 2026 17:33:40 GMT"},"fingerprint":{"sha1":"3E:E3:BB:5A:DB:64:B5:F9:28:45:54:E0:E5:BF:DA:85:A1:D1:46:73","sha256":"2C:48:D1:F3:1E:F5:7A:89:4F:C4:E5:E2:82:EB:13:9E:00:DA:39:D2:C1:DC:DE:08:7F:E8:04:B6:00:87:70:35"}}},"request":{"raw":"GET /prod-api/facebook/notice/popupList HTTP/1.1\r\nHost: fbads24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-language: en_US\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fbads24.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Fri, 11 Sep 2026 17:25:13 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":45,"size_decoded":257,"mime_type":"application/json","magic":"JSON text data","md5":"e0224f2e6c09127befd5e15aad326989","sha1":"70d7a2d600fec46ec928f7344a615241baa9c6af","sha256":"e21a0155450af79b3ed57093ffd45bb54ad73af548470adf16c89fc2b1899841","sha512":"7c9c5ac71a99a91603a8aa0b335b2a88bb6773fffb7db1f0fed3cc45b9290915d6a08dac519229d3c61a1288b1ab2ac67e458e32dabbf68a13614138d35430ae","ssdeep":"","tlshash":"66900200541f10c714158f6c00894115016a548715000e10589c972089540a26012522","first_seen":"2026-06-11T08:13:46.034443Z","last_seen":"2026-09-11T17:25:47.037087Z","times_seen":3,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fbads24.com/icons/apple-touch-icon.png","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbads24.com/","date":"2026-09-11T17:25:13.285Z","timestamp":1789147513285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbads24.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:33:41 GMT","end":"Tue, 08 Dec 2026 17:33:40 GMT"},"fingerprint":{"sha1":"3E:E3:BB:5A:DB:64:B5:F9:28:45:54:E0:E5:BF:DA:85:A1:D1:46:73","sha256":"2C:48:D1:F3:1E:F5:7A:89:4F:C4:E5:E2:82:EB:13:9E:00:DA:39:D2:C1:DC:DE:08:7F:E8:04:B6:00:87:70:35"}}},"request":{"raw":"GET /icons/apple-touch-icon.png HTTP/1.1\r\nHost: fbads24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fbads24.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Fri, 11 Sep 2026 17:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 7859\r\nlast-modified: Sun, 31 May 2026 10:50:45 GMT\r\netag: \"6a1c1285-1eb3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7859,"size_decoded":8100,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"2243f2bac06bc392bf9ab1180ab74f40","sha1":"1d8744bfe97b364643518e7732478857c7342ce3","sha256":"faf77e66c74c620220644934d9a21ad7e4f6a6f1e3472034f60099d4e6027a9c","sha512":"c92e52052c96692561e9507e59938b010c4e57b8b693c848ab0f40a0145f0ba8bcc6bfba790a9ff8a425eabe7feeb454e063970b0dff25a8d1ee1f3c5f261e3f","ssdeep":"96:3pbtXgwnnn6N2nLxl7fGFBAPUwb88po0o4nKxUmmx1dfwmj+3JWEI8XYw9QDBDmx:z96NE1jUwb8R0xKxNwfwm4I8cDBCtm0","tlshash":"25f15b1d9dd151b356e0c237adc80e1b82e75985e549534fb70cee294f2d586388b1cb","first_seen":"2026-09-11T17:12:45.013203Z","last_seen":"2026-09-11T17:25:47.037958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fbads24.com/","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T17:25:10.267Z","timestamp":1789147510267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbads24.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:33:41 GMT","end":"Tue, 08 Dec 2026 17:33:40 GMT"},"fingerprint":{"sha1":"3E:E3:BB:5A:DB:64:B5:F9:28:45:54:E0:E5:BF:DA:85:A1:D1:46:73","sha256":"2C:48:D1:F3:1E:F5:7A:89:4F:C4:E5:E2:82:EB:13:9E:00:DA:39:D2:C1:DC:DE:08:7F:E8:04:B6:00:87:70:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fbads24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Fri, 11 Sep 2026 17:25:10 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 31 May 2026 10:50:45 GMT\r\netag: