{"report_id":"a63a3ac4-5cdb-460c-8a54-e3fab67ad90c","version":0,"status":"done","tags":[],"date":"2026-07-01T05:39:32Z","url":{"schema":"http","addr":"facebook-signup-page-1zav.vercel.app/","fqdn":"facebook-signup-page-1zav.vercel.app","domain":"facebook-signup-page-1zav.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"facebook-signup-page-1zav.vercel.app/","fqdn":"facebook-signup-page-1zav.vercel.app","domain":"facebook-signup-page-1zav.vercel.app","tld":"vercel.app"},"title":"Facebook Sign up page","dom":{"size":4909,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c762f77d2bc5185bafa5bfb0c436a4e8","sha1":"698121d9d3fb338cdc0a03a7348dd2f5403a1331","sha256":"7928c845decae886dda378108365a28d8c11cfd2ca896ed2066f9ec71e6f9e31","sha512":"8023d178d1f394d83e96ada58cfe147a9ee06f426ead91afe426398bdb6fe00dad45990ff127db858b4b3c3edf2ce9f321e3b05b838cd039fd9576923c8c8733","ssdeep":"48:nBrmFr/EfQ4FHEEyZem9pnV0/k70rTezdnnKFLblg1pu64iZ3Q:nBrjI4FHPyYm91z70rCzMjgzJg","tlshash":"d3a1a8406ca2dcf162ef49d865635e28dcf98313a2240189fa428bf72fb297dc277455","dom_hash":"domhashd878eb5d19c4e288d6ab1b203694afc9","first_seen":"2026-07-01T05:39:33.069882Z","last_seen":"2026-07-15T08:58:41.336027Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"facebook-signup-page-1zav.vercel.app/","fqdn":"facebook-signup-page-1zav.vercel.app","domain":"facebook-signup-page-1zav.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-05T05:39:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"facebook-signup-page-1zav.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-26T14:12:21.380797Z","last_seen":"2026-06-08T19:50:19.507876Z","alert_count":9,"request_count":3,"received_data":88180,"sent_data":1627,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"facebook-signup-page-1zav.vercel.app/Facebook-Logo-removebg-preview.png","fqdn":"facebook-signup-page-1zav.vercel.app","domain":"facebook-signup-page-1zav.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-signup-page-1zav.vercel.app/","date":"2026-07-01T05:39:10.247Z","timestamp":1782884350247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /Facebook-Logo-removebg-preview.png HTTP/1.1\r\nHost: facebook-signup-page-1zav.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-signup-page-1zav.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 87200\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Facebook-Logo-removebg-preview.png\"\r\ncontent-type: image/png\r\ndate: Wed, 01 Jul 2026 05:39:10 GMT\r\netag: \"7faf1e556766b0899e0bcc8838592153\"\r\nlast-modified: Tue, 30 Jun 2026 05:25:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7qwv2-1782884350253-62226cc9ad52\r\ncontent-length: 81768\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81768,"size_decoded":82332,"mime_type":"image/png","magic":"PNG image data, 666 x 375, 8-bit/color RGBA, non-interlaced","md5":"7faf1e556766b0899e0bcc8838592153","sha1":"9f34eba9c7d9ec8a972cd26a3c94243f89b68ad6","sha256":"92a896c6e2774da45e2bd3e207609862aaec20b13930a5807e8ba5ffbcda18db","sha512":"aa5801deb141a8655e3561d9392dd8612faf25275bf3cbd2b276411dba666e27f95efa06f30f92a5a0acc3cbd73bcbd24fd1c5bcd416afd0bcc66a0c4a945843","ssdeep":"1536:XMa1NyTn1DpILyWjlyrbcT94gyQgisizA9qlYrqtE0AXNqx5F9bz:XRhTiiVzBGOxkkx5jbz","tlshash":"fe83e01a1a0215bf437f9aab8dba2041d7b8fc24335474087ae19c972ed91136cf1ee6","first_seen":"2026-04-26T14:12:27.635171Z","last_seen":"2026-07-15T08:58:41.337963Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook-signup-page-1zav.vercel.app/favicon.ico","fqdn":"facebook-signup-page-1zav.vercel.app","domain":"facebook-signup-page-1zav.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-signup-page-1zav.vercel.app/","date":"2026-07-01T05:39:10.274Z","timestamp":1782884350274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: facebook-signup-page-1zav.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-signup-page-1zav.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 01 Jul 2026 05:39:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::7qwv2-1782884350282-a2408ef537c4\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":432,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0b43bca40357fcbe05635d680ab159da","sha1":"68f03993f214ecbf28e416c79f05d1e121ae18e4","sha256":"4e3b393acce8f692ee4f514b96bb3c52694aacd91c96ad9664d6c724c599eacc","sha512":"d797de4e4337d997b26342fa0b7db83c3be9c7a428a9562b262b470eddcc226d3cb18e4ce7c9586fee12c1ad5991188aa89bd4c94c91e73b7d05b5d54784f21e","ssdeep":"","tlshash":"25a0240f0d450c4d33c4000031c157340710c0317f14f110d0dcd513d104dcf7344140","first_seen":"2026-07-01T05:39:33.072352Z","last_seen":"2026-07-01T05:39:33.072352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook-signup-page-1zav.vercel.app/","fqdn":"facebook-signup-page-1zav.vercel.app","domain":"facebook-signup-page-1zav.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T05:39:09.969Z","timestamp":1782884349969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: facebook-signup-page-1zav.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 87200\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 01 Jul 2026 05:39:10 GMT\r\netag: W/\"d0ea376b1c0572c06e4e9056fb8a0937\"\r\nlast-modified: Tue, 30 Jun 2026 05:25:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7qwv2-1782884350010-5d3022bc7b4d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4905,"size_decoded":1780,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"d0ea376b1c0572c06e4e9056fb8a0937","sha1":"f4bf3e6ae2b9131a54a22fd8928acbba600074d6","sha256":"3ca2f8231cea5120f3140dfb518b72c6c3ba22d664324317a93cae7687123fb5","sha512":"1efbc3e4cab09dc300771892c74cc16fa64f1ac8273a23c078e7a6132d1c9b1072315f89d9f7529c6309b70b710bbf0f49ee5c7460afdc2763818a3a0a4c76ab","ssdeep":"48:xrmzR/EfQNcHEEyZem9pnP0/k70rTezdnnKFLNlg1iuT4iZYXvM:xrm+INcHPyYm91p70rCzMBgDJYfM","tlshash":"c1a1a6446ca6dcf162ff09e865635e28dcf98313a2240189fa428bf72fb297cc277455","first_seen":"2026-04-26T14:12:27.633713Z","last_seen":"2026-07-15T08:58:41.336745Z","times_seen":8,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"facebook-signup-page-1zav.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}