Security Scan Report: nw11.ultipro.com

Redirected to:
https://nw11.ultipro.com/Login.aspx?ReturnUrl=%2f
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 31 HTTP transactions. The main domain is ultipro.com and was registered 27 years ago.

Submitted URL: https://nw11.ultipro.com

Effective URL:
https://nw11.ultipro.com/Login.aspx?ReturnUrl=%2f
Redirected

The Cisco Umbrella rank of the primary domain is #6,548 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 97%

0
Risk Score

Official UKG Pro login page on ultipro.com, a 27-year-old top-10K domain. No phishing, malware, or credential exfiltration indicators found.

Safety Factors (4)
Well-established domain with long registration history
Official corporate branding matching the domain
Login form submits to the same origin
No cross-origin credential forms or exfiltration detected
Domain age information unavailable

Details

Page Title

Sign In - UKG Pro

Scan Type

public

Domain Name Analysis

The domain name 'nw11.ultipro.com' uses the commercial generic top-level domain (.com), featuring subdomain 'nw11'. The second-level label 'ultipro' is 7 characters long holding three vowels versus 4 consonants. Splitting it apart reveals three words: ul, ti, pro. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

English (USA) = UKG | Username Password Forgot your password?

Page Load Overview

4.68s
Total Load Time
388 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:428 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software49% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
49%
documentation technical
45%
gambling betting
44%
phishing scam
43%
news media journalism
40%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10135.84.73.50United States
AS17289ULTIMATE SOFTWARE GROUP
734.117.44.195Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
314--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A8B219056C7958215103D0F8D5A6F884F9A9E2079108DD88F9DC4A9CAFE1F8F4D2FEE9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:PZCx8rxfem9vk/BcPQ3UbapzG5GO5zhQMkChbbVCs2AS:PZCerpeAqcAUmpzSt5n2T

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23807:WDAgZ5JFrYiJJVxJmAKAChKEULAgRGd40SEJKElICAIAOLwKEIhFFkQrBKeAmBSFgJDFPAdShLFgQMomixJVEAuompIFAiVk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818181800
Perceptual Hash:88d933668cd98d75
Difference Hash:0931b3b3b3b3330d
Wavelet Hash:0d0d1d1d39391901
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data