W/\"6a1c1285-5b6\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1462,"size_decoded":830,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1019)","md5":"68d9ab17d75265c6f66715ca130de71a","sha1":"6e6ca0bcd54930ba01b430aeb3d0581a14895ffe","sha256":"bd38ab7fd78a1a514f0836f89c1e026fd059dacabee2b2f390b9de4db1a2b0b2","sha512":"51ccebd24436591ccdbedd7e74490bc5a82a605f5376f1f1c027ef49e1d0a9f729150a4379303aec7b4f4045736ebaddfb926e2cdde27d5f5721aa28b6fa157e","ssdeep":"","tlshash":"733148878d20d94d16708ab5da62f05cc995991f85a1bc90b8dd25ee4ee0fc085f3222","first_seen":"2026-09-11T17:12:45.017311Z","last_seen":"2026-09-11T17:25:47.03903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":0,"dns":34,"connect":147,"send":0,"wait":147,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fbads24.com/static/js/chunk-vendors.b56b647b.js","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbads24.com/","date":"2026-09-11T17:25:11.093Z","timestamp":1789147511093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbads24.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:33:41 GMT","end":"Tue, 08 Dec 2026 17:33:40 GMT"},"fingerprint":{"sha1":"3E:E3:BB:5A:DB:64:B5:F9:28:45:54:E0:E5:BF:DA:85:A1:D1:46:73","sha256":"2C:48:D1:F3:1E:F5:7A:89:4F:C4:E5:E2:82:EB:13:9E:00:DA:39:D2:C1:DC:DE:08:7F:E8:04:B6:00:87:70:35"}}},"request":{"raw":"GET /static/js/chunk-vendors.b56b647b.js HTTP/1.1\r\nHost: fbads24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fbads24.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Fri, 11 Sep 2026 17:25:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 761691\r\nlast-modified: Sun, 31 May 2026 10:50:45 GMT\r\netag: \"6a1c1285-b9f5b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":761691,"size_decoded":761948,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30581)","md5":"e98a4bda4604358ccb32315fc25cbb64","sha1":"f74bd28cb8164b206333479e678341e7f823edd7","sha256":"eedbd0dcacc0db940ed9204150f3ac6e46a8116f1195e0356e3d5b7a8ac3210c","sha512":"e01b2a7f0571c4ac53d07630f4435b34999f00ea4ae3ff7ee1e9fa4e559ddfc155b98e2f2b6e4cd9e2364ffa58bf14bee354cd9c57ea37e426905a10367818fc","ssdeep":"12288:UM3CayK6RE+i2C53AzjVHWd5xEK7mhTeIPp3:UM3t6RE+hC53q5WCK7sTes","tlshash":"adf43bce7186b522479711b1403f290ab23e2f58680e8458faa5f4da7d78d6c523bf7c","first_seen":"2026-09-11T17:12:45.008764Z","last_seen":"2026-09-11T17:25:47.040028Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":1571,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fbads24.com/static/css/964.32c7c323.css","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fbads24.com/","date":"2026-09-11T17:25:13.102Z","timestamp":1789147513102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbads24.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:33:41 GMT","end":"Tue, 08 Dec 2026 17:33:40 GMT"},"fingerprint":{"sha1":"3E:E3:BB:5A:DB:64:B5:F9:28:45:54:E0:E5:BF:DA:85:A1:D1:46:73","sha256":"2C:48:D1:F3:1E:F5:7A:89:4F:C4:E5:E2:82:EB:13:9E:00:DA:39:D2:C1:DC:DE:08:7F:E8:04:B6:00:87:70:35"}}},"request":{"raw":"GET /static/css/964.32c7c323.css HTTP/1.1\r\nHost: fbads24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fbads24.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Fri, 11 Sep 2026 17:25:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 4886\r\nlast-modified: Sun, 31 May 2026 10:50:45 GMT\r\netag: \"6a1c1285-1316\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4886,"size_decoded":5126,"mime_type":"text/css","magic":"ASCII text, with very long lines (4886), with no line terminators","md5":"05de061eb9c6121be3fe2eb279957eee","sha1":"c89f3c8e89da97d79f8084123f4b2e4d233ea851","sha256":"77847f9cb4969ca5980ff3ef93df1b1a254cc65f03de567c29ca695be5c627c9","sha512":"bd4b4c7c853469772073d5ff9ca9da6b940523fdf498b2234c4c938b6346ded5afcb006bfabc341feb3525d2f6aa009e357b032d4de534396bee1bd828b15874","ssdeep":"48:GydrC1IVrAcWvGAFo8BVGW1gdy1AtVoOVLF50iSA1+mcWdyqzlvyvapfMjlXfeVX:GydrrrWvGY0YoLk7YhdyWvyipf6Nf6","tlshash":"0fa1cc257a893114f83bd7e668da4fc82185ad32d10f45d2aee3b971adb72d73e10309","first_seen":"2026-09-11T17:12:45.021888Z","last_seen":"2026-09-11T17:25:47.041353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fbads24.com/favicon.png","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fbads24.com/","date":"2026-09-11T17:25:13.287Z","timestamp":1789147513287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbads24.