Security Scan: Manager Portal

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/894f0d80-1bad-446f-922d-04ab21d22e37 Domain and IP registration (RDAP)/api/v1/rdap/894f0d80-1bad-446f-922d-04ab21d22e37 Certificate Transparency/api/v1/ct/core2-ord.ns-cluster-prod.click How often this domain was scanned/api/v1/domain/stats/core2-ord.ns-cluster-prod.click Scan history for this domain/api/v1/domain/history/core2-ord.ns-cluster-prod.click?limit=15

This website contacted 5 IPs in 1 country across 4 domains to perform 17 HTTP transactions. The main domain is core2-ord.ns-cluster-prod.click and was registered 1 year 1 month ago.

Submitted URL: https://core2-ord.ns-cluster-prod.click

Effective URL:

https://core2-ord.ns-cluster-prod.click/portal/

Redirected

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Phishing login page impersonating Google on a new, unranked domain – high risk.

Risk Factors

Brand impersonation (Google) on an unranked, recently registered domain

Credential harvesting form (username/email + password)

Domain age < 180 days (new domain)

Domain not in Cisco Umbrella top 1M (low reputation)

Domain age information unavailable

Details

Page Title

Manager Portal

Scan Type

public

Domain Name Analysis

Domain 'core2-ord.ns-cluster-prod.click' uses the .click top-level domain with subdomain 'core2-ord'. The core label 'ns-cluster-prod' covers 15 characters split between three vowels and 10 consonants; bonus characters include two hyphens. Tokenizing the label suggests three words: ns, cluster, prod. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.93s

Total Load Time

1001 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:279 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software48% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

48%

social_media

25%

phishing/scam

20%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	13.107.246.45	United States	AS15169GOOGLE
3	142.251.141.131	United States	AS31898ORACLE-BMC-31898
3	142.250.184.228	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
3	66.102.1.84	United States	Unknown
3	207.211.163.107	Chicago, Illinois, United States	AS31898ORACLE-BMC-31898
17	5	-	-