www.facebook.com - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned www.facebook.com and returned a benign verdict (score 0), categorised as credential-harvest. The page resolved to 157.240.8.35 on Facebook, Inc. in AU. The domain was registered 10735 days ago through RegistrarSafe, LLC. 5 domains and 2 IPs were contacted. 78 malware samples communicate with this URL. The request followed 1 redirect before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: benign (score 0) · Confidence 12%
- Scanned URL:
https://connect.facebook.net/ - Domain: www.facebook.com · IP: 157.240.8.35 · AS32934 · AU
- Page title: Facebook
- HTTP status: 200 · text/html; charset="utf-8"
- Registrar: RegistrarSafe, LLC · domain age 10735 days · created 1997-03-29
- TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Aug 27 23: · subject C=US, ST=California, L=Menlo Park, O=Meta Platforms, Inc., CN=*.facebook.com
- Evidenced operator: Meta Platforms, Inc.
- Scan tier: fast · observed 2026-08-19 19:46:42 UTC
Redirect chain
https://connect.facebook.net/https://www.facebook.com/
Malware communicating with this URL (78)
These samples were observed contacting or being served from www.facebook.com. Each links to its full analysis.
- fbevents.js - referenced ·
5d8d4bb1186f740b55e9d632b68acc0b· first seen 2026-08-19 - 3c82da6cc4cc2feb20242656e6e0eda087b38ff6d2532ac7e0afe671969817c1 - referenced ·
3c82da6cc4cc2feb20242656e6e0eda0· first seen 2026-08-19 - 984772ded921b432769d1690bf3e0d80909da241f902ed5d9e2ee91038ce6d5a - referenced ·
984772ded921b432769d1690bf3e0d80· first seen 2026-08-19 - e342d1a5ca701c959295444750b46a8420bc0f617cf941e41485545d512dc052 - referenced ·
e342d1a5ca701c959295444750b46a84· first seen 2026-08-19 - ffe73f4359a037ecf75f93ba8b73971e116ac939d3cc64e484b44b8b8d53be1f - referenced ·
ffe73f4359a037ecf75f93ba8b73971e· first seen 2026-08-19 - 7c288b1214c057ec81f1b4d2f592add488049bcf23dfeb407e70aedc359b75fb - referenced ·
7c288b1214c057ec81f1b4d2f592add4· first seen 2026-08-19 - 60a8a5d0242d70cfd70be8248d655934ba3a1ee9b2e2c4c492e64d5b6d83aa7b - referenced ·
60a8a5d0242d70cfd70be8248d655934· first seen 2026-08-19 - caf60a1de4f988a3d7bec90a2e8c0075d0a501d285154dd268fd1b4cbd4cadb7 - referenced ·
caf60a1de4f988a3d7bec90a2e8c0075· first seen 2026-08-17 - d27dd342cde9b0bf2733cc4161453b5011b10b262d86b03a8331b8c90ec40e77 - referenced ·
d27dd342cde9b0bf2733cc4161453b50· first seen 2026-08-17 - 6ad3c90a7486d34b88fc80f912bcadde049ccf7c440072051b50e5214292de59 - referenced ·
6ad3c90a7486d34b88fc80f912bcadde· first seen 2026-08-17 - 266d130c395ff3a97e979971f85e65048802a43388ffc9c1bd597cbb9b6c3f72 - referenced ·
266d130c395ff3a97e979971f85e6504· first seen 2026-08-17 - 2272cadcfb2d8793aad8ddf4fe194bc81edff21235b789a5dc94deb97d8cf694 - referenced ·
2272cadcfb2d8793aad8ddf4fe194bc8· first seen 2026-08-17 - d929fdbe25caf066239051094963411278a02873584cd9f85b9455414e270a81 - referenced ·
d929fdbe25caf0662390510949634112· first seen 2026-08-17 - 11292f307419911caa409dde4a8dfed7d9bbf62288fe461c5e69b0663424df38 - referenced ·
11292f307419911caa409dde4a8dfed7· first seen 2026-08-17 - 11b720edf0766eab7626ca6804b3b2ab325f409128258adea68813d596e98992 - referenced ·
11b720edf0766eab7626ca6804b3b2ab· first seen 2026-08-16
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Credential-harvesting form
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 157.240.8.35 - AS32934 Facebook, Inc. (Australia)
- 157.240.8.23 - AS32934 Facebook, Inc. (Australia)
Observed indicators
- www.facebook.com
- static.xx.fbcdn.net
- en-gb.facebook.com
- l.facebook.com
- developers.facebook.com
- 157.240.8.35
- 157.240.8.23
- https://www.facebook.com/
- https://static.xx.fbcdn.net/rsrc.php/y1/r/ay1hV6OlegS.ico
- https://en-gb.facebook.com/
- https://static.xx.fbcdn.net/rsrc.php/v5/yX/l/0,cross/jXOsCncvVyCEU4T_aHxuwqxgo-3469oiGT9DWDYPz6DhfgQe914iiBfD-GevAmvU9KONMKn3YhINqU49pVNahkCkeiF2w9Hlit1.css
- https://www.facebook.com/recover/initiate/?privacy_mutation_token=eyJ0eXBlIjo1LCJjcmVhdGlvbl90aW1lIjoxNzg3MTY4ODAzfQ%3D%3D&ars=facebook_login
- https://www.facebook.com/reg/?entry_point=login&next=
- https://www.facebook.com/reg/
- https://www.facebook.com/login/
- https://l.facebook.com/l.php?u=https%3A%2F%2Fmessenger.com%2F&h=AUBsIy7PbpdLg6e1zwfSk4nTwfLlrSVK3NjkD2N3er5Ae20vCb7UB7voTfPHPqvF-PJL4ueXBsuJRXSKaKq-AJt5FtWlI3PO61wzDuJf4_aVmpwuvJ4OyIDZ6ePZ0p9JvWAmCWYVYMg3K3h6
- https://www.facebook.com/lite/
- https://www.facebook.com/watch/
- https://l.facebook.com/l.php?u=https%3A%2F%2Fabout.meta.com%2Ftechnologies%2Fmeta-pay&h=AUBsIy7PbpdLg6e1zwfSk4nTwfLlrSVK3NjkD2N3er5Ae20vCb7UB7voTfPHPqvF-PJL4ueXBsuJRXSKaKq-AJt5FtWlI3PO61wzDuJf4_aVmpwuvJ4OyIDZ6ePZ0p9JvWAmCWYVYMg3K3h6
- https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.meta.com%2F&h=AUBsIy7PbpdLg6e1zwfSk4nTwfLlrSVK3NjkD2N3er5Ae20vCb7UB7voTfPHPqvF-PJL4ueXBsuJRXSKaKq-AJt5FtWlI3PO61wzDuJf4_aVmpwuvJ4OyIDZ6ePZ0p9JvWAmCWYVYMg3K3h6
Other scans of www.facebook.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://latincanada.ca/argentina-vencio-2-1-nigeria-y-se-clasifico-octavos-con-la-derrota-de-islandi - 24 Aug 2026 - unknown ·
https://s.ai/ - 24 Aug 2026 - unknown ·
https://climatechangeconferences.com/ - 24 Aug 2026 - suspicious ·
https://seeandhearbetter.ie/img/shop//contents/97369378376.pdf - 24 Aug 2026 - unknown ·
http://lolmaner.blogspot.com/2013/04/how-to-make-guy-your-boyfriend.html - 24 Aug 2026 - unknown ·
https://au.norton.com/ - 24 Aug 2026 - unknown ·
https://au.norton.com/ - 24 Aug 2026 - unknown ·
http://phimhddd.blogspot.com/search/label/M%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%83%C3%83%C2 - 24 Aug 2026 - unknown ·
https://hypoteky-reality-zilina.sk/novy/ckfinder/userfiles/files/zudagoxakejeletiramuketez.pdf - 24 Aug 2026 - unknown ·
https://www.anpheatingandac.com/nbloom/fckuploads/file/jinulekip.pdf
Questions about www.facebook.com
- Is www.facebook.com safe?
- The scan of www.facebook.com on 19 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.
- What malware is associated with www.facebook.com?
- 78 analysed samples communicate with this URL.
- How was www.facebook.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.facebook.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan