Security Report: www.install-grays-documents.icu - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0a942f01-0780-4093-9aeb-16a335cc87f3 Domain and IP registration (RDAP)/api/v1/rdap/0a942f01-0780-4093-9aeb-16a335cc87f3How often this domain was scanned/api/v1/domain/stats/install-grays-documents.icu Scan history for this domain/api/v1/domain/history/install-grays-documents.icu?limit=15

This website contacted 7 IPs in 1 country across 6 domains to perform 9 HTTP transactions. The main domain is install-grays-documents.icu and was registered 1 month ago.

Submitted URL: https://www.install-grays-documents.icu/

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Fake DocuSign page on a ≤1-day-old .icu domain impersonating the brand and pushing a bogus 'Docusign Desktop' download. No forms, but clear brand impersonation plus IDS alerts — do not download or interact.

Risk Factors (5)

Brand impersonation of DocuSign on a non-official domain

Domain registered ≤1 day ago on a high-abuse .icu TLD

Unranked in Cisco Umbrella top 1M despite claiming to be a major brand

Lure to download a third-party executable masquerading as a DocuSign desktop client

Network IDS alerts for suspicious .icu domain resolution and TLS SNI

Domain age information unavailable

Details

Page Title

Docusign - Download to Review & Sign Document

Scan Type

public

Domain Name Analysis

Domain 'www.install-grays-documents.icu' uses the .icu top-level domain; it also runs on subdomain 'www'. The second-level label 'install-grays-documents' is 23 characters long with 6 vowels and 15 consonants, plus two hyphens. Splitting it apart reveals 3 words: install, grays, documents. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

® docusign. Review and sign your document A protected document has been shared with you. To view the full contents and apply your legally binding signature, download the Docusign desktop application...

Page Load Overview

6.21s

Total Load Time

877 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:702 chars

Detector Agreement:100%

Website Classification

Primary Category

download file sharing86% confidence

Type: static

Method: ml+structural

All Detected Categories

download file sharing

86%

technology software

80%

documentation technical

72%

finance banking

59%

corporate business

55%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	216.198.79.1Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	13.33.187.16Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
1	13.33.187.102Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
1	3.33.186.135Aws · CLOUD	United States	AS16509Amazon.com, Inc.
9	7	-	-