Security Scan Report: auth.kno2fy.com

Redirected to:
https://auth.kno2fy.com/u/login?state=hKFo2SA1UzByd0IxMzFzOV9XbGRoRlRa...
Site favicon
Submitted: Sep 26, 2026, 5:02:22 PMCompleted: Sep 26, 2026, 5:02:59 PMpubliccompleted

This website contacted 6 IPs in 2 countries across 9 domains to perform 93 HTTP transactions. The main domain is auth.kno2fy.com and was registered 31 years ago.

Submitted URL: https://auth.kno2fy.com

Effective URL:

https://auth.kno2fy.com/u/login?state=hKFo2SA1UzByd0IxMzFzOV9XbGRoRlRa...
Redirected

The Cisco Umbrella rank of the primary domain is #258,118 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Established 13-year-old domain serving its own Auth0-branded login on auth.kno2fy.com. No threat-intel, YARA, IDS or Safe Browsing hits; login is same-origin with no exfiltration. Only weak anti-analysis JS. Low risk.

Risk Factors (1)
DevTools/right-click blocking via JavaScript (weak signal, common on legitimate sites)
Safety Factors (5)
Domain is 4,929 days old (established since 2013)
No threat-intelligence, YARA, IDS or reputation matches against the page or its resources
Login form is same-origin on the site's own parent domain (kno2fy.com)
External resources are standard Auth0 / Arkose Labs / Google Fonts / Azure monitoring endpoints
No credential exfiltration or cross-origin form submission detected
Domain age information unavailable

Details

Page Title

Log in | Kno2fy

Scan Type

public

Domain Name Analysis

You're looking at domain 'auth.kno2fy.com' on the commercial generic top-level domain (.com) with subdomain 'auth'. The second-level label 'kno2fy' is 6 characters long holding 1 vowel versus four consonants, along with 1 digit. It segments into three words: kno, 2, fy. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://auth.kno2fy.com

Page Load Overview

5.17s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Text Length:196 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18104.18.7.94Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15104.18.6.94Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15142.251.110.94Google · CDNUnited States
AS15169Google LLC
15150.171.110.49Azure · CLOUDUnited States
AS8075Microsoft Corporation
1520.50.88.242Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
1518.64.195.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
936--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11481221508A6D44DE6534DC330C8F63AEE4BB18388A59861F5FE14FDEF82EE54362B18

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TLJc+uGKRJc+uholJc+u03EBABN3s4kvj:LEx8csNj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4120:AA4ADAIQEIAQAU2AEqUAEKFSgAIAABAIAsAEBAURAABTQAhAAQAAEKBAAAMSBgAAEoAopEBBAIAVAC4EMCABoRKSACVCACFC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:9999666699cc9999
Difference Hash:0030b2b2b2b23000
Wavelet Hash:00003c3c1c1c0000
Color Hash:#86bf40

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data