{"report_id":"ff2d35f8-81fb-4462-bcab-85a8b9539382","version":6,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-01-30T12:46:04Z","url":{"schema":"http","addr":"authenticate-meta.com","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":0,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"final":{"url":{"schema":"https","addr":"authenticate-meta.com/","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"title":"Facebook","dom":{"size":197558,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (420)","md5":"1e8ba47d8740b0a7a91ced817b28f858","sha1":"a892ca9b9acebbcc7398e73d86ca78c774f909eb","sha256":"9bfe2ddac3d1e4b067acbb10216c34579958d45e63de4f9e705744196d347ecd","sha512":"6f832407d295fdb934acaab3b6dfa9026d22e28716571776e5bc252d7c0e653e56fb0e018abbd4adccc7cce6ba18fcdbb90b2e360b86ea18ef8d72323bd33106","ssdeep":"768:UN3Aw1WvUsWYYRBNNFCUXtgR+qePUdTB7jehFysyGSvtQVjgJ3U0mKt5986+HiYX:U3KC6+HiYqG","tlshash":"39144310a1f51123019280c9b9226f0fafd1d617da2b81657afd0bd42fd7da29f4b3ad","dom_hash":"domhash334b9323660cb1087552861075c3c503","first_seen":"2026-01-30T12:46:07.350574Z","last_seen":"2026-01-30T18:05:41.622391Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"authenticate-meta.com","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":0,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T12:46:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"authenticate-meta.com","ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"domain_registered":"2025-02-19","domain_rank":0,"first_seen":"2021-11-25T19:15:42Z","last_seen":"2026-01-30T12:36:20.526318Z","alert_count":258,"request_count":43,"received_data":1775345,"sent_data":20284,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google PageSpeed:1.13.35.2","description":"Google PageSpeed is a family of tools designed to help websites performance optimisations.","website":"https://developers.google.com/speed/pagespeed/mod","common_platform_enumeration":"","icon":"Google PageSpeed.svg","categories":["Caching","Web server extensions","Performance"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"authenticate-meta.com/","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a7b346189fb5ed79c419173a4f6cd78","sha1":"e2d96b4ee599079bcd1035f501fcd877edc121bb","sha256":"dc377decf781f9807bba0db68bb90ff7a0ccd6e3d367b3400f4413ddd3b265bb","sha512":"6385216d6cb07ff1f42cbcfec648445f6cdbec65065010f4a84acbda76e28f55e02a1c518bfbe7a87bdd12885c0b15a548d6044c01987b7341ffd9320bd137bd","ssdeep":"","tlshash":"58012b592294547ec6ff078fb8e753c87a32069fa88051945435899a1d32ed354b8ced","size":834,"data":"","first_seen":"2026-01-30T12:36:21.73994Z","last_seen":"2026-01-30T18:05:41.66947Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/JBLkWbv9w4I.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/JBLkWbv9w4I.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 222138\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":222138,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (62194)","md5":"fea2674c27d9e0684f97570d09d0b6e0","sha1":"6d09c7eb0c2f9fe90971f99ec8960e497f31961d","sha256":"2aa2c93567b213400cac420ccf2d3b722576d67754f16eac2b9419cb03250cb7","sha512":"b6a399d8a23405f83f3190cf42743277626c9997d72a3705c3f77f3b7929277a77f355aa45ec78ec83b87c4665501aeb5b699c0ebeb1cf20f7e3179ecb285705","ssdeep":"1536:mvWTXVx9uNPzurOQO0WfkOVLx960s//bkHyF+qwgqqn7aRi1qC+rSdhAyXqrJVkS:EOvQb4//2t67a8lKvyeVP","tlshash":"0d2464d9b351d33cfe27651b938dba7ca1087d02de629ae3fa42b055a5c3ff40622518","first_seen":"2026-01-30T12:36:21.733478Z","last_seen":"2026-01-30T18:05:41.632517Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/v4/yN/r/kA8Ydepxh6T.png","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/v4/yN/r/kA8Ydepxh6T.png HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/b2HbXbVoexB.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/v4/yU/r/O7nelmd9XSI.png","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/v4/yU/r/O7nelmd9XSI.png HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/oufRSMRSZM6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/yN/r/KKlOyJQcRfr.woff","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/yN/r/KKlOyJQcRfr.woff HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/pQSZHcBlI_U.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/yR/r/_gCoI-iROin.woff","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/yR/r/_gCoI-iROin.woff HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/pQSZHcBlI_U.