Security Scan: WIndows Err 2V7HJ9

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2bacd7f5-d8fb-46b2-88a8-60786b448906 Domain and IP registration (RDAP)/api/v1/rdap/2bacd7f5-d8fb-46b2-88a8-60786b448906How often this domain was scanned/api/v1/domain/stats/gasevinul.z1.web.core.windows.net Scan history for this domain/api/v1/domain/history/gasevinul.z1.web.core.windows.net?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 25 HTTP transactions. The main domain is windows.net and was registered 31 years ago.

Submitted URL: https://gasevinul.z1.web.core.windows.net/?phone=

Effective URL:

https://gasevinul.z1.web.core.windows.net/gx/index.html?phone=

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed tech-support scam: a fake Microsoft Windows Defender alert on an Azure blob-storage host falsely claims Trojan infection and pushes victims to call a bogus 'Windows Support' number. Safe Browsing flags it for social engineering.

Risk Factors (5)

Fake antivirus/Windows Defender security alert with fabricated infection and error codes

Impersonation of Microsoft Windows Defender on an unrelated cloud-storage subdomain

Urgent 'call now' phone-support lure with threats of identity theft and suspended Windows registration

Hosted as free content on a shared .core.windows.net blob storage namespace (unknown page age, no attributable reputation)

Google Safe Browsing Social Engineering hit confirms malicious intent

Domain age information unavailable

Details

Page Title

WIndows Err 2V7HJ9

Scan Type

public

Domain Name Analysis

The domain 'gasevinul.z1.web.core.windows.net' uses the network infrastructure generic top-level domain (.net), featuring subdomain 'gasevinul.z1.web.core'. The registrable portion 'windows' spans 7 characters containing two vowels alongside 5 consonants. It segments into one word: windows. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.42s

Total Load Time

988 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,428 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software50% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

50%

government public service

48%

documentation technical

41%

phishing scam

37%

adult content

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	20.150.121.129Azure · CLOUD	Oslo, Oslo, Norway	AS8075Microsoft Corporation
12	172.66.175.107Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
25	2	-	-

Detected Technologies2

JQueryv1.4.4

100%

Azure

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D2042C3C136BCEBEC8F3309BD805A359D56E8F67DBD4689635AFA6000FD2835918614B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:1B2J5cevEf9iSQRURxrYCnSaB3amG8ku4dEjIy:1B2HceAZQR8xrYCnSaB33G89qWIy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:190176:UklDBGAgQSFSJ0kAA3MNq1EmgjEaBtjQFsAgQCEoACAwgwBRC+o1I2ksOAFNCsgAnEAgIcikEa3CBABGQL8ipGIQAJaDmhaD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c3c3c2c3c3901

Perceptual Hash:cbc33cf374ac5520

Difference Hash:c9c9e9e1c9c9731f

Wavelet Hash:3c3c3c3c3c7c3f01

Color Hash:#8c40bf

Other Hashes

Crop Resistant:939bc68ce3139b90,b0b296a6a682b6ba,c9c9e9e1c9c9731f,8013accccc334394,b9a585611c1a1a1a

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: gasevinul.z1.web.core.windows.net