Security Scan Report: jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site

Redirected to:
https://jsqnjzyg.login.microsoftonline-billing-verification-secured-he...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 28 IPs in 3 countries across 22 domains to perform 49 HTTP transactions. The main domain is cpanel.site and was registered 2 years 2 months ago.

Submitted URL: https://jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site

Effective URL:
https://jsqnjzyg.login.microsoftonline-billing-verification-secured-he...
Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Deceptive cPanel subdomain dressed up as a Microsoft login/billing portal with an 'organization not found' lure pushing users to a login step. No forms on this page, but the hostname and template mismatch are definitive brand impersonation.

Risk Factors (5)
Brand impersonation of Microsoft on a domain Microsoft does not control
Deceptive hostname combining 'login.microsoftonline', 'billing-verification' and 'secured-help' with a raw IP label
Account-not-found bait text designed to funnel users into a login step
Mismatched page title (Project.co template) on a purported Microsoft login flow
Free cPanel shared-hosting subdomain used for an identity/billing brand
Domain age information unavailable

Details

Page Title

Organization Not Found - Project.co

Scan Type

public

Domain Name Analysis

The domain 'jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site' uses the .site top-level domain; it also runs on subdomain 'jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243'. The registrable portion 'cpanel' spans 6 characters containing 2 vowels alongside 4 consonants. Word splitting yields two words: c, panel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

The account URL: jsqnjzyg.login.microsoftonline-billing- verification-secured-help.161-35-102- 243.cpanel.site Doesn't exist. Please click the button below to login and find your account.

Page Load Overview

5.61s
Total Load Time
4.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:233 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking74% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
74%
technology software
46%
government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22161.35.102.243North Bergen, New Jersey, United States
AS14061DigitalOcean, LLC
1104.18.40.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1104.26.1.40Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.13.97Google · CDNUnited States
AS15169Google LLC
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
118.64.211.98Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.41.202.146Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4928--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ABF483529C12006FE8613C6A35C2BE587DEEA2118F904C76F4329C513DF6D5EB0AF7A6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Zci7WB7zI7WIn7DyjoPMm7NUPPfTLm9boN7VcWqN979KvIpqqx7MKeA6qdp7LKX1:IA9MPXm9bmoRe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:751255:ARRKADqwIByJAoHGyVCJBDCAkCkSCzMA5CAFGA1SIvEEACAZyBREIIagRuDQNuDUIcwhKo0hSkMw1Ab0YgEaFg0CjZqFEgAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818180000
Perceptual Hash:9936669999666633
Difference Hash:100014b2b2b24c30
Wavelet Hash:00003c3c3c3c0000
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data