{"report_id":"d0f9de15-ceb1-4ce4-8d8d-260a779957bf","version":6,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-01-04T19:07:54Z","url":{"schema":"http","addr":"facebook-theta.vercel.app/","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"facebook-theta.vercel.app/","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"title":"Facebook","dom":{"size":9212,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9212), with no line terminators","md5":"31080a3d0e5645a1a355b54331e4f0d3","sha1":"20d116fb88b1b6f8981877fb23c72fe94d182171","sha256":"fdb3983aaa9ed92c1e88952abafc8fa5e46467db62b74df1568b98635ad01e84","sha512":"190e45bb1a49072f9863647e4c4cc490ee4535360ce34c05a08ec13d2b1ab90119f4331dd421105fd02b982a35367b71794dee4ab50a71ff681fd7684b4153c0","ssdeep":"192:xvi4Zu3En5wnBS6Uq4DGCdiOgnqzcJmfR52:piuu305wnBuq4DGiI82","tlshash":"5512966ead05ec0adca2ee8a10bd5e39908dca7b5a75dc5cc3cccd5903019be5bc9d81","dom_hash":"domhash437113069630493802b145bb1d61f7b4","first_seen":"2026-01-04T19:07:57.438021Z","last_seen":"2026-01-04T19:07:57.438021Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"facebook-theta.vercel.app/","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T19:07:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":6}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-04T19:07:32Z","timestamp":1767553652,"ip_dst":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.18","port":36446,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (onrender .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-04T19:07:32.338659+0000\",\"flow_id\":1886219620584561,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":36446,\"dest_ip\":\"216.24.57.251\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050129,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (onrender .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"facebook-dxpt.onrender.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3445,\"start\":\"2026-01-04T19:07:32.330865+0000\"}}"}],"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app/","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"facebook-theta.vercel.app","ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-04-18T11:21:41.306105Z","last_seen":"2025-11-30T15:14:23.276561Z","alert_count":108,"request_count":18,"received_data":838057,"sent_data":8536,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"facebook-theta.vercel.app/","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7994a7284eec734f5a2526d8f4db9cc2","sha1":"0c59e04ca3c67dea03896f847c3c604769addde1","sha256":"78cba1f318b0717ef6ad160d00610dbab40101c1fb90b9405107283ab8b7048a","sha512":"d3fef999c27ba2cfa02c217c6ba93033fbd6a9ac653eb390e12d833dc006e79e82d1b678a143689fa9d8ab00cf49180bddad7c9dd5c626fc1cd0b7e16301b3b5","ssdeep":"","tlshash":"a2e0ab386559200f00d23defa05689a93e274c309e934a01f416a1388131fd7b003cea","size":419,"data":"","first_seen":"2023-03-13T00:24:25Z","last_seen":"2026-08-13T09:00:14.125531Z","times_seen":5852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/419-e6de469145bfb61e.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdf01550e2d5816a2b02403ae6ceb4bd","sha1":"a9ed3891e64173d8676b10f219d82280a7622111","sha256":"610b73f4fd9c5b1e6f009de0d825b88568ac45b198c6c9360f49be043a23f746","sha512":"49c07f32f9254e52f30e0effd3bdc935559ce5975e51c15238c122d66bf4fb5184bf073450678d6f333ae8db17bb1b1221ac00d452034198bfee08713fe415ec","ssdeep":"192:X0W5MSgyEoW9xsxKBqxuR2Bjg8wgSRn1b4/FOaHEzz+0inoRFbYLu4BsGKIcggTa:X06B03YxKNe3spCUG03D4K+cl3M7R","tlshash":"aaa21aba32d1b4e7039a80e4552f400df77d197d262e7000e7a688ddea7095dd1b2fb9","size":22145,"data":"","first_seen":"2025-04-18T11:21:43.91846Z","last_seen":"2026-01-04T19:07:57.466441Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/219-894c871bdaf0c871.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fe0b9784fed3834a46e730d43c4c270","sha1":"ba28a02b9c2d44cc3602b16366ddb38bad4e9e44","sha256":"cdf438556646ff7c370035c188b140aa2f3d8c74c5b6062a1bb39d01e3259bf9","sha512":"ae952f1c0fbd829674317efb5cf3e545aaf805de5c640f24c8afab53c14049f60b1d2133f2b0eb1f761b7cf153eb10d6783ff8ac01d9b14b673e76c9877266db","ssdeep":"3072:N29H3EwHhkQAHvD6scEhtBn/B6SaiNKwb04AunF76jg:sXEwHhkQAHL6jktT6S5o4AuUjg","tlshash":"0b242a95b352b03583db51a5c06f0606f33e5aa9240e446cf2bad8d7297058da2fff39","size":219428,"data":"","first_seen":"2025-04-18T11:21:43.90951Z","last_seen":"2026-01-04T19:07:57.467479Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/26-07a5d4b827f4d41c.