Security Scan Report: nke.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 3 countries across 4 domains to perform 19 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://nke.pages.dev/%22https/t.myvisualiq.net/impression_pixel?aca=&ago=212&ao=546&et=i&r=739915162

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Yahoo sign-in hosted on an instant Pages subdomain; the login form posts username and password cross-origin to 2fa.support, a clear credential-harvesting phishing page.

Risk Factors (5)
Brand impersonation of Yahoo on a non-Yahoo host
Favicon copied from Yahoo and served on an unrelated domain
Cross-origin credential form posting passwords and username to 2fa.support
Multiple hidden state fields (crumb, acrumb, sessionIndex, browser-fp-data) recreating a real Yahoo login flow on attacker infrastructure
Unranked shared-hosting subdomain of unknown creation age
Domain age information unavailable

Details

Page Title

Yahoo

Scan Type

public

Domain Name Analysis

The domain name 'nke.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'nke'. The registrable portion 'pages' spans 5 characters with two vowels and 3 consonants. Word splitting yields one word: pages. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nke.pages.dev/%22https/t.myvisualiq.net/impression_pixel?aca=&ago=212&ao=546&et=i&r=739915162

Page Load Overview

1.58s
Total Load Time
946 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Text Length:553 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
71%
news media journalism
65%
entertainment media
47%
documentation technical
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7172.66.45.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
487.248.119.252United Kingdom
AS203220Yahoo-UK Limited
487.248.119.251United Kingdom
AS203220Yahoo-UK Limited
4188.125.72.139Dublin, Leinster, Ireland
AS34010Yahoo-UK Limited
194--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C5D22BB5C4B6957B120D088526F8FF253CA7520F9A4BBBD1799F8B096F80C6B850394E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:obf1yHiszIplfIBcOoJBsThOzE1zvj2SGJ2Ce1LYb/:o5yHiA4lfIBcOoT68zE1zb2uC0Yb/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:29504:KKKosCUQCGIeVLCQlAUQ0FDigEEGDKSUJDoWgQkExSAeqHAjClhpJCwiCHQBaJCBKQJgKgJBwFBAQXFTIgjUFKhgAQkSouQh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f87c7f1ffffffff
Perceptual Hash:b9399296cdcd9292
Difference Hash:c21a9c5208000000
Wavelet Hash:7fc2c6f20f010f0f
Color Hash:#862d7a

Other Hashes

Crop Resistant:c21a9c5208000000

Scan History

Scan history not available

Unable to load historical scan data