{"report_id":"77d06d7d-4fc7-4da9-b84c-b97139537bf6","version":0,"status":"done","tags":[],"date":"2026-07-04T10:41:47Z","url":{"schema":"http","addr":"h5.facebookmeta.cc","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"172.67.203.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"h5.facebookmeta.cc/#/register?type=1\u0026redirect=%2FadvertiseCenter","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"title":"Create account","dom":{"size":4523,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3761)","md5":"2845611fa66b04ff884d907487cebb42","sha1":"be9284c766bff4af01cb4d03ef1beda9bcaab9b7","sha256":"dabad5a6025f1e854f2e82ba7af46678d0b749440f22975f5bf312d47385979a","sha512":"c410dfb6d213c876416bcceba0e06670cc8358a9ac08a4784cbba2b04139fca7ff0e427ba520127f68a2ad74a8e5e930aefd6f50f9ace6a6aae462feb9af415f","ssdeep":"96:RjZfDz9jzBZ8XYnIPT2j+6aC0PaEf623WPe7bM:RjVDz9HBSIIPT2Dknk","tlshash":"59910411e855291f8323e4c0f421fb957bd6d31ecf0e6480bbac86ca1fd7ea954252a5","dom_hash":"domhashdbe13f0b0d4180eedb8dcaab8d349946","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"h5.facebookmeta.cc","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"172.67.203.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-08T10:41:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"h5.facebookmeta.cc","ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-26","domain_rank":0,"first_seen":"2026-07-04T06:04:05.310023Z","last_seen":"2026-07-04T06:04:05.310024Z","alert_count":36,"request_count":12,"received_data":1239483,"sent_data":5766,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/js/614.a82275fb.js","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67cdc61d66b314c7cd805744137992f0","sha1":"13397f0e5fac85ff212b27b1c346e391c1badf6d","sha256":"6abc30195aac2df02a6be299756a3e7c0ce242e5f8d48c7df9c33625d598c724","sha512":"57ee9829326fc9f4a741c7da47064028b396874b6f28a27a764fef1ec26b06d204b7acf4e636fba275b6e23895b24ad55f8170ab361a69f7b145dfae8403c9bb","ssdeep":"","tlshash":"da8197c9b083b440c7b126fca52f1215732a1c61750f0581f668a8a53df695be225f9d","size":4037,"data":"","first_seen":"2026-07-04T10:41:50.540202Z","last_seen":"2026-07-04T10:41:50.540202Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/js/219.77bbf8da.js","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8f2a5d6cae099bd71c3ebee5cff280a","sha1":"1d24539c709e24ddb849e803c2639003b9333ce8","sha256":"cd9c5aed9a072f7fad3e3b5fbdc797d4c415864534c05630104921a08259388a","sha512":"9646168ce41998cb92ed0479f4232b05c9b6f60a0805bf9550550940d3141b2cacaf7b1de1249fec127b465055fa910c7c6a572bd7d38b738270c3a028e09bab","ssdeep":"96:8E7w86zTwhPTeaQTAWtccEOezCJ4bFMU+iYYnKAlQNU2POj79:h7wvnwYMW9helbVrYYnKkB2POj79","tlshash":"cb91658354d365a84d25d084a01e4974b02abc8bb40694c8fff9dccd5debe552b0e6bd","size":4410,"data":"","first_seen":"2026-07-04T10:41:50.542805Z","last_seen":"2026-07-04T10:41:50.542805Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/js/chunk-vendors.c16d103b.js","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"762661b079ecda82a8429f19773491de","sha1":"fad87672de4dc8a645cbfceaf1e1f7eba036dee0","sha256":"67968f27e7038c7d65f103c155b3f8e4dbd71d9ec763f22372ae6ab123ba4f38","sha512":"4d2a96551b77404a6ddec11a70f19802a120e6c26497ea9fc8285652822faf5da5777551cac005d1a312e72273d95d73e51dcf6cad2cbb3babf1e65b3de47869","ssdeep":"12288:c05ymFAy+7pW/aWprIumy7QsdW8MB9rif9/BUziy:c0JJ+7pW/hNmy7Qsksmzv","tlshash":"84f42bce3186b522479711b5403f290ab23e2f58680e8458f6a5f4da7d78d6