Security Report: noctis-sigil-d01a.s2506046.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4a87c1f4-1c04-4188-ba4d-7faf3b5a9be6 Domain and IP registration (RDAP)/api/v1/rdap/4a87c1f4-1c04-4188-ba4d-7faf3b5a9be6How often this domain was scanned/api/v1/domain/stats/noctis-sigil-d01a.s2506046.workers.dev Scan history for this domain/api/v1/domain/history/noctis-sigil-d01a.s2506046.workers.dev?limit=15

This website contacted 9 IPs in 1 country across 5 domains to perform 24 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://noctis-sigil-d01a.s2506046.workers.dev/analysis_center/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Phishing page impersonating Meta's business appeal process on a workers.dev subdomain, harvesting passwords, emails and 2FA codes with an embedded Telegram bot exfiltration channel.

Risk Factors (5)

Brand impersonation of Meta on a non-Meta domain

Password, email and two-factor authentication code collection

Telegram bot token embedded in page script for exfiltration

Deceptive account-deletion warning used as coercion

Free hosting-platform subdomain with unknown creation date

Domain age information unavailable

Details

Page Title

Meta for Business - Page Appeal

Scan Type

public

Favicon Hash

MMH3: 117608275

MD5: 6701a4ba0b931af579be35b93631da04

Domain Name Analysis

The domain name 'noctis-sigil-d01a.s2506046.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'noctis-sigil-d01a.s2506046'. Count 7 characters in 'workers' split between two vowels and five consonants. Splitting it apart reveals 1 word: workers. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Meta Privacy Center @ Privacy Center Home Page Q Search @ Privacy Policy Vv @ Other rules and articles Vv $3 Settings Vv We have scheduled the deletion of your ad account and pages. We detected u...

Page Load Overview

0.49s

Total Load Time

4.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:16,052 chars

Detector Agreement:100%

All Detected Languages

🇺🇸en(79%)🇫🇷fr(9%)🏳️so(2%)🇰🇪sw(2%)🇵🇹pt(1%)🇪🇸es(1%)🇮🇹it(1%)🇸🇪sv(1%)🇨🇿cs(1%)🇲🇰mk(1%)🇳🇱nl(1%)🇸🇮sl(1%)

Website Classification

Primary Category

social media network53% confidence

Type: webapp

Method: ml+structural

All Detected Categories

social media network

53%

corporate business

41%

technology software

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.127.95Google · CDN	United States	AS15169Google LLC
2	151.101.129.229Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.5.15Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	151.101.65.229Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.75.166Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
24	9	-	-