Security Scan: WIndows Err 2V7HJ9

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f672d172-9d89-4a97-bf9f-5269eeb7a3ca Domain and IP registration (RDAP)/api/v1/rdap/f672d172-9d89-4a97-bf9f-5269eeb7a3caHow often this domain was scanned/api/v1/domain/stats/rubarodav.z1.web.core.windows.net Scan history for this domain/api/v1/domain/history/rubarodav.z1.web.core.windows.net?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 22 HTTP transactions. The main domain is windows.net and was registered 31 years ago.

Submitted URL: https://rubarodav.z1.web.core.windows.net/gx/index.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake Windows Defender 'PC blocked / infected' alert on an Azure bucket impersonating Microsoft, demanding the victim call a support number. Google Safe Browsing flags it for social engineering — a textbook tech-support scam.

Risk Factors (6)

Fake operating-system security alert and fake malware scan results (Trojan.DNSCharge, Trojan.Dropper.Autoit, PUPs) presented as real

Brand impersonation of Microsoft / Windows Defender on a non-Microsoft domain

Fear and urgency language ('By closing this window... your Windows registration suspended')

Phone-callback social engineering ('Call Windows Support', engineer-guided removal by phone)

Google Safe Browsing Social Engineering detection

Obfuscated/hex-encoded page content and external IP-geolocation lookup of the visitor

Domain age information unavailable

Details

Page Title

WIndows Err 2V7HJ9

Scan Type

public

Domain Name Analysis

Domain 'rubarodav.z1.web.core.windows.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'rubarodav.z1.web.core'. The core label 'windows' covers 7 characters split between two vowels and 5 consonants. Tokenizing the label suggests one word: windows. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.35s

Total Load Time

961 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,404 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software50% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

50%

government public service

48%

documentation technical

41%

phishing scam

37%

adult content

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	57.150.189.164Azure · CLOUD	Phoenix, Arizona, United States	AS8075Microsoft Corporation
11	172.66.175.107Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
22	2	-	-