{"report_id":"c7c92703-8a92-4eec-9f72-8169a8a7bbf8","version":6,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2025-11-03T13:47:50Z","url":{"schema":"http","addr":"appealbussines-reviewpages-2131313131.vercel.app/","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/#/","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"title":"Meta For Business","dom":{"size":2743,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (506)","md5":"c1067d99df81722d6c93ce61637bcee1","sha1":"09e455baf00bfb581738f7a9569aded218e2dba4","sha256":"4539b343d1c031f725102892eed3ebe9588be11411387cacad800c197a9e44f5","sha512":"a77671dbff3c2a704ab655e93a200679cc7d449b3ef7fcc42af1cfca1458e6eda8e2d9538a612552f561f49d01c0a226ba97717b93de8b9af5710d46f0a91332","ssdeep":"","tlshash":"3451aa439d8534399011a714edb6f19c923bd31a8b55c464b5ec031b6f92a9450a36fb","dom_hash":"domhashfe04b1c821d035cd128d152cdef33e36","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"appealbussines-reviewpages-2131313131.vercel.app/","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-08T13:47:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"appealbussines-reviewpages-2131313131.vercel.app","ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-11-03T13:47:52.094211Z","last_seen":"2025-11-03T13:47:52.094211Z","alert_count":60,"request_count":15,"received_data":3189537,"sent_data":7594,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-02T22:12:55.494707Z","alert_count":0,"request_count":1,"received_data":172152,"sent_data":544,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-11-02T22:15:49.745695Z","alert_count":0,"request_count":2,"received_data":6854593,"sent_data":1080,"comment":"","tags":null,"fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"87ca56ea55d45eac5ce5dc39da169c61","sha1":"6f6b90a8d992aa8b0c0b1999067374019967e0dc","sha256":"26c00ff2be8e93a940e4dc438f1fa05cadeef489a0f1ed93751351b60c336329","sha512":"ed7fb56678c75b6c99738705901e1bf01351a5afd7fd6505e17e53093297d48a3730b3fcbe5c5aebef8ed68c3867b2e23ca26ad6d2bb63adf4852bc866705a90","ssdeep":"","tlshash":"c4b09b9d5ac451741d504544ca255590d6d75501502d81a4163ad15d3e8245d885d4c6","size":114,"data":"","first_seen":"2025-11-03T13:47:56.525669Z","last_seen":"2025-11-03T13:47:56.525669Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9eca07657f905ddeaa31651a4f78fbae","sha1":"6fb29294eaf9b431f3a9d1c1197f3b90d5b11dfa","sha256":"b689e203b1c0a3124db959ac31385ae7e93225dde744dc7d33f592a0acd2af72","sha512":"82580045328d1ef23083bd857be646e3838c4afc1d045a98a17957f51262b86face4371bf84d9671f84c6d6580d5f5671e2f00e7af85b816b6de5c16acb4f0ae","ssdeep":"","tlshash":"eae0920a09e6593268a3fb19de2f7244226b13130585d9243fad03479fa684db4526a6","size":420,"data":"","first_seen":"2025-03-21T10:04:48.752122Z","last_seen":"2026-06-04T08:51:24.687858Z","times_seen":247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/flutter.js","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b515e434cea20006b3ef1726d2c8894","sha1":"65e782370bc35a4f5e37922f12debfae61eff946","sha256":"ebef4683c7634467e3e792e993cd8e28d44940d4299dd8f3f8ce8ea3c1f20b67","sha512":"f77633b802a7686f36697c4e1f6a157653cbe91c3fce781e0d6d0da4e2de91b75a5159cded648aef354abb1c80b87315112ec4247c7f711c93eabace7b0c4176","ssdeep":"192:Nd5KmEFBB8ZjieJTwrRR0Ci+GIyAsUTB4Op6Gu/+rkh2zPDzvgHvp7SnzYLJ:NWmqgzJWRi+dyAdli+rk0PHAp7yYLJ","tlshash":"866252961ed192372932f720df1b61d2f36a913b265091827efc83781ff3a589522d92","size":14623,"data":"","first_seen":"2023-05-16T05:41:40Z","last_seen":"2026-05-24T19:52:15.278199Z","times_seen":461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/main.dart.js","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de9974b606e5405c3b52663c2f5f5632","sha1":"fcee1b7b13b44489e401301eafda48cb342e4ebd","sha256":"96f50461b8a27064b3e84fc86a72da02814aa9130d35704f377d7ce17fd9571b","sha512":"afd463e5d5845c0cb25502557d7425dc066647ac3bcea9cd4e03beaa824a43f3f67f9c1dc0d0740a915c5c1c42cf0df8f0a1eb889e02cda983eb7e46a2365b2f","ssdeep":"49152:eHhpAQvBmvbJAGVdTtLZIY8q1Csba81K0HynK7VD9FuEeadi+x1dMI/b/6O30DJd:eHPAp2","tlshash":"e9b5098439f365e9e36204d554472243e92cacb7f81c4838b0f6ccd5fa7526a8725afe","size":2368538,"data":"","first_seen":"2025-11-03T13:47:56.527345Z","last_seen":"2025-11-03T13:47:56.527345Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/flutter-canvaskit/45f6e009110df4f34ec2cf99f63cf73b71b7a420/canvaskit.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"76f7d822f42397160c5dfc69cbc9b2de","sha1":"a7739ae575812316ab0924225becfa3941f5b3da","sha256":"86c5d12e43e93359933fbe2f8575d2bfd1ee595aa581b6111943de2d77975e31","sha512":"5e508a850d6a84b3dc19724a20d77a8aa9b3f1ab7ea31a3c558d5fd6dec1ede576e7c9cdc7cdf038894cbc5ce32f830c7aa1c07b6dea5eb040cceb4d9b79e6da","ssdeep":"1536:TkZNKxsAiuaVGBD0ddPTYNlKdTQoj+Fscm2VtNL9qciTBtyZsN:7iu/D0vTSKdQaN","tlshash":"8593f88d72eab045435370b4442f100ff27f98a5b4888d58e186ead8bdb96ad4277f3d","size":95983,"data":"","first_seen":"2023-05-16T05:41:40Z","last_seen":"2026-07-12T19:09:34.38792Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/assets/FontManifest.json","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:27.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/FontManifest.json HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5972\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"FontManifest.json\"\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 03 Nov 2025 13:47:27 GMT\r\netag: \"5a32d4310a6f5d9a6b651e75ba0d7372\"\r\nlast-modified: Mon, 03 Nov 2025 12:07:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nw8b-1762177647660-1d76bb53deeb\r\ncontent-length: 670\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":670,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5a32d4310a6f5d9a6b651e75ba0d7372","sha1":"1eea93fdd82fad31ce32e9b9428e415dfc737da3","sha256":"2cd9411b540e5c6e15ac65523a3601bee668aeca9104e1de136fc34b3a912771","sha512":"d3eb7cdfdbd802a8be6d1c71574892db9d7431c7054c0d9e02ac5cdc88c0d8d566ff144ac1b20b514f179549173432e5b54b812040d2c8bc6cb0702a815305bc","ssdeep":"","tlshash":"7a01844f8b0916e5744d994bb072127a6c4826517dd6f9caf3984fd8c1e16262337247","first_seen":"2023-04-05T03:16:23Z","last_seen":"2026-06-16T05:38:19.837472Z","times_seen":628,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:27.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 23396\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fa-regular-400.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 03 Nov 2025 13:47:27 GMT\r\netag: \"5070443340d1d8cceb516d02c3d6dee7\"\r\nlast-modified: Mon, 03 Nov 2025 07:17:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::59wrp-1762177647694-97c36524cee2\r\ncontent-length: 19811\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49012,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 7 names, Microsoft, language 0x409","md5":"5070443340d1d8cceb516d02c3d6dee7","sha1":"2edcbf8f12c01ef48617b87fd497c07fbe85087c","sha256":"6b04ad8cd0e6be09eb285526cc0e4f66f84ae231d7eeffa4569f65b9fc3d511d","sha512":"9e8de5b437dd86834902f4151300e3319450c81e16bd6513098f2dad7e02d37da43930cbd9facb68cce21f68f75af9e2b5bb54472ac13f729974967fd1c577c9","ssdeep":"768:xunGfI1bONxcPY3l/b6k5osaUet3ssqWY7/GF3N:xunGBb6k5osgssqtA9","tlshash":"6423d88222ee5a8fe41bee7485812c0b37a5252853a0c771fec7595ed0bcdc4c9b5f92","first_seen":"2023-07-13T06:16:16Z","last_seen":"2026-05-24T19:52:15.258644Z","times_seen":303,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:27.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5408\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fa-solid-900.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 03 Nov 2025 13:47:27 GMT\r\netag: \"658b490c9da97710b01bd0f8825fce94\"\r\nlast-modified: Mon, 03 Nov 2025 12:17:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::59wrp-1762177647725-975437f175e9\r\ncontent-length: 147788\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":357256,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 7 names, Microsoft, language 0x409","md5":"658b490c9da97710b01bd0f8825fce94","sha1":"0c454d0b88ea5736402cdd5a19ae767765dcba6d","sha256":"2395721ec2a7ba59d9ea05e0567339ca73d280e8768fb3f7eceb6fd2c1824913","sha512":"d2adb3153b734ae67f8800f4b5a9565f9672709ec5e4ab584ec8ec5480db7707d2aa1a33e2d00630288a9388eb29eba0ff15ec422be8875400afb56d8d166fd8","ssdeep":"3072:TsNV7I8srinOSBOW5pdA7f6CrtN9KePRbj48qLxns0tlzMTKJM/SmNp:cO8vOSBhdAr6CB1BEbns2zUKJKNp","tlshash":"0474d7c7a3ec8e8fe4117d3847406c0e22d6663899a48665ffc75a6dc0b88e4c775fa1","first_seen":"2023-07-13T06:16:16Z","last_seen":"2026-05-24T19:52:15.291875Z","times_seen":301,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5WZLCzYlKw.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:27.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v20/KFOmCnqEu92Fr1Me5WZLCzYlKw.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nOrigin: https://appealbussines-reviewpages-2131313131.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 91230\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:53:28 GMT\r\nexpires: Fri, 30 Oct 2026 09:53:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 24 Jul 2019 01:18:48 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nage: 359639\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":171272,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"11eabca2251325cfc5589c9c6fb57b46","sha1":"096c9245b6a192d1403a82848e104a65f578a8ec","sha256":"017c0be9aaa6d0359737e1fa762ad304c0e0107927faff5a6c1f415c7f5244ed","sha512":"e4b50f7eb7e96fe01ac44160f2ab88044fdcfc3e295f1c730f0a82de7149dcf902225a16c3c8e1d69e84bfb5ac00c98bd9d6b29db1a1e57f4e47ae842ac4a3cb","ssdeep":"3072:Uy2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI05Wz4OuNOIOU7og2FnI:SOmCeu+bqPVWkWUMxFnI","tlshash":"38f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c50ec69bbc","first_seen":"2023-04-06T13:05:53Z","last_seen":"2026-08-20T14:46:02.980519Z","times_seen":4637,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":78,"dns":23,"connect":40,"send":0,"wait":25,"receive":53,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/assets/assets/images/captcha.png","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:29.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/assets/images/captcha.png HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5968\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"captcha.png\"\r\ncontent-type: image/png\r\ndate: Mon, 03 Nov 2025 13:47:29 GMT\r\netag: \"763a3035391b1865c821d24a2faf9cd7\"\r\nlast-modified: Mon, 03 Nov 2025 12:08:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kq92s-1762177649319-7185bcd91328\r\ncontent-length: 90431\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":90431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 788 x 486, 8-bit/color RGBA, non-interlaced","md5":"763a3035391b1865c821d24a2faf9cd7","sha1":"6b2db6b9c23985007047a7946578a0b6df8aa6d4","sha256":"ce5ebd1fe95b6f56cb4fd0b96903a340d2f8a9a3870abee3cd5cac8e8cb69f26","sha512":"01b3ebcaff9617606c2eff678683d38b3be692d60e704ef6f7100d5587bb78809e4142f97dd05b12fe720d9e42e15f850dec67defcd3abd27f6b335c35a1f4da","ssdeep":"1536:Kgu9DvbDyCK7egj9as3QG9hANOPXPPla11cba5Zks8lgMqRXb07Q/83L:KgulDPjgj9as36NOPX1teJMqRf/e","tlshash":"c4930298cbff4477983bb71a03581d2a908365871a2cc905add493bc29aaa5d5cd3fc3","first_seen":"2023-05-08T02:23:46Z","last_seen":"2025-11-03T13:47:56.511622Z","times_seen":202,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gstatic.com/flutter-canvaskit/45f6e009110df4f34ec2cf99f63cf73b71b7a420/canvaskit.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:27.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /flutter-canvaskit/45f6e009110df4f34ec2cf99f63cf73b71b7a420/canvaskit.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/flutter-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"flutter-team\"\r\nreport-to: {\"group\":\"flutter-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/flutter-team\"}]}\r\ncontent-length: 26292\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:54:50 GMT\r\nexpires: Fri, 30 Oct 2026 09:54:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 13 Jun 2023 20:54:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 359557\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95983,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (545)","md5":"76f7d822f42397160c5dfc69cbc9b2de","sha1":"a7739ae575812316ab0924225becfa3941f5b3da","sha256":"86c5d12e43e93359933fbe2f8575d2bfd1ee595aa581b6111943de2d77975e31","sha512":"5e508a850d6a84b3dc19724a20d77a8aa9b3f1ab7ea31a3c558d5fd6dec1ede576e7c9cdc7cdf038894cbc5ce32f830c7aa1c07b6dea5eb040cceb4d9b79e6da","ssdeep":"1536:TkZNKxsAiuaVGBD0ddPTYNlKdTQoj+Fscm2VtNL9qciTBtyZsN:7iu/D0vTSKdQaN","tlshash":"8593f88d72eab045435370b4442f100ff27f98a5b4888d58e186ead8bdb96ad4277f3d","first_seen":"2023-05-16T05:41:40Z","last_seen":"2026-07-12T19:09:34.38792Z","times_seen":331,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":139,"dns":3,"connect":21,"send":0,"wait":23,"receive":27,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:27.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/packages/cupertino_icons/assets/CupertinoIcons.ttf HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17571\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"CupertinoIcons.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 03 Nov 2025 13:47:27 GMT\r\netag: \"57d849d738900cfd590e9adc7e208250\"\r\nlast-modified: Mon, 03 Nov 2025 08:54:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::59wrp-1762177647691-5a85297542cb\r\ncontent-length: 843\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 12 tables, 1st \"OS/2\", 7 names, Microsoft, language 0x409","md5":"57d849d738900cfd590e9adc7e208250","sha1":"41985b8972e5289666d6054b2242f562f1d6e11a","sha256":"7faebfc34fcf9aeed5ed14c8d859995da91d26ee4d515a5d5a632a14cc6b3d98","sha512":"58ac1df05cf595f495b2f0e06dbb5cc4ab41c28b0dd36977edbdfa6875cb273fa55e40a227954f82cbaffd27e64030ea3d5235ac80e3a667bc751fa5044644a6","ssdeep":"","tlshash":"f0212005fbee8581e0df937411e90b0b37b1ed665256934b62951714cc022805ca2b6b","first_seen":"2023-04-14T20:10:56Z","last_seen":"2026-06-11T19:46:30.068411Z","times_seen":304,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:27.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 23396\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fa-brands-400.