ScanMalware.com

Security Scan Report: subzero.ultiprotime.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2aee1513-5654-42f7-8693-c60563e1db9fDomain and IP registration (RDAP)/api/v1/rdap/2aee1513-5654-42f7-8693-c60563e1db9fHow often this domain was scanned/api/v1/domain/stats/subzero.ultiprotime.comScan history for this domain/api/v1/domain/history/subzero.ultiprotime.com?limit=15
This website contacted 2 IPs in 1 country across 2 domains to perform 22 HTTP transactions. The main domain is ultiprotime.com and was registered 20 years ago.

Submitted URL: https://subzero.ultiprotime.com

The Cisco Umbrella rank of the primary domain is #45,779 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Legitimate UKG Pro / UltiPro time-and-attendance sign-in on the vendor's own long-established domain; same-origin login only, no Indicators of Compromise or impersonation.

Safety Factors (4)
20-year-old domain with established Umbrella ranking
Login form is same-origin to the operator's own domain with no third-party data sink
No Indicators of Compromise, malware, IDS or kit-roster findings
No brand impersonation — page self-brands as the platform it belongs to
Domain age information unavailable

Details

Page Title

UKG Pro Time & Attendance - Login

Scan Type

public

Domain Name Analysis

Domain 'subzero.ultiprotime.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'subzero'. The core label 'ultiprotime' covers 11 characters holding five vowels versus 6 consonants. Splitting it apart reveals 4 words: ul, ti, pro, time. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

UKG User ID * CL Password * LC About [“] Change Password

Page Load Overview

3.77s
Total Load Time
351 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

Text Length:80 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service41% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
41%
corporate business
40%
adult content
36%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11135.84.75.71United States
AS17289ULTIMATE SOFTWARE GROUP
1134.117.44.195Google · CDNKansas City, Missouri, United States
AS396982Google LLC
222--

Detected Technologies5

PasswordField
100%
JQueryv261461911
100%
Java
50%
jQuery UI
40%
JavaServer Pagesv3.1
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11214C7E663B0D798088EE6EB4FB5D45DA14D61AFD2D350A0726FCB9447838C2F90B670

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Em7X1beZU9FOnxrneaJzI+6ULv7NrHIdf8CREMdpgk2MmCn:TeiYDcD2O

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:204203:iOKIEAhqSAUUbGgJgpU4FenCRVCisjJLHIlALShgpWyGAF8BTBiwQQIZipGDyQABIAQyWRUBCBHEASEShZQKLJiQMgQKcYLC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7ffe7e7ffff
Perceptual Hash:b398cc6733986633
Difference Hash:000008080c0c0008
Wavelet Hash:3030242427273f3f
Color Hash:N/A

Other Hashes

Crop Resistant:000008080c0c0008

Scan History

Scan history not available

Unable to load historical scan data