elviro.z13.web.core.windows.net
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of elviro.z13.web.core.windows.net
This URL is a subdomain hosted on Microsoft Azure's web storage infrastructure rather than a standalone branded domain. Based on the screenshot, the page appears to present itself as an Apple support-related notice and displays a phone number alongside a message claiming an Apple Pay pre-authorization and urging the visitor to call support immediately.
The content does not appear to represent an official Apple-owned web property. Instead, it looks like a simple landing page hosted under a cloud platform subdomain, which may be used for temporary publishing or disposable campaign pages. The messaging style shown in the screenshot is consistent with pages designed to prompt urgent phone contact rather than provide normal product or account support information.
Safety Assessment for elviro.z13.web.core.windows.net
Scan telemetry is mixed. On the positive side, 0 out of 89 security engines detected malicious activity at the time of this scan, and the malware scan did not report flagged files. However, one threat database listed the URL in connection with phishing, and the page content shown in the screenshot raises additional concern because it claims an Apple-related payment issue and pressures users to call a phone number immediately.
The page also appears to reference a major consumer brand while being hosted on a generic cloud subdomain that does not appear to be an official Apple domain. That mismatch, combined with urgent account-warning language and a support phone number, may indicate a social-engineering or impersonation attempt even though broad multi-engine detections were absent at the time of this scan.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Microsoft Azure Storage infrastructure at IP address 52.239.169.129 in Boydton, United States. It presents a valid SSL/TLS certificate issued to Microsoft Corporation, with expiry in January 2027. The domain uses Azure DNS nameservers and DNSSEC appears to be unsigned.
From a technical standpoint, the use of a valid certificate and major cloud hosting does not by itself establish legitimacy, since cloud platforms can host both benign and abusive content. The scan data shows minimal page complexity, with no external links, referenced domains, or iframes detected in the sampled content.
Share your experience with this website. Was it safe? Did you encounter any issues?