www.facebook.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned www.facebook.com and returned a benign verdict (score 0), categorised as credential-harvest. The page resolved to 157.240.8.35 on Facebook, Inc. in AU. The domain was registered 10737 days ago through RegistrarSafe, LLC. 5 domains and 2 IPs were contacted. 127 malware samples communicate with this URL (Fileinfector). The request followed 1 redirect before landing. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: benign (score 0) · Confidence 12%
- Scanned URL:
https://connect.facebook.net/ - Domain: www.facebook.com · IP: 157.240.8.35 · AS32934 · AU
- Page title: Facebook
- HTTP status: 200 · text/html; charset="utf-8"
- Registrar: RegistrarSafe, LLC · domain age 10737 days · created 1997-03-29
- TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Aug 28 23: · subject C=US, ST=California, L=Menlo Park, O=Meta Platforms, Inc., CN=*.facebook.com
- Evidenced operator: Meta Platforms, Inc.
- Scan tier: fast · observed 2026-08-21 14:57:22 UTC
Redirect chain
https://connect.facebook.net/https://www.facebook.com/
Malware communicating with this URL (127)
These samples were observed contacting or being served from www.facebook.com. Each links to its full analysis.
- 1ab27636df47341e94bb429eca7ae292f4dd854dbfe862f83c5f718e6f88f166 - referenced ·
1ab27636df47341e94bb429eca7ae292· first seen 2026-08-21 - 3234fe9827e963b9e48f97f2d78aeecf1103e8b45ddb2298e0f81e08c0ff39db - referenced ·
3234fe9827e963b9e48f97f2d78aeecf· first seen 2026-08-21 - bae9939d3d7aa2e72dae1da32c1fd1de88f6bdc117076e129936d84de26d37b3 - referenced ·
bae9939d3d7aa2e72dae1da32c1fd1de· first seen 2026-08-21 - 323036d111e796fc674e72e82a7c85c098676dc54b1c2272a13d7a956545bbfc - referenced ·
323036d111e796fc674e72e82a7c85c0· first seen 2026-08-21 - 3230906725d08e21cebd34f2722da08c86d6da8d08e6570599a2e4ba7b9aa54f - referenced ·
3230906725d08e21cebd34f2722da08c· first seen 2026-08-21 - b322a0759ac785bdf46e882d418225d84094ddbc459f1f3bbd2ebcda90f0398a - referenced ·
b322a0759ac785bdf46e882d418225d8· first seen 2026-08-21 - Fileinfector - contacted ·
90fd93c66653e1a0615306511a39d189· first seen 2026-08-21 - 1defbbc0a7a6e2e85d22e5fd2853d5d8a64c02b7203e6f7c06222e36c3742a78 - referenced ·
1defbbc0a7a6e2e85d22e5fd2853d5d8· first seen 2026-08-21 - 323579aedef9e4bc13a07906930b296a9b74d2dbf7acf8fc8c54b2a46587729e - referenced ·
323579aedef9e4bc13a07906930b296a· first seen 2026-08-21 - 1b7656afd1410c8265ffa237a0747fd1908b04eb991f1424cc15abaf5f37107b - referenced ·
1b7656afd1410c8265ffa237a0747fd1· first seen 2026-08-21 - df0eeb407fe5fbb2047fd9b936cde6df31600be25056dff3dcf07d3ba3ad7d7e - referenced ·
df0eeb407fe5fbb2047fd9b936cde6df· first seen 2026-08-21 - df0b6d5fe59640afed53654288ca772f7eccd8fa37680e6abdd347d6a2e2c701 - referenced ·
df0b6d5fe59640afed53654288ca772f· first seen 2026-08-21 - c3fc4d5eb2f53469d3ba4c898ba668bc11bb12789419869b05367ed2ca621861 - referenced ·
c3fc4d5eb2f53469d3ba4c898ba668bc· first seen 2026-08-21 - f8d39a52146691c5be469b7db560043754541cd0e37e971bf6b3c8f47bd3df59 - referenced ·
f8d39a52146691c5be469b7db5600437· first seen 2026-08-21 - df05cd3736dd18eb19d506b05d8290e05aa4ee725c0457830f55c6cac87919f9 - referenced ·
df05cd3736dd18eb19d506b05d8290e0· first seen 2026-08-21
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Credential-harvesting form
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 157.240.8.35 - AS32934 Facebook, Inc. (Australia)
- 157.240.8.23 - AS32934 Facebook, Inc. (Australia)
Observed indicators
- www.facebook.com
- static.xx.fbcdn.net
- en-gb.facebook.com
- l.facebook.com
- developers.facebook.com
- 157.240.8.35
- 157.240.8.23
- https://www.facebook.com/
- https://static.xx.fbcdn.net/rsrc.php/y1/r/ay1hV6OlegS.ico
- https://en-gb.facebook.com/
- https://static.xx.fbcdn.net/rsrc.php/v5/yh/l/0,cross/IVPh2QCO3ZEEU4T_aHxuwqxgo-3469oiGT9DWDYPz6DhfgQe914iiBfD-GevAmvU9KONMKn3YhINqU49pVNahkCkeiF2w9Hlit1.css
- https://www.facebook.com/recover/initiate/?privacy_mutation_token=eyJ0eXBlIjo1LCJjcmVhdGlvbl90aW1lIjoxNzg3MzI0MjQzfQ%3D%3D&ars=facebook_login
- https://www.facebook.com/reg/?entry_point=login
- https://www.facebook.com/reg/
- https://www.facebook.com/login/
- https://l.facebook.com/l.php?u=https%3A%2F%2Fmessenger.com%2F&h=AUC2qCv7gfw0Mj6tus0BfsYLbXWTxSb6WBcMesPtO0Ufo8d9TbCN7uLRS9GdQn7cbrZ_RT52dATqxrKO3zPSEN4P9LY9bDPng4T7dfr-PhUXFsW4P7DM0k5BN1B1csxEyIa0PkPvMMnBBkHG
- https://www.facebook.com/lite/
- https://www.facebook.com/watch/
- https://l.facebook.com/l.php?u=https%3A%2F%2Fabout.meta.com%2Ftechnologies%2Fmeta-pay&h=AUC2qCv7gfw0Mj6tus0BfsYLbXWTxSb6WBcMesPtO0Ufo8d9TbCN7uLRS9GdQn7cbrZ_RT52dATqxrKO3zPSEN4P9LY9bDPng4T7dfr-PhUXFsW4P7DM0k5BN1B1csxEyIa0PkPvMMnBBkHG
- https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.meta.com%2F&h=AUC2qCv7gfw0Mj6tus0BfsYLbXWTxSb6WBcMesPtO0Ufo8d9TbCN7uLRS9GdQn7cbrZ_RT52dATqxrKO3zPSEN4P9LY9bDPng4T7dfr-PhUXFsW4P7DM0k5BN1B1csxEyIa0PkPvMMnBBkHG
Other scans of www.facebook.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.lsv-wittlage.de/ckfinder/userfiles/files/rigefivijafiziw.pdf - 24 Aug 2026 - unknown ·
https://www.lsv-wittlage.de/ckfinder/userfiles/files/rigefivijafiziw.pdf - 24 Aug 2026 - unknown ·
http://www.nuricomuvakfi.org/wp-content/plugins/super-forms/uploads/php/files/4c35mk778f40i8dmtv3nkn - 24 Aug 2026 - unknown ·
https://lasanisports.com/files/3570949614.pdf - 24 Aug 2026 - unknown ·
http://istana-sepeda.blogspot.com/2012/04/fork-rst-first-platinum-travel-100.html - 24 Aug 2026 - suspicious ·
https://goactive.hu/wp-content/plugins/super-forms/uploads/php/files/a60475b369c455be45ab061ab56a96a - 24 Aug 2026 - unknown ·
https://alompar.hu/uploads/content_files/files/41377062345.pdf - 24 Aug 2026 - unknown ·
https://www.le-nora.com/ - 24 Aug 2026 - unknown ·
https://alompar.hu/uploads/content_files/files/41377062345.pdf - 24 Aug 2026 - unknown ·
https://www.kh.de/en/
Questions about www.facebook.com
- Is www.facebook.com safe?
- The scan of www.facebook.com on 21 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.
- What malware is associated with www.facebook.com?
- 127 analysed samples communicate with this URL, including Fileinfector.
- How was www.facebook.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.facebook.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan