DocuSign phishing & impersonation
Tech & Clouddocusign.com
114
Impersonation sightings
60
Distinct hosts
2026-09-30
Last detected
2
Official domains
ScanMalware watches every scanned site for signs it is impersonating DocuSign — the brand name in the page title or screenshot text, the brand's logo/favicon on a non-official host, and our AI analysis naming the brand. A match on a host outside DocuSign's official domains is recorded below.
Official domains
docusign.comdocusign.net
Sites impersonating DocuSign
60 hosts · repeat scans of the same host are grouped
| Site | Verdicts | Last seen | Actions |
|---|---|---|---|
| pub-c53d218c4f704f2495ca7a15b052e24c.r2.dev DocuSign Login - Enter your password to sign in | RulesHigh RiskAIConfirmed Scam Credential Phishing on object storage | 2026-09-30 | View scan → |
| pub-c83f9fae7dea4ca09fefa3e6ff17706f.r2.dev DocuSign Login - Enter your password to sign in | RulesHigh RiskAIConfirmed Scam Credential Phishing on object storage | 2026-09-30 | View scan → |
| teams.sharepoint.co.it | RulesHigh RiskAIModerate Risk | 2026-09-29 | View scan → |
| 8gpv-tszw-jyrx.phil-heron-zoomdrain-com-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIConfirmed Scam IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +3 more | 2026-09-29 | View scan → |
| na4-docusignv1-52fe74b0160e448ceb80dfbd0a1159128ace1fb4dc97c9b1.edgeone.dev CertifiedDeliveryNotification | RulesHigh RiskAIHigh Risk | 2026-09-28 seen 2× | View scan → |
| docusign.bkinterim.com Index of / | RulesMedium RiskAIHigh Risk | 2026-09-25 | View scan → |
| duco-hptr.onrender.com Connexion | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-09-25 | View scan → |
| login.sicdoc.com Accessing Secure Document... | RulesMedium RiskAIModerate Risk | 2026-09-24 | View scan → |
| doeusignsafe.vercel.app Sign In - DocuSign | RulesHigh RiskAIHigh Risk | 2026-09-24 seen 16× | View scan → |
| quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev DocuSign - Verify Your Identity | RulesLow RiskAIHigh Risk | 2026-09-24 | View scan → |
| ptai.in Human Verification | RulesLow RiskAIHigh Risk | 2026-09-23 | View scan → |
| test-mu-six-17.vercel.app e-sign | RulesMaliciousAIConfirmed Scam | 2026-09-23 | View scan → |
| portalvox.com.br Human Verification | RulesLow RiskAIModerate Risk | 2026-09-22 | View scan → |
| docusign-server.github.io DocuSign – Document Ready | RulesMaliciousAIHigh Risk IDS: ET PHISHING Request for Possible Docusign Phishing Hosted on Github.io | 2026-09-20 | View scan → |
| geotehnica.com e-sign | RulesLow RiskAIConfirmed Scam | 2026-09-18 | View scan → |
| feminist-brown-plkm1dgi.edgeone.dev Docusign | #1 in Electronic Signature and Intelligent Agreement Managemen | RulesHigh RiskAIConfirmed Scam | 2026-09-18 seen 2× | View scan → |
| dhofareng.com e-sign | RulesLow RiskAIConfirmed Scam | 2026-09-17 seen 5× | View scan → |
| docusign.topmediapp.net docusign.topmediapp.net | RulesMedium RiskAIHigh Risk | 2026-09-17 seen 3× | View scan → |
| awarenesss.cfd Sign Document - SecureSign | RulesHigh RiskAIConfirmed Scam | 2026-09-16 | View scan → |
| account.docusign.us.ci Verifying you are human | RulesMedium RiskAIConfirmed Scam | 2026-09-14 | View scan → |
| docrevlew.onrender.com Document - hYeako | RulesMaliciousAIHigh Risk | 2026-09-11 seen 2× | View scan → |
| docusignsetup.icu Docusign - Download to Review & Sign Document | RulesLow RiskAIModerate Risk | 2026-09-10 | View scan → |
| grvtdocusignsetup.icu Docusign - Download to Review & Sign Document | RulesLow RiskAIModerate Risk | 2026-09-10 | View scan → |
| montenegroput.me Document Blocked – Install DocuSign Desktop | RulesLow RiskAIModerate Risk | 2026-09-10 | View scan → |
| bitunixdocusign.icu Docusign - Download to Review & Sign Document | RulesMedium RiskAIModerate Risk | 2026-09-10 | View scan → |
| bmqbeauty.com.br Log in to Docusign | RulesLow RiskAIModerate Risk | 2026-09-10 | View scan → |
| bwdocusignsetup.icu Docusign - Download to Review & Sign Document | RulesLow RiskAIModerate Risk | 2026-09-10 | View scan → |
| biketrain.net DocuSign Login - Enter email to start sign in | RulesLow RiskAIModerate Risk | 2026-09-10 | View scan → |
| 3cud-je09-uln1.accounting-coralridgetowerssouth-com-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-09-06 seen 4× | View scan → |
