Security Report: cgi.s-ed1.cloud.gcore.lu - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5ffb0c7d-0959-4f0f-b349-a4f3c660bb34 Domain and IP registration (RDAP)/api/v1/rdap/5ffb0c7d-0959-4f0f-b349-a4f3c660bb34 Certificate Transparency/api/v1/ct/cgi.s-ed1.cloud.gcore.lu How often this domain was scanned/api/v1/domain/stats/cgi.s-ed1.cloud.gcore.lu Scan history for this domain/api/v1/domain/history/cgi.s-ed1.cloud.gcore.lu?limit=15

This website contacted 16 IPs in 3 countries across 9 domains to perform 14 HTTP transactions. The main domain is cgi.s-ed1.cloud.gcore.lu and was registered 20 years ago.

Submitted URL: https://cgi.s-ed1.cloud.gcore.lu/O365.html

The Cisco Umbrella rank of the primary domain is #896,168 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 96%

Risk Score

This is an ordinary sign-in page on a long-established, well-ranked domain, with credentials submitted to a host the operator controls.

Risk Factors (3)

Microsoft-branded credential capture page hosted on an unrelated gcore.lu subdomain

Multi-source threat-intel malware report (silverfox) against the hosting domain

Microsoft trademarks, styling and UI copied without authorization

Safety Factors (2)

Hosting domain is 2888 days old (does not mitigate an active phishing kit on it)

The site's own login form (credentials submit to its own domain; 2888 days old, Cisco Umbrella #896,168) with no strong malicious indicators — a first-party sign-in is normal; risk clamped from 10 to 3

Domain age information unavailable

Details

Page Title

Microsoft | Login

Scan Type

public

Domain Name Analysis

The domain 'cgi.s-ed1.cloud.gcore.lu' uses the Luxembourgish country-code top-level domain (.lu) and includes subdomain 'cgi.s-ed1.cloud'. Count 5 characters in 'gcore' holding 2 vowels versus 3 consonants. Tokenizing the label suggests two words: g, core. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.06s

Total Load Time

646 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:55%

Script:Latin

Direction:ltr

Detection Details

Text Length:380 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network78% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network

78%

technology software

67%

documentation technical

52%

finance banking

40%

adult content

39%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	185.145.113.133	Luxembourg, Luxembourg, Luxembourg	AS199524G-Core Labs S.A.
0	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
0	172.217.208.95Google · CDN	United States	AS15169Google LLC
0	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
0	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.14.95Google · CDN	United States	AS15169Google LLC
0	195.80.159.133	France	AS29152Decknet SARL
0	185.145.113.131	Luxembourg, Luxembourg, Luxembourg	AS199524G-Core Labs S.A.
14	16	-	-