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f062999774eeb26a055a86d512969dec","sha1":"ae799e1f648cd58fc7c363c62c629b3098a68ca0","sha256":"405a15e322274305ab8478e7b9672232e5dcd1781fd2870228c8102b338cd75c","sha512":"d2eaabb9983be4078fa098dc9662208cbbd8d2145f2ad9349273a3cb6c8a0a19ece1cf69fe4b435c857f3a343a5062d58ba3272c0f69f6c97ae28ef49043c843","ssdeep":"192:9xBA0o+3WKGWpDtaEwYnS2B2n7ocxDoNW5SIObcR97wf3:1DtaEwYdBm7ocxDoNESITRxM","tlshash":"0c4294acf5d2b95c173b849ce1af200de0af4f51ce2e0d48f6f4bc8675121899612f98","size":12555,"data":"","first_seen":"2025-04-18T11:21:43.926811Z","last_seen":"2026-01-04T19:07:57.451247Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/0e5ce63c-164abdc24859b8cf.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e38ef8482961447502dda5195e9f63a","sha1":"652c57616927d2f28ded533c36a1913549d69dec","sha256":"90f46a0ed8ddf8882382ae7aba3657710daf0f377d0b1d3eedc8a28380e77e39","sha512":"086566f8ed2b9713737996d05c6709d0e864febf2484fcd434b444ef8da2fe719b42227c75d7279342673637ba027b048933648314602e17f74869c0e1974979","ssdeep":"96:1E64Ngdalrx7o9xMx+tSNh+5Qux8KeENh+fhWyNhjBSAheNheVB5UCNhP5yly8uW:6tNgd0S9xMAtSNh+Jx8zENh+fEyNhECw","tlshash":"c0b154f9b2a4e0c9d6074b39d077a966d6bf5db87e9842d0c4c79488f53c0c8b859f06","size":5357,"data":"","first_seen":"2024-08-19T14:52:24.210471Z","last_seen":"2026-01-04T19:07:57.460718Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-13T08:52:13.685384Z","times_seen":101272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef5cdcfbc074cf1b2fb81b098dfa726a","sha1":"029970b78e9816e9d37a929989517b2a49ff4619","sha256":"ab45fbda13d7db02f91d0fab0967d2f2f7a1fe6502b94324cec4d847d1273e57","sha512":"01a9fd1a5992c96e1448d5a54b2dc4756c761b970f86b4f8efaf1ac8368aa75c4a721e0b18d07a2a12420c9e0fc60767e5b5657355b0c3e6a4604924165bf69e","ssdeep":"","tlshash":"6ad02240f943ecb9dc32990d20341db480c8eebc41a9d8c8e3decec640228bd4349e8e","size":200,"data":"","first_seen":"2025-04-18T11:21:43.932526Z","last_seen":"2026-01-04T19:07:57.475002Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/webpack-615418941da59d47.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"50eeaf42ded4ba8c1ddd39f9c3fb5317","sha1":"91aa730d5f2039a8e02aaeae26145f017feb868f","sha256":"791b006641d9546d04dbc7e016ebb86c31c81a562ecfa01abe0b9db38d88b8d3","sha512":"18c8fd021f1bc914245afc84e3bbf821de5255ea0923472125086579c4b3b3fe0b58caf77b135cb0d334cc35e34726b967586b70299e7e33a5e88d1aec35de5c","ssdeep":"96:0Wd0j7EmqwWlR2i7na20VGLUVnWWCjMrm2WYMJ3L0RC/cfP6pZA:3tmHWlg4ajUgcNYMJ3YucfyLA","tlshash":"888198ee7151f47a179394a2443f915ef63f28b2181ed4a0da19d4f4fc349498523fe8","size":4174,"data":"","first_seen":"2025-04-18T11:21:43.929642Z","last_seen":"2026-01-04T19:07:57.457408Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/fd9d1056-575a4769a7d03dba.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89ef5cbeacece4bcb75bbefbaec33dc9","sha1":"afd673d3e1289070f4e66e592a58223d764c573e","sha256":"71ed963804cbd4b773b16a2e290fb534288140999cca4833a8ff300a9d72a9b1","sha512":"587470cd2713ae2dd6e4ef44a3c9ad5442872f298b79b02a29ade777c9a879ff4c159116441d6297f13d3eec996762f0e36edf6933ae8b0a37502e1501c3065e","ssdeep":"1536:IVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Gzug758kkEiXjOAprX2wd5WjguGOo","tlshash":"5ff3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172831,"data":"","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-08-12T20:07:20.605697Z","times_seen":3436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/520-b995e36f2e9a8b0e.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00185b7e8dd8511d13a9aa699c0e58cc","sha1":"cffff17e35b9dc69322dd8a36c3845079af9d5ce","sha256":"6474564ecab09c348b03511a3cdd314883a2baf335928c01f846c6ef442fd406","sha512":"5186b7f47f43e4c6e99175f70a2906bec47a6e21eead05ccd15025905b780219ae365e5884e280c785370c2d0992e3f02d4662390c12e8160af6486e401be873","ssdeep":"192:m/ksqsFKlfm4DfHDIJqaHZEBoBXxgoQswRWMhcnZ+Vdos7:mcsB0fHkJqaZgmwR4nEr","tlshash":"01320a9d72d1f136475780a9d12f909af739096a381e1420f067caac383599ed373ea9","size":10934,"data":"","first_seen":"2025-04-18T11:21:43.92144Z","last_seen":"2026-01-04T19:07:57.463467Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"db8a41ae7a5d76c62f4725426625771f","sha1":"45ac61e383d6cfb902793d144eefb77b358da767","sha256":"b4f25322b5b077ae9406f127410343c59c96b0fb01c483309b1e528a0120dd9b","sha512":"4426ec3c6b208d516bb394c4e06dfc9b1ca009c426156a6b18cf8f83b1e73773cea70ceba05d329b6e3fe368a1405d2dc988b1140e3ce428dd9a5d6163a97a87","ssdeep":"","tlshash":"e731bc1fb144f9447db6ef86083a2e32c509cd321679e51cd65ce86e4022a3e976da02","size":1657,"data":"","first_seen":"2025-04-18T11:21:43.933214Z","last_seen":"2026-01-04T19:07:57.475892Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/23-4a90cda6412710ec.