Security Scan: WIndows Err 2V7HJ9

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/243c44fa-388f-4d48-a42b-fae3ab513fe7 Domain and IP registration (RDAP)/api/v1/rdap/243c44fa-388f-4d48-a42b-fae3ab513fe7How often this domain was scanned/api/v1/domain/stats/rubarodav.z1.web.core.windows.net Scan history for this domain/api/v1/domain/history/rubarodav.z1.web.core.windows.net?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 18 HTTP transactions. The main domain is windows.net and was registered 31 years ago.

Submitted URL: https://rubarodav.z1.web.core.windows.net/?phone=

Effective URL:

https://rubarodav.z1.web.core.windows.net/gx/index.html?phone=

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake Microsoft/Windows Defender alert hosted on Azure blob storage that claims the PC is infected and blocked, then pushes victims to call a bogus 'Windows Support' phone number. Confirmed tech-support scam (Safe Browsing Social Engineering hit).

Risk Factors (5)

Brand impersonation of Microsoft / Windows Defender on an unrelated cloud-storage subdomain

Google Safe Browsing Social Engineering threat detected

Fabricated system-infection alert with urgent 'access blocked' and identity-theft threats

Pressure to phone a 'support' number, a hallmark of tech-support fraud

Hosted as a throwaway tenant on shared Azure blob storage with no attributable creation date

Domain age information unavailable

Details

Page Title

WIndows Err 2V7HJ9

Scan Type

public

Favicon Hash

MMH3: -676268013

MD5: acb05ebcd5f488fc99169cff02b6dd04

Domain Name Analysis

The domain name 'rubarodav.z1.web.core.windows.net' uses the network infrastructure generic top-level domain (.net), featuring subdomain 'rubarodav.z1.web.core'. Its registrable label 'windows' stretches across 7 characters split between two vowels and five consonants. Tokenizing the label suggests 1 word: windows. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.38s

Total Load Time

957 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,898 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software85% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

85%

social media network

70%

documentation technical

68%

phishing scam

63%

government public service

59%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	57.150.189.164Azure · CLOUD	Phoenix, Arizona, United States	AS8075Microsoft Corporation
9	172.66.175.107Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	2	-	-