{"report_id":"5e08f0ba-6bcf-44f2-b563-6204db1117de","version":0,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-09-28T13:28:36Z","url":{"schema":"http","addr":"www.facebookctf.vercel.app/","fqdn":"www.facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"facebookctf.vercel.app/","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"title":"Facebook","dom":{"size":9625,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9625), with no line terminators","md5":"7bb27adb710ea574fb5ffc9dd22e7fd6","sha1":"b0002c8cef7e884b5bd6082bbb53accfd876ddb2","sha256":"7024bf69b663350a9c347e0e5068152749ba0885222d0801d932219d0fdd4530","sha512":"fdc740e02d106ee0e1201a2687b3b8334ae117bc531ca4508c3aba0708d30e3f89879e01078a8740afdf41630d84d58607a3520bd3888dfd17ac9164bf4eacc2","ssdeep":"192:GvMA/ZuCDnFrkFQO3EBfAefuefPZ7JZVxGgnqzcpmpmmxR:2MARuCTFkFf3MfnfB7TVRJmv","tlshash":"8712b5307800ed9b9d7bad6c2179bd3a40ccc52ec675d8a9e2ccc72516d2ab58ba1cc1","dom_hash":"domhash067f79d4d3e708a4a1cfd79ed03fcef7","first_seen":"2026-09-28T00:39:14.740827Z","last_seen":"2026-09-28T13:28:52.737958Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.facebookctf.vercel.app/","fqdn":"www.facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-02T13:28:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"www.facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"www.facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"www.facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"www.facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"facebookctf.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-28T00:39:10.655656Z","last_seen":"2026-09-28T00:39:10.655656Z","alert_count":70,"request_count":14,"received_data":637289,"sent_data":6911,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.facebookctf.vercel.app","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-28T13:28:48.891613Z","last_seen":"2026-09-28T13:28:48.891613Z","alert_count":4,"request_count":1,"received_data":0,"sent_data":495,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/main-app-d1cf215c4567dde7.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea49136e90cbd5af4830129a5e217800","sha1":"2e2abf72d57154337fbdd42932aeeb710da9b9ef","sha256":"8e4198a7828a2d124384e621c8ba9c58c84727312ec85f84a9597bcaacb7e092","sha512":"c9d84cbe74e4c4b13dbfd4c917833d2d172b464022d3b58a09cac6d8f4459e7b784b0db769172b7513f2e93f048406a15aac6fb972a239206c6918af60cbe96f","ssdeep":"","tlshash":"8ef012a64f0cf92f1c226e24fda7ace2295f5235342b4f602901deb16c23becd270409","size":506,"data":"","first_seen":"2025-08-03T22:58:00.050342Z","last_seen":"2026-09-28T13:28:52.746121Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/224-395d7c1bde456831.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1f3aabe24bfc636d000160c8e09310b","sha1":"4b78eb5bd51caaa70d177d771bfbdd951399648f","sha256":"00f512f3cad729751442983fd9ea4e94f1d26c54185fb97fcaf06a85ce047723","sha512":"96b4774e77e4c8575c8d60b46d09559c59f31ab0ca7b25e0a560a81d773f3b7d8098a7599b3c06c81cb5759c532483c8bc440119a80886c4c90e280ac3807064","ssdeep":"384:E4qY7qFq2SVDKFIdAEBFf8I49ttVMtvNyPCetKyUAKu4n2Y9RdXdjzGr/n:DBA9ttVK+KuKu4n2y+zn","tlshash":"58a2f91a7957887d6affe3e6e06cef99da2c1512c01d066cf2d34f329b04b95818db18","size":22810,"data":"","first_seen":"2026-09-28T00:39:14.762161Z","last_seen":"2026-09-28T13:28:52.746733Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/8490244b-85740e2e97958b60.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d5b0ad9221d4803b03de2272c01887","sha1":"1d3d13b517822f2161023a71ebba4532ab5e1f79","sha256":"ea9d1693989fe72602e9f93ba629bcc2b0f94f592634ad7dfde98c02be761491","sha512":"c2799515628f56618735dbf7562a3cc65d789be4885b06b927f1348328cb63a0ea8b8321ae9b4cce229120d299fff1f6b7ac1c21934da70e70f5826b6ccf4fca","ssdeep":"1536:aikWOjLPkmq6B7HfWLv8sjR/2gIVzRByJhVCMuhpWpxfNGMXY1U5gwPm5Sx7CJa9:aV0Bt62fIWZY8Pm5Sd+3a","tlshash":"63f3e7ec3d59e215aeb602a710df2803737c262b240d4d60a214fd9db5b845bb16bfde","size":169106,"data":"","first_seen":"2025-08-03T22:58:00.075562Z","last_seen":"2026-09-28T13:28:52.744538Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_vercel/insights/script.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea78a1ccebf7847a5b64d11da9802a61","sha1":"28f04e7d6b7656470def36b8e12b504705aa0302","sha256":"e8febe5aca0dbcddbe56ef45f7cc5c42e2de30d007b957536247d5cffe9758bd","sha512":"c8e38e526bee0835d82a1eeda89a31ba95aee2dcd7288041d67e5a63e1be2fa6d12a5fbadf99128b7d9407e034a74ce44376802d596a9fbd9fa39c1a28b39f1d","ssdeep":"96:dMWjRk3YU+CG6SL8IK5l0RNUxJt6hDWRU9ePT5kz/QjRsg3:d3N8IK5SRmbTm8t3","tlshash":"e89154a936a6f05486d940b5c13f5015f7bd2f52ac0f8010b296989d353c92ea372f7d","size":4469,"data":"","first_seen":"2026-09-22T07:04:41.734589Z","last_seen":"2026-09-28T23:50:20.129813Z","times_seen":1076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-09-28T23:45:56.848474Z","times_seen":273695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c283463901015d64654319ed2d3c8c30","sha1":"9db9b70c67364044578bf628b91e1e01a7e1a90f","sha256":"cdecd224992f7fd91ff8e546559b9cadd984334bee5af79931b7cd0aea3b34e4","sha512":"22e4356939a2578a03282afa0dcbfc5ed719116b549cee7947429af0e272d6f9b76c8592f159fa1965db9126771f24035f9eb1af2d2cbbde87146fa38997fa88","ssdeep":"","tlshash":"ab019c18f246ecd2ac229f1e62334e3540c9fd3c61a1b98ca1ceca6a4162db89794847","size":740,"data":"","first_seen":"2026-09-28T00:39:14.768177Z","last_seen":"2026-09-28T13:28:52.757017Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c576c82b35d4075452b2ef918d756565","sha1":"bf10b87454dab1020b5aff9893ed827c2196cd2b","sha256":"35d496336741aca9157e0508947d8a5bc814d16cd6a9fef9e5784db8e917ee9e","sha512":"38988395d6fa2e4020edb0f55830ca00f4cfd3d9e35ee787a929decfe4f953198619505eba2bf93faecf84b1174e4ec7acb15ca8770cdb7c623571e730ed2764","ssdeep":"","tlshash":"6951b63d2005dd8ffcae3d69027ead3a20cd497b03d5deb88688df140a8647967a6dc1","size":2778,"data":"","first_seen":"2026-09-28T00:39:14.769672Z","last_seen":"2026-09-28T13:28:52.758162Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d100d0f03f9906db5c995911d7db606","sha1":"10ce46354f0ffe8e074a93fc9dc6a63ffc13b4af","sha256":"2aadf9540d75d1a0612e0dc6e48d2d7ea2855d972d4ea3e16b11033ff77e802f","sha512":"c3f6773c6361f9ceafc57deb1c2d5cb1617136513bc108b111c448657ddf397a648f25b0be447a9aaa3b650dbd0c4729e12fadf9eda5e782874915941b363bec","ssdeep":"","tlshash":"c1800470d0404c354031001715341007517cc40c40101d14335051453011307df15d45","size":38,"data":"","first_seen":"2025-01-20T00:42:14.853059Z","last_seen":"2026-09-28T13:28:52.759463Z","times_seen":388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a61de06a8d7e22f2ada49aef2cc06e4","sha1":"fc4b18b7b89d9211509e5a23d1db63058467fbcb","sha256":"62eb21c18f9e9d76d04e6863b04e8546c5c3a89be3a9af01b19dbb007f09cff1","sha512":"958020de70ae2c21468c6c853c6ef7753974cc1cff9345a92fc9c1b0f021f33ff07e7928e41deefba246e206d56fa7042e09faf2956b0173eec4c05aae71583d","ssdeep":"","tlshash":"83c0c090dc02cc1cc7660f221c3b0c3921ccc56503054246ecc5ce280981b3005b0dc9","size":185,"data":"","first_seen":"2025-03-03T09:24:48.427306Z","last_seen":"2026-09-28T13:28:52.760056Z","times_seen":409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b33268897ee748476f4112d2c8a3787d","sha1":"c8b77ad20a8256f0d414c0a56db76d0f29667fd0","sha256":"558464b2e9083b694c030d9632bfcbf03bf4d5fad3fa9abee626054ab1ac28ed","sha512":"845a958a6bb957638edf158d986322ed23c83b3e84f8183cfe8df281fb18ec9b943f4d3b9cd985ce2e8664660d6538f7d606bad933ea512376113171e44449c8","ssdeep":"","tlshash":"49e026b26c42dd1ace672e26083e2c3120ec8b264542a5579154ce289043ab04ed1a81","size":337,"data":"","first_seen":"2026-09-28T00:39:14.772728Z","last_seen":"2026-09-28T13:28:52.760578Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/webpack-b4fc88b4a6c97c83.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c7c07047bea58c89ff8102190fb105c","sha1":"be6c8559007f7f2f4cb6fc2164591009e5843b6a","sha256":"40e0c023f0e015a5eb7dcf059f92ffadc7c43923e05937b0445d92e736ceefcb","sha512":"f951447e9c46c447d9363ff84bf623ca8c66f7739b692fbd30f7c654d0dd9fef4dd6576078e52074e4858efca573bcd4ee1741aa053418f689276b53f9d74636","ssdeep":"","tlshash":"1481c6b93624f5b016f104c5983fc142fa192137151afca0e71bdcb9a468ee10962ff3","size":3841,"data":"","first_seen":"2026-09-28T00:39:14.747578Z","last_seen":"2026-09-28T13:28:52.751941Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/app/layout-eaaee0c759b79c41.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68da0b50993fab3dbf2e48f8239c738e","sha1":"06616bad819e1243acb6abe765528033cfc0d2d2","sha256":"a66d5d6d2c3df57d33c951ddb5e6234bbc42a353bc703555d39d7d2602e039be","sha512":"6e09a3045c31ef5116861e8b598dea26ad2657bbb482b8f9010a2568d34f67553c6affb1e5d59622a7351395a020fb00c5a0341cffbd2217e57dfd9fbfba6321","ssdeep":"","tlshash":"6f71a6ed7291b46ea77a02d1953f4753736c0e98a40cc86452a1acad3830edbd4b2d9a","size":3689,"data":"","first_seen":"2026-09-28T00:39:14.753208Z","last_seen":"2026-09-28T13:28:52.749424Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/app/page-4c0a706a03cd7da8.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0eb16444a6da8eb73fa43340d80ff0ec","sha1":"cfcc66dc238efc1ed601a0ee454cc2fbff42eec7","sha256":"53d13c903204a1443ac3913308e18b566256aedf79710c27d78205e56748143a","sha512":"2be338a7f7b30c274d6902ffbe0e54251169c5ad0739d958594675293a6a7aabd3cb3566b0cba55b402969270f4add40b17869ddcd8544227c7b8fd5de0e23b1","ssdeep":"192:g2xE94tuyb0LDcUFZMTRyK0GCTI7BBToGwHKdO3aAGyYYv7zyO6:AO0LI7tyKyWBGKs3aiYR","tlshash":"8a52f756a1a27e9d73334004e96c73c5b2ddcf22c60a8c32fdfca9251085da5ab37799","size":13403,"data":"","first_seen":"2026-09-28T00:39:14.756461Z","last_seen":"2026-09-28T13:28:52.754757Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/571-785e77085571e289.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a45bfb20e6bb3e828a4c614a4595c16","sha1":"1be56995050cbd11766fc753012e18d5e21f532c","sha256":"00284d272c81c630ac4379c14a550abc953c8f1af55512b30581bf2dfd7b35e7","sha512":"1c9cdede8e737010fd1a4fe77733bb648c7744991bee6bedcc575603a98d2801fd4d967c1e4f75dd252f30c9b773a7333e6f8dc0b9c419db3056a5565a9d10a1","ssdeep":"1536:S+jXdC6PZ8H12FJ25HHJEu3s/XM+W3E3Lc9RowyBe27ZvRiQJm3EoH9Kwco50:SeWTE3Y9E7Fxm0wMQ0","tlshash":"c2f3d9b676d0f8e107a780d5843b4006f3295c3a146f74e0a3e6cce975645dea1b3faa","size":172917,"data":"","first_seen":"2025-08-04T00:57:02.677294Z","last_seen":"2026-09-28T13:28:52.753638Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"facebookctf.vercel.app/_vercel/insights/script.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.833Z","timestamp":1790602088833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_vercel/insights/script.js HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebookctf.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 18961\r\ncache-control: public, max-age=2678400\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: W/\"ea78a1ccebf7847a5b64d11da9802a61\"\r\nlast-modified: Mon, 28 Sep 2026 08:09:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::9dql8-1790602088838-aa226a24ef9c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4469,"size_decoded":2643,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4469), with no line