Security Report: 07ghvftu.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ecc7afcc-5ea7-45ff-bfe9-9feb385a5e8d Domain and IP registration (RDAP)/api/v1/rdap/ecc7afcc-5ea7-45ff-bfe9-9feb385a5e8dHow often this domain was scanned/api/v1/domain/stats/07ghvftu.pages.dev Scan history for this domain/api/v1/domain/history/07ghvftu.pages.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 27 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://07ghvftu.pages.dev/

Effective URL:

https://fie.nl.tab.digital/login

Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

Risk Score

Self-hosted Nextcloud login at fie.nl.tab.digital reached via a one-hop redirect from a random pages.dev subdomain. No malware, phishing, impersonation or exfiltration signals found; the only concerns are the odd redirect and unverifiable domain reputation.

Risk Factors (3)

Cross-domain redirect from an unrelated free pages.dev subdomain into a login page on tab.digital

Credential login form on a domain of unknown age sitting under a shared hosting namespace

Destination domain is unranked in Cisco Umbrella, so its reputation cannot be independently confirmed

Safety Factors (4)

Nextcloud is self-hostable open-source software, so its default product branding on an instance login page is a software/technology reference rather than impersonation of a different organisation

No Indicators of Compromise, no YARA malware patterns, no high-precision native-YARA hits, no malicious kit roster match, no obfuscated or credential-exfiltrating JavaScript

Password field is paired with a username field and includes standard CSRF requesttoken hidden fields — consistent with a stock Nextcloud login

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: 711795373

MD5: c45d57fd5f53d0eacde32aeb9a57f600

Domain Name Analysis

The domain '07ghvftu.pages.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain '07ghvftu'. The core label 'pages' covers 5 characters split between two vowels and 3 consonants. Splitting it apart reveals 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.57s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:292 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

77%

documentation technical

40%

real estate property

36%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	172.67.130.170Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.21.3.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
27	4	-	-