ScanMalware.com

Security Scan Report: kno89seven.com

Redirected to: https://kno89seven.com/

Submitted: Jan 20, 2026, 12:35:43 AMCompleted: Jan 20, 2026, 12:37:10 AMpubliccompleted
Loading additional data...

Summary

This website contacted 16 IPs in 2 countries across 16 domains to perform 298 HTTP transactions. The main domain is kno89seven.com and was registered NaN years ago.

Submitted URL: http://kno89seven.com/

Effective URL: https://kno89seven.com/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Confirmed scam site collecting credentials; do not provide any login information.

Risk Factors
Newly registered domain (<7 days) with credential harvesting form
Unranked domain lacking established reputation
Garbled OCR text suggesting social engineering tactics
Domain age information unavailable

Details

Page Title

KNO89 | Situs Game Online RTP Gacor Hari Ini

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

phishing scam

(34%)

Domain Information

Within the commercial generic top-level domain (.com), 'kno89seven.com' is registered with no subdomain. The core label 'kno89seven' covers 10 characters holding 3 vowels versus five consonants, notching two digits. Tokenizing the label suggests three words: kno, 89, seven. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://kno89seven.com/

Page Load Overview

12.38s
Total Load Time
357
HTTP Requests
21
Domains
64.8 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:6,158 chars
Detector Agreement:50%

Website Classification

Primary Category

phishing scam34% confidence
Type: webapp
Method: ml+structural

All Detected Categories

phishing scam
34%
finance banking
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27104.17.24.14Germany
AS15169
22172.67.74.140United States
AS13335CLOUDFLARENET
22172.66.161.58United States
AS13335CLOUDFLARENET
22104.18.15.111United States
AS13335CLOUDFLARENET
2234.160.81.0Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
2288.221.123.96Germany
AS396982
22104.16.175.226Germany
AS13335
2223.50.131.153Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2223.36.162.17Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
22192.64.117.41United States
AS22612NAMECHEAP-NET
35716--

Detected Technologies1

PasswordField
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16AF43AA1B3C46C97230B07E5B216B7D9E02A5E19F94E88C5F45CFD18B7CBD62A8D11B0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:oKCR12+kkmP3RGtYeHh17oBAy112+PHmPjcwo32UE1coELimma:oKCR1XkkmPgtLH781XPHmPJomUHOa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:773853:R4NmkOw4iAuIBEQQvONyaRBAwIKuMog08l9bEYDIIRYCBIqk2AELEoAhAKgBSocIMgJgoQQBJAsMzSBNMTgLkAiCIDjHbNKg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:243c3c183c3c3c3d
Perceptual Hash:8a1c237731562ddb
Difference Hash:c8f171b4f0e168e9
Wavelet Hash:3c3c3c1c3c3c3c3d
Color Hash:#3a4478

Other Hashes

Crop Resistant:cfcd112921058529,e926363268486852,f1d0626657569517,ac262c9698c9f593,a3636232a62733d3,c8f171b4f0e168e9

Scan History

Scan history not available

Unable to load historical scan data