Security Scan Report: ksafe.eu.donesafe.com

Redirected to:
https://ksafe.eu.donesafe.com/users/sign_in
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 4 domains to perform 32 HTTP transactions. The main domain is donesafe.com and was registered 13 years ago.

Submitted URL: https://ksafe.eu.donesafe.com

Effective URL:
https://ksafe.eu.donesafe.com/users/sign_in
Redirected

The Cisco Umbrella rank of the primary domain is #220,710 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

Legitimate Donesafe customer sign-in portal on a 13-year-old domain; own-brand login form, same-origin submission, and no threat-intelligence, hunting rule, or IDS findings.

Safety Factors (4)
Established 13-year-old domain with matching self-branding
Login form submits to its own domain; no external form action or exfiltration
All JavaScript served from the site's own domain; only benign external references (Google Fonts, AWS S3 storage, Sentry telemetry)
No Indicators of Compromise, hunting rule, Safe Browsing or IDS findings
Domain age information unavailable

Details

Page Title

K-SAFE

Scan Type

public

Domain Name Analysis

The domain 'ksafe.eu.donesafe.com' uses the commercial generic top-level domain (.com), featuring subdomain 'ksafe.eu'. Its registrable label 'donesafe' stretches across 8 characters with 4 vowels and four consonants. Splitting it apart reveals 2 words: done, safe. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Sign in to your account with Email Need to confirm your account? Terms ofUse Help _—~Prrivacy Policy Copyright © 2026 Donesafe

Page Load Overview

6.24s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:211 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business39% confidence
Type: webapp
Method: ml+structural

All Detected Categories

corporate business
39%
technology software
30%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2399.81.58.16Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
434.252.210.81Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
4142.251.20.95Google · CDNUnited States
AS15169Google LLC
43.5.64.135Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
454.73.8.38Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
43.5.71.88Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
452.92.0.242Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
334.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
328--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F2C40867CD172F3E036C5BC780EEA9C5641CD79B7863E0E9F9D1891A85A934821E13BC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:LjjJyuPHLRaEyDgTDt0Mv4+a8kKaEyDgTDt0Mv4+a8k0aEyDgTDt0Mv4+a8kyaEA:7JyeHLRdndDdzdtdNdFd0dPdrd4d0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:592091:IbNFojKAwjQkIMImZEMIBBB0IRjACCmRgUCIkQJA4QIioAC6AFoAEAFhKm8JQEC2TAYgiaDAhENmh0RGA4VICEQlTJ2GEYgg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7c7e7ffffffff
Perceptual Hash:e6669999cc663233
Difference Hash:0c284d4c20000008
Wavelet Hash:072727370f0f0f07
Color Hash:070030000c0

Other Hashes

Crop Resistant:0c284d4c20000008

Scan History

Scan history not available

Unable to load historical scan data