Security Report: abgh1-15.eaeqleeparndnwt.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fe2b4161-5f2c-4526-9359-4197e9c070a4 Domain and IP registration (RDAP)/api/v1/rdap/fe2b4161-5f2c-4526-9359-4197e9c070a4How often this domain was scanned/api/v1/domain/stats/abgh1-15.eaeqleeparndnwt.workers.dev Scan history for this domain/api/v1/domain/history/abgh1-15.eaeqleeparndnwt.workers.dev?limit=15

This website contacted 9 IPs in 2 countries across 4 domains to perform 23 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://abgh1-15.eaeqleeparndnwt.workers.dev/meta.help

Effective URL:

https://abgh1-15.eaeqleeparndnwt.workers.dev/facebook.com-1027275509

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Phishing page impersonating Meta on a workers.dev subdomain, using an account-restriction scare to harvest Facebook password, contact details and 2FA codes, with Telegram-bot exfiltration. Safe Browsing flags social engineering.

Risk Factors (5)

Brand impersonation of Meta on a non-Meta domain

Password and 2FA/authentication-code collection under an account-restriction pretext

Telegram bot token in page script enabling credential exfiltration

Free shared-hosting subdomain with unknown creation date

Google Safe Browsing social engineering detection

Domain age information unavailable

Details

Page Title

Meta for Business - Page Appeal

Scan Type

public

Favicon Hash

MMH3: 117608275

MD5: 6701a4ba0b931af579be35b93631da04

Domain Name Analysis

You're looking at domain 'abgh1-15.eaeqleeparndnwt.workers.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'abgh1-15.eaeqleeparndnwt'. The core label 'workers' covers 7 characters containing 2 vowels alongside five consonants. It segments into 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

00 Meta Your Page has been temporarily restricted due to potential Privacy Center policy violations «Enforcement actions are pending on your account until necessary corrections are made. Your page m...

Page Load Overview

0.38s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:10,948 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: webapp

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.127.95Google · CDN	United States	AS15169Google LLC
2	195.181.175.40Datacamp · CDN	Frankfurt am Main, Hesse, Germany	AS60068Datacamp Limited
2	172.67.75.166Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.95Google · CDN	United States	AS15169Google LLC
2	79.127.211.89Datacamp · CDN	Frankfurt am Main, Hesse, Germany	AS60068Datacamp Limited
2	79.127.216.203Datacamp · CDN	Frankfurt am Main, Hesse, Germany	AS60068Datacamp Limited
1	104.26.4.15Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	9	-	-