English

_gcl_au

_ga_R7Q79H6SCW

You're looking at domain 'www.nzlotteries.co.nz' on the New Zealand country-code top-level domain (.co.nz); it also runs on subdomain 'www'. The second-level label 'nzlotteries' is 11 characters long with 4 vowels and 7 consonants. Tokenizing the label suggests 2 words: nz, lotteries. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

html/69/7d/697d9d0c-84f0-405e-a89e-066d72f833be.html.gz

default-src 'self';  style-src 'self' 'unsafe-inline' https://*.inside-graph.com https://fonts.googleapis.com https://*.typekit.net;  media-src 'self';  object-src 'none';  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.queue-it.net https://*.krxd.net https://bam.nr-data.net https://*.adsrvr.org https://*.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://pixel.mathtag.com https://*.visualwebsiteoptimizer.com https://*.analytics.yahoo.com https://www.google-analytics.com https://s.yimg.com https://js-agent.newrelic.com https://*.inside-graph.com https://staticcdn.co.nz;  img-src 'self' data: https://*.krxd.net https://*.mylotto.co.nz https://*.inside-graph.com https://*.visualwebsiteoptimizer.com https://www.facebook.com https://*.google-analytics.com https://*.googletagmanager.com https://www.google.com https://www.google.co.nz https://staticcdn.co.nz https://shielded.co.nz https://*.adsrvr.org https://*.doubleclick.net;  connect-src 'self' https://*.mylotto.co.nz https://misnwhpjb8.execute-api.ap-southeast-2.amazonaws.com https://bam.nr-data.net wss://*.inside-graph.com https://*.inside-graph.com https://*.google-analytics.com https://*.doubleclick.net https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com;  frame-src 'self' https://cornerstonecx.co.nz https://*.krxd.net https://*.adsrvr.org https://*.windcave.com https://*.paymentexpress.com https://*.doubleclick.net https://*.mathtag.com https://*.finrings.com https://*.youtube.com https://*.vimeo.com https://*.wagerworks.com https://*.nz.rgsgames.com https://*.az4.rgsgames.com https://*.i-w-g.com https://*.mylotto.co.nz https://*.flashtalking.com https://staticcdn.co.nz https://*.rgseinst.com https://*.sgch.com;  font-src 'self' data: https://*.mylotto.co.nz https://mylotto.co.nz https://*.inside-graph.com https://fonts.gstatic.com

default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://staticcdn.co.nz/embed/embed.js https://*.queue-it.net https://*.krxd.net https://bam.nr-data.net https://*.adsrvr.org https://www.google-analytics.com https://*.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://pixel.mathtag.com https://*.visualwebsiteoptimizer.com https://*.analytics.yahoo.com https://s.yimg.com https://js-agent.newrelic.com https://cdn.evgnet.com https://cdn.evergage.com; img-src 'self' data: https://staticcdn.co.nz/embed/close.png https://shielded.co.nz https://*.krxd.net https://*.mylotto.co.nz https://*.visualwebsiteoptimizer.com https://www.facebook.com https://*.google-analytics.com https://www.google.com https://www.google.co.nz https://*.googletagmanager.com; connect-src 'self' https://*.mylotto.co.nz https://bam.nr-data.net wss://*.inside-graph.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.doubleclick.net https://h8bwvb3d0d.execute-api.ap-southeast-2.amazonaws.com; frame-src 'self' https://staticcdn.co.nz/ https://*.krxd.net https://*.adsrvr.org https://*.scigames.at https://*.windcave.com https://*.paymentexpress.com https://*.doubleclick.net https://*.mathtag.com https://*.finrings.com https://*.youtube.com https://*.vimeo.com https://*.wagerworks.com https://*.finrings.com https://*.mylotto.co.nz https://*.i-w-g.com https://cornerstonecx.co.nz https://*.instantrgs.com https://*.sideplay.com https://*.scigames.nz https://*.sgch.com https://*.lotteryplus.com; font-src 'self' data: https://*.mylotto.co.nz https://mylotto.co.nz https://fonts.gstatic.com

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0

default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-1qhEc5mu';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-wr389VBK';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net *.whatsapp.com *.whatsapp.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-LbXJyP3n' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com *.instagram.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