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc2da248d6e192038cb6bd55cde465a8","sha1":"585560ce5299fcf4bebff5a33eef6b724e80c01c","sha256":"d0da9ad0710839710d0bd5cea77ceba7dd475e55a3daf39d006e163f00df4ee8","sha512":"c68ff24106d3d1d8260c91a2f94e5efc058b823e02bda9bf925d28de7132291de725b4900a0f8c2f1c05e0c35162ebae5f7afd7ae5c898a8c8e6bdedb1293276","ssdeep":"1536:+Jw31mN1OhIUEfYsdlaTj8mmN1zq5EfRv7:TcM941G50z","tlshash":"abc3d8b671d0f8e207a744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":123444,"data":"","first_seen":"2024-09-08T19:05:38Z","last_seen":"2026-08-07T18:13:08.032853Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/app/page-bcd3339fe25d3804.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34fe32c71dad5d215423b1024a23a55f","sha1":"41421c6ce8b91dd38b756d450e495a352d5fe15a","sha256":"691dfcfa5bf0d77b475a654cbfb6042dabb0368467a58da0ceac0913c171e295","sha512":"729e5dd9b0af35c6754eb00a681f2e4b61b9b604787d38f33f01657642b8f1b1c8e62db7b4649a1c9e1076be9552f0e4cd7709f70d4c31d00d7c85561fdcdba1","ssdeep":"384:Bb0naQImkpKRHlfJev7YH+LtpQmAKvWnB5sgyv5VSkdhJgfDlsT:Bb0naQImkWyYH+LtpQJB5sgyxQ28DlsT","tlshash":"3ef2620de0a1aedca82a8cdca96fd00cb11e7b4dde0ec8a4b475bc5519100d97b83fd9","size":34584,"data":"","first_seen":"2025-04-18T11:21:43.930552Z","last_seen":"2026-01-04T19:07:57.472928Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/636-c4e10eb3a1adf3ab.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a77fa060b7803d0e5762e4575163f8bc","sha1":"3db7d640ff4f9a4d9add568f62d51f7147f2cd83","sha256":"6f8858b0d28fca56deb0e022a2360ed85b3054c9c643cf61858136909548baf0","sha512":"dd6cd92138ce8a002ea1a3ad8214ecbece8a72e59945f11b8fbc6b964543374f0f7e2b199e7ea370606bca050d54a32275ba3c4bf1443df4a1ff4e7026b69ffe","ssdeep":"192:xqYkzfm4le3u232gxkfXWxZl/VhI807LIc+u+4omCds5BdKD3O/tBWxaZgBD+fEU:qG+2VPDS/d+4o2B4n+ggsPfkMk9FWzzy","tlshash":"2aa2f8e53252787196eb41a6517f9329b33e3689740e4810e03adcc53a78dc5d263fae","size":23147,"data":"","first_seen":"2025-04-18T11:21:43.924824Z","last_seen":"2026-01-04T19:07:57.465266Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/main-app-50e30d4e854441cf.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"530a7531691237fb10480509443dceff","sha1":"9d7b6804cad407d7e1cc99f63e11eb392c0d19de","sha256":"529ebb6c033a46dbc30dd797694acd696751c3eeebbb37bfaa3c31e45a4794bc","sha512":"389db1ce349207969893e076cdcf9b7c73685ab66e7dfa9b4476ace8d24a29877139e550e43452980cf54003eadc5d3575116bffbebcfbf8af1b6394a7d39678","ssdeep":"","tlshash":"6ef05499274db02f2922aa20fdd35c2e245e4174246b59501515dee11c3766892f1c38","size":462,"data":"","first_seen":"2024-08-19T14:48:11.128143Z","last_seen":"2026-07-17T10:47:36.971995Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3261c286586bc988479b14eda09b294","sha1":"ce8d5c45abbb5611ab625d475821952a3e2947ae","sha256":"b79831c50824d4e5bdcde6b45fab21143bd5e5e75cc464b12383a0f4ef4dae05","sha512":"acee674a25f4f92d1d1e7c7535e5bc2a1cb05fa40a6e51b6fb985e4da6e00e89623e7ff90e3d4b85f25caa1d782fd543c92cfa1ed01600e82db3863010abe566","ssdeep":"","tlshash":"e851db3d2009ed5fec9a7d59017dad3a64cd496f07d58eb887d8de010a4247e2792ec0","size":2468,"data":"","first_seen":"2025-04-18T11:21:43.93408Z","last_seen":"2026-01-04T19:07:57.476737Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9572d14b6e97668ed46f2d2106ff204d","sha1":"da99d64a340d3e16e0612bc496a3fb4a6281be63","sha256":"16b02033a8346731a4069ff7aa60b8459b798f63c8ab519f990678421d9a342a","sha512":"fb91bace95c84b4fdd8e758ac5797d14f3f8ddb80f54ac390cf876ded7c12c76ff8154859bb2df303633f0993c220efb3c0d55548b9a27eceb641959cfcfee1e","ssdeep":"","tlshash":"2df097e0ac02ed0bcb6a5f3508bf0c3864ccc3a94686a946d4c4cd1848a3d304de1b89","size":494,"data":"","first_seen":"2025-04-18T11:21:43.935387Z","last_seen":"2026-01-04T19:07:57.477605Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/app/layout-1983641961f7928e.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2988df314eef22cff8db96e6b6ad02d9","sha1":"42c060678ed544ba8f519da88b95ff50626ce977","sha256":"243a58fdad0de236ec351187ad8df9f6bd208100166c1fc2e1a6a86e7211ea94","sha512":"064a998d84dd3c5c8906fa37c285e3bb31786abf667e3b780b2b57254dcda1bb91444f42e7e725ae30eda6191feeac6dd92255aebc1b46b34e41c1ef00c7c21c","ssdeep":"384:GGcOnkstwVvEIhmwsEql2R1YM44bpyAM8noB/w2UWftQJyWuS0/kS:GGcOnkswSmmwsGY8pyAM8noB/w2UYun8","tlshash":"028296d9f7d2faac66374cece46f900da15e6f688b2e4854f6b5ac4521040c8b613bdc","size":18498,"data":"","first_seen":"2025-04-18T11:21:43.917295Z","last_seen":"2026-01-04T19:07:57.454646Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/622-427ef6a4699370dd.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04ad2b19d38ec580fbc17f6683b596fb","sha1":"0bf2224a81ccef6b6374976f6995f81ab3f8f647","sha256":"cf97f907e5eeedadb5a654dc39df72766961bd1bd6daf53d5ac96d2548986937","sha512":"7987027fd2f52b7f45eb29e40bff6ac730408e7ffa21ce4671e5bcb0b2863fc1713380d20f8c924d0ef00e5708138c3384243a5e89699fa6903d4a009ea143f8","ssdeep":"1536:4Fl4ejcGyPHc+J3JcBo3TMR82apR/MWK0eB:Y4v/eWK1","tlshash":"60231be67192b5a4d3ae8447c07f802db73e5aa4310e1510f22e8e5d3459690f3f7faa","size":49418,"data":"","first_seen":"2025-04-18T11:21:43.910682Z","last_seen":"2026-01-04T19:07:57.452763Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/101-b13d0c099e3bd955.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c41e302dbf9b791b6619ec74e39b588","sha1":"93061aaef7f15a794f8596cc9d2485c0d61930eb","sha256":"f4949204460d3fde98d12338a8df96ff7a75c3350042a58be403820fb22ab085","sha512":"1afe7c8a4c1ed819a8a2d11e9c18b711bbedd956e963fd5ddb48b476d0ffb6a717dfc1ccbbe06a43fde5282be3bea277f7d88bdd8ee19056f51272600792ba1a","ssdeep":"192:SWxgNKYgqOjF4Qu5WX2U3izpSz7x4TCYduHXn:SWxqKrk/duX","tlshash":"e83219f975d736a683dec865072b402c733f1a5d250e1410f65e8c992764298f2e3fda","size":11022,"data":"","first_seen":"2025-04-18T11:21:43.925931Z","last_seen":"2026-01-04T19:07:57.468499Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"facebook-theta.vercel.app/","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T19:07:31.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 184126\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:31 GMT\r\netag: W/\"75f89e031b57456b7ca3b5ffeec4d839\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mxsrx-1767553651700-e53672e89ddc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8565,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8565), with no line terminators","md5":"15510746f9ecee4c986db49108b829cd","sha1":"f08f97140b9ccd180273f17f1ba572170ca5f322","sha256":"b78b2b932ea52793244979eec74bb0bbd4df7ffa90d2120ab8aa2014bc65d949","sha512":"04e74e7e75e5d91ddea8ff3292ebf75ea5cb8715b45d2a09626de1532239557b7d0077223f520ca3c08188b4edb7edf47ff7f3d65b5d34afee3c7c892a733565","ssdeep":"96:TmDBIy4MPO4yusPnvSrFMUili0gg8cGyUy9yzdyt3cUNq837cg1xqzcfxmxlfE/7:IT4UO4mnvS6UiKDGCdiOgnqzcJmfR5K","tlshash":"1a02872bac05ed0b9c62ee9d047d5e3a908ecd3b8a75d85cd3dccd1d0211abe5b89d81","first_seen":"2025-06-22T20:50:44.345591Z","last_seen":"2026-01-04T19:07:57.440479Z","times_seen":11,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app/","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/26-07a5d4b827f4d41c.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/26-07a5d4b827f4d41c.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24423\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"26-07a5d4b827f4d41c.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"f062999774eeb26a055a86d512969dec\"\r\nlast-modified: Sun, 04 Jan 2026 12:20:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/26-07a5d4b827f4d41c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hsplm-1767553652013-6adb2377c2c9\r\ncontent-length: 3464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":12555,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12555), with no line terminators","md5":"f062999774eeb26a055a86d512969dec","sha1":"ae799e1f648cd58fc7c363c62c629b3098a68ca0","sha256":"405a15e322274305ab8478e7b9672232e5dcd1781fd2870228c8102b338cd75c","sha512":"d2eaabb9983be4078fa098dc9662208cbbd8d2145f2ad9349273a3cb6c8a0a19ece1cf69fe4b435c857f3a343a5062d58ba3272c0f69f6c97ae28ef49043c843","ssdeep":"192:9xBA0o+3WKGWpDtaEwYnS2B2n7ocxDoNW5SIObcR97wf3:1DtaEwYdBm7ocxDoNESITRxM","tlshash":"0c4294acf5d2b95c173b849ce1af200de0af4f51ce2e0d48f6f4bc8675121899612f98","first_seen":"2025-04-18T11:21:43.926811Z","last_seen":"2026-01-04T19:07:57.451247Z","times_seen":12,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/622-427ef6a4699370dd.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/622-427ef6a4699370dd.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"622-427ef6a4699370dd.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"04ad2b19d38ec580fbc17f6683b596fb\"\r\nlast-modified: Sun, 04 Jan 2026 19:07:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/622-427ef6a4699370dd.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nk8tg-1767553652017-dba004bbf603\r\ncontent-length: 17034\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":49418,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49418), with no line terminators","md5":"04ad2b19d38ec580fbc17f6683b596fb","sha1":"0bf2224a81ccef6b6374976f6995f81ab3f8f647","sha256":"cf97f907e5eeedadb5a654dc39df72766961bd1bd6daf53d5ac96d2548986937","sha512":"7987027fd2f52b7f45eb29e40bff6ac730408e7ffa21ce4671e5bcb0b2863fc1713380d20f8c924d0ef00e5708138c3384243a5e89699fa6903d4a009ea143f8","ssdeep":"1536:4Fl4ejcGyPHc+J3JcBo3TMR82apR/MWK0eB:Y4v/eWK1","tlshash":"60231be67192b5a4d3ae8447c07f802db73e5aa4310e1510f22e8e5d3459690f3f7faa","first_seen":"2025-04-18T11:21:43.910682Z","last_seen":"2026-01-04T19:07:57.452763Z","times_seen":13,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/app/layout-1983641961f7928e.