suspicious phishing

English

kia_session

XSRF-TOKEN

The domain name 'kia.live.afonso.se' uses the Swedish country-code top-level domain (.se) with subdomain 'kia.live'. Its registrable label 'afonso' stretches across 6 characters containing 3 vowels alongside 3 consonants. It segments into 1 word: afonso. No strong language cues emerged from the frequency lists.

_token

email

password

remember

html/af/4e/af4efd09-a5ec-4709-bfc8-7860a6cae58c.html.gz

60de05f641f8b0bdae7a42fea2f506ba11877975e1b9eb77b07c024b9835bad7

b534bd2568aa0fc566688ac85d8a522fa27999dfb14c8da75d47580071c1d408

13cb011430664d238afb9ff85cd924cbfb9a2b9f1b966e7a38202eef44aca245

7520b3698a99dd9954c0d45b5087f1f59fec476aa1fa767445c16baf1c266999

4e443a7d690fb11adfb8214330c84c0bdf6a1d33afb8c01b234741574103bb01

b8c74b24cf820f30f5ed713ac226419e839fbac2d1a05108e351f74bc4d5cf27

1dfe17a9fb8a64d4b011ceeec898569e61a58f3a536706d0c85c451933e18ba4

e6ec01de7b483e0fa2db35a11689ff230a59c8b595536cc3a64cf2bb5f539721

e178acc04f72ce099cb90f39c86cfed1a6bda41e393c2be287d880770230f023

width=device-width, initial-scale=1.0, shrink-to-fit=no

viewport

robots

csrf-token

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

afonso.se

Abuse Department

ORG-DOI2-RIPE

digitalocean

DigitalOcean, LLC

ORG-NCC1-RIPE

DigitalOcean


    // This is intentionaly run after dom loads so this way we can avoid showing duplicate alerts
    // when the user is beeing redirected by persistent table, that happens before this event triggers.
    document.onreadystatechange = function() {
        if (document.readyState == "interactive") {
            Noty.overrideDefaults({
                layout: 'topRight',
                theme: 'backstrap',
                timeout: 2500,
                closeWith: ['click', 'button'],
            });

            // get alerts from the alert bag
            var $alerts_from_php = [];

            // get the alerts from the localstorage
            var $alerts_from_localstorage = JSON.parse(localStorage.getItem('backpack_alerts')) ?
                JSON.parse(localStorage.getItem('backpack_alerts')) : {};

            // merge both php alerts and localstorage alerts
            Object.entries($alerts_from_php).forEach(function(type) {
                if (typeof $alerts_from_localstorage[type[0]] !== 'undefined') {
                    type[1].forEach(function(msg) {
                        $alerts_from_localstorage[type[0]].push(msg);
                    });
                } else {
                    $alerts_from_localstorage[type[0]] = type[1];
                }
            });

            for (var type in $alerts_from_localstorage) {
                let messages = new Set($alerts_from_localstorage[type]);

                messages.forEach(function(text) {
                    let alert = {};
                    alert['type'] = type;
                    alert['text'] = text;
                    new Noty(alert).show()
                });
            }

            // in the end, remove backpack alerts from localStorage
            localStorage.removeItem('backpack_alerts');
        }
    };


Requests	IP Address	Location	AS Autonomous System
22	167.172.38.71	Amsterdam, North Holland, Netherlands	AS14061DIGITALOCEAN-ASN
22	1	-	-

Security Scan Report: kia.live.afonso.se

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History