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/yH/r/c_1vdG88uNh.woff2","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/yH/r/c_1vdG88uNh.woff2 HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/A3SlBWxCeZH.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/yN/r/KKlOyJQcRfr.woff","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/yN/r/KKlOyJQcRfr.woff HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/A3SlBWxCeZH.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/J1FGjy2uISz.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/J1FGjy2uISz.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1710\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1710,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1710), with no line terminators","md5":"2d2eefa5f625ae35f3434d16e0f773b4","sha1":"349dd82b0464e440a5b61277817fd63821373a9d","sha256":"8b8cad105745650c228a3321038de0d3e9f2b5e0312dc6fba22e75d379216297","sha512":"4e10b9d604048682f7a745420a1843fbf54cc1c1b3c7063f6d556a9af883f6804798e736acf3ce0815a8244a4beaa4d8af9d60e107d239f7349212d717169278","ssdeep":"","tlshash":"db31f6a3b8f28ce47e1dcb6a772ab3e0228c1a239dbe85b5dc59f56d80cd2401f1c541","first_seen":"2024-12-20T15:51:28.614631Z","last_seen":"2026-01-30T18:05:41.656383Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1229,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/-P6na0--hEz.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/-P6na0--hEz.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4965\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4965,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1589)","md5":"f8ff2519b706aa4587f1eca80aca56a2","sha1":"dff1430aa426cac186bcbac3c03aa489564e7dd3","sha256":"e61cef44d280473686fd048a42e457eeeaac40bc6acf4235c1bbff873a1d809c","sha512":"d45f4b16c1ab7c4b74a53ba58733b011614347b485a8d3054c42a0d623e2d61600572c76ca51b15f1eeeb72c8f8d111f9fd593711de1ed203f32ff03ca91b414","ssdeep":"96:Eo2wElKwxo6yFCyWy/0bXHmpdmXgrLzGBdm7tEDJQHumLf1zK5NBcEEzeExmkGVu:vMzxEC00bXHmPmXgrLzadm7tEDqHumLf","tlshash":"0aa11020a115213dfa17c33961e1adf83026ca07e567c73fff1a72aac6497954716738","first_seen":"2025-02-21T20:01:42.865304Z","last_seen":"2026-01-30T18:05:41.634504Z","times_seen":151,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1017,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/gPRFlLGjCxz.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/gPRFlLGjCxz.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15615\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6830)","md5":"7ca1782ed33afcf48fedcbc89f3b21be","sha1":"f5f723fb192c40e6ad4d838096eb53d251e5ace1","sha256":"9a12f9a616c04c08e47efbd27db76343b51b92c48f86a986f1335147996e5c7a","sha512":"5c8047551ed7bda90b5f8d8d1b1517beda9f8135fe485e4ee3eef6d098a32c77207e8bfd08db28b3970850c09d73ca990293fe08e37f5d505922a8f4ef3b09bd","ssdeep":"192:hUT91Kq2CwmTOMO70oJxthxyDXEh/0y9/mPt61fVW2G/E4+jENbu/W0zUd:YECL140oJxthxyD0h89ytW2Gp+EOWj","tlshash":"ac6295313be5263cba1bc232dad6becc71298601df6387bee251b529c5c75881a37344","first_seen":"2026-01-30T12:36:21.702661Z","last_seen":"2026-01-30T18:05:41.649134Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1227,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/XtqIUNU9N9T.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/XtqIUNU9N9T.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3853\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3853,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (821)","md5":"fc993183d792bfd84f8439cef5ed27a3","sha1":"8519794712cfaa3ea9345dcb1e9a4d425e2a62cd","sha256":"f311eb192eceeb6781c54827930bb6b1cb087b3ac06d6c0b47c41855b3a1a159","sha512":"c18df0673b096d2a70b039b056aa80cde97c3ca1975b483eee044594836aa472d74fbc87fc04eb3e737396ac8d1ae7d23c120f983e0a52cc73783c87097174e8","ssdeep":"","tlshash":"7e8135301a91713ff02bc776e8d0aa8e30698247d2b35f7df6263eb5d19a4d42a33650","first_seen":"2026-01-30T12:36:21.706259Z","last_seen":"2026-01-30T18:05:41.667791Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1223,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/3DgyamwbZpb.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/3DgyamwbZpb.