Security Scan: PDF Document Viewer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/09c25854-93be-477e-a6bf-37255447d413 Domain and IP registration (RDAP)/api/v1/rdap/09c25854-93be-477e-a6bf-37255447d413 Certificate Transparency/api/v1/ct/security-server-landing-page--lvahlgren.replit.app How often this domain was scanned/api/v1/domain/stats/security-server-landing-page--lvahlgren.replit.app Scan history for this domain/api/v1/domain/history/security-server-landing-page--lvahlgren.replit.app?limit=15

This website contacted 6 IPs in 2 countries across 4 domains to perform 5 HTTP transactions. The main domain is security-server-landing-page--lvahlgren.replit.app and was registered 15 years ago.

Submitted URL: https://security-server-landing-page--lvahlgren.replit.app/

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

DocuSign phishing page on a free replit.app subdomain. It impersonates DocuSign's 'document is locked' sign-in flow and harvests email/password credentials; never enter your login.

Risk Factors (6)

Brand impersonation of DocuSign on a mismatched, non-official domain

Credential (email + password) login form presented as a protected document viewer

Document-unlock social engineering ('This document is protected and intended only for your access')

Cross-origin network request to api.ipify.org for IP harvesting

Inline scripts using encoding/decoding functions

Unranked domain on anonymous free hosting platform

Domain age information unavailable

Details

Page Title

PDF Document Viewer

Scan Type

public

Favicon Hash

MMH3: -625742104

MD5: f8d37b117bae8ae7bbe64c17a2899755

Domain Name Analysis

You're looking at domain 'security-server-landing-page--lvahlgren.replit.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'security-server-landing-page--lvahlgren'. The core label 'replit' covers 6 characters with 2 vowels and four consonants. Breaking it apart gives two words: rep, lit. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.40s

Total Load Time

117 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:450 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software83% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

83%

documentation technical

42%

adult content

35%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	23.194.190.152Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	146.75.121.137Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
0	23.32.238.80Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	104.16.79.6Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	6	-	-