terminators","md5":"ea78a1ccebf7847a5b64d11da9802a61","sha1":"28f04e7d6b7656470def36b8e12b504705aa0302","sha256":"e8febe5aca0dbcddbe56ef45f7cc5c42e2de30d007b957536247d5cffe9758bd","sha512":"c8e38e526bee0835d82a1eeda89a31ba95aee2dcd7288041d67e5a63e1be2fa6d12a5fbadf99128b7d9407e034a74ce44376802d596a9fbd9fa39c1a28b39f1d","ssdeep":"96:dMWjRk3YU+CG6SL8IK5l0RNUxJt6hDWRU9ePT5kz/QjRsg3:d3N8IK5SRmbTm8t3","tlshash":"e89154a936a6f05486d940b5c13f5015f7bd2f52ac0f8010b296989d353c92ea372f7d","first_seen":"2026-09-22T07:04:41.734589Z","last_seen":"2026-09-28T23:50:20.129813Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"www.facebookctf.vercel.app/","fqdn":"www.facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T13:28:07.859Z","timestamp":1790602087859,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"www.facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"www.facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"www.facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"www.facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/media/028c0d39d2e8f589-s.p.woff2","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.538Z","timestamp":1790602088538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/media/028c0d39d2e8f589-s.p.woff2 HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://facebookctf.vercel.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 209527\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"028c0d39d2e8f589-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"c47061a6ce9601b5dea8da0c9e847f79\"\r\nlast-modified: Sat, 26 Sep 2026 03:16:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/028c0d39d2e8f589-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ntxg4-1790602088543-674909d1925b\r\ncontent-length: 58512\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58512,"size_decoded":59133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 58512, version 1.26214","md5":"c47061a6ce9601b5dea8da0c9e847f79","sha1":"c030052ec66e7050e9018843730bc0c0193bc9a1","sha256":"46525b05bbf4527d263f8624ca7024c7d0dce3c64430267d30c31c6dd3821e4d","sha512":"45526ac3041c113569a65756eac936b9399bfb1b5040f3501582055afaf84512fde1c2df94650e86645608fee435a5034a965a8f7e18c48d184b5c38154c3a93","ssdeep":"1536:Q3xtvv50v2phjb5BhXsXyXi+0mTmVrrMHZiB:Q3xtn50v4DeXxmTmprMHZiB","tlshash":"40430161041f408c71b4edfbafd2d2a88f1d2012b420e55efd81f25e9d1d4b99cb8b26","first_seen":"2025-05-14T18:56:34.036522Z","last_seen":"2026-09-28T23:22:12.809981Z","times_seen":2055,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/media/5b01f339abf2f1a5.p.woff2","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.540Z","timestamp":1790602088540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/media/5b01f339abf2f1a5.p.woff2 HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://facebookctf.vercel.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 209527\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"5b01f339abf2f1a5.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"c36289c8eb40b089247060459534962c\"\r\nlast-modified: Sat, 26 Sep 2026 03:16:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/5b01f339abf2f1a5.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z572d-1790602088560-5dcb06f9e800\r\ncontent-length: 58092\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":58092,"size_decoded":58709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 58092, version 1.26214","md5":"c36289c8eb40b089247060459534962c","sha1":"47e60e924565ed2cbdf162e78e7808e1e6a36ae7","sha256":"3ef2c50dc1042ebfa89ca66bb6901e9dde5737970547c21b4de7a44dfb2ab948","sha512":"cd07a362243e960f28bd1cb933eed41a72abc9613260edd725dd2cc9d3fd916bd7a8f8a0d51e515d043d2fd0575c1f0239e90acf1ebacfb891e1e06c3a87c381","ssdeep":"1536:6Ks7cEsgFPjC13JXoCGhRLYLagh5AJ8+B7auzJio/ip/4D1vp:g7cD9BnagMJ3z+B4D1x","tlshash":"1f43011bda1a2661cf74773b8ec192583e6f29240b8dc2035a57621f3ee074d8cd1add","first_seen":"2025-03-25T08:20:34.530452Z","last_seen":"2026-09-28T23:22:12.801371Z","times_seen":2572,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/css/322e332c240e10a2.css","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.542Z","timestamp":1790602088542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/css/322e332c240e10a2.css HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebookctf.