desbloquear-servicios-microsoft[.]imi[.]lat

This site, hosted at desbloquear-servicios-microsoft.imi.lat, impersonates the Microsoft brand and is categorized as a tech support scam. The page title displays "Cargando..." (Spanish for "Loading..."), which is a common technique used to give the impression of an active process while the site attempts to trick visitors into believing their system requires technical assistance. The primary threat posed is that users may be coerced into contacting fraudulent support services, potentially leading to financial loss or unauthorized access to their systems.

Technical evidence confirms the site's malicious nature. VirusTotal reports 17 out of 95 security vendors flagged the domain as malicious, with specific detections from ADMINUSLabs, Criminal IP, BitDefender, CyRadar, and ESET. The domain was created on 2025-01-17, registered through Porkbun LLC, and resolves to IP address 185.27.134.151 in Great Britain, hosted on AS34119 Wildcard UK Limited. SSL encryption is provided by Let's Encrypt (certificate R13). The nameservers are ns1.byet.org, ns2.byet.org, ns3.byet.org, ns4.byet.org, and ns5.byet.org.

The site is currently offline and inaccessible. Risk assessment scores are extremely high, with GridinSoft trust at 0 out of 100, ScamAdviser trust at 1 out of 100, and a DOM risk score of 10. Based on the provided data, this domain poses a critical threat and should be blocked at all network levels.