VirusTotal
18 / 89
“This website domain has been seized by Microsoft”
clatteqrpq.digital — Ultimo attivo conosciuto (HTTP 302). Simulazione del marchio: Microsoft; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 18/89 (ADMINUSLabs, alphaMountain.ai, AlphaSOC, BitDefender, Dr.Web); URLQuery 4 alerts; 1 external blocklist match (CryptoFirewall); PhishDestroy score 100/100. Registrar: MarkMonitor.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
18 / 89
4 threat-system alerts
Segnala7/14
checked — no match recorded
35 community references
Segnalaprovider verdict: clean
Segnalarapporto memorizzato
Segnala Analisi completata
SegnalaChecked; no threat flag recorded
Segnala| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | www.noticeofpleadings.net |
malicious | Sinkholed |
| Quad9 DNS | clatteqrpq.digital |
malicious | Sinkholed |
| Hagezi Threat Feed | clatteqrpq.digital |
malicious | Sinkholed |
| DNS4EU | clatteqrpq.digital |
malicious | Sinkholed |
PhishDestroy identifies clatteqrpq.digital as an active Microsoft brand impersonation domain presenting elevated risk to users. This domain employs deceptive tactics to mimic Microsoft branding, including a fraudulent SSL certificate issued to 'Microsoft Corporation' and a page title falsely claiming 'This website domain has been seized by Microsoft.' Such impersonation is designed to exploit user trust in Microsoft to distribute malware, steal credentials, or deliver malicious payloads.
Security intelligence confirms this domain was registered on April 30, 2025, through MarkMonitor Inc., a registrar commonly used for legitimate domains but also exploited in fraudulent registrations. The domain resolves to IP 40.91.108.115 and has been blocked by two prominent security blocklists: OISD and Maltrail. VirusTotal analysis reveals 21 out of 95 security vendors flagged this domain as malicious or suspicious, indicating a high level of consensus among threat intelligence platforms regarding its malicious nature. The combination of a legitimate-appearing SSL certificate, brand impersonation, and blocklist presence underscores the sophistication and intent behind this fraudulent domain.
To mitigate risk from this Microsoft brand impersonation domain, users and organizations should immediately block clatteqrpq.digital at the network and endpoint levels. Update DNS and firewall rules to prevent access to this domain and its associated IP address (40.91.108.115). Conduct security awareness training to educate users on identifying brand impersonation attempts, particularly those involving false claims of domain seizure or unauthorized access. Additionally, report this domain to Microsoft’s Cybercrime Unit and relevant threat intelligence platforms to aid in its rapid takedown and inclusion in global blocklists.
Osservazioni archiviate relative al confronto tra crawler e browser per questo host, oltre a una verifica in tempo reale delle impronte digitali per i sistemi di distribuzione del traffico in stile Keitaro.
nginx/1.28.3Nota dello scanner: redirect: raw=redirect_302; http=302; via=https_proxy; location=https://www.noticeofpleadings.net/lumma/domainseizurenotice.htm; server=nginx/1.28.3
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns001.microsoftinternetsafety.netns002.microsoftinternetsafety.netLocation describes the IP network.
c2bc4d6f61ccf5134220386d922b0741488d68c507df18e54985d82c2cdf2c62agriwellness.worldaigjmr.digitalastrivee.worldbarmgek.digitalbegindecafer.worldbhgyuncovered.worldblackljjwc.runbloomingzgardens.todaybulgecont.runcampylloir.runchamelweon.digitalchemistrycworner.todaycoldshpwyb.rundatadynnamics.todayearthsymphzony.todayeasterxeen.runferrybarked.worldfirstezkpg.runfluffypxillow.todayfostinjec.todaygalxnetb.todaygetatasgop.digitalglobetrotfe.worldgoldensounew.worldhappyjh.worldhazperjurke.worldhunterinrx.runinflexcytv.digitalinterpwthc.digitaljoinfoulnz.digitallocalfarmerj.todaylsunarlandsc.digitalmachinehiub.digitalmadagaeyrk.runmaiantfuuk.runmarksmanm.todaymeerkaty.digitalmelteryb.digitalmetalfyz.digitalmetalsyo.digitalmetalupy.digitalmexratet.digitalmodmovel.digitalmodnextq.digitalmoduplifct.digitalmodupx.digitalmoldifye.digitalmoldprow.digitalmoonscik.digitalmustelxfzf.digitalnaturesartgistry.todaynetscoute.digitalnewpillr.digitalnewzeconi.digitalnightloqv.runnoblefamo.runnovapherex.digitalobeliske.digitalopenwq.digitalorbitixg.worldoreformr.digitaloreplusm.digitaloverlapseq.digitalowlflright.digitalpaincopp.digitalpaxthfinder.digitalpillowcxloud.worldpitchbcmst.digitalpixelcodey.digitalplugboth.digitalpolitewtod.runporcupineq.digitalproenhann.digitalquityt.digitalraisezx.runreflecwemy.runrelaxingxpillow.digitalreleasegjh.digitalrisevc.digitalroamers.todayrodformi.runromulusy.digitalrundowrlgr.runrushmn.digitalsacredtaxle.digitalscalemodm.digitalsceeptersong.digitalscieseandbeyond.worldscikevision.todayscriptao.digitalshiftvc.digitalshootforyou.worldsidebyafzy.digitalskylinejo.worldslothwe.digitalslowdomkaf.runsmartbitsx.digitalsmartdatac.runsmeltingt.runsnipersecrets.worldsoarxvc.runsolarnatgure.runsoliduso.digitalsolsoftt.digitalsorcery.digitalspacedbv.worldspacetimech.todaysparkiob.digitalspaxicox.todaystatibesearch.worldstylefnez.digitalsubnorrepg.runsumeriavgv.digitalswordandsr.digitaltaleweaiver.runtaskrunp.runtechguidet.digitaltendolihyy.digitalthnnkzt.digitaltiltvc.digitaltonedanswered.todaytravelio.digitaltriggerte.digitaltripfflux.worldtriphmind.worldtriremeo.digitaltrsipbeat.worldtrzipwise.digitalunbinddas.digitalunicornu.digitalvaluesads.runvalvulnsuq.runvanceteo.runvictoreqs.runvqalkyrieong.runwawrdenshire.digitalweaponrywo.digitalweaponswh.runweavegfg.digitalwebpointsl.runweldmaxi.digitalweldorae.digitalwildlnifeecho.worldwilrdadventur.digitalwizardrry.digitalwolfestandt.runwoodpeckersd.runwoodrebough.runwwwsyju.digitalxmedresp.runzestyasd.runzootechq.runSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Segnalato da 1 membro della comunità; prima osservazione il 05/05/2026
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Template-based draft · optional AI wording assistance requires separate consent
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaSegnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraControlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo