Security Scan Report: gfos113.knowncloud.de

Redirected to:
https://gfos113.knowncloud.de/gfos/
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 68 HTTP transactions. The main domain is knowncloud.de.

Submitted URL: https://gfos113.knowncloud.de

Effective URL:
https://gfos113.knowncloud.de/gfos/
Redirected

The Cisco Umbrella rank of the primary domain is #530,635 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 82%

9
Risk Score

The site exhibits strong phishing characteristics—credential‑heavy form, unknown new domain, circular redirects, and heavy JS obfuscation—so it should be avoided.

Risk Factors (5)
Circular redirect loop
Unknown domain age combined with brand impersonation
Multiple password fields in a single form
Low domain reputation ranking
Highly obfuscated JavaScript
Domain age information unavailable

Details

Page Title

GFOS 2025

Scan Type

public

Domain Name Analysis

Within the German country-code top-level domain (.de), 'gfos113.knowncloud.de' is registered with subdomain 'gfos113'. The second-level label 'knowncloud' is 10 characters long containing 3 vowels alongside seven consonants. Word splitting yields 2 words: known, cloud. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gfos113.knowncloud.de

Page Load Overview

3.26s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:47%
Script:Latin
Direction:ltr

Detection Details

Text Length:648 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service27% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6885.22.64.100Selm, North Rhine-Westphalia, Germany
AS15763DOKOM Gesellschaft fuer Telekommunikation mbH
681--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15CF2E722087C6D2739528D9425E75726A80F435DA216CF4CFAFC12601FEAFDF15B9A2C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:FtUWVnfj+4viFqltIELFSf7Ukywjx5nlyY:Ft5Vnfj+4vmdEpSf7ryaxjyY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36509:D44BpE2KIdqAEmAmLetJARSTIokoUpDFggWY4wkgGhIREEAIwIMDkRUTEkgQAoBkuwcQSw0AAAj+AwDbFIM+ASHASECOi0Kg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f0f0f0f4f0f0f0f0
Perceptual Hash:c696692d36d66d12
Difference Hash:e4e4a404642625a5
Wavelet Hash:f0f0f0f0f0f0f0f0
Color Hash:#82d22d

Scan History

Scan history not available

Unable to load historical scan data