c827bf7c","size":772429,"data":"","first_seen":"2026-07-04T10:41:50.529158Z","last_seen":"2026-07-04T10:41:50.529158Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/js/app.bfca3f6a.js","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1508644bb24b5d84fe9485aa12fae055","sha1":"e783d53af38b166be7fc9a848db5e1e37a4d8e61","sha256":"2f319e21ef0b309693ae5691e87ee5541b1a558cfc3ced5dfd40e60b27a4c918","sha512":"464246296240d12786757f873f49e2628172dfabc285fd1909afc76fddd9c65defe753ef55afa9b393d8966df035a4cfd460f8a7b21f0d2f268808da59485d00","ssdeep":"3072:OGfA8WVAtP2/FBd6yrloPd8sRaJhlhawJB50mABfi:bA8WVAkBdhrloPysR4lhawJB50mA5i","tlshash":"12142aaf32ca66f8245105a1510e728461295d82fa27b8e0f5eda45d7bf4b4ec133ef3","size":202517,"data":"","first_seen":"2026-07-04T10:41:50.53415Z","last_seen":"2026-07-04T10:41:50.53415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/js/chunk-vendors.c16d103b.js","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:23.462Z","timestamp":1783161683462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /static/js/chunk-vendors.c16d103b.js HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a47d0a4-bc94d\"\r\nexpires: Sat, 04 Jul 2026 22:41:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y2f7cvdpnENWS8yu5uuAUMJb6mEEIWGEK5erLqf5Z%2BozkWt9lVU0o%2BqvFCsM%2FFnlnL%2FaTOvku67NiSdyxUtd5IEsUgqy9IftDmeXn5DhZUlY%2FC4eoOQY%2F30jUPb254L7wPppeQI%3D\"}]}\r\ncf-ray: a15d8469ac310b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":772429,"size_decoded":221225,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2820)","md5":"762661b079ecda82a8429f19773491de","sha1":"fad87672de4dc8a645cbfceaf1e1f7eba036dee0","sha256":"67968f27e7038c7d65f103c155b3f8e4dbd71d9ec763f22372ae6ab123ba4f38","sha512":"4d2a96551b77404a6ddec11a70f19802a120e6c26497ea9fc8285652822faf5da5777551cac005d1a312e72273d95d73e51dcf6cad2cbb3babf1e65b3de47869","ssdeep":"12288:c05ymFAy+7pW/aWprIumy7QsdW8MB9rif9/BUziy:c0JJ+7pW/hNmy7Qsksmzv","tlshash":"84f42bce3186b522479711b5403f290ab23e2f58680e8458f6a5f4da7d78d6c827bf7c","first_seen":"2026-07-04T10:41:50.529158Z","last_seen":"2026-07-04T10:41:50.529158Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":836,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/favicon.ico","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:25.142Z","timestamp":1783161685142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:25 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a47d0a4-10be\"\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HypXDrQfe2UnpvrmZeaGtJXuLKYeYaWYxP9IO4tWzFZAURrIgmGMFj6mKCI4LewxjYqx0xJ6Dcjk6ipZrBmBqfEmvA2RIyBmoCok2Dybw609CcNeAV%2Bj%2Buruy%2BT9zaPg%2FgYDL6o%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a15d84742c710b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":2606,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"763a26ac1b333a2a3e4d3aaa7188b83f","sha1":"dab8d87df371792f84be587bc904781f1754b785","sha256":"cf2caf811a3e92e7913dfe4be696bb36c155ebff32ac0b62547c6b8233cbaab4","sha512":"95c59e667b4e1ccfde2ae3394ed16d757e90b0ca15cafa338ec79fb61acc9e8d73ce179a98660df242144da63e5793335a1f6b39b26f03117f8040e0413c80c9","ssdeep":"48:AcNTmQ9vq996VypcXlEnPgsUXhbJ7LI70JQucb0mMQksk13b+qYyCkWN4/:AcNTh1q996Vb2gsUpZRuWELkpmNc","tlshash":"c391dcc28d89416bc90aab7481862fc117370d9cb0ee5de559fc751a3bb3c8e51bf066","first_seen":"2024-10-29T06:16:42.130564Z","last_seen":"2026-07-04T10:41:50.530471Z","times_seen":47,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/prod-api/facebook/user/h5LoginConfig","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:25.396Z","timestamp":1783161685396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /prod-api/facebook/user/h5LoginConfig HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-language: en_US\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:25 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHGCaJiLSNAaPvKu8AyPBVwGwLt10%2BlX89Y7A3yJNckpGwvEbU%2BQpuG2V974tO60kGavKHvvEDqnlJahrdhsjMiFfuNxKWGenhnTQJEFyHlRSEYCYQ%2BEhOn9LWYrkUiNVz%2FRky8%3D\"}]}\r\ncf-ray: a15d8475bc760b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70,"size_decoded":773,"mime_type":"application/json","magic":"JSON text data","md5":"2aef70021fe99740409eeb7ee0e32955","sha1":"eeac396dd3502c4821c7f922341876e5d87f6934","sha256":"8174a03270a13d70ad8890d06a015d03dce606908c446ba78c4940b0ab32331e","sha512":"d7682a1c0fd48f4b3b6f056f01e132b67a818dae4a0e5a29acc0cdfcee2ca0bccd0c2002be177a29bfd556492b8dce64926a7c781196cd59f0b8f5906de2f94e","ssdeep":"","tlshash":"42a002961c2c67e77c87c474e70b134e41a479722124f67c8ddd513994cf17b2044c39","first_seen":"2026-07-04T10:41:50.532141Z","last_seen":"2026-07-04T10:41:50.532141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/img/t019605beaa2ec0f7ff.b8309452.png","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:26.355Z","timestamp":1783161686355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /static/img/t019605beaa2ec0f7ff.b8309452.png HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a47d0a4-24c0\"\r\nexpires: Mon, 03 Aug 2026 10:41:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ql%2B%2BJGmTTQdrtbWUkLkKZxyWTt7kHC8Lv6Nie%2B7lm5jcbOfHOz%2Bbfe2nU0klisFq%2BSYUnm%2BWs7gNNsBpBXKpCMhlb335LHQZnJ0fDRyPDDZlxAcuKuExt5fvnauqgkh%2BqA%2BvVdw%3D\"}]}\r\ncf-ray: a15d847bbc8d0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9408,"size_decoded":10173,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"827c941cf35c69033286f6443e3a2201","sha1":"1c6b6e7a0039fc7df75ef3fcab4df961518c4199","sha256":"a22f3a1b45597d2f9dee023860d035e6d43a35455fe1995a9da713cafafc6415","sha512":"2696857eb0511f01119af7889d73e9dc9e3fa204ac9bec4092134def4c06eab214fb447e6c4475b996a192526957ab9fcf712ab15c166f60735b7ae909db68ac","ssdeep":"192:8ULENwpSOPQQqMMPGjIOY5thCbSOAuzNJ6j28sTJLCo8SnQjeFRdM2AvnfzxPWKh:ZESSAJnMu8XoIOLgeQ6C2afzxPWOYN3K","tlshash":"4a12bfc110fa5bc1af182ff0df2409c8c6d2c97baa19a87351e33553d532e9955170f9","first_seen":"2026-07-04T10:41:50.533192Z","last_seen":"2026-07-04T10:41:50.533192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/js/app.bfca3f6a.js","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:23.464Z","timestamp":1783161683464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /static/js/app.bfca3f6a.js HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a47d0a4-31743\"\r\nexpires: Sat, 04 Jul 2026 22:41:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FbbFfGuALc0eGiznCbZoWMXJ6%2Fpp2vgMpLM3Hz3w6LjmdWcVMp%2FVx%2Fz%2Fo57s1l6eCIMmh%2BcPtP92lX3jBKvHRpshcMSELaji%2B1lFBmmBaQ5TEbxevLWY0tbCQiZpDCJJ%2FZuQTY%3D\"}]}\r\ncf-ray: a15d8469ac320b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202563,"size_decoded":64949,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42338), with no line