Security Report: blue-leaf-5cd6.hgthpisoa-0f6.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c18a8c5f-d813-4c97-a9dc-8d2d96d0ef2c Domain and IP registration (RDAP)/api/v1/rdap/c18a8c5f-d813-4c97-a9dc-8d2d96d0ef2c Certificate Transparency/api/v1/ct/blue-leaf-5cd6.hgthpisoa-0f6.workers.dev How often this domain was scanned/api/v1/domain/stats/blue-leaf-5cd6.hgthpisoa-0f6.workers.dev Scan history for this domain/api/v1/domain/history/blue-leaf-5cd6.hgthpisoa-0f6.workers.dev?limit=15

This website contacted 8 IPs in 2 countries across 4 domains to perform 23 HTTP transactions. The main domain is blue-leaf-5cd6.hgthpisoa-0f6.workers.dev and was registered 15 years ago.

Submitted URL: https://blue-leaf-5cd6.hgthpisoa-0f6.workers.dev/meta.help

Effective URL:

https://blue-leaf-5cd6.hgthpisoa-0f6.workers.dev/facebook.com-10272755...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Fake Meta/Facebook 'Page Appeal' phishing page on an unrelated workers.dev subdomain, harvesting password, email, phone and two-factor codes under a false account-restriction warning.

Risk Factors (5)

Impersonation of Meta/Facebook brand on a domain that is not Meta's

Credential collection (password, email, phone, 2FA code) via an appeal form

Fear/urgency social engineering ('temporarily restricted', 'enforcement actions pending')

Hosted on free shared workers.dev subdomain with unknown creation date

Unranked domain with URL paths crafted to look like Meta/Facebook properties

Domain age information unavailable

Details

Page Title

Meta for Business - Page Appeal

Scan Type

public

Favicon Hash

MMH3: 117608275

MD5: 6701a4ba0b931af579be35b93631da04

Domain Name Analysis

The domain name 'blue-leaf-5cd6.hgthpisoa-0f6.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'blue-leaf-5cd6.hgthpisoa-0f6'. Count 7 characters in 'workers' with 2 vowels and five consonants. It segments into one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.82s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:10,949 chars

Detector Agreement:75%

Website Classification

Primary Category

unknown0% confidence

Type: webapp

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	104.21.34.161Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.13.95Google · CDN	United States	AS15169Google LLC
2	195.181.175.41Datacamp · CDN	Frankfurt am Main, Hesse, Germany	AS60068Datacamp Limited
2	172.67.75.166Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.163.16Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	37.19.194.81Datacamp · CDN	Frankfurt am Main, Hesse, Germany	AS60068Datacamp Limited
2	195.181.170.19Datacamp · CDN	Frankfurt am Main, Hesse, Germany	AS60068Datacamp Limited
2	212.102.56.179Datacamp · CDN	Frankfurt am Main, Hesse, Germany	AS60068Datacamp Limited
23	8	-	-