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 209527\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"322e332c240e10a2.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"04457d27a5f7965020a9e59084b07dd2\"\r\nlast-modified: Sat, 26 Sep 2026 03:16:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/322e332c240e10a2.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fvc4l-1790602088546-fbf9eb6fdff3\r\ncontent-length: 17270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":100241,"size_decoded":17912,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (64660)","md5":"3b2ecd8348deb986d554196b58ca1385","sha1":"282010713ac8cdf9c20fd8a9c9ed6a18c0411b3f","sha256":"c5c67a5cf3e5a719c12123fedd0edbf69640423afafcd3828b1fdbe4418d4037","sha512":"d6c8ed1a42cb80ecbaa1a0f9bee0a19b46b9b53ce5c7aa1f9e4d4708888e9cfc736e0942600ad1f4a54accb03bd1a9f5e32575b7bf2c397f096680347e0eda2c","ssdeep":"1536:Mshp2DEo6GnY5GB5VGzFAh2/4Mno+WDAmz6AkcsIMZi2mae9tS98u98/:vhpu6GY5s5VGzFAHMno+WDAm+AfsmPF","tlshash":"dca3c690b239e53f7c3368bd538cf89c8119b4c0dd6906e9fa16a12256c7bf26e77204","first_seen":"2026-09-28T00:39:14.745492Z","last_seen":"2026-09-28T13:28:52.742941Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/8490244b-85740e2e97958b60.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.546Z","timestamp":1790602088546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/8490244b-85740e2e97958b60.js HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebookctf.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13947\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"8490244b-85740e2e97958b60.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"be62f874e4c0966dc583419bf0359c69\"\r\nlast-modified: Mon, 28 Sep 2026 09:35:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/8490244b-85740e2e97958b60.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q94jj-1790602088550-fed01bdbcf86\r\ncontent-length: 54679\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169106,"size_decoded":55353,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"69d5b0ad9221d4803b03de2272c01887","sha1":"1d3d13b517822f2161023a71ebba4532ab5e1f79","sha256":"ea9d1693989fe72602e9f93ba629bcc2b0f94f592634ad7dfde98c02be761491","sha512":"c2799515628f56618735dbf7562a3cc65d789be4885b06b927f1348328cb63a0ea8b8321ae9b4cce229120d299fff1f6b7ac1c21934da70e70f5826b6ccf4fca","ssdeep":"1536:aikWOjLPkmq6B7HfWLv8sjR/2gIVzRByJhVCMuhpWpxfNGMXY1U5gwPm5Sx7CJa9:aV0Bt62fIWZY8Pm5Sd+3a","tlshash":"63f3e7ec3d59e215aeb602a710df2803737c262b240d4d60a214fd9db5b845bb16bfde","first_seen":"2025-08-03T22:58:00.075562Z","last_seen":"2026-09-28T13:28:52.744538Z","times_seen":52,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/main-app-d1cf215c4567dde7.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.552Z","timestamp":1790602088552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/main-app-d1cf215c4567dde7.js HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebookctf.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19611\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-d1cf215c4567dde7.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"ea49136e90cbd5af4830129a5e217800\"\r\nlast-modified: Mon, 28 Sep 2026 08:01:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-app-d1cf215c4567dde7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dkpcg-1790602088556-8b33f35d1ed2\r\ncontent-length: 506\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":506,"size_decoded":1156,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (506), with no line terminators","md5":"ea49136e90cbd5af4830129a5e217800","sha1":"2e2abf72d57154337fbdd42932aeeb710da9b9ef","sha256":"8e4198a7828a2d124384e621c8ba9c58c84727312ec85f84a9597bcaacb7e092","sha512":"c9d84cbe74e4c4b13dbfd4c917833d2d172b464022d3b58a09cac6d8f4459e7b784b0db769172b7513f2e93f048406a15aac6fb972a239206c6918af60cbe96f","ssdeep":"","tlshash":"8ef012a64f0cf92f1c226e24fda7ace2295f5235342b4f602901deb16c23becd270409","first_seen":"2025-08-03T22:58:00.050342Z","last_seen":"2026-09-28T13:28:52.746121Z","times_seen":43,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/224-395d7c1bde456831.