terminators","md5":"1508644bb24b5d84fe9485aa12fae055","sha1":"e783d53af38b166be7fc9a848db5e1e37a4d8e61","sha256":"2f319e21ef0b309693ae5691e87ee5541b1a558cfc3ced5dfd40e60b27a4c918","sha512":"464246296240d12786757f873f49e2628172dfabc285fd1909afc76fddd9c65defe753ef55afa9b393d8966df035a4cfd460f8a7b21f0d2f268808da59485d00","ssdeep":"3072:OGfA8WVAtP2/FBd6yrloPd8sRaJhlhawJB50mABfi:bA8WVAkBdhrloPysR4lhawJB50mA5i","tlshash":"12142aaf32ca66f8245105a1510e728461295d82fa27b8e0f5eda45d7bf4b4ec133ef3","first_seen":"2026-07-04T10:41:50.53415Z","last_seen":"2026-07-04T10:41:50.53415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":410,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/css/chunk-vendors.0d6e9997.css","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:23.466Z","timestamp":1783161683466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /static/css/chunk-vendors.0d6e9997.css HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a47d0a4-36e2c\"\r\nexpires: Sat, 04 Jul 2026 22:41:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SooOQuMxX%2BV3hKlV56yNmjw4QwxXESt8KyGGpZQeRm95oDjjVVrJQbPoqC4l9KXVQpiCWFXhZhc%2FwExlHL9FfqJBT0TPmtLwLJdkTC0eAe7%2BBg8Vh%2Be3Bf9JGbDJ%2BaeJD5%2Fjds8%3D\"}]}\r\ncf-ray: a15d8469ac330b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224812,"size_decoded":53036,"mime_type":"text/css","magic":"ASCII text, with very long lines (64226)","md5":"3f2d238f567878fc882262d15c0246e9","sha1":"afd22aa560041acb3ee50f1e8d102f84f598215b","sha256":"75724902161178f302b800e0a09bbce57cf0adab3ead8deac6722d8ca8ec2581","sha512":"6326237a5a5fc4abe3ae56e55abef9f70fd5ccf497a7235aeb00b239a4e2793d3439b9a2e152da800122f71475a68480b67c8fae00ed6940267ad3a283be1f0e","ssdeep":"6144:7kZUwh1nAukdDO3Xyr5Ir5eR0dTMA9S6fjKlWf:IZUwh1nAukdDO3Xyr5Ir5eR0dTMAEMf","tlshash":"6b24876f85d1135da1178e619fcc9ad8c22cc572a5520dedb242380e8fc7fde239a61b","first_seen":"2025-06-24T18:05:37.862283Z","last_seen":"2026-07-04T10:41:50.535406Z","times_seen":35,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":360,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/css/app.ec1343e0.css","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:23.468Z","timestamp":1783161683468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /static/css/app.ec1343e0.css HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a47d0a4-10a1\"\r\nexpires: Sat, 04 Jul 2026 22:41:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UDwfimWdxWXiVI8oNNqUAzHTqVHb%2F8YJtCm%2BEQRggCmTs3KM9UtM3iodKqtnNMLn6U9bTPrFU5FkakLwr6ANf%2B%2Btye4cHo8KXWrKCxwqkGcASoVXa5I6%2B9zC9I%2BQDqtDpxxMikM%3D\"}]}\r\ncf-ray: a15d8469bc340b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4257,"size_decoded":2340,"mime_type":"text/css","magic":"ASCII text, with very long lines (4257), with no line terminators","md5":"e7c8b6fa1ba1ac4f35490e5238e3f3f2","sha1":"a5a2f4058492d0a740742a4472b594099a34579d","sha256":"1c63874a0f9a9a99f7b95aa067e6b9aa46b9185802517cca1d79523c396b4b89","sha512":"601a0251146feeabe081cbb2bb1b87b280fc73453386e39ec747ddff78eb4db7e9e4d6745b5b0838d08a662a643034177168d6c4522957ee29a64efbc7575086","ssdeep":"96:bjmF0/HkCjGXXO3OLH2Rtkd9u1iP7V/O1J8wMkGOomM1YV:bj4HCk6sH2RtkTIiP7doJikGpmMe","tlshash":"76916339f680b13ba13781eeff8ded4881358912e7514febf14aa5125e4738b2970716","first_seen":"2026-07-04T10:41:50.536133Z","last_seen":"2026-07-04T10:41:50.536133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/css/614.6a684306.css","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:24.925Z","timestamp":1783161684925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /static/css/614.6a684306.css HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:25 GMT\r\ncontent-type: text/css\r\netag: W/\"6a47d0a4-3f3\"\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 04 Jul 2026 22:41:25 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vF3W1fJuIECwkbHJdoYI25CXs3pWQPri06X%2BVpxe%2F8R7m05MGxHaFAUPRVIuAf1Dkg8hKmx1y6q2jOYB2Rm0jY8ZWnMZOYeXWz8ZAV8twBudr%2B%2F7bTMwQF9zEgU0hb%2FSxPT9AWU%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a15d8472cc620b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1011,"size_decoded":1177,"mime_type":"text/css","magic":"ASCII text, with very long lines (1011), with no line terminators","md5":"bfb89464e94bb33dbc8113ce794d3053","sha1":"074534ed4a433cf575529e4e0740314be41200eb","sha256":"5405dfe5c0aad6597eb5a5f6528ecf5a37447d86b4b53e7e5d000cc5bbbc1f29","sha512":"91bdf64c682a15642e5843fb463264ab494ffa54f4c3f40632937f9d08fb9ee5e900ea9a2008e9f4ebaa9fa987d1857c2745ca191a43818e861bcb008991a04a","ssdeep":"","tlshash":"a611c0b11506206bf54fa22d5c8018d8007de4a2f133853d2d653efc41d74cc727b8e8","first_seen":"2026-07-04T10:41:50.537643Z","last_seen":"2026-07-04T10:41:50.537643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/js/614.a82275fb.js","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:24.928Z","timestamp":1783161684928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /static/js/614.a82275fb.js HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a47d0a4-fc5\"\r\nexpires: Sat, 04 Jul 2026 22:41:25 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8rpLeBeC1p54UWpM8IgqdPPXHAhbDBkUak%2BhHvvMMIq98BIXsvIaYs015JFDm5PTqtvYHHWUqQx4wbPfcq72y8zBePLDE8tbapd8dIFlkgkn%2BmyNz5z8C6gnWb60h84w1pkh5U%3D\"}]}\r\ncf-ray: a15d8472dc630b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4037,"size_decoded":2296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4037), with no line terminators","md5":"67cdc61d66b314c7cd805744137992f0","sha1":"13397f0e5fac85ff212b27b1c346e391c1badf6d","sha256":"6abc30195aac2df02a6be299756a3e7c0ce242e5f8d48c7df9c33625d598c724","sha512":"57ee9829326fc9f4a741c7da47064028b396874b6f28a27a764fef1ec26b06d204b7acf4e636fba275b6e23895b24ad55f8170ab361a69f7b145dfae8403c9bb","ssdeep":"","tlshash":"da8197c9b083b440c7b126fca52f1215732a1c61750f0581f668a8a53df695be225f9d","first_seen":"2026-07-04T10:41:50.540202Z","last_seen":"2026-07-04T10:41:50.540202Z","times_seen":1,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/css/219.c601b43f.css","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:25.847Z","timestamp":1783161685847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /static/css/219.c601b43f.css HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a47d0a4-8c8\"\r\nexpires: Sat, 04 Jul 2026 22:41:26 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FTTO4ltJPkfz52eTRt%2B3v0mhQ1tr31jz2SpzlCAZLHeD1ZFRaxf3gh8hafvP0%2BtJYIltw%2FBN2yv68uW%2B%2BLlA6OrZma6EDBuQcyZTeLHc5EzerfAg0S2vC6TywKX06pYuq%2FY4flQ%3D\"}]}\r\ncf-ray: a15d84788c7d0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2248,"size_decoded":1511,"mime_type":"text/css","magic":"ASCII text, with very long lines (2248), with no line terminators","md5":"929f821f7ff4ecf0831764782057fe96","sha1":"c27f37bcde74e7ba7cd7b4f5b68cfe83ef0aab3a","sha256":"0060aa6050af80ef0ff92ef63ffc525209ba786bbb3a0cd3f60226e04ead36d5","sha512":"1b12b63036f441949fc4bb335579d1c7555b31233291c69fd9824f7d0e8fcdc45ccdcb025401a01c332e795ac1e2e5f8e74b89a94dc26fa753ad6dd105a1c396","ssdeep":"","tlshash":"2d41d02afd048809f533f5d01da59b88260d8a72d6864aecdf53f4b16d4b68f783172c","first_seen":"2026-07-04T10:41:50.541667Z","last_seen":"2026-07-04T10:41:50.541667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/static/js/219.77bbf8da.js","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.facebookmeta.cc/","date":"2026-07-04T10:41:25.852Z","timestamp":1783161685852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET /static/js/219.77bbf8da.js HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://h5.facebookmeta.