| mhkx-1tsc-e9j4.xftjksrjk.workers.dev DocuSign - Review Document | RulesMaliciousAIHigh Risk Known Kit: Cloudflare Workers Phishing Kits (device-code / EvilToken & brand lures) (cloudflare_workers_phishing) | 2026-09-06 | View scan → |
| 8yaz-k3zj-br05.cebsgroupsreceivables-ar-caesars-com-s-account.workers.dev DocuSign - Review Document | RulesMaliciousAIConfirmed Scam Known Kit: Cloudflare Workers Phishing Kits (device-code / EvilToken & brand lures) (cloudflare_workers_phishing) | 2026-09-05 seen 2× | View scan → |
| c60u-ufhn-0uxb.office-sanisolutions123-onmicrosoft-com-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-09-05 | View scan → |
| y3ep-qkqx-9l1g.tnt-eb1.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +3 more | 2026-09-05 | View scan → |
| fy5w-nxh6-g2ho.joliver-powershopscentralia-com-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-09-05 seen 2× | View scan → |
| 7wk0-c0co-0t2l.dturcotte-predictms-com-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-09-05 | View scan → |
| 0s8k-x5e9-qtge.aflores-rorealty-com-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-09-05 | View scan → |
| mn3w-fny9-jyay.dibafef289.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-09-05 | View scan → |
| gvhh-nc8x-hlli.kevartsbouvier-addisoncountypcc-org-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-08-29 | View scan → |
| b4pj-f4yx-2vn7.mark-mxzeilbeck-com-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-08-29 | View scan → |
| qg77-ljfe-7fsc.chris-titanbooths-com-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-08-29 | View scan → |
| pub-4e9d559e11c54314b7639d20c3d13682.r2.dev DocuSign Login - Enter your password to sign in | RulesHigh RiskAIHigh Risk Credential Phishing on object storage | 2026-08-29 seen 11× | View scan → |
| pub-d68525cbc6144dcaaac2fc0354aa17dd.r2.dev DocuSign - Review Document | RulesLow RiskAIModerate Risk | 2026-08-29 seen 8× | View scan → |
| flow-portal-38uw.p-2f66mze8.workers.dev DocuSign - Review Document | RulesMedium RiskAIHigh Risk | 2026-08-28 | View scan → |
| njj.standard.us-east-1.oortstorages.com Docusign | #1 in Electronic Signature and Intelligent Agreement Managemen | RulesHigh RiskAIHigh Risk | 2026-08-26 seen 3× | View scan → |
| social2.vulidity.de Bei Docusign anmelden | RulesLow RiskAIHigh Risk | 2026-08-23 seen 3× | View scan → |
| www.viniciusfrancoadvocacia.com.br Document - gaLD | RulesLow RiskAIHigh Risk | 2026-08-19 | View scan → |
| wjdo-u2dx-kfh0.workspace-trello-document-proton-me-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-08-19 | View scan → |
| a5c33326-c5c4-8159-b0a9-docusign.rajesh-das1010.workers.dev DocuSign - Review Document | RulesMedium RiskAIHigh Risk | 2026-08-15 | View scan → |
| corpsolnaciente.com Document - lBw | RulesLow RiskAIHigh Risk | 2026-08-04 | View scan → |
| 13aw2r55bh.dual3231-1.workers.dev cd - DocuSign | RulesMedium RiskAIHigh Risk | 2026-08-04 | View scan → |
| landing.qlobbi.com Docusign login - enter email to continue | RulesLow RiskAIHigh Risk | 2026-07-27 | View scan → |
| envisn.onrender.com Document - sNgsS | RulesHigh RiskAIHigh Risk Possible Docusign Phishing on cloud hosting | 2026-07-22 seen 2× | View scan → |
| aspeducators.onrender.com Document - sNgsS | RulesHigh RiskAIHigh Risk Possible Docusign Phishing on cloud hosting | 2026-07-22 seen 2× | View scan → |
| helpdeskpilot.onrender.com Document - sNgsS | RulesMaliciousAIConfirmed Scam | 2026-07-22 seen 2× | View scan → |
| us1-files-document-storage-files-s9046-k590577.storage-id-406936.workers.dev DocuSign - Review Document | RulesMedium RiskAIHigh Risk | 2026-07-22 | View scan → |
| 9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-07-13 | View scan → |
| outer-pink-uep6emb5-dpghxhzc85yu.edgeone.app DocuSign - Review Document | RulesLow RiskAIModerate Risk | 2026-07-10 | View scan → |
| xmlf-ag9n-th11.mgeorgatos-netw1-com-s-account.workers.dev DocuSign - Review Document | RulesHigh RiskAIHigh Risk IDS: ET PHISHING Generic Device Code Landing Page 2026-04-07 +1 more | 2026-07-07 | View scan → |
| server-index-page--eefostar.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk Possible Microsoft 365 Phishing | 2026-07-02 seen 2× | View scan → |
| pub-5de0eeee09ff443eac563eb154d4aa6c.r2.dev DocuSign Share File | RulesLow RiskAIConfirmed Scam | 2025-12-05 | View scan → |
4 further hosts are not listed: the DocuSign name appeared on them, but both our rule engine and our AI analysis rated the page harmless, so we do not publish them as impersonation.