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.555Z","timestamp":1790602088555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/224-395d7c1bde456831.js HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebookctf.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 209527\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"224-395d7c1bde456831.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"3b2d73fefa27e9d8fd2421cf49682a45\"\r\nlast-modified: Sat, 26 Sep 2026 03:16:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/224-395d7c1bde456831.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fvc4l-1790602088560-64a1857b3a44\r\ncontent-length: 8000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":22810,"size_decoded":8664,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22810), with no line terminators","md5":"c1f3aabe24bfc636d000160c8e09310b","sha1":"4b78eb5bd51caaa70d177d771bfbdd951399648f","sha256":"00f512f3cad729751442983fd9ea4e94f1d26c54185fb97fcaf06a85ce047723","sha512":"96b4774e77e4c8575c8d60b46d09559c59f31ab0ca7b25e0a560a81d773f3b7d8098a7599b3c06c81cb5759c532483c8bc440119a80886c4c90e280ac3807064","ssdeep":"384:E4qY7qFq2SVDKFIdAEBFf8I49ttVMtvNyPCetKyUAKu4n2Y9RdXdjzGr/n:DBA9ttVK+KuKu4n2y+zn","tlshash":"58a2f91a7957887d6affe3e6e06cef99da2c1512c01d066cf2d34f329b04b95818db18","first_seen":"2026-09-28T00:39:14.762161Z","last_seen":"2026-09-28T13:28:52.746733Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/facebook.png","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.690Z","timestamp":1790602088690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /facebook.png HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebookctf.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 209527\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"facebook.png\"\r\ncontent-type: image/png\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"187dcf34e2b3944e03d787af740ce041\"\r\nlast-modified: Sat, 26 Sep 2026 03:16:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /facebook.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6wm9f-1790602088694-cbf449daa6b6\r\ncontent-length: 14826\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14826,"size_decoded":15400,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"187dcf34e2b3944e03d787af740ce041","sha1":"1afcc8ba4563c6f5004f20a821ba10941e780743","sha256":"0e639cc6f2a773cbad89c933c2c4122098c6f35a68c3b37f8d2cfe472127f486","sha512":"3c17f9584189f411113fde939022421966f59fe89fa63658f78df7a77a303cf76d44143a9fbed14feaa553c087a7879574a2ec48c39752ac4cbf04d0e7c23b9d","ssdeep":"192:VSoknvtvNpXTnqBGA/Y2mbvvO2ixfp/sYxntooiyIIXdoGMrXE:0znvwUAsrvIfLeYIIXdoGMzE","tlshash":"69623192f30a49dd83cc42969c275dbf5f364c055bb7cd2a8945550bf8dc93e3e0a88a","first_seen":"2026-09-28T00:39:14.76396Z","last_seen":"2026-09-28T13:28:52.748064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/app/layout-eaaee0c759b79c41.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.554Z","timestamp":1790602088554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-eaaee0c759b79c41.js HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebookctf.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19611\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-eaaee0c759b79c41.