Security Scan Report: norquro-gld-lentora-r2x9hp67.pages.dev

Redirected to:
https://norquro-gld-lentora-r2x9hp67.pages.dev/send_appeal_request
Site favicon
Submitted: Jul 2, 2026, 12:45:37 PMCompleted: Jul 2, 2026, 12:49:14 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is norquro-gld-lentora-r2x9hp67.pages.dev and was registered NaN years ago.

Submitted URL: https://norquro-gld-lentora-r2x9hp67.pages.dev/thn-yjm-uio-lkh?welcome=107508610998994&stt=107508610998994&name_stt=Danko%20Education

Effective URL: https://norquro-gld-lentora-r2x9hp67.pages.dev/send_appeal_requestRedirected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Page uses Meta branding on an unknown subdomain and matches a known phishing kit, indicating a high‑risk brand‑impersonation scam.

Risk Factors
Brand impersonation
Analyst‑vetted malicious kit detection
Unranked / unknown‑age subdomain on a hosting platform
High‑confidence phishing kit targeting Meta users
Domain age information unavailable

Details

Page Title

Meta for Business | Page Appeal

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

social media network

(88%)

Domain Information

Within the developer-focused generic top-level domain (.dev), 'norquro-gld-lentora-r2x9hp67.pages.dev' is registered; it also runs on subdomain 'norquro-gld-lentora-r2x9hp67'. Its registrable label 'pages' stretches across 5 characters containing 2 vowels alongside three consonants. It segments into one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://norquro-gld-lentora-r2x9hp67.pages.dev/thn-yjm-uio-lkh?welcome=107508610998994&stt=107508610998994&name_stt=Danko%20Education

Page Load Overview

1.67s
Total Load Time
7
HTTP Requests
2
Domains
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,776 chars
Detector Agreement:75%

Website Classification

Primary Category

social media network88% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
88%
technology software
59%
documentation technical
46%
government public service
44%
corporate business
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
71--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ABA21AB065B423AE579783F6655B63E821AE651FF2638050F6FC02B947CACD2FD23580

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:gAoS10lNvEiVDJVAFZnuyr1nmyS/0HYU862M7x/+ATcf2W4+MaDv:gAmlNvEiVDTmuy5nmyS/+ajIcf2W4+5j

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22260:gnIUZOgEHBDyBl1HAkX5AyoiRiNeIcAigKyABphBjFYBAACElGKBZYAQwG4OjQGBQQIBAgohTg3FCojYASCo5ImamgRKkocA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:83c3dfdfefe7efe3
Perceptual Hash:a7656593989a9a9a
Difference Hash:0a0e2c280ccecd4e
Wavelet Hash:0f03030f07e3efe3
Color Hash:#1f9342

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data