The site uses the official brand domain cordeо.com and displays legitimate brand portal content. There is no static credential harvesting form in the HTML, but the SPA nature means credentials could be captured dynamically via JavaScript. The presence of numerous external scripts and a consent management iframe suggests standard web analytics and cookie consent usage; however, the risk score is elevated by the SPA rendering pattern and the immediate post target to a CDN URL, which could be used for dynamic data exfiltration if misconfigured. Monitor for any credential collection surfaces in the runtime UI and verify that no form submissions route to an external domain. Recommend continued observation and confirm alignment with legitimate brand portal behavior.