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"2611f42876baa4488b6a565403aee50a\"\r\nlast-modified: Mon, 28 Sep 2026 08:01:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/layout-eaaee0c759b79c41.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::znrsf-1790602088557-344e492c18bc\r\ncontent-length: 1710\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3689,"size_decoded":2383,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3689), with no line terminators","md5":"68da0b50993fab3dbf2e48f8239c738e","sha1":"06616bad819e1243acb6abe765528033cfc0d2d2","sha256":"a66d5d6d2c3df57d33c951ddb5e6234bbc42a353bc703555d39d7d2602e039be","sha512":"6e09a3045c31ef5116861e8b598dea26ad2657bbb482b8f9010a2568d34f67553c6affb1e5d59622a7351395a020fb00c5a0341cffbd2217e57dfd9fbfba6321","ssdeep":"","tlshash":"6f71a6ed7291b46ea77a02d1953f4753736c0e98a40cc86452a1acad3830edbd4b2d9a","first_seen":"2026-09-28T00:39:14.753208Z","last_seen":"2026-09-28T13:28:52.749424Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T13:28:08.238Z","timestamp":1790602088238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 209800\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: W/\"d1b787164b0ae5d75c84844c9e298b69\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 4294967294\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zfdwh-1790602088288-108ae6d3e58c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6070,"size_decoded":2859,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6070), with no line terminators","md5":"107d4c88060e40d6f7497ece746be60d","sha1":"4b23d154554c68c6dc7a83ddadff8b5b2d707c79","sha256":"1b0a03bf530dead654b77d4dc114003cd965e4d243d2571ab08370732acc87ea","sha512":"fdf1353a79a460529d6f4152125ab188414a659d5df89ca8a74726cfbf8a392ddf390e2aeb322ef8f8f7cee03f500a751632a5495f32996f48f1c4b6daaa7180","ssdeep":"96:TmDIIDDIy/MPOPDbbnv4mS0SB0J9c7Ba7cg1xqzc/xmWemp1WeZcocbcdKG4E/W:IVB/UOPDPnv+gnqzcpmpmmxr","tlshash":"2ec12135b805dd8bec767e6d107ead3a40cd893b8664d9b892cccf180a42ab55bd1dc1","first_seen":"2026-09-28T00:39:14.758548Z","last_seen":"2026-09-28T13:28:52.750681Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/webpack-b4fc88b4a6c97c83.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.544Z","timestamp":1790602088544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/webpack-b4fc88b4a6c97c83.js HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebookctf.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 209527\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-b4fc88b4a6c97c83.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"b12b563ca16e34a3d51b4fd393c568fe\"\r\nlast-modified: Sat, 26 Sep 2026 03:16:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-b4fc88b4a6c97c83.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::znrsf-1790602088548-41de0e93e48b\r\ncontent-length: 1993\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3841,"size_decoded":2665,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3402)","md5":"0c7c07047bea58c89ff8102190fb105c","sha1":"be6c8559007f7f2f4cb6fc2164591009e5843b6a","sha256":"40e0c023f0e015a5eb7dcf059f92ffadc7c43923e05937b0445d92e736ceefcb","sha512":"f951447e9c46c447d9363ff84bf623ca8c66f7739b692fbd30f7c654d0dd9fef4dd6576078e52074e4858efca573bcd4ee1741aa053418f689276b53f9d74636","ssdeep":"","tlshash":"1481c6b93624f5b016f104c5983fc142fa192137151afca0e71bdcb9a468ee10962ff3","first_seen":"2026-09-28T00:39:14.747578Z","last_seen":"2026-09-28T13:28:52.751941Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_vercel/insights/view","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.888Z","timestamp":1790602088888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"POST /_vercel/insights/view HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://facebookctf.vercel.app/\r\nContent-Length: 134\r\nOrigin: https://facebookctf.