Security Scan: WIndows Err 2V7HJ9

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d7548456-b9d0-4016-80e3-e5504b22eba5 Domain and IP registration (RDAP)/api/v1/rdap/d7548456-b9d0-4016-80e3-e5504b22eba5How often this domain was scanned/api/v1/domain/stats/rubarodav.z1.web.core.windows.net Scan history for this domain/api/v1/domain/history/rubarodav.z1.web.core.windows.net?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 22 HTTP transactions. The main domain is windows.net and was registered 31 years ago.

Submitted URL: https://rubarodav.z1.web.core.windows.net/gx/index.html?phone=%2B1-844-959-2863

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake Microsoft/Windows Defender alert hosted on Azure blob storage, using scareware text and a call-back number (+1-844-959-2863); flagged by Google Safe Browsing for social engineering. Classic tech support scam.

Risk Factors (5)

Fake Microsoft/Windows Defender security alert page (brand impersonation on non-Microsoft domain)

Google Safe Browsing Social Engineering detection

Instruction to call a third-party phone number to 'remove' a fake infection

Cloud-storage/instant-subdomain hosting of unknown creation age behind a well-known apex

Cross-origin call to ipwho.is consistent with victim IP/geo fingerprinting

Domain age information unavailable

Details

Page Title

WIndows Err 2V7HJ9

Scan Type

public

Domain Name Analysis

The domain name 'rubarodav.z1.web.core.windows.net' uses the network infrastructure generic top-level domain (.net), featuring subdomain 'rubarodav.z1.web.core'. The registrable portion 'windows' spans 7 characters split between 2 vowels and 5 consonants. Tokenizing the label suggests 1 word: windows. Expect seven characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.37s

Total Load Time

975 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,508 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software50% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

50%

government public service

48%

documentation technical

41%

phishing scam

37%

adult content

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	57.150.189.164Azure · CLOUD	Phoenix, Arizona, United States	AS8075Microsoft Corporation
11	104.20.44.133Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
22	2	-	-