Security Scan Report: arubaordinifatura.blob.core.windows.net

Site favicon
Submitted: Oct 9, 2025, 4:20:09 PMCompleted: Oct 9, 2025, 4:21:42 PMpubliccompleted
Loading additional data...

Summary

This website contacted 17 IPs in 3 countries across 6 domains to perform 37 HTTP transactions. The main domain is arubaordinifatura.blob.core.windows.net and was registered NaN years ago.

Submitted URL: https://arubaordinifatura.blob.core.windows.net/fy76stezlxodpoc41xf84sw7/webm.html

The Cisco Umbrella rank of the primary domain is #31 of the top 1 million websitesTop 100 Site

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Phishing page hosted on Azure blob storage, impersonating Aruba login – confirmed scam.

Risk Factors
Cloud storage domain used to serve a credential‑harvesting page
Password field collected on a storage URL
Impersonation of a legitimate hosting provider (Aruba) on an unrelated domain
Form submits credentials to a third‑party site (firemarsrl.it)
Absence of noindex tag on a phishing login page
Domain age information unavailable

Details

Page Title

Servizio Hosting - Arub

Scan Type

public

Language

🇮🇹

Italian

(50% confidence)

Category

technology software

(61%)

Domain Information

The domain 'arubaordinifatura.blob.core.windows.net' uses the network infrastructure generic top-level domain (.net), featuring subdomain 'arubaordinifatura.blob.core'. The core label 'windows' covers 7 characters containing two vowels alongside 5 consonants. Splitting it apart reveals one word: windows. Median word length comes out to 7 characters. 'windows' most often appears in English. Secondary signals appear in Chinese (Pinyin) and Catalan. Net impression: English phrase with single-word simplicity.

Screenshot

Security scan screenshot of https://arubaordinifatura.blob.core.windows.net/fy76stezlxodpoc41xf84sw7/webm.html

Page Load Overview

56.29s
Total Load Time
37
HTTP Requests
6
Domains
2.3 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:it
Detection Confidence:50%
Script Type:Latin
HTML Lang Attribute:it-IT
Text Length:528 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software61% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
61%
documentation technical
28%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.19.148.8United States
AS13335CLOUDFLARENET
2185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
2142.250.185.99United States
AS15169GOOGLE
220.209.87.193Milan, Lombardy, Italy
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
2142.250.185.106United States
AS15169GOOGLE
2104.19.147.8United States
AS13335CLOUDFLARENET
223.56.205.206Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
22a00:1450:4001:82b::2003UnknownUnknown
22400:52e0:1e00:2::1330:1UnknownUnknown
22a02:26f0:3500:2a6::f09UnknownUnknown
3717--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13DA2443D9694C778DDA286ECDF7390B4D08E94A9D1E1C781A3BDC47023D29D8F60E899

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:2ZRRHR94KB4PmSaMpkmZRBRTl+LTlM+33li5xYhMXvRgioiFiWiR4+hYHD:2ZXHR94KB4PzauZm3o5xdfF0nRUD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22664:SATAgCRBcMs6QJguaBOUSAgGJQDUlTAjaQHKNqUgAqCNmwkQJWxQVUi0YmBYADE8korgYwoCQJAIgAMJAuCSZYggTZIqKBEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data