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a47d0a4-113a\"\r\nexpires: Sat, 04 Jul 2026 22:41:26 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13JSuZS97ZznxUvKMVes3mxgW2jGQbJsttAXUpATIg03ngGuO8l%2FwTibh1%2FJfSSjPuLABI0kQk%2F8Rikhl%2F2Q6HatY3iqmYrsEO%2BHp9QiyHSAQcQWTsc1fNofJ0wd4Wbu3zHORgM%3D\"}]}\r\ncf-ray: a15d84789c7e0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4410,"size_decoded":2486,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3852), with no line terminators","md5":"c8f2a5d6cae099bd71c3ebee5cff280a","sha1":"1d24539c709e24ddb849e803c2639003b9333ce8","sha256":"cd9c5aed9a072f7fad3e3b5fbdc797d4c415864534c05630104921a08259388a","sha512":"9646168ce41998cb92ed0479f4232b05c9b6f60a0805bf9550550940d3141b2cacaf7b1de1249fec127b465055fa910c7c6a572bd7d38b738270c3a028e09bab","ssdeep":"96:8E7w86zTwhPTeaQTAWtccEOezCJ4bFMU+iYYnKAlQNU2POj79:h7wvnwYMW9helbVrYYnKkB2POj79","tlshash":"cb91658354d365a84d25d084a01e4974b02abc8bb40694c8fff9dccd5debe552b0e6bd","first_seen":"2026-07-04T10:41:50.542805Z","last_seen":"2026-07-04T10:41:50.542805Z","times_seen":1,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.facebookmeta.cc/","fqdn":"h5.facebookmeta.cc","domain":"facebookmeta.cc","tld":"cc"},"ip":{"addr":"104.21.14.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-04T10:41:22.736Z","timestamp":1783161682736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebookmeta.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:21:56 GMT","end":"Mon, 24 Aug 2026 08:21:55 GMT"},"fingerprint":{"sha1":"00:84:7B:9B:7A:36:1A:43:A0:5D:A8:65:35:3F:6D:7A:E7:FB:EF:C8","sha256":"C3:2C:15:B7:84:9A:D7:BE:0C:D4:F4:10:3F:51:CF:99:97:8A:F9:96:89:9F:0F:91:CF:62:6D:EF:34:88:E6:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: h5.facebookmeta.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 10:41:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 03 Jul 2026 15:09:24 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UVAIUSfUx93fYWl0xbeRY4o%2FhQrfL9cdEDXitqh6Rgdmlj%2FCRw0WrB4I5J%2FeVUoN4XWZj9ytF8HFGzYckoUDXDYm2Tp0HtIxbhZ9nAWTPZ8244HYg3dXDItPqi5wRLR7D%2F4PbwQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a15d84656c200b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1205,"size_decoded":1244,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (563)","md5":"84492e9c41013bc22ef92acbfeab8771","sha1":"0a52efe476636d7cca613ab087b926027c4294cd","sha256":"6d483ae43b6491f0ee7cc79c6af2ca03e59490df01a97e0f72872d6bb16be390","sha512":"c6c88a0285a9cc2efd9d2c6b51cee0ded45bf4fa0ab64ec203aa8606d6ffb7696585a9fb757324f188cc1391b3df571022e2f3099139eccc5b76cc34a49c323e","ssdeep":"","tlshash":"eb21e146ed11e40d17318954fa31f27cca45ec5a9660ece0f89c51fd8fa4bc84997a25","first_seen":"2026-07-04T10:41:50.544644Z","last_seen":"2026-07-04T10:41:50.544644Z","times_seen":1,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":23,"connect":19,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"h5.facebookmeta.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"h5.facebookmeta.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}