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29415\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29415,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4234)","md5":"fa827358f138cffe06b1de565a3fa315","sha1":"0814b074603daabe06e08bad5ac206ce155055fd","sha256":"6bb03b585ef17c5679bc55661f5ae609472b81cfe53514b09b02a66a2cf1759c","sha512":"84fd68a238af86fde392e34343a2b3d2f2b30652409138305f7fe1ad76e9583e0c901940d2f81b15ecb11ae2539ad3c70233ce102bb77cf04ba3d56c8ee5e676","ssdeep":"192:uhmO5GNNYe+gQFlDzMMuiyX+ssRGCdskmjBectkSCgBDOh+y:LO59C4dsvjBectkSCgBDQ","tlshash":"0fd2ab3100c6e33e765bae2738742a8d303ee10ae4775f7f526e76b9a0976e06437581","first_seen":"2026-01-30T12:36:21.734338Z","last_seen":"2026-01-30T18:05:41.661163Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1225,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/6h8d-FFkB-H.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/6h8d-FFkB-H.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43446\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43446,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2244)","md5":"b7624d2ed536c7c32f7458ba31203e83","sha1":"8ce4ff2f76969a3eea789c0e245e3ad4d7691822","sha256":"8c4c08fb06b4cef7843455f5072a5018fcd22aa2b09a3e5521cc059f73dfe797","sha512":"f864d66ca8a83b71676c291e37de7716bc4fce6b8ea50be061be2a434c573bb038d914d04d9e9aa78bd16a962c76f2d80f82ef3dec8cee64856c6db166c6d884","ssdeep":"768:k3QMGbXJr7k0qI1XDpwsoK1s+6QrOW11hij1dwlW:kAMGbXJr7k//eOW1Oj1p","tlshash":"6d1374316780313db12bc766a5e2becc313ac106e6635b7ef62572b9c6864d91e33748","first_seen":"2026-01-30T12:36:21.726664Z","last_seen":"2026-01-30T18:05:41.637497Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1224,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/480805828_122122750610621433_384478592255101100_n.jpg","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/480805828_122122750610621433_384478592255101100_n.jpg HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1031\r\ncontent-type: image/jpeg\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 34x34, components 3","md5":"ac0970b02d42ec80a63ec690037d40cd","sha1":"f76f5302250e558aa676d896abadd310c1086871","sha256":"cf90fa280df723c956021133b0162139a5457ce4338a2b98c9adfcdb6adb7109","sha512":"d9f439f6151f904f1d2dc8a51d593a4b7ff25991088cd387864a4672b34ed1f75ee5b48a489e0c6abcf23938169f6a1a322cbdf1ad2714a7772e08d6b046dc23","ssdeep":"","tlshash":"a41172299bd14c83cd6251304614faa0a434bf4ae7c326caaa8859257a995c1018e790","first_seen":"2026-01-30T12:36:21.716489Z","last_seen":"2026-01-30T18:05:41.662018Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1219,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/8PtnTFGuUVu.png","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /8PtnTFGuUVu.png HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:34:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2947\r\ncontent-type: image/png\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"799ecdd907ac9f271abbd3a7d66b8c8c","sha1":"af0de0b0722712423dd494d695660e4ec58f60f0","sha256":"f497d0d4c0615da5907dad38daf63d8b51b605e70745fb38c820b91c6adf7545","sha512":"30421782ee0e57b6bb4f7bcc72a42a8d1441c8d2b80e7b50f39cdef2fd10e307da76264f74da6474201db4cb3e4a8d566dc9eefbf10d83814f160c3e8bbeeadb","ssdeep":"","tlshash":"f7514ad06b53a634f43f024b23963c58e7b432120290102e6e1fc7aa3e9198f0f67d92","first_seen":"2023-05-17T13:43:30Z","last_seen":"2026-05-01T11:01:54.462964Z","times_seen":192,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/nrO7hMgA6Nh.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/nrO7hMgA6Nh.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 495\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":495,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (495), with no line terminators","md5":"9e9c37addc6d595cce2608b604d09602","sha1":"736417c97a6835b3f182eb41182404ea1d8918cf","sha256":"fe6454df093b1ecd53ccbce40a747bbaf60a4cf8b1c5b24c0a551b6093d2f5d4","sha512":"12fd779199aaf6debdec794f0aa7414a4389554ecba2caaf8a059a5044f1d720692ff16c60ffde4cfe5f121135ba165151566fe40387e2be843bf601165066df","ssdeep":"","tlshash":"32f024358724603ab61962cafec0f9af33189522b0e959b9ef507939e4018b11ca460b","first_seen":"2025-01-03T18:37:11.492304Z","last_seen":"2026-01-30T18:05:41.63567Z","times_seen":78,"resource_available":false,"data":null}},"time_used":1229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1225,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/yU/r/zSaFQ46AO2w.woff2","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/yU/r/zSaFQ46AO2w.woff2 HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/A3SlBWxCeZH.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/9MPQQHL2Zhr.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/9MPQQHL2Zhr.