www.facebook.com - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned www.facebook.com and returned a benign verdict (score 0), categorised as credential-harvest. The page resolved to 157.240.13.35 on Facebook, Inc. in SG. The domain was registered 10738 days ago through RegistrarSafe, LLC. 5 domains and 2 IPs were contacted. 153 malware samples communicate with this URL. The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: benign (score 0) · Confidence 12%
- Scanned URL:
https://connect.facebook.net/ - Domain: www.facebook.com · IP: 157.240.13.35 · AS32934 · SG
- Page title: Facebook
- HTTP status: 200 · text/html; charset="utf-8"
- Registrar: RegistrarSafe, LLC · domain age 10738 days · created 1997-03-29
- TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Aug 30 23: · subject C=US, ST=California, L=Menlo Park, O=Meta Platforms, Inc., CN=*.facebook.com
- Evidenced operator: Meta Platforms, Inc.
- Scan tier: fast · observed 2026-08-22 08:47:07 UTC
Redirect chain
https://connect.facebook.net/https://www.facebook.com/
Malware communicating with this URL (153)
These samples were observed contacting or being served from www.facebook.com. Each links to its full analysis.
- 096ef7ec663fcf206f28d109542fc53798e03e31c23ed6467d13e0aadf9bcaed - referenced ·
096ef7ec663fcf206f28d109542fc537· first seen 2026-08-22 - d32fae7810d4455a1a2008d864aa07f003a9579d45f331dd433571fa36cce331 - referenced ·
d32fae7810d4455a1a2008d864aa07f0· first seen 2026-08-22 - 855217f6c5df51a140950b996c4012480079e63f4a81b24a6854091806a0cce4 - referenced ·
855217f6c5df51a140950b996c401248· first seen 2026-08-22 - 3f7508ed6be9e89f851b84a55dc2e62f034d79f72e5a846a84628fc37028d792 - referenced ·
3f7508ed6be9e89f851b84a55dc2e62f· first seen 2026-08-22 - bfdbfc476302cf60b4aa185ae0d109375b155f6bd204af3ca0b5862a80edb9de - referenced ·
bfdbfc476302cf60b4aa185ae0d10937· first seen 2026-08-22 - e19024d256395dc93732ee7510b0f063695024a5439e7f1542b91584fdb68809 - referenced ·
e19024d256395dc93732ee7510b0f063· first seen 2026-08-22 - c9f27f070f0227f9a8098e08fd204935fb7b42e64198c7c4df0f894b0ce858af - referenced ·
c9f27f070f0227f9a8098e08fd204935· first seen 2026-08-22 - ac8196ef1889e1481bfeae30fe80b02c68b6157805944ca5b827b7e25e949189 - referenced ·
ac8196ef1889e1481bfeae30fe80b02c· first seen 2026-08-22 - edd6faa330b31b3263e1b42694fbf42af4dfdd2baa4af56ec28fcc9662b34940 - referenced ·
edd6faa330b31b3263e1b42694fbf42a· first seen 2026-08-22 - ec1e73ea8083d086f7327fe7dce0ca90c6c2093cf4179619bb8e9e242afa5ce1 - referenced ·
ec1e73ea8083d086f7327fe7dce0ca90· first seen 2026-08-22 - 3f7a85a5b1f754754520e27172ee7400c454e9b678af4951c90648190b3305c2 - referenced ·
3f7a85a5b1f754754520e27172ee7400· first seen 2026-08-22 - 4e3216ab0e94c1f72808978befacf972bb7e9c11f9f2249e84344b399d221ba7 - referenced ·
4e3216ab0e94c1f72808978befacf972· first seen 2026-08-22 - 3f70ac3b4bdb4fd8b75c5e8c6361f6e63360bf2473703e004ed43a450a42ce91 - referenced ·
3f70ac3b4bdb4fd8b75c5e8c6361f6e6· first seen 2026-08-22 - 3f7ec987a294f8322a72b5768ec76d9666b9351b3927ba0eb92151b92776ace2 - referenced ·
3f7ec987a294f8322a72b5768ec76d96· first seen 2026-08-21 - 74bac20c16c5f5ee549058f966dee8fd5de0e9e869d64b9bef785ce31db0e149 - referenced ·
74bac20c16c5f5ee549058f966dee8fd· first seen 2026-08-21
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Credential-harvesting form
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 157.240.13.35 - AS32934 Facebook, Inc. (Singapore)
- 157.240.8.23 - AS32934 Facebook, Inc. (Australia)
Observed indicators
- www.facebook.com
- static.xx.fbcdn.net
- en-gb.facebook.com
- l.facebook.com
- developers.facebook.com
- 157.240.13.35
- 157.240.8.23
- https://www.facebook.com/
- https://static.xx.fbcdn.net/rsrc.php/y1/r/ay1hV6OlegS.ico
- https://en-gb.facebook.com/
- https://static.xx.fbcdn.net/rsrc.php/v5/yU/l/0,cross/2vkXB_erQC48wmKvUcQXclxgo-3469oiGT9DWDYPz6DhfgQe914iiBfD-GevAmvU9KONMKn3YhINqU49pVNahkCkeiF2w9Hlit1.css
- https://www.facebook.com/recover/initiate/?privacy_mutation_token=eyJ0eXBlIjo1LCJjcmVhdGlvbl90aW1lIjoxNzg3Mzg4NDI4fQ%3D%3D&ars=facebook_login
- https://www.facebook.com/reg/?entry_point=login
- https://www.facebook.com/reg/
- https://www.facebook.com/login/
- https://l.facebook.com/l.php?u=https%3A%2F%2Fmessenger.com%2F&h=AUCgKHaxc4VhUbEr_xPWMDiSeSY2Rs3zDG1KSy1jF2hz7cFeaCeNFnwf-pncqh8Bnstx2n7LBoILD38U2HWMRPGmnGkDzl9jrYKtf1uwojwedfcBlPLO00w4XNqIC52y28CtV_ZPfETo1Ao-
- https://www.facebook.com/lite/
- https://www.facebook.com/watch/
- https://l.facebook.com/l.php?u=https%3A%2F%2Fabout.meta.com%2Ftechnologies%2Fmeta-pay&h=AUCgKHaxc4VhUbEr_xPWMDiSeSY2Rs3zDG1KSy1jF2hz7cFeaCeNFnwf-pncqh8Bnstx2n7LBoILD38U2HWMRPGmnGkDzl9jrYKtf1uwojwedfcBlPLO00w4XNqIC52y28CtV_ZPfETo1Ao-
- https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.meta.com%2F&h=AUCgKHaxc4VhUbEr_xPWMDiSeSY2Rs3zDG1KSy1jF2hz7cFeaCeNFnwf-pncqh8Bnstx2n7LBoILD38U2HWMRPGmnGkDzl9jrYKtf1uwojwedfcBlPLO00w4XNqIC52y28CtV_ZPfETo1Ao-
Other scans of www.facebook.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - benign
- 24 Aug 2026 - unknown ·
https://latincanada.ca/argentina-vencio-2-1-nigeria-y-se-clasifico-octavos-con-la-derrota-de-islandi - 24 Aug 2026 - unknown ·
https://s.ai/ - 24 Aug 2026 - unknown ·
https://climatechangeconferences.com/ - 24 Aug 2026 - suspicious ·
https://seeandhearbetter.ie/img/shop//contents/97369378376.pdf - 24 Aug 2026 - unknown ·
http://lolmaner.blogspot.com/2013/04/how-to-make-guy-your-boyfriend.html - 24 Aug 2026 - unknown ·
https://au.norton.com/ - 24 Aug 2026 - unknown ·
https://au.norton.com/ - 24 Aug 2026 - unknown ·
http://phimhddd.blogspot.com/search/label/M%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%83%C3%83%C2 - 24 Aug 2026 - unknown ·
https://hypoteky-reality-zilina.sk/novy/ckfinder/userfiles/files/zudagoxakejeletiramuketez.pdf
Questions about www.facebook.com
- Is www.facebook.com safe?
- The scan of www.facebook.com on 22 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.
- What malware is associated with www.facebook.com?
- 153 analysed samples communicate with this URL.
- How was www.facebook.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.facebook.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan