Security Scan Report: fuvofepa.z14.web.core.windows.net

Redirected to:
https://fuvofepa.z14.web.core.windows.net/ctgdctopacg/index.html?phone...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 22 HTTP transactions. The main domain is windows.net and was registered 31 years ago.

Submitted URL: https://fuvofepa.z14.web.core.windows.net/?phone=050-3095-4311

Effective URL:
https://fuvofepa.z14.web.core.windows.net/ctgdctopacg/index.html?phone...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Microsoft Defender tech-support scam hosted on an Azure blob subdomain, using fabricated virus alerts and a call-center phone number to trick users into calling 'Windows support'.

Risk Factors (7)
Brand impersonation of Microsoft Windows Defender on a non-Microsoft domain
Fabricated malware infection alerts, data-theft claims and fake license-deactivation threats
Scare tactics pressuring the victim to call a premium support number
Cloud-storage hosted page (Azure blob subdomain) with unknown actual creation date
Page title '読み込みエラー' (loading error) inconsistent with genuine Microsoft security UI
Third-party IP geolocation lookup used to personalize the fake block notice
Network IDS HIGH alert for external IP-lookup domain (ipwho.is)
Domain age information unavailable

Details

Page Title

読み込みエラー

Scan Type

public

Domain Name Analysis

Domain 'fuvofepa.z14.web.core.windows.net' uses the network infrastructure generic top-level domain (.net) and includes subdomain 'fuvofepa.z14.web.core'. The registrable portion 'windows' spans 7 characters containing 2 vowels alongside 5 consonants. It segments into 1 word: windows. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fuvofepa.z14.web.core.windows.net/?phone=050-3095-4311

Page Load Overview

4.16s
Total Load Time
525 KB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:80%
Script:Mixed
Direction:ltr

Detection Details

HTML Lang Attribute:ja
Text Length:1,565 chars
Detector Agreement:100%

Website Classification

Primary Category

blog personal website100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

blog personal website
100%
documentation technical
100%
social media network
100%
government public service
100%
phishing scam
100%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
820.209.115.199Azure · CLOUDChicago, Illinois, United States
AS8075Microsoft Corporation
7104.20.44.133Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.66.175.107Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
223--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A0A2522895F6546310A28081A965AF8B3F44DE03D6172B0533BC87A2EFD7D9BDC072BD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:+bcn1IVMun2D6yRSA7MrgufgC7SgaEyX4X/MiR15XXEPThPfcRRrD5YBFn/ZRMdH:ocn1IVMunc0AOnfgGX/OpfY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21659:IReoBEGmAYQdzoQCkwfMkRAEZJZhoBqKgTGANZhElnAAAy0YzKkCkACPCF4wR2n4KgBDRSBEAUEoQAEAT8EILQwBBSIMiCMB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00000000ffffff
Perceptual Hash:8f0db8e0e3de9630
Difference Hash:70f27870d37c2b61
Wavelet Hash:ff00000000ffffff
Color Hash:#642d86

Scan History

Scan history not available

Unable to load historical scan data