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 872\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":872,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (525)","md5":"fbbca91d48e546efc4a9f33b5a1dacf0","sha1":"9a0fb32ba6d5075ce6e574e54c9f855931a4c639","sha256":"61928acf9e6e95427115bb4479e083eb47180aca01bd59f2c149d7675c0e48c2","sha512":"b24288ced23856cc54625e4fcc6e1b5740b271b10ea191cb640876b087f8dac67021f2e401f9bac3331d0290344f29c1e5b2d3a8b789cae17c83703ab33f4448","ssdeep":"","tlshash":"1811046390d2043f3c2fd4318898b39b65764116c1e65f38f92632b1b7450a41a73752","first_seen":"2026-01-30T12:36:21.731602Z","last_seen":"2026-01-30T18:05:41.664537Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1222,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/b2HbXbVoexB.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/b2HbXbVoexB.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 07:02:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55142\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":55142,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"da8d22cfeb492c3291c50b0baf9bc1b8","sha1":"d3e63c4f0742aa056a363a6f4f2aeee7c4ebe1af","sha256":"c6a91f9396cce3cc9e15a5abca5f8ac52054665e6b92124cb3eb8e7a5a4335b3","sha512":"5df66c318ac1797e788a2addb6b1090670d059d1cb9feabb11b873f3f4e5815c0916e7f8d9fbbd1100cae5122f46cbcc4eb74ed44ea55ed7881a5392d47036d6","ssdeep":"1536:/qVxEBSrARZbc2ljJZUBLDHTsOanRjRJvLRuHL58+N9sa8n94pL/7g4a+fVXlXiZ:/qVxEBWAfbc2ljJZUBLDHTsOanRjRJvT","tlshash":"3e43df96cae33d4ab847e2602aba4746637d4003d14dfd2d7b9a31acafc90d4d073799","first_seen":"2026-01-30T12:36:21.724295Z","last_seen":"2026-01-30T18:05:41.648247Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/VGFSGuDbp6z.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/VGFSGuDbp6z.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4027\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4027,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4005)","md5":"91d94282255bc97e44d140015547edaf","sha1":"da3a4f42c049e6c4f081e7757ded17f3a9f9d907","sha256":"9c9a14c7933a0b75c063d51223bfec3c8ee67831873208e2fb4e3ca4a0eabf5f","sha512":"5b92f0aeb98753bd4fd9862c2138b51fe64075750f0c499ae0fb2315459566f9fa92c9653cacdb248355d860b5028d356f08c4b7b315944970023929711b8c79","ssdeep":"","tlshash":"458192110485a07bb457f720b274438a256a410ffbe3ee3dac1a39ed96890f49cb76d5","first_seen":"2026-01-30T12:36:21.708224Z","last_seen":"2026-01-30T18:05:41.659405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1021,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/6r-4waFdrhg.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/6r-4waFdrhg.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7529\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7529,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5654)","md5":"5c43cc5585bdd40a2019af590ae50794","sha1":"84fa164ae1d360d93527ce6fc5b987bc3ec79972","sha256":"747f5290e8ec063cac118a3bebb18ad01fd4543ff59183344fd4889bdad9a6c0","sha512":"8158938453140a41cdadb861e7dde4d5e6b9326e9635c011afb20b06583f600f5c4c6412504f1a392badb3ffdac01454f12db8ff0ac4c3673e993acae12e037d","ssdeep":"96:u4KgvNmD3l4B2DoaVkLTL8SmDhrlBry2D2SpVQYyXs/1nTm43brM5ugYTvbWcYa9:gVuHwrZykgM6CEpjdvYAV42nE","tlshash":"82f11e3235dde03ef257f72371a0565ca82bc1a2e1d29e3d9d3876f990c24a864f3446","first_seen":"2026-01-30T12:36:21.725691Z","last_seen":"2026-01-30T18:05:41.653017Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1226,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/Do-aZT5XkwQ.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/Do-aZT5XkwQ.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7902\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7902,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2042)","md5":"ad8e660d2f06b3e239d6d162d7787008","sha1":"7fa36a39036f27da57e165e21a742c01a49b4b7a","sha256":"2942e3c366b0efe116722928566e1e58a19dcb9f3045fda8761bdc37f26bdf3f","sha512":"77d6392a4206fa5c2c83b81e5216c1b3b4e16de46bdd9d0f9c3979b04d5b5bf97be68ab251fe786144b20b3be23899bb3bc05a747e38b983e12df9b24d81dacb","ssdeep":"96:0acmzF+yN9U5LaPX+G4h8wvF2SieT5AZGF6JP05IpuW764UPNg:inn2PB5CMjGF6J8SD","tlshash":"72f16120c1c1303eb5d7e724b5e0e7cd267a8141e9e34b7eb52b3a65da9a59c1e33708","first_seen":"2026-01-30T12:36:21.721856Z","last_seen":"2026-01-30T18:05:41.639467Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1223,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/v4/y1/r/ZgJHLf6K8Gr.png","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/v4/y1/r/ZgJHLf6K8Gr.png HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/6r-4waFdrhg.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/i5XQBnnkt5w.