ScanMalware.com

Security Scan Report: takobannopuerto.blob.core.windows.net

Redirected to: https://arubabuckets3cdn.blob.core.windows.net/managehosting/webm.html

Submitted: Nov 21, 2025, 7:02:40 AMCompleted: Nov 21, 2025, 7:05:11 AMpubliccompleted
Loading additional data...

Summary

This website contacted 16 IPs in 3 countries across 7 domains to perform 26 HTTP transactions. The main domain is arubabuckets3cdn.blob.core.windows.net.

Submitted URL: https://takobannopuerto.blob.core.windows.net/pf3dvr3tnyz/mhjaKdr.html

Effective URL: https://arubabuckets3cdn.blob.core.windows.net/managehosting/webm.htmlRedirected

The Cisco Umbrella rank of the primary domain is #44 of the top 1 million websitesTop 100 Site

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Phishing page impersonating Aruba Webmail on a cloud storage domain; confirmed scam.

Risk Factors
Cloud storage hosting with password fields
Brand impersonation of Aruba
New/unknown domain age
Credential harvesting form
Use of a generic storage URL instead of official Aruba domain
Domain age information unavailable

Details

Page Title

Aruba.it - Caricamento in corso

Scan Type

public

Language

🇮🇹

Italian

(36% confidence)

Category

unknown

(0%)

Domain Information

The domain 'takobannopuerto.blob.core.windows.net' uses the network infrastructure generic top-level domain (.net) and includes subdomain 'takobannopuerto.blob.core'. Its registrable label 'windows' stretches across 7 characters containing two vowels alongside five consonants. Breaking it apart gives one word: windows. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://takobannopuerto.blob.core.windows.net/pf3dvr3tnyz/mhjaKdr.html

Page Load Overview

0.87s
Total Load Time
26
HTTP Requests
7
Domains
608 KB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:36%
Script:Latin
Direction:ltr

Detection Details

Language Code:it
Detection Confidence:36%
Script Type:Latin
HTML Lang Attribute:en
Text Length:434 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as it

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1620.209.87.193Milan, Lombardy, Italy
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
3151.101.193.229San Francisco, California, United States
AS54113FASTLY
2104.17.24.14United States
AS13335CLOUDFLARENET
2142.250.186.99United States
AS15169GOOGLE
1104.16.174.226United States
AS13335CLOUDFLARENET
1142.250.181.227United States
AS15169GOOGLE
1142.250.185.234United States
AS15169GOOGLE
162.149.186.150Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
12606:4700::6811:180eUnited States
AS13335CLOUDFLARENET
12606:4700::6810:aee2United States
AS13335CLOUDFLARENET
2616--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T190712F2792B304266C97927967EB670B32A19443D64FDE243FCC62488FC4BE495A23CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Hk8cIO/0wtq/fBFtDR4P0+4SfcnVW8wF3P1MUaXF1FNSh2kQpES99lxABuV:HUIOjYBFAPeeYY8wnMUaXn362HDAm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3550:KEACgEKhAQBEAAAACCAiAAEBgCSJAADFiACAiEAAAABiBAgEAAAIAIAAAEQAAIEBiI0AUAgIAEQEBACBQhQAKAgIABAAQAAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000183c3c180000
Perceptual Hash:9b93644c9b3333cc
Difference Hash:0000282a2a280000
Wavelet Hash:f0f0f8f8f8f8c0c0
Color Hash:#c5bb87

Other Hashes

Crop Resistant:0000282a2a280000

Scan History

Scan history not available

Unable to load historical scan data