ScanMalware.com

Security Scan Report: hms-system.test.gronnjobb.no

Redirected to:
https://login.test.gronnjobb.no/realms/gronnjobb-customers/protocol/op...
Site favicon
Submitted: May 29, 2026, 10:42:34 AMCompleted: May 29, 2026, 10:43:45 AMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is login.test.gronnjobb.no and was registered NaN years ago.

Submitted URL: https://hms-system.test.gronnjobb.no/auth?authredirect=%2Fdeviations%2F8162690046600235141

Effective URL: https://login.test.gronnjobb.no/realms/gronnjobb-customers/protocol/openid-connect/auth?client_id=xpand-basic-frontend&scope=openid%20email%20profile&response_type=code&redirect_uri=https%3A%2F%2Fhms-system.test.gronnjobb.no%2Fapi%2Fauth%2Fcallback%2Fkeycloak&state=jfOFiLKiWLIbgvmqy8G5wX4FWDMQassyClrZ7wIsHUM&code_challenge=EiDkiKxSYp-GDmwUdOeGkgJliXVsZWrvouTOKIqkzLk&code_challenge_method=S256Redirected

AI Security Verdict

Low Risk

Confidence: 80%

2
Risk Score

Low risk login page likely legitimate internal SSO; no clear malicious indicators.

Risk Factors
Domain is unranked in Cisco Umbrella (low reputation signal)
JavaScript obfuscation score marked CRITICAL (high entropy, many Function() constructors)
Safety Factors
Domain age > 4,500 days (well‑established)
No credential exfiltration detected
No network IDS alerts or malicious YARA matches
Form posts to a related subdomain (login.test.gronnjobb.no) as part of SSO
Domain age information unavailable

Details

Page Title

HMS-system | Grønn Jobb

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

corporate business

(28%)

Domain Information

The domain 'hms-system.test.gronnjobb.no' uses the Norwegian country-code top-level domain (.no); it also runs on subdomain 'hms-system.test'. The second-level label 'gronnjobb' is 9 characters long split between two vowels and seven consonants. It segments into 5 words: gr, on, n, job, b. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hms-system.test.gronnjobb.no/auth?authredirect=%2Fdeviations%2F8162690046600235141

Page Load Overview

0.99s
Total Load Time
43
HTTP Requests
6
Domains
219 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:263 chars
Detector Agreement:50%

Website Classification

Primary Category

corporate business28% confidence
Type: webapp
Method: ml+structural

All Detected Categories

corporate business
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22142.251.14.97United States
AS15169Google LLC
2176.76.21.241Walnut, California, United States
AS16509Amazon.com, Inc.
432--

Detected Technologies5

PasswordField
100%
JQueryv3.6.4
100%
Vercel
40%
HSTS
40%
Google Hosted Libraries
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AF43F8364512AD39D7A749E330D93F47746D4012E3D98067E59CE8AC87CB99B232E368

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Jhdt21ZJcGsWRTBLpscJXsnR6Uye/v+ks0R1HNQVFwSsiRfd3R84xywvVyZ6TEq2:gtIanHBDmf1Mc1tNMtc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:56791:AMMEUGIEIKxA1orIgBNAiirXBrUBccqjDQYLRAwUAYAADVSBMBKVIYFwgLEVBOLgQLgTBlKOsBCHC6DBCCBYgYwVkASngARV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8f8fef0909ef8f8
Perceptual Hash:cdc3c23c69c31ec3
Difference Hash:0402640333340224
Wavelet Hash:f0f0f0f0f090f8f8
Color Hash:#79c3d2

Other Hashes

Crop Resistant:0402640333340224

Scan History

Scan history not available

Unable to load historical scan data