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/i5XQBnnkt5w.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19629\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19629,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5263)","md5":"2ca3e29e4046091754d420ab6332afa4","sha1":"2e8ebce96f67da9bdb1e90121d3fb33e95c72230","sha256":"43c5834ea362a9ac86ce43f3446ee8e8aa3fe012cd0c195f1cf3a32d21913a5d","sha512":"e46c0e9bac21c99cc80151aeff0121800313996c5b8d1a59fea8b609bfe003a73eb266bf2dec8d076664efc3f97876f03194d6a42b6f273c0a9f4dc58ccd7235","ssdeep":"192:GTYQYedeosjhfdfZKJT9gZJPTUu8EIV5FBrdJ+K28Vh4JMSp2qYtj9fuF6qGG847:JOrZLuUPQQCUK/DSbTXYH","tlshash":"129241225b65223df4ab8452f052bdcf70548b1b9433abbdeb45bb25c4cb0ab176274c","first_seen":"2026-01-30T12:36:21.720666Z","last_seen":"2026-01-30T18:05:41.660284Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1229,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/pQSZHcBlI_U.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/pQSZHcBlI_U.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 119916\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":119916,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33883)","md5":"48ebbf4b3e7caae684d0d301a3b10639","sha1":"185779281c340a92a8f4171c008b938a7050e91f","sha256":"36bc9ad0f15bce55ff68a5b0ea46f6246ea4a770a0083d8cf15de963bf18b2a0","sha512":"3e84d3696b37df3dd90ae5d854da58fd597431c4672f233b63e2492dc700053a3fc5cfa73f667756da10d6a9ddb984990a23375ed6b39e26a4a89ad549945451","ssdeep":"1536:ITAQUBkyl5koIRhHttQgv4NGp+3IUw9IZfFMQRl//xrcK+/nDogzOnUsB4w7oVZO:ITAQUGaIRZtHqv/ZreVZlwx3","tlshash":"4fc3c831b782232ef913c12fa494f989712b9782eb221776f667b534ce626dd1933314","first_seen":"2026-01-30T12:36:21.737247Z","last_seen":"2026-01-30T18:05:41.666148Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1022,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/m6OQemW18JF.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/m6OQemW18JF.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 427\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (427), with no line terminators","md5":"82155a42fb76ce2c3c9af5968f48f90d","sha1":"d2bb72437828d5e077de46c1951e02e1c61132cd","sha256":"9942e29b2715471611d31906f9a59cdedf5471ee7f2fea9206a926e30e6c7d84","sha512":"184d8c8100b0327dd509545f4e12d84b0fb45944026df2c7134334cf51c40424cd286e5596e2300fd28d0b1903832508c7c5f94139179695955afda9b8f859d0","ssdeep":"","tlshash":"51e0ec24058550ae755355717878238a3036ce0ee5e39b3ed5193af8a3c28d84433aa5","first_seen":"2026-01-30T12:36:21.723301Z","last_seen":"2026-01-30T18:05:41.658467Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1219,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/njzSUwCJr9p.png","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /njzSUwCJr9p.png HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/b2HbXbVoexB.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 26206\r\nlast-modified: Wed, 19 Mar 2025 06:39:06 GMT\r\naccept-ranges: bytes\r\nserver: Apache\r\nexpires: Fri, 30 Jan 2026 12:46:09 GMT\r\netag: W/\"PSA-0MR8-Yk7ll\"\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nx-content-type-options: nosniff\r\ncache-control: max-age=0, no-cache\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":26206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 209 x 974, 8-bit colormap, non-interlaced","md5":"d0c47cf9893b96509549f66dba639f76","sha1":"f05361a6b11749d95dbda3cb21ce553a2568cba6","sha256":"52f5678b2ff8e82d675207dfe15f983586d4d797ef7dbc805769498e5c8962a2","sha512":"8ca95a34cf0a3b40a6c269ace64962c698243408c1a4a4d9a441096986708f034650fbbae80b33d1dc439b6079c78844bba22f47748d899a0b6d9f1104a0e87d","ssdeep":"768:YuD7uleV5ZhlLT0ddbxoUwLZ0XKp93V/Yk:pugVrhGddsnV/R","tlshash":"4ac2e15fc67f45dcac086cfa0e3cd82aafd49f1804592ac6c6b4c47c3991eea414ad59","first_seen":"2026-01-30T12:36:21.717444Z","last_seen":"2026-01-30T18:05:41.642533Z","times_seen":3,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/v4/yt/r/D47CF9k_yA8.png","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/v4/yt/r/D47CF9k_yA8.png HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/6r-4waFdrhg.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/yU/r/zSaFQ46AO2w.woff2","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/yU/r/zSaFQ46AO2w.woff2 HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/pQSZHcBlI_U.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/yH/r/c_1vdG88uNh.woff2","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/yH/r/c_1vdG88uNh.woff2 HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/pQSZHcBlI_U.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/ HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-length: 358\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":358,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"54011b7adca4044805659b04f715ddb6","sha1":"611d29d307df28028b2c7beb6d4a0a33ae4ad3dd","sha256":"415ff807abb2fd49ce840d67bf14cb4d647e78afa9ab115c2b2dd8c8614928dd","sha512":"a2ff1f535dd98486fd1f3fce39e93a71063f6726642b267c7028f2fb8a7b9ae41832ae06dc641f89f6d7de0100fe2485b1b811524d55664d0ef2e40b1c1a2dd8","ssdeep":"","tlshash":"e9e0c05f916e521a5293e3c07dd01790e40262293dc216dda748a46790419bdc12a69c","first_seen":"2025-12-10T02:02:32.714406Z","last_seen":"2026-08-07T07:16:20.393293Z","times_seen":1809,"resource_available":true,"data":null}},"time_used":1226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1220,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T12:45:42.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nx-mod-pagespeed: 1.13.35.2-0\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=0, no-cache, s-maxage=10\r\ncontent-length: 12891\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 30 Jan 2026 12:45:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google PageSpeed:1.13.35.2","description":"Google PageSpeed is a family of tools designed to help websites performance optimisations.","website":"https://developers.google.com/speed/pagespeed/mod","common_platform_enumeration":"","icon":"Google PageSpeed.svg","categories":["Caching","Web server extensions","Performance"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":197560,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (420)","md5":"855abe231dc408b2338504a3e2ff7601","sha1":"237299c5c75d2d3ad2109328f10495a3fbd2ccb0","sha256":"11251f0419f6a6c7f66be894baf28905c5c574d766642f702f5d014146c59603","sha512":"3f0b9367cf52e18cfa88c3d79cb49949eaf31adc43916efb14edc01da48c87e6c986a979786e58db9990a960cf13e9092032df434c32d2e07d5584ea45093599","ssdeep":"768:cN3Aw1WvUsWYYRBNNFCUXtgR+qePUdTB7jehFysyGSvtQVjgJ3U0mKX1986+HiY7:c3Kw6+HiYqC","tlshash":"e4144310a1f51123019280c9b9226f0fafd1d617da2b81657afd0bd42fd7da29f4b3ad","first_seen":"2025-12-03T17:39:27.892579Z","last_seen":"2026-01-30T18:05:41.645169Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1235,"timings":{"blocked":414,"dns":0,"connect":203,"send":0,"wait":406,"receive":1,"ssl":208},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/A3SlBWxCeZH.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/A3SlBWxCeZH.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:42:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 284884\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":284884,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e0d3e9b620e39406894898eb97bec1bc","sha1":"05158f2682aa8c6e5373e72ecb82b95512fcda9d","sha256":"0d2ed1e587daa04ec2d1027f966541e440515a55d81c57e62759afc816a1bf38","sha512":"ea2ce275c7647af6f0482b4d3ac52fa09c82349842c0fcc0ea30ff1ec71d9f75a6d8155d8db756464029b3cb8596add03287791f9f0ac7340039794f5fd09f0a","ssdeep":"6144:dJAet8Ib5k1ob8OH5ok2DriuljyJlL9QTR3NVSlfif167etJcF1pep3EBlY:nAet8Ib5k1ob8OH5on3LJQh9YkYc7etV","tlshash":"4b5411238af31d5ae07791598dbc9944335d5307920e7faaff89315c8fc82a6d86368c","first_seen":"2026-01-30T12:36:21.728524Z","last_seen":"2026-01-30T18:05:41.628772Z","times_seen":3,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":413,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/4m5b1kiLXgU.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/4m5b1kiLXgU.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10448\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10448,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1274)","md5":"43e33e3c1ac7b1cf1fb62d17062a8cc4","sha1":"d30c06d8103d4322a297c9e386e5327160a79401","sha256":"c7d32155905cfb4e2a8fb737ed354ec49fe6d0d53f477e86281b43b778d5d6b9","sha512":"156c1c7be775943c08a589871b97e70529a279f9750b68fd446d8f1c794711b99a414fa3db047bcc83a74a02fa360644868c16fd84bd35630037f1ad1bb12221","ssdeep":"96:AgaK1KySQvgU7aBZ6JSjHCDcFLTXdPkHyFHeFtnnHTkJA1Fr7U5JqWRZRUmIsQoC:ZaKpd7aCuH1bPJ0TkJ8iqquapu","tlshash":"cd22a732a5d4313df02bc772b991ab8e31358012eab34b6df3257bb595c51da1b32e48","first_seen":"2026-01-30T12:36:21.729464Z","last_seen":"2026-01-30T18:05:41.630153Z","times_seen":3,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":413,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/oufRSMRSZM6.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/oufRSMRSZM6.