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:33:41 GMT","end":"Tue, 08 Dec 2026 17:33:40 GMT"},"fingerprint":{"sha1":"3E:E3:BB:5A:DB:64:B5:F9:28:45:54:E0:E5:BF:DA:85:A1:D1:46:73","sha256":"2C:48:D1:F3:1E:F5:7A:89:4F:C4:E5:E2:82:EB:13:9E:00:DA:39:D2:C1:DC:DE:08:7F:E8:04:B6:00:87:70:35"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: fbads24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fbads24.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Fri, 11 Sep 2026 17:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2126\r\nlast-modified: Sun, 31 May 2026 10:50:45 GMT\r\netag: \"6a1c1285-84e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2126,"size_decoded":2366,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"b34ee53c8cb0abf1a94d979a029eaa96","sha1":"cedaf4484af9d3e8c3da9053891207bd7fcc9b96","sha256":"47ccd37d8ce5f244741099541a987f2efffacf966a3c555203ab01b3c4cea264","sha512":"bc84def41b0ba1bbd376ef7950834ffb0e921e369c7310673a7de1f21160c006df5b7facf4e9b95b4d2d8045377d58778b18a38799a327b4a3d55573a2485937","ssdeep":"","tlshash":"c44131614da410b2c6cb6b339dd51a05ddf74b42e989920ff7ccc9262f4198918ef3ca","first_seen":"2026-09-11T17:12:45.015699Z","last_seen":"2026-09-11T17:25:47.042261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fbads24.com/static/js/app.98608064.js","fqdn":"fbads24.com","domain":"fbads24.com","tld":"com"},"ip":{"addr":"128.241.233.96","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fbads24.com/","date":"2026-09-11T17:25:11.095Z","timestamp":1789147511095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbads24.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:33:41 GMT","end":"Tue, 08 Dec 2026 17:33:40 GMT"},"fingerprint":{"sha1":"3E:E3:BB:5A:DB:64:B5:F9:28:45:54:E0:E5:BF:DA:85:A1:D1:46:73","sha256":"2C:48:D1:F3:1E:F5:7A:89:4F:C4:E5:E2:82:EB:13:9E:00:DA:39:D2:C1:DC:DE:08:7F:E8:04:B6:00:87:70:35"}}},"request":{"raw":"GET /static/js/app.98608064.js HTTP/1.1\r\nHost: fbads24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fbads24.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Fri, 11 Sep 2026 17:25:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 72952\r\nlast-modified: Sun, 31 May 2026 10:50:45 GMT\r\netag: \"6a1c1285-11cf8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72952,"size_decoded":73208,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50262), with no line terminators","md5":"02e85639f110a0cf4d653b065243439d","sha1":"0febdaf47115f6b17db733a782c7003ac9e06d49","sha256":"c06a1a8b7880006167ea5ee4d0c52249052e4724ae159b4d54ac72562b239244","sha512":"2c2e5aa8172307b32aa94d239bc10c4c918268c0fb1ea99ec2f91e430e8ecc6bbccced5f2a62befa9fdc81d81ff21fc3967f1e1e58d6325c97024f97a35bbd04","ssdeep":"1536:XGkAYJ38+1zxE/KBguxFyu/LgJZSbLohHxG11lMG9mjBB:XGZ8zx0aZ/EJZS0GlMR","tlshash":"7b637ecd33c926fa125702b0a02b1596213b1ac3a11d8c75f5b9f5dc3ea538e9373ad5","first_seen":"2026-09-11T17:12:45.019035Z","last_seen":"2026-09-11T17:25:47.043224Z","times_seen":2,"resource_available":true,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"fbads24.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"fbads24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}