Security Report: sp30ct-qorik-biz-vanel-zumad.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0e04cf63-36a3-4c35-8c01-d3878fdcd19b Domain and IP registration (RDAP)/api/v1/rdap/0e04cf63-36a3-4c35-8c01-d3878fdcd19bHow often this domain was scanned/api/v1/domain/stats/sp30ct-qorik-biz-vanel-zumad.pages.dev Scan history for this domain/api/v1/domain/history/sp30ct-qorik-biz-vanel-zumad.pages.dev?limit=15

This website contacted 6 IPs in 2 countries across 4 domains to perform 10 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://sp30ct-qorik-biz-vanel-zumad.pages.dev/send_appeal_request

Effective URL:

https://sp30ct-qorik-biz-vanel-zumad.pages.dev/send_appeal_request

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Verified Meta 'Page Appeal' phishing kit hosted on a disposable pages.dev subdomain, impersonating Meta's business appeal flow with 48-hour account-loss pressure and scanner cloaking. Do not enter any appeal code or credentials.

Risk Factors (6)

Confirmed Meta brand impersonation on a non-Meta domain (pages.dev)

Matches two independently vetted 'Meta Page Appeal' phishing kit fingerprints

Kit employs scanner cloaking / decoy routing to evade detection

Urgency and account-loss threats (48 hours, permanent disablement) to force compliance

Disposable shared-hosting subdomain, unranked with no reputation

External calls to graph.facebook.com and static.xx.fbcdn.net used to lend visual/technical authenticity

Domain age information unavailable

Details

Page Title

Meta for Business | Page Appeal

Scan Type

public

Favicon Hash

MMH3: 1007520286

MD5: 5e1f5addac24d740cec0c41d5f99cd20

Domain Name Analysis

You're looking at domain 'sp30ct-qorik-biz-vanel-zumad.pages.dev' on the developer-focused generic top-level domain (.dev) with subdomain 'sp30ct-qorik-biz-vanel-zumad'. The registrable portion 'pages' spans 5 characters holding 2 vowels versus 3 consonants. Tokenizing the label suggests 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Another page of the site in scan da936f79

Page Load Overview

2.78s

Total Load Time

220 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,362 chars

Detector Agreement:80%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
1	157.240.0.13Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
1	104.26.1.100Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.70.233Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	6	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C962F5F1099827BD828F83A861227B88D2AEB16FF6774014F6AD1BE41FC3C91D957584

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:gtkqR9dS1C4WemCDhakDi8On/mOsQVOZ0pugIqnr5RmA2QPWhaHQQtiW9Y:gthS1MqDfDJCVdpMqnru8Ohw13Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14828:JYQCMJAAsDAYjTYgAAAhXgQ4SEIRaiEgsQIBjUwIIPwwS0i8ZIKAkIAUhADwCOQjGxTsoQSAwEKCBGAQgKUpsABpQgAAVr2J

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f8fe3fff3e3efe3

Perceptual Hash:e4983823c79367c7

Difference Hash:3a362eacc6cec8cf

Wavelet Hash:0f038383f7e1e6e1

Color Hash:#35d22d

Other Hashes

Crop Resistant:3a362eacc6cec8cf,80522dd44444a304,000020b2b2320c10

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: sp30ct-qorik-biz-vanel-zumad.pages.dev