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37126\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4377)","md5":"f64222edf40f9a6bdc513539c6b0629f","sha1":"2b583db3d2d6f6c96280049fc4ffe5bda77b6382","sha256":"45e14fc82ee68ac664d1c60d4668111479dd998771d2101ef901ab3d85b2b981","sha512":"c8e36ae3c49df67c93de4bd7ec58c9ed8e7606d4ed8f3ad15e69c1b78e93af1b96409577081d4ac6847c41a54f26c7f40b5c77d976fba41470d5924e14feddbc","ssdeep":"384:EIoGE4Qwp0dMTJASc2yg4JdePicnRzBJAGof3Yy6FveG/4hgEw:EIoN4QwLfy2TnRdiG8Iy4/wgJ","tlshash":"e6f28661a781303cb01f87b6f1e3bcd83a15965294975ffef8136a7acac90dc1662709","first_seen":"2026-01-30T12:36:21.705024Z","last_seen":"2026-01-30T18:05:41.647459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1229,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/19O_CFqblVa.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/19O_CFqblVa.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21574\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2634)","md5":"c674c84846725ea4ee92da9c0deb7e38","sha1":"7cbf84312ed0db2c27dc56e7f08e1786e922377e","sha256":"ff698e2d52ac298e460cb58e929b9c1b04f53f680c6a1170ba06f304da605e68","sha512":"2cd1d586ea7c5d260b9a2f7a922a65a34e8f2f32eda7e18ebf4dda068a0bfe4891f638ec32239e9c63a9d3e5ce1cc9e327e75141990f6db7faedecbdedabc759","ssdeep":"384:MINN3jxtktukgEX3zw/NR7aYTkyq1kWBzOgyQq:MmN3DueTpq1kWBzOgyQq","tlshash":"19a2fc2009a2303eb553d731b4a8578d307a8107eaf39f7d966e3abcd2824f95c73695","first_seen":"2026-01-30T12:36:21.703638Z","last_seen":"2026-01-30T18:05:41.665328Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1222,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/BN5WCe41be9.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/BN5WCe41be9.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30603\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":30603,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12939)","md5":"2e609d70e08dbb255386cf07b37ecbe2","sha1":"d728f3ec022a813820425d5c3425d88957fa4062","sha256":"46b4a85943e6499977c3f6063e7d1b7f79bfa36ff88a74be28cde8f04093c213","sha512":"21029e883e39bbd861624b885f2c945188f5441609d004aa7920eeeccd6b8de7731e2227aef25c7443362fc42eeb98b618313941ef29e0b770f3e1df1df8f8ae","ssdeep":"384:Ikbj6jVu9lqGAi1uZ13riKurvaHhPSBZ/LHG5H6uvI6nFoXoooLg/M:Njc1TzriKurvaKa5H64nlooLoM","tlshash":"0dd2953155d4313cf82be23578e15fcd303ac106e9a35fbea26abab4c6464f84936681","first_seen":"2026-01-30T12:36:21.732712Z","last_seen":"2026-01-30T18:05:41.640798Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1221,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/N0lvn1ubv-c.png","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /N0lvn1ubv-c.png HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/A3SlBWxCeZH.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2201\r\nlast-modified: Wed, 19 Mar 2025 06:39:00 GMT\r\naccept-ranges: bytes\r\nserver: Apache\r\nexpires: Fri, 30 Jan 2026 12:46:09 GMT\r\netag: W/\"PSA-niV0H2Kj26\"\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nx-content-type-options: nosniff\r\ncache-control: max-age=0, no-cache\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2201,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 185, 8-bit colormap, non-interlaced","md5":"9e25741f62a3dbaf5b4b319caa885055","sha1":"d3daa5a543ce2d22e8f5e2a0058970366a6b6883","sha256":"c4c4d93a61f052295370413aee74c9a363dceb339302a543046e48d19b8337ea","sha512":"41133a54532846f320659a243541e8730abc014bd4da30e9faf62d2b7253dc7baec0d176e2be149f0a4ce8ed7ac87639fe12353d4c79a731ffb9f34028688342","ssdeep":"","tlshash":"4c4196a00064fc9585b0f4a1c783cdb329916e117f05591b32ff372e587365266a0269","first_seen":"2026-01-30T12:36:21.735215Z","last_seen":"2026-01-30T18:05:41.654813Z","times_seen":3,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/tUIMw1P-4Yc.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/tUIMw1P-4Yc.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:19:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16386\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16386,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4342)","md5":"65a10e5890fcb6dfe501f717d7df2760","sha1":"56429f6dd695d9efc8aee8d34184722230ac1ec6","sha256":"9113fa43f353479db9c6e0241192ada5297c5020693f36bc0c09230c95ac42ab","sha512":"64a2f04f3bb969c539e3971d19d40b30c5a3c0095f3b95c9f70218a7d78bdf9c9a26a34a0ce747bacf3f644b21e94907098ac6c194ad2a52cbfd1a9bc3ac3642","ssdeep":"384:bdWBeK+sRWRs2bv2LfDnlafmhOLwEPGl05uAH7YtVZ+QRvI:bAaEz3OqhRQ","tlshash":"88728c3218c2a13eb557973278b8578d203ed106f9f65f7e122a39b8b2d54f85873b90","first_seen":"2025-12-03T17:39:27.89179Z","last_seen":"2026-01-30T18:05:41.626033Z","times_seen":4,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/oHSkITaPgMn.