Security Scan Report: sp30ct-vemix-biz-zanik-koval.pages.dev

Redirected to:
https://sp30ct-vemix-biz-zanik-koval.pages.dev/send_appeal_request
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 5 domains to perform 16 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://sp30ct-vemix-biz-zanik-koval.pages.dev/rtyu-iopj-qewr-thjm?welcome=293604847644012&idnp=293604847644012&name_idnp=Appleton%2C%20Hatton%2C%20Stretton%20%26%20Walton%20Focus

Effective URL:
https://sp30ct-vemix-biz-zanik-koval.pages.dev/send_appeal_request
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Confirmed Meta 'Page Appeal' phishing kit on a free pages.dev subdomain — impersonates Meta's business/privacy appeals process with a 48-hour account-threat lure. Do not interact or submit any appeal code.

Risk Factors (5)
Analyst-vetted known phishing kit (Meta Page Appeal) confirmed twice by JS fingerprint
Impersonation of Meta's brand and privacy/appeals workflow on a non-Meta domain
Urgency and account-loss threats used to pressure victims (48-hour deadline)
Free disposable hosting subdomain on pages.dev with unknown age
No legitimate business identity — legitimacy score 5/100
Domain age information unavailable

Details

Page Title

Meta for Business | Page Appeal

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'sp30ct-vemix-biz-zanik-koval.pages.dev' is registered and includes subdomain 'sp30ct-vemix-biz-zanik-koval'. The second-level label 'pages' is 5 characters long split between 2 vowels and three consonants. It segments into one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sp30ct-vemix-biz-zanik-koval.pages.dev/rtyu-iopj-qewr-thjm?welcome=293604847644012&idnp=293604847644012&name_idnp=Appleton%2C%20Hatton%2C%20Stretton%20%26%20Walton%20Focus

Page Load Overview

0.80s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,460 chars
Detector Agreement:80%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.1.100Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.70.233Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2157.240.0.13Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
257.144.248.128Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
167--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1044165314402D56D92A3A6F1BDB1BBADA5AEE70CEF6B9C40B6EC57C94BC0E64CC16410

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:T3kspX++SkC7R21tpBXCH4ieKXomfvaY4sgY4McY4S:TUsJ+tkC7RuCYiRXom34y4MJ4S

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2132:AAAEACAGIACAUBBAACgAAiCAQAAKQgAAACgBAA4IAAYgAQIJAgAAACAABACAAAAAAAQAgAAZAAAACAQADEAAAKAgAARYAARC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e3f3fffff0f0f0f0
Perceptual Hash:ecb96d64b1b36248
Difference Hash:0307033824242424
Wavelet Hash:c1c1e1fff0f0d0d0
Color Hash:#2d8649

Other Hashes

Crop Resistant:0307033824242424

Scan History

Scan history not available

Unable to load historical scan data