Security Report: sp30ct-turev-biz-qalun-mexok.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2be55090-6ae2-4b4c-87be-7f0f7bb72704 Domain and IP registration (RDAP)/api/v1/rdap/2be55090-6ae2-4b4c-87be-7f0f7bb72704How often this domain was scanned/api/v1/domain/stats/sp30ct-turev-biz-qalun-mexok.pages.dev Scan history for this domain/api/v1/domain/history/sp30ct-turev-biz-qalun-mexok.pages.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://sp30ct-turev-biz-qalun-mexok.pages.dev/appeals/submit-appeal-form/return

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Confirmed Meta 'Page Appeal' phishing kit on a disposable pages.dev subdomain. Brand impersonation plus two analyst-vetted kit fingerprints; the confirmation page is part of a credential-harvesting funnel — do not enter any account details.

Risk Factors (6)

Known malicious phishing kit (Meta Page Appeal, meta-page-appeal family) confirmed by two independent fingerprints

Impersonation of Meta/Facebook brand on an unrelated pages.dev subdomain

Randomized disposable-hosting hostname with no reputation and no attribution to Meta

Cloaking architecture: external IP-lookup domain (get.geojs.io) observed in DNS/TLS traffic, consistent with serving different content to scanners vs. real users

'Thank you for submitting your appeal' social-engineering workflow mimicking a Meta account-restriction appeal process

Page text instructs victims not to share a reference code and warns of account suspension — pressure tactics typical of phishing funnels

Domain age information unavailable

Details

Page Title

Meta for Business | Page Appeal

Scan Type

public

Domain Name Analysis

Domain 'sp30ct-turev-biz-qalun-mexok.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'sp30ct-turev-biz-qalun-mexok'. The core label 'pages' covers 5 characters with two vowels and 3 consonants. Splitting it apart reveals one word: pages. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Another page of the site in scan c770e595

Page Load Overview

2.25s

Total Load Time

466 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,361 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network83% confidence

Type: static

Method: ml+structural

All Detected Categories

social media network

83%

technology software

64%

corporate business

36%

documentation technical

31%

e-commerce shopping

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.70.233Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.0.100Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	4	-	-