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-1983641961f7928e.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2177578\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-1983641961f7928e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"2988df314eef22cff8db96e6b6ad02d9\"\r\nlast-modified: Wed, 10 Dec 2025 14:14:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/layout-1983641961f7928e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::22z5d-1767553652019-8a70c2746429\r\ncontent-length: 5522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18498,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18498), with no line terminators","md5":"2988df314eef22cff8db96e6b6ad02d9","sha1":"42c060678ed544ba8f519da88b95ff50626ce977","sha256":"243a58fdad0de236ec351187ad8df9f6bd208100166c1fc2e1a6a86e7211ea94","sha512":"064a998d84dd3c5c8906fa37c285e3bb31786abf667e3b780b2b57254dcda1bb91444f42e7e725ae30eda6191feeac6dd92255aebc1b46b34e41c1ef00c7c21c","ssdeep":"384:GGcOnkstwVvEIhmwsEql2R1YM44bpyAM8noB/w2UWftQJyWuS0/kS:GGcOnkswSmmwsGY8pyAM8noB/w2UYun8","tlshash":"028296d9f7d2faac66374cece46f900da15e6f688b2e4854f6b5ac4521040c8b613bdc","first_seen":"2025-04-18T11:21:43.917295Z","last_seen":"2026-01-04T19:07:57.454646Z","times_seen":12,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/favicon.ico","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 250525\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: W/\"e67a112d9d09bf5750110bdbf0eca070\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nk8tg-1767553652244-67177f4a7c28\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-13T08:07:31.529496Z","times_seen":39462,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/media/a34f9d1faa5f3315-s.p.woff2","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/media/a34f9d1faa5f3315-s.p.woff2 HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://facebook-theta.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24427\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"a34f9d1faa5f3315-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"d4fe31e6a2aebc06b8d6e558c9141119\"\r\nlast-modified: Sun, 04 Jan 2026 12:20:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/a34f9d1faa5f3315-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::22z5d-1767553652003-0bf3bd2d5070\r\ncontent-length: 48556\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":48556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48556, version 1.0","md5":"d4fe31e6a2aebc06b8d6e558c9141119","sha1":"bcdc4f0b431d4c8065a83bb736c56ff6494d0091","sha256":"c88db2401bef7e1203e0933cc5525a0f81863bfd076756db12acea5596f089ec","sha512":"1cbe7641b8930163ed3ea348f573cad438b646ed64d60c1923e5b8664c3de9c2c21ba97994ec8d886f489e4d090772b010de72a1167547fb4f6a2d242d46aec1","ssdeep":"768:+rvWCaG0bvTIyNOporIvE+9OZduZ35LhKvXxYdBJaqyXNWLU2m/jG9EHmqGq55t:+ruCR0bvT386c6ZduZpFMXxQBJ82Q5tJ","tlshash":"7823025eb4b5c6e3fa05e60e86d990613909424f86b6dfc54f3741a038fcf912d3ea89","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T04:19:20.041352Z","times_seen":10309,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/webpack-615418941da59d47.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/webpack-615418941da59d47.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3064971\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-615418941da59d47.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"50eeaf42ded4ba8c1ddd39f9c3fb5317\"\r\nlast-modified: Sun, 30 Nov 2025 07:44:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-615418941da59d47.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nk8tg-1767553652002-a74d4478086f\r\ncontent-length: 2040\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3838)","md5":"50eeaf42ded4ba8c1ddd39f9c3fb5317","sha1":"91aa730d5f2039a8e02aaeae26145f017feb868f","sha256":"791b006641d9546d04dbc7e016ebb86c31c81a562ecfa01abe0b9db38d88b8d3","sha512":"18c8fd021f1bc914245afc84e3bbf821de5255ea0923472125086579c4b3b3fe0b58caf77b135cb0d334cc35e34726b967586b70299e7e33a5e88d1aec35de5c","ssdeep":"96:0Wd0j7EmqwWlR2i7na20VGLUVnWWCjMrm2WYMJ3L0RC/cfP6pZA:3tmHWlg4ajUgcNYMJ3YucfyLA","tlshash":"888198ee7151f47a179394a2443f915ef63f28b2181ed4a0da19d4f4fc349498523fe8","first_seen":"2025-04-18T11:21:43.929642Z","last_seen":"2026-01-04T19:07:57.457408Z","times_seen":12,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/main-app-50e30d4e854441cf.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/main-app-50e30d4e854441cf.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3064971\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-50e30d4e854441cf.