Security Scan Report: fururefif.z1.web.core.windows.net

Redirected to:
https://fururefif.z1.web.core.windows.net/ctgdctopacg/index.html?phone...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 22 HTTP transactions. The main domain is windows.net and was registered 31 years ago.

Submitted URL: https://fururefif.z1.web.core.windows.net/?phone=050-3095-4311

Effective URL:
https://fururefif.z1.web.core.windows.net/ctgdctopacg/index.html?phone...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Classic Microsoft-branded tech support scam: fake Windows Defender infection alerts and a phone number (050-3095-4311) on a non-Microsoft Azure subdomain, urging victims to call and hand over credentials.

Risk Factors (6)
Brand impersonation of Microsoft on a non-Microsoft support domain
Fake Windows Defender / SmartScreen malware-detection alerts designed to induce panic
Urgent instruction to phone a premium-looking support number (050-3095-4311)
Threats of license deactivation and data theft to prevent the user from closing the page
Credential-entry fields displayed in the same interface as the fake security warning
External IP-geolocation lookup used to personalise the scare screen
Domain age information unavailable

Details

Page Title

読み込みエラー

Scan Type

public

Domain Name Analysis

Within the network infrastructure generic top-level domain (.net), 'fururefif.z1.web.core.windows.net' is registered and includes subdomain 'fururefif.z1.web.core'. The core label 'windows' covers 7 characters with two vowels and five consonants. Tokenizing the label suggests one word: windows. Expect seven characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fururefif.z1.web.core.windows.net/?phone=050-3095-4311

Page Load Overview

2.13s
Total Load Time
525 KB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:80%
Script:Mixed
Direction:ltr

Detection Details

HTML Lang Attribute:ja
Text Length:1,565 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
100%
blog personal website
100%
government public service
100%
social media network
100%
phishing scam
100%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
820.150.53.1Azure · CLOUDOslo, Oslo, Norway
AS8075Microsoft Corporation
7172.66.175.107Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.20.44.133Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
223--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T125A2532895F6546310A28081A965AF8B3F44DE03D6172B0533BC87A2EFD7D9BDC072BD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:+bcn1IVMSn2D6yRSA7MrgufgC7SgaEyX4X/MiR15XXEPThPfcRRrD5YBFn/ZRMdH:ocn1IVMSnc0AOnfgGX/OpfY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21658:RU4wdlczgQBQAgIb34HpLhSWE6CBAFAEFJEJ0gBhHWCAKCoIaEBYzAkCiiwUjglIBgBgQgigb66NQGQsTpUAoAwGJjILExVp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00000000ffffff
Perceptual Hash:8f05b8e1e3de9630
Difference Hash:68f27070d37c2b61
Wavelet Hash:ff00000000ffffff
Color Hash:#812d86

Scan History

Scan history not available

Unable to load historical scan data