Security Scan: Microsoft Verification

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/303ff6a7-2c95-4f8e-87d6-3c42cfa3a132 Domain and IP registration (RDAP)/api/v1/rdap/303ff6a7-2c95-4f8e-87d6-3c42cfa3a132How often this domain was scanned/api/v1/domain/stats/atocha.cc Scan history for this domain/api/v1/domain/history/atocha.cc?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 28 HTTP transactions. The main domain is atocha.cc and was registered 8 months ago.

Submitted URL: https://atocha.cc/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed ClickFix attack: a fake 'Microsoft Verification' page impersonating Microsoft that tricks visitors into pasting an attacker-controlled payload into Windows Terminal. Known malicious kit; do not interact.

Risk Factors (7)

Known malicious ClickFix phishing kit identified by analyst-vetted roster and YARA

Brand impersonation of Microsoft on a non-Microsoft domain

Social-engineering instructions to open Windows Terminal and paste a 'verification code'

Decoy verification code with a split display/copied payload (clipboard replacement)

Domain unranked in Cisco Umbrella with no legitimacy signals (10/100)

Network IDS HIGH alerts, including Spamhaus DROP-listed traffic

Single-source threat-intel match on both the domain and its IP

Domain age information unavailable

Details

Page Title

Microsoft Verification

Scan Type

public

Favicon Hash

MMH3: 1552193099

MD5: 723d5424f6e521dd3a70c9600b3173b4

Domain Name Analysis

The domain name 'atocha.cc' uses the .cc country-code top-level domain with no subdomain. Its registrable label 'atocha' stretches across 6 characters with three vowels and three consonants. It segments into 1 word: atocha. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.75s

Total Load Time

449 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:931 chars

Detector Agreement:75%

Website Classification

Primary Category

technology software64% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

64%

documentation technical

41%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	91.92.242.215	Amsterdam, North Holland, Netherlands	AS202412Omegatech LTD
9	142.251.14.95Google · CDN	United States	AS15169Google LLC
9	142.251.14.94Google · CDN	United States	AS15169Google LLC
28	3	-	-