Security Scan Report: rubarodav.z1.web.core.windows.net

Redirected to:
https://rubarodav.z1.web.core.windows.net/gx/index.html?phone=%2B1-844...
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 23 HTTP transactions. The main domain is windows.net and was registered 31 years ago.

Submitted URL: https://rubarodav.z1.web.core.windows.net/?phone=%2B1-844-959-2863

Effective URL:
https://rubarodav.z1.web.core.windows.net/gx/index.html?phone=%2B1-844...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake Microsoft/Windows Defender alert hosted on Azure blob storage, using scareware text and a call-back number (+1-844-959-2863); flagged by Google Safe Browsing for social engineering. Classic tech support scam.

Risk Factors (5)
Fake Microsoft/Windows Defender security alert page (brand impersonation on non-Microsoft domain)
Google Safe Browsing Social Engineering detection
Instruction to call a third-party phone number to 'remove' a fake infection
Cloud-storage/instant-subdomain hosting of unknown creation age behind a well-known apex
Cross-origin call to ipwho.is consistent with victim IP/geo fingerprinting
Domain age information unavailable

Details

Page Title

WIndows Err 2V7HJ9

Scan Type

public

Domain Name Analysis

You're looking at domain 'rubarodav.z1.web.core.windows.net' on the network infrastructure generic top-level domain (.net) with subdomain 'rubarodav.z1.web.core'. The registrable portion 'windows' spans 7 characters split between two vowels and 5 consonants. Tokenizing the label suggests 1 word: windows. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rubarodav.z1.web.core.windows.net/?phone=%2B1-844-959-2863

Page Load Overview

75.53s
Total Load Time
958 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,492 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software50% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
50%
government public service
48%
documentation technical
41%
phishing scam
37%
adult content
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1257.150.189.164Azure · CLOUDPhoenix, Arizona, United States
AS8075Microsoft Corporation
11172.66.175.107Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
232--

Detected Technologies2

JQueryv1.4.4
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T136042C3C136BCEBEC8F3309BD805A359D56E8F67DBD4689635AFA6000FD2835918614B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:1B2J5cevEf9iSQRURxrYCnSwBYamG8ku4dEjIy:1B2HceAZQR8xrYCnSwBY3G89qWIy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:190251:JELCCECEqQkWgJQWQANCIIQQUJGNBAAiFBAKw4UJiQlaMqJYWKlBoieIkgWghIAAGIwrIlsAKWgIRBOAAhsRpQA7b6AGpFgI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c3c3c3c3c3901
Perceptual Hash:cbc33cb374ac5528
Difference Hash:c9c9e9e1c9c9731f
Wavelet Hash:3c3c3c3c3c7c3f01
Color Hash:#ac6953

Scan History

Scan history not available

Unable to load historical scan data