Security Review

Is admin-v2.ndceg.com legit or a scam?

Our verdict:Safe· 84/100

Legitimate B2B travel admin portal for Wonder Travel's NDC airline-distribution system; 6.6-year-old domain with active Egyptian/UAE business registration and strong social footprint.

admin-v2.ndceg.comScanned 6h ago
0
Trust score
SAFE
Heuristics 87·MT 82
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
7 years old
Registered Oct 30, 2019
MT Intelligence
Safe
Low likelihood · 92% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Screenshot of admin-v2.ndceg.com
LIVE RENDER
admin-v2.ndceg.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust82/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain admin-v2.ndceg.com is a backend login page for NDC Portal, a B2B flight-booking platform operated by Wonder Travel Group. Our research found the parent company (ndceg.com) is an established travel-tech provider with 188,000 Facebook followers, active LinkedIn presence, and participation in major travel industry events (World Travel Market, ATM). The domain was registered 2,420 days ago (~6.6 years), consistent with an established business rather than a newly-created scam site. Business registration data confirms the operator as WT Travel Group DMCC in Dubai with 250–499 employees in the travel sector. Our antivirus network and browser blocklists show no malicious flags. No scam reports, fraud complaints, or negative reviews appear in consumer-complaint databases or general web searches. The page itself is a minimal admin login interface with no contact details or marketing content, which is typical for internal business portals. One risk note: the domain suffered a ransomware compromise (Funksec, January 2025) with infostealer credentials leaked; however, this is a past security incident affecting the legitimate business, not evidence the site itself is fraudulent.
Full dossier
Analysis complete

Page Content

The page displays a minimal login interface titled 'NdcAdmin' with no marketing copy, contact information, or social links. This is consistent with a backend admin portal rather than a public-facing website. No scam-family patterns or malicious scripts were detected.

Infrastructure

SSL certificate is valid (DigiCert/GeoTrust, 175 days to expiry). Hosting IP 20.107.224.63 has an abuse score of 0/100 with only 1 historical abuse report. The domain uses NameCheap as registrar with privacy protection disabled, indicating transparent ownership.

Domain History

Registered 2,420 days ago (~6.6 years), placing it well outside the typical 30–90 day window of newly-created scam sites. WHOIS records show consistent registration with a legitimate business entity.

Web Reputation

Our antivirus network (92 engines) flagged 0 detections. Browser blocklists are clean. Independent review aggregators returned no data (typical for internal admin portals). Web research found no scam reports, complaints, or negative reviews. The parent company (Wonder Travel Group) has strong positive business signals: 188k Facebook followers, active LinkedIn company page, ZoomInfo listing with 250–499 employees, and documented participation in World Travel Market and ATM industry events.

Risk Factors
3
  • Domain suffered Funksec ransomware compromise in January 2025 with ~1,903 infostealer-compromised credentials leaked, including 8 linked to the admin-v2 login page.
  • Minimal page content and no public contact information limits ability to verify operator details directly from the page itself.
  • Admin portal is not indexed in global traffic rankings, which is normal for internal business tools but limits third-party visibility.
Positive Signals
5
  • Parent company (Wonder Travel Group / NDC Portal) has 188,000 Facebook followers and active social media presence with promotional and hiring content.
  • Business registration confirmed active in Egypt/UAE with 250–499 employees listed in travel sector on ZoomInfo.
  • Domain age of 6.6 years is consistent with an established business, not a newly-created scam site.
  • Valid SSL certificate issued by DigiCert/GeoTrust with 175 days remaining.
  • Zero scam reports, fraud complaints, or negative reviews found across consumer-complaint databases and general web searches.
AI Recommendation
This is a legitimate business admin portal. If you are an employee or authorized user of Wonder Travel Group / NDC Portal, you can log in safely. If you received a link to this page unsolicited, verify the sender's identity before entering credentials — the domain was compromised by ransomware in January 2025, so exercise caution with any login prompts from external sources.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for admin-v2.ndceg.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
6.6 yrs
Registered Oct 2019
Business registration
Active · Egypt / UAE
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 positive
Key findings
7 headline facts from open-web research
  • admin-v2.ndceg.com is the admin login page (https://admin-v2.ndceg.com/) for NDC Portal, a B2B online sales channel for Wonder Travel / WT Travel Group focused on flight bookings with commissions.
  • Main site ndceg.com/odeysysportal/ describes itself as "NDC is an online sales channel B2B for Wonder travel" and has active social media presence on Facebook, Instagram, LinkedIn with promotional content and hiring posts.
  • Company associated with WT Travel Group DMCC in Dubai (info@wtdmcc.ae), exhibitor at WTM/ATM events, and listed on ZoomInfo as operating in Travel Agencies & Services with 250-499 employees.
  • Domain ndceg.com has been a victim of Funksec ransomware (discovered Jan 2025), with Hudson Rock reporting ~1903 infostealer-compromised credentials including 8 occurrences linked specifically to https://admin-v2.ndceg.com/auth/login.
  • No scam reports, fraud complaints, or negative reviews found on Reddit, Trustpilot, ScamAdviser, or general web searches; positive business footprint in Egyptian travel sector.
  • Domain age given as 2420 days (~6.6 years); consistent with established travel tech provider rather than newly registered scam site.
  • Internal policy page references customercare@ndceg.com for complaints and mentions "MyWallet" services.
Positive reviews (3)
Quotes indicating the site is legitimate.
  • ndceg.comopen