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/oHSkITaPgMn.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 573853\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":573853,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60235)","md5":"e80afa37fdf07a574892eec917948baa","sha1":"16e5b59cdee1ba5c7d1e2a846a499b9dc325f228","sha256":"b8301e13ed0769785e81347c8941bb3d095c08fa205c9f0d9b4843f68d91945b","sha512":"710634e39c5c392cf62fc4f00326af30f46208a7c782f2772667bc9d9a2621f9347a86747bcad0437e805502c9867c98e5278361b1487332fbd37fbfdaf54d68","ssdeep":"3072:FMfaFvZQYMzKBrQxgLiJ0UWceH39kFRvsa/baeEYzLdRs6qQIC/X0QrIFKctcNg3:GfaLLiJvWcrWveEYzJRs6mC/XFBcIg3","tlshash":"67c484b7a790533db92b812a92e9bd4c721d7e42ef1717e2fa82746487c6bf40933504","first_seen":"2026-01-30T12:36:21.701864Z","last_seen":"2026-01-30T18:05:41.666933Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1019,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/bCIbqC1jesk.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/bCIbqC1jesk.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11872\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11872,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2629)","md5":"ac58ba099ca8a5b154a6a060735169cf","sha1":"2a73b7e4bbf79f3616ff96af4aab751c8450e3fa","sha256":"e63eee3a81af54f5415b133d87e5924fd7b671974d8e8335f2ba86095074a15f","sha512":"6caeea6ace12868630418e9ebf649583f690e468cdc0f3dbe831ae18069e2c01668130d97a12edb7c088f3a43ede94ff460086f7494ed3b6dafc1e295493fafa","ssdeep":"192:DZtFwo+ckARcUjGJ6bh46v9mRpuiQE+Yk:9Xz+ckSchTMP","tlshash":"9532f22019c2a53d700bda3274f517ce303ac557f9b25f7e922a39b4b2464f868779a1","first_seen":"2026-01-30T12:36:21.738246Z","last_seen":"2026-01-30T18:05:41.663653Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1228,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/frontend/aI34N_l77-I.css","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:43.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /frontend/aI34N_l77-I.css HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://authenticate-meta.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Mar 2025 06:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8327\r\ncontent-type: text/css\r\ndate: Fri, 30 Jan 2026 12:45:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8327,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2334)","md5":"6b9114f4e4af75d53ece9dd7f84c21b2","sha1":"f79b413c8c7a59b8b363c25e17f00dde40a46f3b","sha256":"6915235189185b50dd7c169e4a2c83166beb7e65e679fc4370a6bd90550b214e","sha512":"60b2396150ce8ac446ba0403c4a1c56e4225e06dbb08c741d195cbf915b4d47a86f42e795218c9ecb1ac4e5409baf1d7abf4d7a80f9d207cc104a8872796ace0","ssdeep":"96:sVysDYJnunFYg+ubDnn8+ClN2RuoO92sTEcqrbw2:iiunT8bPFMM2","tlshash":"a10212b176c8363db55bc623f9726ecc711c8206ee126fbda203bc78a9cd5640532b81","first_seen":"2026-01-30T12:36:21.739091Z","last_seen":"2026-01-30T18:05:41.651289Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1226,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"authenticate-meta.com/rsrc.php/yR/r/_gCoI-iROin.woff","fqdn":"authenticate-meta.com","domain":"authenticate-meta.com","tld":"com"},"ip":{"addr":"210.211.113.134","port":443,"asn":38731,"as":"CHT Compamy Ltd","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://authenticate-meta.com/","date":"2026-01-30T12:45:45.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.authenticate-meta.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 01:22:51 GMT","end":"Sun, 22 Mar 2026 01:22:50 GMT"},"fingerprint":{"sha1":"79:58:FD:D7:2A:DD:D2:8E:A1:E5:1C:39:8A:31:14:E3:09:B0:E1:83","sha256":"A0:07:F1:5F:37:82:F2:96:9A:9E:92:72:D8:8A:34:86:99:37:B9:8E:B0:57:EF:C1:53:B5:0A:0F:4D:4D:AF:B7"}}},"request":{"raw":"GET /rsrc.php/yR/r/_gCoI-iROin.woff HTTP/1.1\r\nHost: authenticate-meta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authenticate-meta.com/frontend/A3SlBWxCeZH.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Fri, 30 Jan 2026 12:45:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T11:00:36.454095Z","times_seen":54406,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"authenticate-meta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"authenticate-meta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}