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"530a7531691237fb10480509443dceff\"\r\nlast-modified: Sun, 30 Nov 2025 07:44:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-app-50e30d4e854441cf.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pv8gh-1767553652005-3d23fb45b6b1\r\ncontent-length: 462\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (462), with no line terminators","md5":"530a7531691237fb10480509443dceff","sha1":"9d7b6804cad407d7e1cc99f63e11eb392c0d19de","sha256":"529ebb6c033a46dbc30dd797694acd696751c3eeebbb37bfaa3c31e45a4794bc","sha512":"389db1ce349207969893e076cdcf9b7c73685ab66e7dfa9b4476ace8d24a29877139e550e43452980cf54003eadc5d3575116bffbebcfbf8af1b6394a7d39678","ssdeep":"","tlshash":"6ef05499274db02f2922aa20fdd35c2e245e4174246b59501515dee11c3766892f1c38","first_seen":"2024-08-19T14:48:11.128143Z","last_seen":"2026-07-17T10:47:36.971995Z","times_seen":43,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/0e5ce63c-164abdc24859b8cf.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/0e5ce63c-164abdc24859b8cf.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3064971\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0e5ce63c-164abdc24859b8cf.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"7e38ef8482961447502dda5195e9f63a\"\r\nlast-modified: Sun, 30 Nov 2025 07:44:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/0e5ce63c-164abdc24859b8cf.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mxsrx-1767553652006-a55df5a9a1fb\r\ncontent-length: 1598\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5357,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5357), with no line terminators","md5":"7e38ef8482961447502dda5195e9f63a","sha1":"652c57616927d2f28ded533c36a1913549d69dec","sha256":"90f46a0ed8ddf8882382ae7aba3657710daf0f377d0b1d3eedc8a28380e77e39","sha512":"086566f8ed2b9713737996d05c6709d0e864febf2484fcd434b444ef8da2fe719b42227c75d7279342673637ba027b048933648314602e17f74869c0e1974979","ssdeep":"96:1E64Ngdalrx7o9xMx+tSNh+5Qux8KeENh+fhWyNhjBSAheNheVB5UCNhP5yly8uW:6tNgd0S9xMAtSNh+Jx8zENh+fEyNhECw","tlshash":"c0b154f9b2a4e0c9d6074b39d077a966d6bf5db87e9842d0c4c79488f53c0c8b859f06","first_seen":"2024-08-19T14:52:24.210471Z","last_seen":"2026-01-04T19:07:57.460718Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/520-b995e36f2e9a8b0e.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/520-b995e36f2e9a8b0e.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"520-b995e36f2e9a8b0e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"00185b7e8dd8511d13a9aa699c0e58cc\"\r\nlast-modified: Sun, 04 Jan 2026 19:07:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/520-b995e36f2e9a8b0e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::62wcx-1767553652009-6818030e6b91\r\ncontent-length: 4059\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10934,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7248)","md5":"00185b7e8dd8511d13a9aa699c0e58cc","sha1":"cffff17e35b9dc69322dd8a36c3845079af9d5ce","sha256":"6474564ecab09c348b03511a3cdd314883a2baf335928c01f846c6ef442fd406","sha512":"5186b7f47f43e4c6e99175f70a2906bec47a6e21eead05ccd15025905b780219ae365e5884e280c785370c2d0992e3f02d4662390c12e8160af6486e401be873","ssdeep":"192:m/ksqsFKlfm4DfHDIJqaHZEBoBXxgoQswRWMhcnZ+Vdos7:mcsB0fHkJqaZgmwR4nEr","tlshash":"01320a9d72d1f136475780a9d12f909af739096a381e1420f067caac383599ed373ea9","first_seen":"2025-04-18T11:21:43.92144Z","last_seen":"2026-01-04T19:07:57.463467Z","times_seen":12,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/636-c4e10eb3a1adf3ab.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/636-c4e10eb3a1adf3ab.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24423\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"636-c4e10eb3a1adf3ab.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"a77fa060b7803d0e5762e4575163f8bc\"\r\nlast-modified: Sun, 04 Jan 2026 12:20:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/636-c4e10eb3a1adf3ab.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r6msp-1767553652010-0f493582e37f\r\ncontent-length: 8362\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23147,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23147), with no line terminators","md5":"a77fa060b7803d0e5762e4575163f8bc","sha1":"3db7d640ff4f9a4d9add568f62d51f7147f2cd83","sha256":"6f8858b0d28fca56deb0e022a2360ed85b3054c9c643cf61858136909548baf0","sha512":"dd6cd92138ce8a002ea1a3ad8214ecbece8a72e59945f11b8fbc6b964543374f0f7e2b199e7ea370606bca050d54a32275ba3c4bf1443df4a1ff4e7026b69ffe","ssdeep":"192:xqYkzfm4le3u232gxkfXWxZl/VhI807LIc+u+4omCds5BdKD3O/tBWxaZgBD+fEU:qG+2VPDS/d+4o2B4n+ggsPfkMk9FWzzy","tlshash":"2aa2f8e53252787196eb41a6517f9329b33e3689740e4810e03adcc53a78dc5d263fae","first_seen":"2025-04-18T11:21:43.924824Z","last_seen":"2026-01-04T19:07:57.465266Z","times_seen":13,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/419-e6de469145bfb61e.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/419-e6de469145bfb61e.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3064970\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"419-e6de469145bfb61e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"cdf01550e2d5816a2b02403ae6ceb4bd\"\r\nlast-modified: Sun, 30 Nov 2025 07:44:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/419-e6de469145bfb61e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hsplm-1767553652017-94ee50255ef4\r\ncontent-length: 7833\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18333)","md5":"cdf01550e2d5816a2b02403ae6ceb4bd","sha1":"a9ed3891e64173d8676b10f219d82280a7622111","sha256":"610b73f4fd9c5b1e6f009de0d825b88568ac45b198c6c9360f49be043a23f746","sha512":"49c07f32f9254e52f30e0effd3bdc935559ce5975e51c15238c122d66bf4fb5184bf073450678d6f333ae8db17bb1b1221ac00d452034198bfee08713fe415ec","ssdeep":"192:X0W5MSgyEoW9xsxKBqxuR2Bjg8wgSRn1b4/FOaHEzz+0inoRFbYLu4BsGKIcggTa:X06B03YxKNe3spCUG03D4K+cl3M7R","tlshash":"aaa21aba32d1b4e7039a80e4552f400df77d197d262e7000e7a688ddea7095dd1b2fb9","first_seen":"2025-04-18T11:21:43.91846Z","last_seen":"2026-01-04T19:07:57.466441Z","times_seen":12,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/219-894c871bdaf0c871.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/219-894c871bdaf0c871.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24424\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"219-894c871bdaf0c871.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"3fe0b9784fed3834a46e730d43c4c270\"\r\nlast-modified: Sun, 04 Jan 2026 12:20:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/219-894c871bdaf0c871.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l5c5w-1767553652007-10db5b1a3d46\r\ncontent-length: 75556\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219428,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63479)","md5":"3fe0b9784fed3834a46e730d43c4c270","sha1":"ba28a02b9c2d44cc3602b16366ddb38bad4e9e44","sha256":"cdf438556646ff7c370035c188b140aa2f3d8c74c5b6062a1bb39d01e3259bf9","sha512":"ae952f1c0fbd829674317efb5cf3e545aaf805de5c640f24c8afab53c14049f60b1d2133f2b0eb1f761b7cf153eb10d6783ff8ac01d9b14b673e76c9877266db","ssdeep":"3072:N29H3EwHhkQAHvD6scEhtBn/B6SaiNKwb04AunF76jg:sXEwHhkQAHL6jktT6S5o4AuUjg","tlshash":"0b242a95b352b03583db51a5c06f0606f33e5aa9240e446cf2bad8d7297058da2fff39","first_seen":"2025-04-18T11:21:43.90951Z","last_seen":"2026-01-04T19:07:57.467479Z","times_seen":12,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/101-b13d0c099e3bd955.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/101-b13d0c099e3bd955.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"101-b13d0c099e3bd955.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"6c41e302dbf9b791b6619ec74e39b588\"\r\nlast-modified: Sun, 04 Jan 2026 19:07:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/101-b13d0c099e3bd955.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pv8gh-1767553652011-f29c84260088\r\ncontent-length: 4306\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11022,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7088)","md5":"6c41e302dbf9b791b6619ec74e39b588","sha1":"93061aaef7f15a794f8596cc9d2485c0d61930eb","sha256":"f4949204460d3fde98d12338a8df96ff7a75c3350042a58be403820fb22ab085","sha512":"1afe7c8a4c1ed819a8a2d11e9c18b711bbedd956e963fd5ddb48b476d0ffb6a717dfc1ccbbe06a43fde5282be3bea277f7d88bdd8ee19056f51272600792ba1a","ssdeep":"192:SWxgNKYgqOjF4Qu5WX2U3izpSz7x4TCYduHXn:SWxqKrk/duX","tlshash":"e83219f975d736a683dec865072b402c733f1a5d250e1410f65e8c992764298f2e3fda","first_seen":"2025-04-18T11:21:43.925931Z","last_seen":"2026-01-04T19:07:57.468499Z","times_seen":12,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/css/c290affefbdcdd6b.css","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/css/c290affefbdcdd6b.css HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24426\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"c290affefbdcdd6b.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"511d0dc8026432eb46f02c6f7ca9ffdb\"\r\nlast-modified: Sun, 04 Jan 2026 12:20:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/c290affefbdcdd6b.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mxsrx-1767553652001-081c05aa23bc\r\ncontent-length: 7907\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35314,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (33147)","md5":"511d0dc8026432eb46f02c6f7ca9ffdb","sha1":"fab0769899fca13e83ebc7234b4a00c37c1a71b5","sha256":"7ccf3a35a92672f638cc5077112b8b30cc0119b835766d13346b79130174aa61","sha512":"20dfb9edac752901611cf82a73d10b9c8583e934fb9f8f823283dff1096d4ed22063f54a1217fa4dcd5fc89c53df5351c7e136a11dc6dfcd9d3be99a0611dfa6","ssdeep":"384:tUnwUZRAVH9DhIgAFYU2/IrjeSbexrCZB2Vrhovu+OR3VF:tU7MH9DhINFY39XxrGB2Vrh+/OBVF","tlshash":"54f2b51daa25503f7c3384f9d2d8b99c601af0c4ee3a56f6be421021aad77f71da7214","first_seen":"2025-04-18T11:21:43.915317Z","last_seen":"2026-01-04T19:07:57.469486Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/fd9d1056-575a4769a7d03dba.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-575a4769a7d03dba.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3064971\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-575a4769a7d03dba.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"89ef5cbeacece4bcb75bbefbaec33dc9\"\r\nlast-modified: Sun, 30 Nov 2025 07:44:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/fd9d1056-575a4769a7d03dba.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hsplm-1767553652003-199898e21d7e\r\ncontent-length: 55086\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172831,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"89ef5cbeacece4bcb75bbefbaec33dc9","sha1":"afd673d3e1289070f4e66e592a58223d764c573e","sha256":"71ed963804cbd4b773b16a2e290fb534288140999cca4833a8ff300a9d72a9b1","sha512":"587470cd2713ae2dd6e4ef44a3c9ad5442872f298b79b02a29ade777c9a879ff4c159116441d6297f13d3eec996762f0e36edf6933ae8b0a37502e1501c3065e","ssdeep":"1536:IVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Gzug758kkEiXjOAprX2wd5WjguGOo","tlshash":"5ff3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-08-12T20:07:20.605697Z","times_seen":3436,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/23-4a90cda6412710ec.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/23-4a90cda6412710ec.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24425\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"23-4a90cda6412710ec.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"dc2da248d6e192038cb6bd55cde465a8\"\r\nlast-modified: Sun, 04 Jan 2026 12:20:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/23-4a90cda6412710ec.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lt895-1767553652004-5b4bdf66003f\r\ncontent-length: 32767\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":123444,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dc2da248d6e192038cb6bd55cde465a8","sha1":"585560ce5299fcf4bebff5a33eef6b724e80c01c","sha256":"d0da9ad0710839710d0bd5cea77ceba7dd475e55a3daf39d006e163f00df4ee8","sha512":"c68ff24106d3d1d8260c91a2f94e5efc058b823e02bda9bf925d28de7132291de725b4900a0f8c2f1c05e0c35162ebae5f7afd7ae5c898a8c8e6bdedb1293276","ssdeep":"1536:+Jw31mN1OhIUEfYsdlaTj8mmN1zq5EfRv7:TcM941G50z","tlshash":"abc3d8b671d0f8e207a744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2024-09-08T19:05:38Z","last_seen":"2026-08-07T18:13:08.032853Z","times_seen":40,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"facebook-theta.vercel.app/_next/static/chunks/app/page-bcd3339fe25d3804.js","fqdn":"facebook-theta.vercel.app","domain":"facebook-theta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://facebook-theta.vercel.app/","date":"2026-01-04T19:07:32.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /_next/static/chunks/app/page-bcd3339fe25d3804.js HTTP/1.1\r\nHost: facebook-theta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-theta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24422\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-bcd3339fe25d3804.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 04 Jan 2026 19:07:32 GMT\r\netag: \"34fe32c71dad5d215423b1024a23a55f\"\r\nlast-modified: Sun, 04 Jan 2026 12:20:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/page-bcd3339fe25d3804.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l5c5w-1767553652015-e03a73c5adec\r\ncontent-length: 9517\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34584,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11162)","md5":"34fe32c71dad5d215423b1024a23a55f","sha1":"41421c6ce8b91dd38b756d450e495a352d5fe15a","sha256":"691dfcfa5bf0d77b475a654cbfb6042dabb0368467a58da0ceac0913c171e295","sha512":"729e5dd9b0af35c6754eb00a681f2e4b61b9b604787d38f33f01657642b8f1b1c8e62db7b4649a1c9e1076be9552f0e4cd7709f70d4c31d00d7c85561fdcdba1","ssdeep":"384:Bb0naQImkpKRHlfJev7YH+LtpQmAKvWnB5sgyv5VSkdhJgfDlsT:Bb0naQImkWyYH+LtpQJB5sgyxQ28DlsT","tlshash":"3ef2620de0a1aedca82a8cdca96fd00cb11e7b4dde0ec8a4b475bc5519100d97b83fd9","first_seen":"2025-04-18T11:21:43.930552Z","last_seen":"2026-01-04T19:07:57.472928Z","times_seen":12,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Facebook, Inc.","trigger":"facebook-theta.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"facebook-theta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}