Security Report: 7-397.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fc83304e-2e69-40ad-b858-6233ac66572a Domain and IP registration (RDAP)/api/v1/rdap/fc83304e-2e69-40ad-b858-6233ac66572aHow often this domain was scanned/api/v1/domain/stats/7-397.pages.dev Scan history for this domain/api/v1/domain/history/7-397.pages.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 28 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://7-397.pages.dev/

Effective URL:

https://fie.nl.tab.digital/login

Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Stock Nextcloud login on fie.nl.tab.digital, reached via a throwaway pages.dev redirect. No indicators of compromise, malware or credential exfiltration found, but the unknown-age host and anonymous redirector give no assurance of who operates the instance.

Risk Factors (3)

Login form collecting account name/email and password on a host with no verifiable age or reputation (subdomain of tab.digital reached via a throwaway pages.dev redirector).

Opaque funnel: a randomly named pages.dev subdomain was used purely to forward visitors to an unrelated-looking Nextcloud deployment, hiding who operates the instance.

No privacy policy, operator identification or terms visible on the login page, so there is no way to tell who receives the submitted credentials.

Safety Factors (4)

Page is a standard, unmodified-looking Nextcloud login screen rather than a hand-built credential capture page.

Form posts same-origin to /login; no cross-origin credential submission or JavaScript exfiltration was observed.

Zero threat-intelligence indicators of compromise, no JavaScript malware patterns and no known phishing kit signatures.

No payment fields, no disguised password fields, no urgency or account-suspension lures on the page.

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: 711795373

MD5: c45d57fd5f53d0eacde32aeb9a57f600

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), '7-397.pages.dev' is registered, featuring subdomain '7-397'. The registrable portion 'pages' spans 5 characters holding 2 vowels versus three consonants. Breaking it apart gives one word: pages. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Log in to Nextcloud Account name or email Password Remember me Log in with a device Forgot password? Nextcloud - a safe home for all your data,

Page Load Overview

3.22s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:292 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

77%

documentation technical

40%

real estate property

36%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
26	104.21.3.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.66.44.199Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.66.47.57Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.67.130.170Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
28	4	-	-