Security Scan: ‌ ‍ ‍0x800402 ‌ ‍ ‍0xE00160 ‌ ‍ ‍0xB00248​ ​

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ba704da8-9cc8-4f54-a20b-87e08c5f725e Domain and IP registration (RDAP)/api/v1/rdap/ba704da8-9cc8-4f54-a20b-87e08c5f725e Certificate Transparency/api/v1/ct/rucorovibo.z1.web.core.windows.net How often this domain was scanned/api/v1/domain/stats/rucorovibo.z1.web.core.windows.net Scan history for this domain/api/v1/domain/history/rucorovibo.z1.web.core.windows.net?limit=15

This website contacted 4 IPs in 2 countries across 4 domains to perform 26 HTTP transactions. The main domain is rucorovibo.z1.web.core.windows.net and was registered 2 weeks ago.

Submitted URL: https://rucorovibo.z1.web.core.windows.net/xyhq7/

Effective URL:

https://rucorovibo.z1.web.core.windows.net/xyhq7/alchemister/amerlesse...

Redirected

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Fake Microsoft Defender/Windows security alert on a cloud-storage subdomain, with obfuscated title, hostile .top domain traffic and a phishing-flagged URL shortener — a tech-support scam.

Risk Factors (5)

Impersonation of Microsoft security/support branding on a mismatched cloud-storage domain

Fake antivirus/Defender alert pressuring users to call a support number

Obfuscated page title using invisible characters and fabricated error codes

HIGH IDS alerts for hostile *.top domain traffic

Third-party resource iplog.co reported as phishing

Domain age information unavailable

Details

Page Title

‌ ‍ ‍0x800402 ‌ ‍ ‍0xE00160 ‌ ‍ ‍0xB00248 ‍‌ ‌ ‌ ‍ ‍‌ ‌

Scan Type

public

Favicon Hash

MMH3: -1779979548

MD5: bcafd5e4064f2fed368cfb39154be444

Domain Name Analysis

You're looking at domain 'rucorovibo.z1.web.core.windows.net' on the network infrastructure generic top-level domain (.net); it also runs on subdomain 'rucorovibo.z1.web.core'. The registrable portion 'windows' spans 7 characters containing 2 vowels alongside 5 consonants. Breaking it apart gives one word: windows. Expect seven characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.35s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:86,953 chars

Detector Agreement:75%

Website Classification

Primary Category

healthcare medical80% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

80%

news media journalism

63%

cryptocurrency blockchain

59%

education learning

58%

finance banking

56%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	57.150.59.36Azure · CLOUD	Sweden	AS8075Microsoft Corporation
6	172.67.187.61Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
26	4	-	-