ScanMalware.com

Security Scan Report: 1rf.okta.com

Redirected to: https://1rf.okta.com/oauth2/v1/authorize?client_id=okta.2b1959c8-bcc0-56eb-a589-cfcfb7422f26&code_challenge=yHlNjxuVbzrf1AuiB8XWWFyNnjKcP4K-I8MFU-5y8sw&code_challenge_method=S256&nonce=YtghdgXL87f9CktMcvQTvaON6JMfwK8QNjGF0qfvoLj8lCc7dZBjIoydBI7K9bIJ&redirect_uri=https%3A%2F%2F1rf.okta.com%2Fenduser%2Fcallback&response_type=code&state=oJ8MlIIHe3386BXKlY9sGKNb3PZxhGuNFFuEpeEtoR8rphDeYwhjHv805bJb6M8H&scope=openid%20profile%20email%20okta.users.read.self%20okta.users.manage.self%20okta.internal.enduser.read%20okta.internal.enduser.manage%20okta.enduser.dashboard.read%20okta.enduser.dashboard.manage%20okta.myAccount.sessions.manage%20okta.internal.navigation.enduser.read

Site favicon
Submitted: Dec 3, 2025, 6:05:50 AMCompleted: Dec 3, 2025, 6:07:55 AMpubliccompleted
Loading additional data...

Summary

This website contacted 10 IPs in 1 country across 3 domains to perform 26 HTTP transactions. The main domain is 1rf.okta.com.

Submitted URL: https://1rf.okta.com/

Effective URL: https://1rf.okta.com/oauth2/v1/authorize?client_id=okta.2b1959c8-bcc0-56eb-a589-cfcfb7422f26&code_challenge=yHlNjxuVbzrf1AuiB8XWWFyNnjKcP4K-I8MFU-5y8sw&code_challenge_method=S256&nonce=YtghdgXL87f9CktMcvQTvaON6JMfwK8QNjGF0qfvoLj8lCc7dZBjIoydBI7K9bIJ&redirect_uri=https%3A%2F%2F1rf.okta.com%2Fenduser%2Fcallback&response_type=code&state=oJ8MlIIHe3386BXKlY9sGKNb3PZxhGuNFFuEpeEtoR8rphDeYwhjHv805bJb6M8H&scope=openid%20profile%20email%20okta.users.read.self%20okta.users.manage.self%20okta.internal.enduser.read%20okta.internal.enduser.manage%20okta.enduser.dashboard.read%20okta.enduser.dashboard.manage%20okta.myAccount.sessions.manage%20okta.internal.navigation.enduser.readRedirected

The Cisco Umbrella rank of the primary domain is #1,118 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Legitimate Okta login page with no security concerns

Safety Factors
Legitimate brand domain (okta.com)
High Cisco Umbrella ranking
Standard Okta login flow with separate username step
Domain age information unavailable

Details

Page Title

Recorded Future - Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(73%)

Domain Information

The domain '1rf.okta.com' uses the commercial generic top-level domain (.com) and includes subdomain '1rf'. The second-level label 'okta' is 4 characters long holding two vowels versus 2 consonants. Word splitting yields two words: ok, ta. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://1rf.okta.com/

Page Load Overview

1.23s
Total Load Time
26
HTTP Requests
3
Domains
401 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:545 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software73% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
73%
corporate business
62%
documentation technical
56%
government public service
39%
cryptocurrency blockchain
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1765.9.175.95United States
AS16509AMAZON-02
865.9.175.3United States
AS16509AMAZON-02
776.223.94.4United States
AS16509AMAZON-02
265.9.175.76United States
AS16509AMAZON-02
213.248.212.212United States
AS16509AMAZON-02
2108.138.7.107United States
AS16509AMAZON-02
265.9.175.55United States
AS16509AMAZON-02
2108.138.7.126United States
AS16509AMAZON-02
2108.138.7.41United States
AS16509AMAZON-02
2108.138.7.85United States
AS16509AMAZON-02
2610--

Detected Technologies1

HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A30308D21905D9EE42C59D886677851A224297D3C3A2EEC073EDCEC5EFACD5B702E24C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:IUbZz0hzWvWVjJredvXB6/IredvXB6/4+VredvXB6/UzGmNG:XZz0hL9NIvXwOIvXwt5IvXwMz4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40086:CiywQown+74CqIGrIQIIhSmCgIRAjoJscBEQgCWIgqzAmAAhiQxC1wCMFEBQGMUAllmsgACDELxAYIUATbZ9hWEDT1KEHFJj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7ffdfffc3c3
Perceptual Hash:f5cf20cd9c24cb34
Difference Hash:060e0e2a16009696
Wavelet Hash:c2e6e6e6c2c6c2c3
Color Hash:#5d3a78

Other Hashes

Crop Resistant:060e0e2a16009696,0000083232100800

Scan History

Scan history not available

Unable to load historical scan data