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":134,"data":"{\"o\":\"https://facebookctf.vercel.app/\",\"sv\":\"0.1.3\",\"sdkn\":\"@vercel/analytics/next\",\"sdkv\":\"1.3.1\",\"ts\":1790602088886,\"dp\":\"/\",\"r\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::x2x98-1790602088892-f54810931341\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":469,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-09-28T23:50:20.31389Z","times_seen":387773,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/571-785e77085571e289.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.550Z","timestamp":1790602088550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/571-785e77085571e289.js HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebookctf.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 209527\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"571-785e77085571e289.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"3b86e95e140e20afc306c9503f6ff180\"\r\nlast-modified: Sat, 26 Sep 2026 03:16:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/571-785e77085571e289.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wg7c5-1790602088555-4dbf6bdee8c7\r\ncontent-length: 45838\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172917,"size_decoded":46503,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9a45bfb20e6bb3e828a4c614a4595c16","sha1":"1be56995050cbd11766fc753012e18d5e21f532c","sha256":"00284d272c81c630ac4379c14a550abc953c8f1af55512b30581bf2dfd7b35e7","sha512":"1c9cdede8e737010fd1a4fe77733bb648c7744991bee6bedcc575603a98d2801fd4d967c1e4f75dd252f30c9b773a7333e6f8dc0b9c419db3056a5565a9d10a1","ssdeep":"1536:S+jXdC6PZ8H12FJ25HHJEu3s/XM+W3E3Lc9RowyBe27ZvRiQJm3EoH9Kwco50:SeWTE3Y9E7Fxm0wMQ0","tlshash":"c2f3d9b676d0f8e107a780d5843b4006f3295c3a146f74e0a3e6cce975645dea1b3faa","first_seen":"2025-08-04T00:57:02.677294Z","last_seen":"2026-09-28T13:28:52.753638Z","times_seen":35,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebookctf.vercel.app/_next/static/chunks/app/page-4c0a706a03cd7da8.js","fqdn":"facebookctf.vercel.app","domain":"facebookctf.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebookctf.vercel.app/","date":"2026-09-28T13:28:08.557Z","timestamp":1790602088557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/app/page-4c0a706a03cd7da8.js HTTP/1.1\r\nHost: facebookctf.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebookctf.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13947\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-4c0a706a03cd7da8.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 28 Sep 2026 13:28:08 GMT\r\netag: \"3e84ccf7dfa316ba4af2c8fa31d3f9e0\"\r\nlast-modified: Mon, 28 Sep 2026 09:35:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/page-4c0a706a03cd7da8.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::znrsf-1790602088561-b22278f25f4a\r\ncontent-length: 4887\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13403,"size_decoded":5556,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13397), with no line terminators","md5":"0eb16444a6da8eb73fa43340d80ff0ec","sha1":"cfcc66dc238efc1ed601a0ee454cc2fbff42eec7","sha256":"53d13c903204a1443ac3913308e18b566256aedf79710c27d78205e56748143a","sha512":"2be338a7f7b30c274d6902ffbe0e54251169c5ad0739d958594675293a6a7aabd3cb3566b0cba55b402969270f4add40b17869ddcd8544227c7b8fd5de0e23b1","ssdeep":"192:g2xE94tuyb0LDcUFZMTRyK0GCTI7BBToGwHKdO3aAGyYYv7zyO6:AO0LI7tyKyWBGKs3aiYR","tlshash":"8a52f756a1a27e9d73334004e96c73c5b2ddcf22c60a8c32fdfca9251085da5ab37799","first_seen":"2026-09-28T00:39:14.756461Z","last_seen":"2026-09-28T13:28:52.754757Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-28","alert":"Phishing Block","trigger":"facebookctf.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"facebookctf.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}