ScanMalware.com

Security Scan Report: hms-system.test.gronnjobb.no

Redirected to:
https://login.test.gronnjobb.no/realms/gronnjobb-customers/protocol/op...
Site favicon
Submitted: May 29, 2026, 10:38:43 AMCompleted: May 29, 2026, 10:39:57 AMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is login.test.gronnjobb.no and was registered NaN years ago.

Submitted URL: https://hms-system.test.gronnjobb.no/auth?authredirect=%2Fdeviations%2F8632216368036229563

Effective URL: https://login.test.gronnjobb.no/realms/gronnjobb-customers/protocol/openid-connect/auth?client_id=xpand-basic-frontend&scope=openid%20email%20profile&response_type=code&redirect_uri=https%3A%2F%2Fhms-system.test.gronnjobb.no%2Fapi%2Fauth%2Fcallback%2Fkeycloak&state=BIeklBI4COUPzpQ2E_BRTYnGpZCmr_73BQPtaj49Ydg&code_challenge=pep56ADV1H9dufs1TXvHlvUZAJ2NCszyJTxGxkzWoiI&code_challenge_method=S256Redirected

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

Login page on the brand's subdomain shows high JS obfuscation; no malicious indicators, but credential form warrants caution.

Risk Factors
Credential form on a subdomain
Cross‑origin form submission
High JavaScript obfuscation
Safety Factors
Domain age >10 years
Brand matches domain (self‑branding)
No external network calls from JavaScript
No malicious IoC or YARA detections
Established domain (4565 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

HMS-system | Grønn Jobb

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

corporate business

(28%)

Domain Information

The domain name 'hms-system.test.gronnjobb.no' uses the Norwegian country-code top-level domain (.no), featuring subdomain 'hms-system.test'. The core label 'gronnjobb' covers 9 characters split between 2 vowels and seven consonants. Tokenizing the label suggests 5 words: gr, on, n, job, b. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hms-system.test.gronnjobb.no/auth?authredirect=%2Fdeviations%2F8632216368036229563

Page Load Overview

1.98s
Total Load Time
43
HTTP Requests
6
Domains
219 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:263 chars
Detector Agreement:50%

Website Classification

Primary Category

corporate business28% confidence
Type: webapp
Method: ml+structural

All Detected Categories

corporate business
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2266.33.60.35United States
AS16509Amazon.com, Inc.
21142.251.127.97United States
AS15169Google LLC
432--

Detected Technologies5

PasswordField
100%
JQueryv3.6.4
100%
Vercel
40%
HSTS
40%
Google Hosted Libraries
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FE43F83646126D39D7A749E330D93F47B46D4012E3D99063E59CE8AC87CB99B232F368

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Jhdt21ZJcGsWRTBLpscJXsnR6Uye/v+ks0R1HNQVFwSsiRfd3R84AywvVyZ6TEq1:gGIanHBDmf1Mc1tNMtL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:56791:AuGMEGJmdABQ0iYYjBNoggrWkLSBeYaDXYbMbDQASIYIDVCAORq1IIIRgZkBBELBIrg8R1CEgASLCSHgyKgQoERNEBCnwJQV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8f8fef0909ef8f8
Perceptual Hash:cdc3c23c69c31ec3
Difference Hash:0402640333340224
Wavelet Hash:f0f0f0f0f090f8f8
Color Hash:#d22dcd

Other Hashes

Crop Resistant:0402640333340224

Scan History

Scan history not available

Unable to load historical scan data