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Mon, 03 Nov 2025 13:47:27 GMT\r\netag: \"d7791ef376c159f302b8ad90a748d2ab\"\r\nlast-modified: Mon, 03 Nov 2025 07:17:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nw8b-1762177647693-a670b98822ef\r\ncontent-length: 104618\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":169196,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 7 names, Microsoft, language 0x409","md5":"d7791ef376c159f302b8ad90a748d2ab","sha1":"8484ebfc7efecdb9abe12f03f94014a32b6781cc","sha256":"e68cb27bed42fe434be64d0d6296d8dc5b81686a725fe31d4293509f8598636e","sha512":"7c62e20706b0156d3797647b71d5c4ab9621d62871666e2f3fd9d7e11979f90d76f729f6a88a9ee304d316af1c2b75c35dce0a5548350b70fd9f45e4a9969588","ssdeep":"3072:8aJWBEVD6uOsKWY51/OjzxzG2/7gX7CEnNNZJVTeQ+6:8aJWgD6uOsKWY5Nejq7CE9JVT66","tlshash":"e6f35b8273ecdd8ed4386ebc48d25a8791e6a10ceb180b31fece58dde479ddc08156a5","first_seen":"2023-07-13T06:16:16Z","last_seen":"2026-05-24T19:52:15.255469Z","times_seen":304,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/assets/assets/images/meta.png","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:29.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/assets/images/meta.png HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 23396\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"meta.png\"\r\ncontent-type: image/png\r\ndate: Mon, 03 Nov 2025 13:47:29 GMT\r\netag: \"82f724aa56db0da424f206b9991fd62e\"\r\nlast-modified: Mon, 03 Nov 2025 07:17:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8szh4-1762177649324-289940ef0069\r\ncontent-length: 651\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 12, 8-bit gray+alpha, non-interlaced","md5":"82f724aa56db0da424f206b9991fd62e","sha1":"c0334262e1a6720efb47fa3334e8dd6437377836","sha256":"d96115050f54fd0c168f20fb496755ce4a6857a57446dbdad9310bfc1d79fcb8","sha512":"b466b2ef2b3ae788f31e6bbab7702911b5d43676cbb7dfcad5b41c5f51eeba812414f70870ddcc51666eb8e811abaf2cf2c40d82c99b9f94cf10b5c1556ebdaa","ssdeep":"","tlshash":"adf068b137235e15f213caf6d60214878912734b47fcb4597a58d12aa5235f9e6cfb30","first_seen":"2023-06-05T13:04:47Z","last_seen":"2025-11-03T13:47:56.515962Z","times_seen":149,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/assets/assets/images/hcaptcha2.png","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:29.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/assets/images/hcaptcha2.png HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 21027\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hcaptcha2.png\"\r\ncontent-type: image/png\r\ndate: Mon, 03 Nov 2025 13:47:29 GMT\r\netag: \"0cb9e79e34bc8124b7926395dc9211b2\"\r\nlast-modified: Mon, 03 Nov 2025 07:57:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gph5k-1762177649326-4262fc897691\r\ncontent-length: 99082\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"0cb9e79e34bc8124b7926395dc9211b2","sha1":"d7597160b8092a20a33fbeed4732e66f79c99f9c","sha256":"1b48fca21bb7aeca6d9912afcb21b341f6ca43b29ea36b3032eada3433c68fac","sha512":"479c004aa059325ee70c29d4e4488a36e35c916dd80f4e6ef602f4b680d3b8e370201330bfdf29586b9558f689cb4af45071b5cc3c226c88303e8efd67c04ade","ssdeep":"1536:SglfHDutpZZCUIdFaX49+2msT0UWkhiqU1IvLsWcdQirZQXExC3LWi:/lLQHZCxaX49+/oWUiqUiAWkQ0WXExaB","tlshash":"15a38cc6ce029e91cde00179acaf0b343733c69aa4539b0a5336ee756ed777b48194d8","first_seen":"2023-05-08T02:23:46Z","last_seen":"2025-11-03T13:47:56.517015Z","times_seen":176,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/flutter.js","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:26.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /flutter.js HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 21035\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"flutter.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 03 Nov 2025 13:47:26 GMT\r\netag: \"6b515e434cea20006b3ef1726d2c8894\"\r\nlast-modified: Mon, 03 Nov 2025 07:56:51 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::59wrp-1762177646939-3a3630c07d0a\r\ncontent-length: 4430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14623,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6b515e434cea20006b3ef1726d2c8894","sha1":"65e782370bc35a4f5e37922f12debfae61eff946","sha256":"ebef4683c7634467e3e792e993cd8e28d44940d4299dd8f3f8ce8ea3c1f20b67","sha512":"f77633b802a7686f36697c4e1f6a157653cbe91c3fce781e0d6d0da4e2de91b75a5159cded648aef354abb1c80b87315112ec4247c7f711c93eabace7b0c4176","ssdeep":"192:Nd5KmEFBB8ZjieJTwrRR0Ci+GIyAsUTB4Op6Gu/+rkh2zPDzvgHvp7SnzYLJ:NWmqgzJWRi+dyAdli+rk0PHAp7yYLJ","tlshash":"866252961ed192372932f720df1b61d2f36a913b265091827efc83781ff3a589522d92","first_seen":"2023-05-16T05:41:40Z","last_seen":"2026-05-24T19:52:15.278199Z","times_seen":461,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/main.dart.js","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:26.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /main.dart.js HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 23396\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.dart.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 03 Nov 2025 13:47:26 GMT\r\netag: \"de9974b606e5405c3b52663c2f5f5632\"\r\nlast-modified: Mon, 03 Nov 2025 07:17:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nw8b-1762177646992-68e265c72b43\r\ncontent-length: 704538\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2368538,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (727)","md5":"6a5d12b8c806b5e6e8728ac1b14e03c5","sha1":"ab2eb095ea82bd4730b1422592087970191d2a86","sha256":"ed5899595141842f1233f283aa1b7069bb3da4b0887c99ef522fe2b7a3f71360","sha512":"21ab379f4c3d078f41f1aa6a68f66052f18fcfcbe6f7bbf12f5fafa9b47107e0d8422cd9de5081cb1b5db18660f8f0f655a36eb39d768cf2fa81c17f21b1d285","ssdeep":"12288:eHimUwp06HxFMbc5bh5Bvo4jO3vMqJAGK4kJE0t+dwCbtLZ0:eHr9pAubvBmvbJAGVdTtLZ0","tlshash":"9825b8d839f36149f36204a531173193ea2da8e2e45c083cb0f6dcd6f9396799625ebc","first_seen":"2025-11-03T13:47:56.518564Z","last_seen":"2025-11-03T13:47:56.518564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gstatic.com/flutter-canvaskit/45f6e009110df4f34ec2cf99f63cf73b71b7a420/canvaskit.wasm","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:27.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /flutter-canvaskit/45f6e009110df4f34ec2cf99f63cf73b71b7a420/canvaskit.wasm HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nOrigin: https://appealbussines-reviewpages-2131313131.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/flutter-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"flutter-team\"\r\nreport-to: {\"group\":\"flutter-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/flutter-team\"}]}\r\ncontent-length: 2142317\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:47:53 GMT\r\nexpires: Fri, 30 Oct 2026 09:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 13 Jun 2023 20:54:55 GMT\r\ncontent-type: application/wasm\r\nvary: Accept-Encoding\r\nage: 359975\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":6756877,"size_decoded":0,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"a2b8d7bd6f11232c5c92e2bed2b727b4","sha1":"5a615e0adf37b687b5657edda2d9f411a1cc6bba","sha256":"13298a8f52e9607ed028af504dac0fdedf940908d4707973e5b62ba81cab2bfc","sha512":"d7ce3b02ee49d41a8021885c2ce90a235e38d02138131e557e3d42d03d80795c492146ee02222fd62fb621900fa38c59048eab5f34e9959e213547241a1c7014","ssdeep":"12288:/ASYWEnmjTlcugveFjIbEkcmXOXNXdPm5rX3GKT:0Wfxgv2k1XOXNteZGs","tlshash":"5525e803f21b985eb400f9371a0da5363727999071a970a5df9d29eb7cbfc05289bb70","first_seen":"2025-08-13T11:31:38.113666Z","last_seen":"2026-07-12T19:09:34.392166Z","times_seen":22,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":76,"dns":1,"connect":27,"send":0,"wait":30,"receive":199,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-03T13:47:26.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24167\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 03 Nov 2025 13:47:26 GMT\r\netag: \"0b0e2a9239711d857262f9cc9161b0e2\"\r\nlast-modified: Mon, 03 Nov 2025 07:04:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nw8b-1762177646684-509c26f2281b\r\ncontent-length: 924\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1884,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0b0e2a9239711d857262f9cc9161b0e2","sha1":"aa30c8b5a4a1cc05e2efd538e291178012440bfe","sha256":"81d855d015ba7de67c26758b721e29028d7468a3d939133cfbee4211a7fdcb2f","sha512":"5a29d116eba05a924455608bfef1e33c88144cb1b55397f47ee8d6569783b8155228d5af2010bdf31e535bd255befc2d4a2977b25ec986509d286ebb93123deb","ssdeep":"","tlshash":"fc4151431ec1a8351470db28fe69f198e36fe11b4388cd91749c211b2fb2be04493aab","first_seen":"2025-11-03T13:47:56.520743Z","last_seen":"2025-11-03T13:47:56.520743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":11,"receive":10,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/icons/Icon-192.png","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:26.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /icons/Icon-192.png HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5429\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Icon-192.png\"\r\ncontent-type: image/png\r\ndate: Mon, 03 Nov 2025 13:47:26 GMT\r\netag: \"ac9a721a12bbc803b44f645561ecb1e1\"\r\nlast-modified: Mon, 03 Nov 2025 12:16:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nw8b-1762177646969-5e9b8e83522e\r\ncontent-length: 5292\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"ac9a721a12bbc803b44f645561ecb1e1","sha1":"293b2825c89d2abd4b17e2f5ac30c30f5ba3724f","sha256":"3dce99077602f70421c1c6b2a240bc9b83d64d86681d45f2154143310c980be3","sha512":"7de1298a7b5cf2c72d17acecc1f29834c272b3f145cc41d8a7dcaa19cc2a56f7be04678d022ea15b1bcabd00fb795fd3489b7749c295f168532e8310944d8ce8","ssdeep":"96:yA8+THu155ottxwCxV36m/l0yx9bTrWOfu3UMGp37mixLz5imG6pUlU:yAfTO155itxwcV36ENxFuOWEPhLNzUWv","tlshash":"15b18dd24cf2bef243e6b3bfb030c059d1d5b11b9a4250971de968e8e964c92fae1484","first_seen":"2023-04-14T20:11:12Z","last_seen":"2026-08-21T22:17:22.66304Z","times_seen":3263,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/assets/fonts/MaterialIcons-Regular.otf","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:27.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/fonts/MaterialIcons-Regular.otf HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5408\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"MaterialIcons-Regular.otf\"\r\ncontent-encoding: br\r\ncontent-type: font/otf\r\ndate: Mon, 03 Nov 2025 13:47:27 GMT\r\netag: \"0f341cb48f96334dfc114136d18a1db6\"\r\nlast-modified: Mon, 03 Nov 2025 12:17:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nw8b-1762177647689-3dc0915c8dec\r\ncontent-length: 3946\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7896,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"0f341cb48f96334dfc114136d18a1db6","sha1":"091cfb252bebb642fef1f98bb2e912b9293e407c","sha256":"2418ec80c4672b4cdb3af33e6ac4314a559d88000636be249b3cef5a4f37d1cd","sha512":"5c2cbc19ca17877a68da76169b6bb28e4069c7da131a0273b599d2fc69f79bd790c9528a3a55bf783bff06dd5ca25358fd79f3eeca9dcf78bb85d28dd0de3e6e","ssdeep":"192:p7obS5W1zubxNzYvbdw5BA5mGmP8QmRhuleN1rRraO:FobkW1zubnysB9zP0aleNqO","tlshash":"eff1d7658ed6cbdae04746f1a3b80b75a1d6831f8a520e45dff3bd2aa040120b54ef07","first_seen":"2023-07-28T08:34:42Z","last_seen":"2025-11-03T13:47:56.52276Z","times_seen":36,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/assets/AssetManifest.bin","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:28.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/AssetManifest.bin HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17568\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"AssetManifest.bin\"\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Mon, 03 Nov 2025 13:47:28 GMT\r\netag: \"8b1cf21a141e282cc9fcc19ad6b2028b\"\r\nlast-modified: Mon, 03 Nov 2025 08:54:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nw8b-1762177648582-ac5ef8c22b6b\r\ncontent-length: 281\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1287,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"8b1cf21a141e282cc9fcc19ad6b2028b","sha1":"c7efbc9d05f7e18d34d946a736e5487e1e1c550e","sha256":"65597af2671c420356b08d5cdbbefb567b1bda6b6613b32908c970b9342631fb","sha512":"2a267ef1c081bca0715952236225c8663bd08bab8649da1d8697d925ba675356ecb41fc5edad73261cea8a3ec75b763fa77b47b625047ef483d0b02bf9223a02","ssdeep":"","tlshash":"7f214c68471522db3c01740538ab01e89e451f94f865e7ee3339c949f0d2e6a19ffab5","first_seen":"2023-07-16T00:44:17Z","last_seen":"2025-11-03T13:47:56.523863Z","times_seen":50,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"appealbussines-reviewpages-2131313131.vercel.app/favicon.png","fqdn":"appealbussines-reviewpages-2131313131.vercel.app","domain":"appealbussines-reviewpages-2131313131.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appealbussines-reviewpages-2131313131.vercel.app/","date":"2025-11-03T13:47:26.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: appealbussines-reviewpages-2131313131.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://appealbussines-reviewpages-2131313131.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6111\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.png\"\r\ncontent-type: image/png\r\ndate: Mon, 03 Nov 2025 13:47:26 GMT\r\netag: \"7a2dbfdec08b3a38d668b605d78df964\"\r\nlast-modified: Mon, 03 Nov 2025 12:05:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::59wrp-1762177646969-7d873d479aed\r\ncontent-length: 14026\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced","md5":"7a2dbfdec08b3a38d668b605d78df964","sha1":"87dba0baa4bffbb072a921c7c6a5199c26f83aba","sha256":"c770ce547af85df31198c63f7eba9cba64ff3a48f8eb127d4ea12181453036c8","sha512":"bf80c0e4ce1f97a541f7f4411f994e3586517b301d564eb41cafc285fcbfe325421c0a79c1c70b3da122a6cdb52103f98d60b59217132e97fdb3374c2d0d7ac1","ssdeep":"384:9G/VXkrnRCOZJbe2uBkSfQ4iQA0UfTaJULcEcNPZh3e//tz:9G/VUrRCOZJbe2um0xNlUqULcP130tz","tlshash":"5752d01db87589cdc84c70e0771c3246abc8a71d62b157c804bdae919dfe5db6423783","first_seen":"2023-05-08T02:23:46Z","last_seen":"2025-11-03T13:47:56.524727Z","times_seen":93,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-03","alert":"Phishing Block","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"appealbussines-reviewpages-2131313131.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}
