qa-corespec.kone.com isn't a typical website you'd visit intentionally. If you landed here, you probably clicked a link in an email or another app. The domain is a subdomain of kone.com, the official site of a real company. Instead of showing its own content, it immediately sends visitors to Microsoft's login page at login.microsoftonline.com. That's a common setup for testing authentication services, not a sign of a scam. The security checkup is positive: the site forces HTTPS, uses a modern secure connection, and isn't listed on any threat databases. But there's very little else to see — no contact information, no privacy policy, and no history in the web archive. This is typical for an internal or test subdomain that isn't meant for public interaction. Because the site's purpose is opaque and it redirects elsewhere, we recommend using caution if you're not sure why you're there. If this is a workplace link or part of a log-in flow, it's likely legitimate. If you stumbled upon it, treat it like an unknown redirect — not obviously harmful, but not a place to explore.
Not sure — double-check qa-corespec.kone.com first
In plain English
This is a test subdomain that quickly redirects to a Microsoft login page. The security is solid and there are no signs of malicious intent, but the site's purpose is unclear to a casual visitor. If you ended up here by accident, you can safely return to where you came from. For anything beyond that, know that it's not a public website designed for general use.
Where the score comes from
Strong security: valid certificate, enforced HTTPS, clickjacking protection, and no threats detected. This is better than many legitimate business sites.
The subdomain has no public WHOIS record, which is typical for test environments. The parent domain, kone.com, belongs to a real company, but the subdomain's ownership isn't directly verifiable.
Clean blacklists and no signs of abuse. The lack of historical data is normal for a test or very new subdomain, not a red flag.
This is a behind-the-scenes subdomain that redirects to Microsoft's login page. Lack of contact info or about page is expected; it's not meant to be a standalone site.
No legal pages, but that's normal for an internal test endpoint. A public-facing business would require them; this doesn't.
Hosted on Microsoft's network with reliable DNS and modern TLS. The absence of email servers and DNSSEC is not unusual for a subdomain used solely for redirects.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →