DocuSign phishing & impersonation
Tech & Clouddocusign.com
230
Sites impersonating it
116
New in the last 30 days
3
Campaigns
2026-11-14
Last detected
2026-08-172026-11-14
Where these sites are hosted
117 on free hosting platforms, 134 on 106 registered domains
workers.dev · 34r2.dev · 14pages.dev · 8s3.us-east-1.amazonaws.com · 7onrender.com · 6vercel.app · 6.com · 45.icu · 11.net · 9.top · 9.dev · 9.cc · 6
Campaigns
Phishing kits we track as hunts, and how many of the sites below each one covers. A site can belong to more than one.
34 of 230 sites · last 2026-11-03
1 related hunt
2 of 230 sites · last 2026-11-09
iCloud sign-in reverse proxy (adversary-in-the-middle) behind e-signature lures (hunting rule)critical
1 of 230 site · last 2026-10-30
Official domains
docusign.comdocusign.net
A match on a host outside these domains is recorded as impersonation. We look for the brand name in the address, page title and screenshot, its logo on a non-official site, and our AI analysis naming it.
Also known as
d0cusign
Sites impersonating DocuSign
50 of 251 sites · newest first · repeat scans of a site are grouped
Showing all sites, including 21 lower-risk copies that neither our rule engine nor our AI analysis rates high risk. Hide them
RulesLow RiskAIHigh Risk“DocuSign” in the hostnameAI analysis
RulesMedium RiskAIHigh Risk“DocuSign” in the hostnameAI analysisPage text
es-d-90904830820261112-01a1c6ad-a76a-77eb-b1ee-50bad1817522.codepen. dev Docusign | #1 in Electronic Signature and Intelligent Agreement Managemen2026-11-13RulesHigh RiskAIConfirmed Scam“DocuSign” in the page titlePage text
RulesHigh RiskAIConfirmed Scam“DocuSign” in the page titleIdentical page
hakanj-byggoinstallation-se-verifierar-delade-dokument-beviljas.s3. us-east-1. amazonaws. com Docusign - Accès au Document2026-11-12 · seen 2×RulesLow RiskAIHigh Risk“DocuSign” in the page titleAI analysisPage text
RulesLow RiskAIModerate Risklower risk“DocuSign” in the hostnameAI analysis
RulesLow RiskAIHigh Risk“DocuSign” in the page titleAI analysisPage text
RulesLow RiskAIHigh Risk“DocuSign” in the hostnameAI analysis
RulesMaliciousAIHigh RiskIdentified as DocuSign by our AI analysisAI analysis
lgutierrez-ateliersperrault-fr-rapport-amzn.s3. us-east-1. amazonaws. com Docusign - Accès au Document2026-11-11 · seen 2×RulesMedium RiskAIHigh Risk“DocuSign” in the page titleAI analysisPage text
pub-c53d218c4f704f2495ca7a15b052e24c.r2. dev DocuSign Login - Enter your password to sign in2026-11-11 · seen 8×RulesHigh RiskAIConfirmed ScamCredential Phishing on object storage“DocuSign” in the page titleAI analysisPage text
pub-c83f9fae7dea4ca09fefa3e6ff17706f.r2. dev DocuSign Login - Enter your password to sign in2026-11-11 · seen 7×RulesHigh RiskAIConfirmed ScamCredential Phishing on object storage“DocuSign” in the page titlePage text
RulesLow RiskAIHigh Risk“DocuSign” in the page titleAI analysis
RulesLow RiskAIHigh Risk“DocuSign” in the page titleAI analysisPage text
RulesHigh RiskAIHigh RiskPage sends data to a Telegram bot from disposable hostingIdentified as DocuSign by our AI analysisAI analysis
RulesHigh RiskAIHigh RiskPage sends data to a Telegram bot from disposable hostingIdentified as DocuSign by our AI analysisAI analysis