TTD Universal Pixel

TTD Universal Pixel Realtime Fallback

ef85f90e4020f197a1d5d79af0f9d2aed2028a571b01d454d97b0eaf2ba9fc6f

c9ef76894f83038900b017d231aeb00dcfeb831091b139f9a1c9cc6b8645d4f0

e0b4797269a5c85236fe3f3ca1a87588c540a376676517e15b551a9e562e3b37

8287a2ca2061f494f28cc7335834e54a60963a4c5e47ab977141b0e3870aa193

6bf65b68fad04d66525899571a0b1c88165126ca1531da6f6d58a43499cfff13

850f7cdf2b32af2fa94589348e8ac22a46f4b63131b21757bb0d5b1a6a47c581

bf1daf81c627d44fb3b3d83835d08f3ad798b6d24fe1196fee1cd753cfb824c9

71c5650a06e2d3b90c49d0df710e9bdc187a9bf77fb5bed1ba88a2d587bcb65c

ac138a330a3aa0633675b707545ee2d72c411698ce4da3922eda799e2982f65a

b06b01285a3ef0a782a84a7c4e9e5d2dd4af8c9ad58d77711024f445c4d0a135

dffd3dc2f3d223846d2c6247cc410383a31fb2a994ca2d0fc3bb41a09bf8c0ff

e8d81cd3a70edf36d8e64e444ad388615dfec264976359c05c5f1f49c5991068

6ac927bf968f13f78b024de0f986ca3a18d95852aee8423f748d252fca5c5c96

2538590b87a5eb44bb27a7a5039451a5606d80c587cb361de40ed4193c9a552f

4f083a65bfc0b707f3da26e9c584460134b4a68073fc39ab2841d2c9edddc950

686063d73d95eb1afc85ea3e02f652a87c1bd593db18b06192b231e4a0553a6d

759c3f86b286639e13ee64e4176eefa01862a8df4f3eb5d7604200d24d4737a6

5bfa4cb92e75bdcc6f1aa7e7b13ea4ee8222cf5a88cad1c4ce924e3fdf8c33be

d74056ed9d9f2507dd2a5890667df2e2abeb22eaa50317e53144a71ef275e094

b36b2ddd1617ff0e0838dd5b0abeba82e11ab3423d6ff717ffaeacb319b2ed47

64cc50b33e0b426fc6e1310f3202416a179328fb934743b3c71c4c7f5571dd0c

21f5b2e5818b08f300d49cfd8ec52aee422a970d11cd49898d2bb8a96da45b19

b68876373dc665d293ca1569422b7b2089757edbaddcffa7d4a6e135036ecec4

Download on the App Store (opens in new window)

Download on the Play Store (opens in new window)

World Lottery Association (opens in new window)

The official Lotto NZ site. Buy Lotto, Powerball, Keno, Bullseye tickets and play Instant Kiwi games online. Plus, check the latest Lotto results.

description

keywords

width=device-width,height=device-height,initial-scale=1,viewport-fit=cover,user-scalable=yes

viewport

format-detection

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

mylotto.co.nz

nzlotteries.co.nz

Operations

Facebook, Inc.

THEFA-3

!function(t,e,i,r){if(!window.navigator.webdriver){var a=t.createElement("script");a.setAttribute("type","text/javascript"),a.setAttribute("src","//static.queue-it.net/script/queueclient.min.js"),t.head.appendChild(a);var u=t.createElement("script");u.setAttribute("data-queueit-c",r),u.setAttribute("type","text/javascript"),u.setAttribute("src","//static.queue-it.net/script/queueconfigloader.min.js"),t.head.appendChild(u)}}(document,0,0,window.mylotto.queueClientId)

window.dataLayer=[{}],function(t,e,a,n,g){t[n]=t[n]||[],t[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=e.getElementsByTagName(a)[0],o=e.createElement(a);o.async=!0,o.src="https://www.googletagmanager.com/gtm.js?id="+g,m.parentNode.insertBefore(o,m)}(window,document,"script","dataLayer",window.mylotto.gtmTag)

NREUM.loader_config={accountID:window.mylotto.newRelicAccountId,trustKey:"1283177",agentID:window.mylotto.newRelicId,licenseKey:window.mylotto.newRelicLicenseKey,applicationID:window.mylotto.newRelicId},NREUM.info={beacon:"bam.nr-data.net",errorBeacon:"bam.nr-data.net",licenseKey:window.mylotto.newRelicLicenseKey,applicationID:window.mylotto.newRelicId,sa:1}

var QueueTriggerApp="false",QueueITWaitingRoomID="not-set",QueueTriggerAppScanner="false",QueueTriggerWeb="false"

!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version="2.0",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,"script","https://connect.facebook.net/en_US/fbevents.js");fbq("init","1563206860576661");fbq("track","PageView");

ttd_dom_ready(function(){if("function"===typeof TTDUniversalPixelApi){var a=new TTDUniversalPixelApi;a.init("iwdw3lu",["d8xlzbv"],"https://insight.adsrvr.org/track/up",{td1:google_tag_manager["rm"]["6447957"](7),td2:google_tag_manager["rm"]["6447957"](9),td3:google_tag_manager["rm"]["6447957"](11),td4:google_tag_manager["rm"]["6447957"](13),td5:google_tag_manager["rm"]["6447957"](15)})}});

Requests	IP Address	Location	AS Autonomous System
20	210.55.2.7	Auckland, Auckland, New Zealand	AS38881NZ Lotteries Commission
19	210.55.2.24	Auckland, Auckland, New Zealand	AS38881NZ Lotteries Commission
39	2	-	-

Security Scan Report: www.nzlotteries.co.nz

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History