PhishingReviewed
Fake Meta 'Page Appeal' site on chronos-reprieve-658a.s2506015.workers.dev steals Facebook logins and 2FA codes
Website scanning service ScanMalware posted on X on 12 November 2026 that chronos-reprieve-658a.s2506015[.]workers[.]dev is a confirmed scam. Its scan report describes a phishing kit imitating Meta's Privacy Center an…
- chronos-reprieve-658a.s2506015.workers.dev
- Path /analysis_center/; Cloudflare workers.dev subdomain; exfiltration via Telegram bot
- Phishing kit exfiltrating to a Telegram bot (12 Nov 2026)
Reported Nov 12, 20261 report