RulesMedium RiskAIHigh Risk“DocuSign” in the page titleIdentical page
RulesLow RiskAIHigh Risk“DocuSign” in the page titleAI analysis
RulesMedium RiskAIHigh Risk“DocuSign” in the page titleAI analysisPage text
na4-docusignv1-52fe74b0160e448ceb80dfbd0a1159128ace1fb4dc97c9b1.edgeone. dev CertifiedDeliveryNotification2026-11-09 · seen 8×RulesHigh RiskAIHigh Risk“DocuSign” in the hostnameAI analysis
RulesHigh RiskAIHigh Risk“DocuSign” in the hostnameAI analysis
RulesLow RiskAIHigh Risk“DocuSign” in the hostnameAI analysis
RulesLow RiskAIHigh Risk“DocuSign” in the page titleAI analysis
RulesHigh RiskAIConfirmed Scam“DocuSign” in the page titlePage text
RulesHigh RiskAIConfirmed Scam“DocuSign” in the hostnameAI analysis
RulesMaliciousAIConfirmed Scam“DocuSign” in the page titlePage text
RulesLow RiskAIConfirmed Scam“DocuSign” in the page titlePage text
RulesLow RiskAIHigh RiskIdentified as DocuSign by our AI analysisAI analysis
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“DocuSign” in page or screenshot textScreenshot text
RulesLow RiskAIHigh Risk“DocuSign” in the page titleAI analysis
RulesLow RiskAIConfirmed Scam“DocuSign” in the page titlePage text
RulesHigh RiskAIHigh Risk“DocuSign” in the page titleAI analysisIdentical pagePage text
drive-shared-bucketfiles-drive.s3. us-east-1. amazonaws. com Docusign - Accès au Document2026-11-05 · seen 2×RulesMedium RiskAIHigh Risk“DocuSign” in the page titleAI analysisPage text
RulesLow RiskAIHigh Risk“DocuSign” in the page titleAI analysis
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“DocuSign” in the page titlePage text
RulesMedium RiskAIConfirmed Scam“DocuSign” in the page titlePage text
RulesLow RiskAIHigh Risk“DocuSign” in the page titleAI analysis
RulesHigh RiskAIConfirmed ScamPage sends data to a Telegram bot from disposable hosting“DocuSign” in the hostnamePage text
RulesLow RiskAIModerate Risklower risk“DocuSign” in the hostnameAI analysisPage text
RulesHigh RiskAIConfirmed Scam“DocuSign” in the page titleIdentical page
wahala-otcssz9-ec23bd.teaqueen112-a4c. workers. dev DocuSign | Action Required: Identity Verification2026-11-03 · seen 2×RulesHigh RiskAIHigh RiskDevice-code phishing“DocuSign” in the page titleAI analysisPage text
amzndocumentportal-mysharepointfolder.s3. us-east-1. amazonaws. com Docusign - Accès au Document2026-11-03 · seen 2×RulesMedium RiskAIHigh Risk“DocuSign” in the page titleAI analysisPage text
RulesMedium RiskAIHigh Risk“DocuSign” in the page titlePage text
RulesLow RiskAIConfirmed Scam“DocuSign” in the page titleIdentical page
RulesMedium RiskAIConfirmed Scam“DocuSign” in the page titleIdentical page
RulesHigh RiskAIHigh Risk“DocuSign” in the hostnameAI analysis
RulesLow RiskAIHigh Risk“DocuSign” in the page titleAI analysis
RulesMaliciousAIConfirmed Scam“DocuSign” in the hostnameAI analysisPage text
RulesMaliciousAIConfirmed Scam“DocuSign” in page or screenshot textScreenshot text
RulesMaliciousAIHigh RiskIdentified as DocuSign by our AI analysisAI analysis
12 further sites are not listed at all: the DocuSign name appeared on them, but we judged them not to be impersonation (both our rule engine and our AI analysis rated the page harmless, the page only mentions the brand, or it is a copy of another public website).