    "NDC is an online sales channel B2B for Wonder travel, our goal is to develop smart technology to make booking travel services easier, save and more profitable."

  • Facebookopen

    "NDC Portal, Cairo. 188268 likes · 428 talking · 45 were here. نظام حجز تذاكر الطيران لشركات السياحة مع خصومات وعمولات فورية"

  • LinkedInopen

    "NDC Portal | Wonder Travel leading online travel portal for the best deals and customized travel packages."

Business registration
Status: active · Egypt / UAE

Operated by Wonder Travel / WT Travel Group (NDC Portal), active on Facebook (188k likes), LinkedIn, exhibitor at World Travel Market, ZoomInfo lists 250-499 employees in Travel Agencies sector.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research confirmed that admin-v2.ndceg.com is the admin login page for NDC Portal, a B2B online sales channel operated by Wonder Travel Group / WT Travel Group DMCC (Dubai). The parent domain ndceg.com describes itself as 'an online sales channel B2B for Wonder travel' focused on flight bookings with commissions. The company maintains active social media presence (Facebook: 188k followers; LinkedIn: company page with hiring posts) and is listed on ZoomInfo as operating in Travel Agencies & Services with 250–499 employees. The company is an exhibitor at major travel industry events (World Travel Market, ATM). No scam reports, fraud complaints, or negative reviews were found on consumer-complaint databases, Reddit, or general web searches. One security note: the domain suffered a Funksec ransomware compromise in January 2025, with Hudson Rock reporting ~1,903 infostealer-compromised credentials leaked, including 8 occurrences linked to the admin-v2 login page — this is a past security incident affecting the legitimate business, not evidence of fraud.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious58Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age7 years old
RegistrarNameCheap, Inc.
RegisteredOct 30, 2019
ExpiresOct 30, 2026
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerDigiCert Inc · GeoTrust TLS RSA CA G1
ExpiresDec 7, 2026 (175d)
Self-signedNo
Hosting & Technology
HostingMicrosoft Corporation
Server locationIE

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://admin-v2.ndceg.com/
  • 2200https://admin-v2.ndceg.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file1
ISPMicrosoft Corporation
Usage typeData Center/Web Hosting/Transit

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on admin-v2.ndceg.com and not a lookalike like a-dmin-v2.ndceg.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on admin-v2.ndceg.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • admin-v2.ndceg.com passed our automated security checks with a trust score of 84/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. admin-v2.ndceg.com presents a valid TLSv1.3 certificate issued by DigiCert Inc · GeoTrust TLS RSA CA G1, expiring in 175 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • admin-v2.ndceg.com is 6.6 years old, registered on 10/30/2019 through NameCheap, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report admin-v2.ndceg.com as clean.
  • No. admin-v2.ndceg.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • admin-v2.ndceg.com resolves to an IP operated by Microsoft Corporation in IE (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 15, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around admin-v2.ndceg.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·admin-v2.ndceg.com
SAFE

This is the admin login portal for NDC Portal, a legitimate B2B travel-booking platform operated by Wonder Travel Group (Egypt/UAE). The domain is 6.6 years old, the company has active business registration, social media presence with 188k Facebook followers, and no scam reports or complaints.

This is a legitimate business admin portal. If you are an employee or authorized user of Wonder Travel Group / NDC Portal, you can log in safely. If you received a link to this page unsolicited, verify the sender's identity before entering credentials — the domain was compromised by ransomware in January 2025, so exercise caution with any login prompts from external sources.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.