Security Scan Report: aggiornamentocodiceotparuba.space

Response type:JavaScript filetext/javascriptHTTP 200The address returns a script file. A browser shows its source code rather than running it.
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is aggiornamentocodiceotparuba.space and was registered 1 week ago.

Submitted URL: http://aggiornamentocodiceotparuba.space/arubaspidindex1_files/polyfills-CHJLKLPT.js.download

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Angular polyfills JavaScript served from a lookalike domain whose name and path impersonate Aruba and its SPID OTP login; the file itself is benign, but it is an asset of a likely phishing kit. Avoid.

Risk Factors (3)
Deceptive hostname imitating the Aruba brand combined with an OTP-update lure
Directory path referencing an Aruba SPID sign-in index on a domain that is not aruba.it
Phishing-kit style mirrored asset folder (.js.download extension typical of saved login pages)
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'aggiornamentocodiceotparuba.space' uses the .space top-level domain and has no subdomain. Its registrable label 'aggiornamentocodiceotparuba' stretches across 27 characters containing 13 vowels alongside 14 consonants. Word splitting yields ten words: a, gg, i, ornament, o, cod, ice, ot, p, aruba. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

// node_modules/zone. js/fesm2015/zone. js var global = globalThis; function _symbol__(name) { const symbolPrefix = global["_Zone_symbol_prefix"] || "__zone_symbol__"; return symbolPrefix + name; t fu...

Page Load Overview

0.67s
Total Load Time
19 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:89,730 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software36% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
36%
documentation technical
28%
phishing/scam
20%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
274.208.139.213United States
AS8560IONOS SE
21--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F393808D6BF32169C063717E4B8FA216743590437E1CCE98BD8C9B902F12425D2E6FAC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:nGlHtMkCAfZp2n7WNbWeM/8WhP9JfJsyYw+QNlU+Z:nGlNMkCAfZpq6J3wu+Z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:91553:uECNQBBwYCYAAAIpXeAcKEosImQGdnmCb+92xYGkBMhNEQZCJwgR6xQAwgRIzMQsaAAACVNsQOGBGIHg8MBMgQAAArrCO1C0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f1f7f3f3f7f1f
Perceptual Hash:830618879fe01f7f
Difference Hash:e0e0e1c0f0e080f0
Wavelet Hash:1e1f003e1e3e7e0e
Color Hash:N/A

Other Hashes

Crop Resistant:e0e0e1c0f0e080f0

Scan History

Scan history not available

Unable to load historical scan data