suspicious phishing

English

__RequestVerificationToken

ASP.NET_SessionId

The domain name 'kungsleden-b26.pronestor.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'kungsleden-b26'. Count 9 characters in 'pronestor' split between 3 vowels and 6 consonants. Breaking it apart gives 2 words: pro, nestor. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

RedirectUrl

UserName

UserPass

SaveInfoCheckBox

LoginButton

LoginForm

RedirectAction

RedirectController

EncodedQueryString

Culture

SelectedLanguage

html/0d/75/0d7521fe-ef35-49e1-b3fc-9bd3e1f5dc8f.html.gz

2ac6afd11c34faffd1bd8926819d2bcbe4ab9f8e40b3856627badad402734780

d0446e17b0aa7193ba423b347268930800584450e958f324f03d9a9941b3baad

03920c66cbe37a0cf644ac569b551422f1474f8f0ebe6bf2a0d6b0f90b1c942d

d2abda67c5345209d630b4fbb7d288a54e7b4af97c7ae45bd2da26b2f9c83a06

d7f11b497def3922905451c1b1c507a5d64fcd885a8e80f36adc1479eca3533f

bc57cead72937739d4fbccaf45c6e5d63b0c0041876df39b4d69a10709a32ecc

aa2b943be20a74645d6bf7bb634605d4200d19b09f456b48a2a4d7eb8cede0bd

6ed467be27f285398e44542c520555746bbabd95b9cd21079e22bb90d1ce0fd3

width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no

viewport

robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Cloudflare, Inc.

PRONESTOR.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Data Services Ireland Limited

Amazon EC2 Network Operations

AMAZON-DUB


        if (typeof console == "undefined") {
            window.console = {
                assert: function () { },
                count: function () { },
                dir: function () { },
                dirxml: function () { },
                error: function () { },
                group: function () { },
                groupCollapsed: function () { },
                groupEnd: function () { },
                info: function () { },
                log: function () { },
                profile: function () { },
                profileEnd: function () { },
                table: function () { },
                time: function () { },
                timeEnd: function () { },
                timeStamp: function () { },
                trace: function () { },
                warn: function () { }
            };
        }

        var consoleLog = function (obj) {
            console.log(obj);
        };
    


        var cookie = $.cookie('CulturePref');
        if (!cookie) {
            cookie = 'en-US';
        }

        $("#SelectedLanguage").val(cookie);

        function changeLanguage() {
            var culture = $("#SelectedLanguage").val();
            $("#Culture").val(culture);
            $("#ChangeCulture").submit();
        }
    


    window.featureFlags = {"fix-save-all-day-booking-on-outlook-add-in":true,"add-in-equipment-restrict-not-working-when-deadline-type-is-time":true,"fix-delivery-place-for-equipment":true,"calendar-include-contact-person-meetings":true,"change-organizer-after-selecting-add-in-on-outlook":true,"outlook-addin-support-multi-tenants":false,"delete-granted-consent":true,"improve-ui-pickup-catering":true,"unable-to-add-unnamed-attendees":true,"show-out-of-stock-error-message-in-obe":true,"account-service-booking":false,"enable-integration-endpoints":true,"hdmw-208-obe-place-of-delivery-setting-ignored":true,"hdmw-233-setting-to-user-profile-local-storage":true,"hdmw-213-validate-delivery-place-for-equipment":false,"hdmw-239-prevent-selecting-deactivated-table-layouts-and-rooms":false};


Requests	IP Address	Location	AS Autonomous System
18	52.209.53.93	Dublin, Leinster, Ireland	AS16509AMAZON-02
6	52.18.236.131	Dublin, Leinster, Ireland	AS16509AMAZON-02
4	2a05:d018:166e:3a01:ff1b:563e:81ed:5ca3	Dublin, Leinster, Ireland	AS16509AMAZON-02
4	2a05:d018:166e:3a00:ce27:c82f:9861:7d42	Dublin, Leinster, Ireland	AS16509AMAZON-02
18	4	-	-

Security Scan Report: kungsleden-b26.pronestor.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History