Security Report: node1.core-link.top - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7487c464-2fef-497c-b8f7-5c1191812c5d Domain and IP registration (RDAP)/api/v1/rdap/7487c464-2fef-497c-b8f7-5c1191812c5dHow often this domain was scanned/api/v1/domain/stats/node1.core-link.top Scan history for this domain/api/v1/domain/history/node1.core-link.top?limit=15

This website contacted 5 IPs in 2 countries across 3 domains to perform 38 HTTP transactions. The main domain is core-link.top and was registered 4 months ago.

Submitted URL: https://node1.core-link.top/

Effective URL:

https://node1.core-link.top/login.html

Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Bare password-only login on an unranked .top host claiming to be 'AIClient2API'. No impersonation, exfiltration, or malware, but the single-password form and generic .top IDS alerts warrant caution.

Risk Factors (3)

Password-only form with no username field, a pattern more typical of credential-harvesting layouts than of normal user login

Two HIGH-severity network IDS alerts for traffic to a *.top domain (generic TLD-based bad-traffic rules)

No verifiable identity, ownership information, or 'about' content behind the login gate

Safety Factors (4)

No threat-intelligence indicators of compromise against the page or its loaded resources

No JavaScript malware patterns, no obfuscation, and no credential exfiltration detected

No payment fields and no cross-origin credential submissions

Third-party scripts limited to public CDN resources (cdnjs.cloudflare.com, src.hex2077.dev)

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: 1480259189

MD5: 00abcd17a50f6b44cfae409aa342b775

Domain Name Analysis

The domain name 'node1.core-link.top' uses the .top top-level domain, featuring subdomain 'node1'. Count 9 characters in 'core-link' holding three vowels versus five consonants, plus 1 hyphen. Segmentation suggests two words: core, link. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.95s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:110 chars

Detector Agreement:100%

Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

technology software63% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

63%

cryptocurrency blockchain

42%

government public service

40%

documentation technical

40%

healthcare medical

35%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	8.216.27.161	Tokyo, Tokyo, Japan	AS45102Alibaba (US) Technology Co., Ltd.
7	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
38	5	-	-