Security Report: havix-noral-biz-qeril-moxin-nd12kt12.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bd20da87-57be-4534-ba8a-f8c877ca73d5 Domain and IP registration (RDAP)/api/v1/rdap/bd20da87-57be-4534-ba8a-f8c877ca73d5How often this domain was scanned/api/v1/domain/stats/havix-noral-biz-qeril-moxin-nd12kt12.pages.dev Scan history for this domain/api/v1/domain/history/havix-noral-biz-qeril-moxin-nd12kt12.pages.dev?limit=15

This website contacted 5 IPs in 1 country across 3 domains to perform 8 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://havix-noral-biz-qeril-moxin-nd12kt12.pages.dev/appeals/submit-appeal-form/return/appeals/submit-appeal-form/return

Effective URL:

https://havix-noral-biz-qeril-moxin-nd12kt12.pages.dev/appeals/submit-...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Confirmed Meta 'Page Appeal' phishing kit on a pages.dev subdomain, flagged by Safe Browsing for social engineering and matched to an analyst-vetted credential-phishing kit with cloaking.

Risk Factors (5)

Google Safe Browsing social-engineering detection

Known malicious phishing kit identified by analyst-vetted kit roster

Impersonation of Meta/Facebook branding on an unrelated pages.dev subdomain

Cloaking behavior designed to show benign content to scanners and a lure to victims

Disposable free-hosting subdomain with no attributable creation date

Domain age information unavailable

Details

Page Title

Meta for Business | Page Appeal

Scan Type

public

Favicon Hash

MMH3: 1007520286

MD5: 5e1f5addac24d740cec0c41d5f99cd20

Domain Name Analysis

You're looking at domain 'havix-noral-biz-qeril-moxin-nd12kt12.pages.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'havix-noral-biz-qeril-moxin-nd12kt12'. Its registrable label 'pages' stretches across 5 characters containing two vowels alongside three consonants. It segments into 1 word: pages. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.42s

Total Load Time

212 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:78 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software67% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

67%

corporate business

45%

social media network

35%

documentation technical

28%

finance banking

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	172.66.47.107Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.66.44.149Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.21.27.54Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.0.100Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.1.100Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	5	-	-

Detected Technologies2

SmtpJS

20%

React

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18C111423CC51C08D93B7529BEDB2F15DC545BC0DE6629C5071E955D64BD0BE88923401

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:n056tC3spXoGa3WC+qVqeoC75j21tMUJUwLVI:n3kspX++leoC7R21tpTy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:947:AAAAIAAAgAAAABQAAABAAAAgAAIEIAMAAAAQACAIIIAAAECAAAAACAIAAABAAAAAABAAAAAAAAAAAEAAAAAAAAAoAAAAgAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: havix-noral-biz-qeril-moxin-nd12kt12.pages.dev