{"report_id":"d356d47d-a60c-448b-aa41-e5f53a039ddb","version":0,"status":"done","tags":[],"date":"2026-06-30T17:21:46Z","url":{"schema":"https","addr":"facebook-login.vercel.app","fqdn":"facebook-login.vercel.app","domain":"facebook-login.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"facebook-login.vercel.app/","fqdn":"facebook-login.vercel.app","domain":"facebook-login.vercel.app","tld":"vercel.app"},"title":"Facebook Login","dom":{"size":2198,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7f8afbc6c8079589c8ee95799e69671a","sha1":"d81082b4cef0cb499f9419f5504c1213ce556367","sha256":"5cf669a7c6ee0b9c6ed458c146e0d6582f999cd6f8a11b7416e717fb601979a7","sha512":"a4d16487e7180412d5470b3f92bddce2da3df5ec619456b7b6bf6a9be3752bba58f4351b4573186339f34bbc1c47aee85fe406d0bfa26bce6fff8c0a5a230a20","ssdeep":"","tlshash":"bd41720e9ce82021bab323f22b5b651c3809dd835706de08bd8c43a41fd0fa549e759e","dom_hash":"domhash42d34d764fe84ce66a420cef9cc6ef8b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"facebook-login.vercel.app","fqdn":"facebook-login.vercel.app","domain":"facebook-login.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T17:21:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"facebook-login.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"facebook-login.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"facebook-login.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"facebook-login.vercel.app","ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-19T00:18:35.566271Z","last_seen":"2026-06-30T07:42:00.667505Z","alert_count":9,"request_count":3,"received_data":3979,"sent_data":1493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"facebook-login.vercel.app/","fqdn":"facebook-login.vercel.app","domain":"facebook-login.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec4edaf664eb55d72f382c9ecc49cd5d","sha1":"6f66d0e9975e5e08f9d1bda1c4cf489d7fca44e7","sha256":"200a18c346ddd959c9ea4f59fd563642484a58a44b39734635a185149c7a94a9","sha512":"23822ecf7596ad231a0bca017d08fe005e92ff13b125582f392a8c741180139f3b7c9a4ab0cd67bbd273b41385bb75c302053a65f1634202ac6de93ea7335919","ssdeep":"","tlshash":"21e0200f2c9470342fb811b71b2645dd715d55481a418d4d8d4dc4587a60fe44d585dc","size":343,"data":"","first_seen":"2026-06-30T17:21:46.840207Z","last_seen":"2026-06-30T17:21:46.840207Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"facebook-login.vercel.app/","fqdn":"facebook-login.vercel.app","domain":"facebook-login.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a95132d28a2db47212efeee0c0faea6","sha1":"27a73b29e5bffee01697fb9cf8c210ff2c3f732b","sha256":"2a19967489efbb3a16eeaca054254bcd2f16c580e60c3416adba8f343de060a7","sha512":"e02ace9500c20dc5de9feb625c1e23508cf1fc0cdc38747d0d664b0e1fb08650325ae1e2cf42b8c95bc613fd30714abc5f20c2f65c91c0c62e61fcd200a349e3","ssdeep":"","tlshash":"78116b6f8cf91061ba3372e61b5f292538221c93260afe187e4d83850fa1f255567a9f","size":965,"data":"","first_seen":"2026-06-30T17:21:46.841947Z","last_seen":"2026-06-30T17:21:46.841947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"facebook-login.vercel.app/","fqdn":"facebook-login.vercel.app","domain":"facebook-login.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T17:21:19.692Z","timestamp":1782840079692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: facebook-login.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 44456\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 30 Jun 2026 17:21:19 GMT\r\netag: W/\"dd14e5416fe3b955857dc36e311300b7e45e84e9\"\r\nlast-modified: Tue, 30 Jun 2026 05:00:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hp45s-1782840079752-3f743f583ec2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2087,"size_decoded":1609,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b72bdbe05d9d1847706ad9cebd32911b","sha1":"dd14e5416fe3b955857dc36e311300b7e45e84e9","sha256":"a0135b3b704e6df054075c061f781fba56e4baca67d5d76c145ff695f9eb90cb","sha512":"66b607f4d82dd2d3afed127898637b9fde44f27c74a7f45819e7075c2c4ebe94752cd2131e95d87176f90c8376907307a6f3ecdd1ec9e8703ed57928299e442b","ssdeep":"","tlshash":"9341664f5cf81011b67732f21b6b651d38099c436606de087d8d83c50fd0f6589a795e","first_seen":"2026-04-19T00:18:39.614813Z","last_seen":"2026-06-30T17:21:46.834688Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"facebook-login.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"facebook-login.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"facebook-login.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook-login.vercel.app/style.css","fqdn":"facebook-login.vercel.app","domain":"facebook-login.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://facebook-login.vercel.app/","date":"2026-06-30T17:21:20.185Z","timestamp":1782840080185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: facebook-login.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-login.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24984\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 30 Jun 2026 17:21:20 GMT\r\netag: W/\"57f583ff17e0f3b3b6eafb70087b25d13235693f\"\r\nlast-modified: Tue, 30 Jun 2026 10:24:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hp45s-1782840080190-acea063c70fa\r\ncontent-length: 362\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":362,"size_decoded":923,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06d3ad52e6068cb4da138ef1df532741","sha1":"57f583ff17e0f3b3b6eafb70087b25d13235693f","sha256":"4f8d586890be85762be4974c0a018d79a64ba29a9527333f8424e0fb1d1ad9d6","sha512":"88cfaa561caa0cc39226e7cc43c754ec1526e26934c2cc3e89d8322564170b98914b6a7e0ca21fd05b2acace154006b73b53d701164f1649fa162df107da5097","ssdeep":"","tlshash":"1ce068915be80705fa23d4b0212a764167888466830fedb4aaf630b8be802a458f234c","first_seen":"2026-04-19T00:18:39.61221Z","last_seen":"2026-06-30T17:21:46.836842Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"facebook-login.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"facebook-login.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"facebook-login.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"facebook-login.vercel.app/favicon.ico","fqdn":"facebook-login.vercel.app","domain":"facebook-login.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://facebook-login.vercel.app/","date":"2026-06-30T17:21:20.284Z","timestamp":1782840080284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: facebook-login.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://facebook-login.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 30 Jun 2026 17:21:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::4v8mn-1782840080300-98c65db5ad94\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":432,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0d68e60ff8ce963e3dc2fbd2557ae686","sha1":"7d113f092d8cc9de0ad33229816b3963c9eea3c6","sha256":"34486c95b6d77540091e0f162e99801c4105752009b4026ed6dc36fbc631ed4c","sha512":"e89e705e7a1387378714019f06606e5a3e67a60fb62fd3c8cc40c373a7ef4c04fd287723185094eff905cbcf4c17073384681f5792315a91fae3f5deef268b7b","ssdeep":"","tlshash":"3fa0125f075d090e72c4000010894138085401325f90a60000dc212024186cea30c442","first_seen":"2026-06-30T17:21:46.838432Z","last_seen":"2026-06-30T17:21:46.838432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"facebook-login.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"facebook-login.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"facebook-login.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}