Security Scan Report: lalibation.ncclouds.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 7 domains to perform 18 HTTP transactions. The main domain is ncclouds.com and was registered 3 months ago.

Submitted URL: https://lalibation.ncclouds.com/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Fake Microsoft OneDrive file-share page on a non-Microsoft domain, using an 'identity verification' and copy-code pretext to push visitors toward a Microsoft sign-in. Brand impersonation phishing; do not enter credentials.

Risk Factors (5)
Impersonation of Microsoft OneDrive on an unrelated, non-Microsoft domain
Deceptive shared-file and 'identity verification' pretext used to drive the visitor toward a Microsoft account sign-in
Instructions to copy a code and paste it into a prompt when asked — a classic credential/session-relay handoff lure
Right-click blocking and anti-analysis JavaScript behaviour
New (85 days), unranked domain hosting brand-impersonating content
Domain age information unavailable

Details

Page Title

August Invoice - Microsoft OneDrive

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'lalibation.ncclouds.com' is registered; it also runs on subdomain 'lalibation'. The registrable portion 'ncclouds' spans 8 characters containing 2 vowels alongside 6 consonants. Splitting it apart reveals two words: nc, clouds. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lalibation.ncclouds.com/

Page Load Overview

1.13s
Total Load Time
239 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,497 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical58% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
58%
technology software
52%
corporate business
43%
download file sharing
40%
healthcare medical
39%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
95.230.194.196Germany
AS12586GHOSTnet GmbH
1142.251.14.102Google · CDNUnited States
AS15169Google LLC
1142.251.153.120Google · CDNUnited States
AS15169Google LLC
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
123.36.157.47Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
1142.251.156.120Google · CDNUnited States
AS15169Google LLC
1142.251.151.120Google · CDNUnited States
AS15169Google LLC
1172.217.115.4Google · CDNUnited States
AS15169Google LLC
1150.171.109.98Azure · CLOUDUnited States
AS8075Microsoft Corporation
1810--

Detected Technologies3

Nginxv1.24.0
40%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E8C23D22B990D81591EF99C954B3662A20FA8306C10706CCFE78E7F58BAFDADD773144

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:yf07IaI96n5EC8RJ7XfiSCumDusUCxy/dcnhprGDWZAEkGroJZUgGNFw4UaQ7s:yf0UaME8jfOSCx5nrrACADGkJZULUT7s

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28139:AEFfERsDUARNCEjhDBBNGoMGfCcBAgbiQIEvIQEWFwNBOjQ4VAIgJYMRGBAEMA5i0CiM4axEQQCCvCo1DKAMOgCwwBgA3zEE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfcfffffe7a5ff
Perceptual Hash:b3992466cc66cd66
Difference Hash:181a583228484810
Wavelet Hash:002c2c3ce4ece4c0
Color Hash:#784c3a

Other Hashes

Crop Resistant:181a583228484810

Scan History

Scan history not available

Unable to load historical scan data