Security Scan Report: dfgtr-39s.pages.dev

Redirected to:
https://fie.nl.tab.digital/login
Site favicon
Submitted: Jan 8, 2026, 10:17:29 PMCompleted: Jan 8, 2026, 10:19:06 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 2 countries across 2 domains to perform 1 HTTP transaction. The main domain is fie.nl.tab.digital and was registered NaN years ago.

Submitted URL: https://dfgtr-39s.pages.dev/

Effective URL: https://fie.nl.tab.digital/loginRedirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Potential phishing page impersonating Nextcloud; treat as high‑risk and do not enter credentials.

Risk Factors
Mimics official Nextcloud login on a unrelated domain
Collects passwords on a domain that is not the official Nextcloud service
Unranked domain increases suspicion
Domain age information unavailable

Details

Page Title

Login – Nextcloud

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(34%)

Domain Information

Domain 'dfgtr-39s.pages.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'dfgtr-39s'. Its registrable label 'pages' stretches across 5 characters split between two vowels and three consonants. Word splitting yields 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dfgtr-39s.pages.dev/

Page Load Overview

18.97s
Total Load Time
25
HTTP Requests
2
Domains
6.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:379 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software34% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
34%
corporate
25%

Detected Features

Login Form
Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13188.114.96.3United States
AS13335CLOUDFLARENET
12185.220.119.148Netherlands
AS212911SIA Network Operations Center
252--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BC059EB25C4438357A27D315318FA6AA332BB1035D22569DD4CE71880FFABEC627257E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:GsUNmVZtB4b6chxpBOSabYKgPZtB4bSUDqNkg2EeFlqkcAslt+:KmPt3ctkm+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:825604:sZlMkBIEbAU4YAoU4CILkETAEAEEcziMAEykHsCIwAxGBMiBBpRxQAJOKCQoJKJAUCEAAsgogIMTiQABCtwaeoBV4MAFEgiZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00181818387ec000
Perceptual Hash:c93c36c31ef0c936
Difference Hash:d0f0b2b2f1d09333
Wavelet Hash:00787878fcfef910
Color Hash:#e06c79

Scan History

Scan history not available

Unable to load historical scan data