Security Scan Report: shoretel.com

Redirected to:
https://www.mitel.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 49 IPs in 5 countries across 40 domains to perform 790 HTTP transactions. The main domain is shoretel.com and was registered 30 years ago.

Submitted URL: https://shoretel.com

Effective URL:
https://www.mitel.com/
Redirected

The Cisco Umbrella rank of the primary domain is #56,720 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Legitimate Mitel corporate site reached via shoretel.com redirect; no forms, no impersonation, no malware. Only weak signals are an unranked geolocation API call and a generic .cc-TLD IDS heuristic.

Risk Factors (3)
Cross-origin POST from page script to unranked iplist.cc (IP geolocation API) — benign-looking but unranked third-party call.
Circular redirect detected (final URL appears earlier in the chain) — a weak misconfiguration signal, not evidence of phishing.
Suricata alert 'ET DNS Query for .cc TLD' tagged HIGH by rule category, but this is a generic TLD heuristic and the queried host is an unranked geolocation API; no corroborating malware or phishing evidence.
Safety Factors (5)
Redirect terminates on the brand's own established domain (www.mitel.com), settling the brand question: this is Mitel's site, not an impersonation.
No credential, login, or payment forms; no password or card fields captured.
No credential exfiltration, no obfuscated network sink, no YARA malware, no Safe Browsing or phishing/malware IDS alert.
Content is consistent corporate marketing material for a communications vendor (products, partners, case-study verticals, press releases).
Threat-intel hit is reputation-only generic abuse on a third-party sub-resource address and does not describe this page's content.
Domain age information unavailable

Details

Page Title

Business & Hybrid Communication Solutions | Mitel

Scan Type

public

Domain Name Analysis

The domain 'shoretel.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 8 characters in 'shoretel' holding three vowels versus five consonants. It segments into two words: shore, tel. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://shoretel.com

Page Load Overview

20.11s
Total Load Time
10.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:23,415 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22104.18.8.61Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
163.96.252.105Aws · CLOUDMontreal, Quebec, Canada
AS16509Amazon.com, Inc.
16142.251.14.97Google · CDNUnited States
AS15169Google LLC
16104.18.18.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16103.224.182.216San Diego, California, United States
AS133618Trellian Pty. Limited
1665.8.131.32Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
16104.18.22.56Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16104.18.23.56Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16142.251.14.155Google · CDNUnited States
AS15169Google LLC
1652.60.192.173Aws · CLOUDMontreal, Quebec, Canada
AS16509Amazon.com, Inc.
79049--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10634C7734294A37E4566C69DAE70964F76D1C847D03B9184B3FE0164CFCADE2CE1E28A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Kl4Wr0enIg5DVxOSsMzKmH91za3zOtBAYTGP:Kl4WrJUJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:243840:6vnIAEyxGkTFCIAVDAKQQMDSFkTCcAKFsxACf5oAImsGiA4pggZEMjQIAe6wDsswgygZ5gRBmsRT0QCYSL2qEgUQLhgEIAGN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data