Security Scan Report: dusayotu.z5.web.core.windows.net

Redirected to:
https://dusayotu.z5.web.core.windows.net/eey0kr/x09kop0hf4ul.html
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 18 HTTP transactions. The main domain is windows.net and was registered 31 years ago.

Submitted URL: https://dusayotu.z5.web.core.windows.net/eey0kr/

Effective URL:
https://dusayotu.z5.web.core.windows.net/eey0kr/x09kop0hf4ul.html
Redirected

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Azure blob page cloaking a fake 'Windows Defender/Windows Update' security alert that pushes a support phone number — tech-support scam. No forms or malware, but Microsoft brand impersonation on an unrelated host drives it to HIGH_RISK.

Risk Factors (6)
Impersonation of Microsoft Windows security branding on a non-Microsoft domain
Support phone number solicited from a fake security alert (tech support scam pattern)
Anonymous cloud-storage hosting with cloaked/redirected content
Cross-origin browser fetch to unranked third-party domain
Third-party phishing threat-intel match (iplog.co, single-source) and URL-shortener IDS alerts
Right-click / context-menu blocking JavaScript
Domain age information unavailable

Details

Page Title

採用情報 | 求人

Scan Type

public

Domain Name Analysis

Domain 'dusayotu.z5.web.core.windows.net' uses the network infrastructure generic top-level domain (.net) and includes subdomain 'dusayotu.z5.web.core'. The core label 'windows' covers 7 characters split between two vowels and 5 consonants. Tokenizing the label suggests one word: windows. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dusayotu.z5.web.core.windows.net/eey0kr/

Page Load Overview

4.80s
Total Load Time
828 KB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:80%
Script:Mixed
Direction:ltr

Detection Details

HTML Lang Attribute:ja
Text Length:96,687 chars
Detector Agreement:67%

Website Classification

Primary Category

healthcare medical68% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

healthcare medical
68%
news media journalism
52%
cryptocurrency blockchain
46%
adult content
40%
technology software
39%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6135.130.121.40Azure · CLOUDUnited States
AS8075Microsoft Corporation
4188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
184--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T174F3AD1C9B8C3836062352676D58A2C9927ECE33E1A41EC5307E855D7FD87ACCE0D6B9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:lG+Mx5UScQY/+MtQYhSIgQQHOly88qBTSnPFu73BTqO2SiFtdvtVKdlFuH:w52LIOMT9taRTq5btdvtViuH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:166250:OBTOAyAgavQ0CGI4IMQCSIwgAEhQECwMcREJaAJDA9EYWAISJghoRUxQYxcgIQAR0gGslqCBBFYojy5RAvTIOYBEY0AIJZmM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:283c3c3c3c3c0101
Perceptual Hash:cbd730f37428552c
Difference Hash:c9e9e1e1e1e9f3bb
Wavelet Hash:3c3c7c3c7c7c3901
Color Hash:#652d86

Scan History

Scan history not available

Unable to load historical scan data