Security Report: email-nsd-gov-pk-2fa.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/14920735-3d0e-4180-9da0-1f374dfed08e Domain and IP registration (RDAP)/api/v1/rdap/14920735-3d0e-4180-9da0-1f374dfed08e Certificate Transparency/api/v1/ct/email-nsd-gov-pk-2fa.pages.dev How often this domain was scanned/api/v1/domain/stats/email-nsd-gov-pk-2fa.pages.dev Scan history for this domain/api/v1/domain/history/email-nsd-gov-pk-2fa.pages.dev?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 243 HTTP transactions. The main domain is email-nsd-gov-pk-2fa.pages.dev and was registered 6 years ago.

Submitted URL: https://email-nsd-gov-pk-2fa.pages.dev/error.html

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Fake Zimbra 'Sign In' page on a free pages.dev subdomain mimicking a government email/2FA portal, impersonating both Zimbra and a third-party Cyber-Team Document Scan. Avoid entering any credentials.

Risk Factors (5)

Impersonation of Zimbra and of a third-party 'Cyber Team / Document Scan' entity on a non-official domain

Deceptive hostname embedding a government-style identifier (nsd-gov-pk) plus '2fa'

Unranked domain with no reputation on an instant-publish hosting platform

Inline encoding/decoding JavaScript on a page claiming to be an authentication portal

Domain age information unavailable

Details

Page Title

Zimbra Web Client - Sign In

Scan Type

public

Favicon Hash

MMH3: -727578617

MD5: 2c6d913144867761b44e39ee9bde3e73

Domain Name Analysis

You're looking at domain 'email-nsd-gov-pk-2fa.pages.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'email-nsd-gov-pk-2fa'. The second-level label 'pages' is 5 characters long split between two vowels and three consonants. Splitting it apart reveals one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.31s

Total Load Time

283 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:193 chars

Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
122	172.66.45.29Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
121	172.66.46.227Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
243	2	-	-

Detected Technologies3

HTTP/3

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B4C150E36A971214F853E2682BE797086235C047E60EC9383FCD6399CF8565999B33CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nBrOCevvyGTC+u8P4BsGWzzR4JTiYWu4gzTYgxtKlqe:BrtevvyGTC+5P4BzWXSJTXe8M

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6075:YTgsQQJBBwQAliRBAYFUoABEoK7IgABBADAAQQBvCiTKICAGUCCAALQkAAQABEwBSBaBgTgAJMJwGMIFgg4AACxTwKACqUIB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: email-nsd-gov-pk-2fa.pages.dev