Security Scan Report: piedrasdecolon.com.ar

Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 6 domains to perform 14 HTTP transactions. The main domain is piedrasdecolon.com.ar.

Submitted URL: https://piedrasdecolon.com.ar/docusign

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake DocuSign e-sign page on an unrelated domain; multi-source phishing intel plus a critical IDS RMM payload-delivery alert and a fake PDF download lure. Do not download the attachment.

Risk Factors (5)
Brand impersonation of DocuSign on an unrelated .com.ar domain
Multi-source corroborated phishing threat-intel match on the primary domain
Critical IDS alert for RMM payload delivery
Deceptive file-download lure presenting a fake PDF contract
Cross-origin IP geolocation beacon to ipapi.co
Domain age information unavailable

Details

Page Title

e-sign

Scan Type

public

Domain Name Analysis

Within the Argentine country-code top-level domain (.com.ar), 'piedrasdecolon.com.ar' is registered. Its registrable label 'piedrasdecolon' stretches across 14 characters with six vowels and eight consonants. Breaking it apart gives four words: pie, dras, de, colon. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://piedrasdecolon.com.ar/docusign

Page Load Overview

2.26s
Total Load Time
522 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:413 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical60% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
60%
corporate business
56%
government public service
52%
download file sharing
36%
news media journalism
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3167.250.5.47Argentina
AS264649NUT HOST SRL
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.5United Kingdom
AS16276OVH SAS
1142.251.20.94Google · CDNUnited States
AS15169Google LLC
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.65.229Fastly · CDNUnited States
AS54113Fastly, Inc.
145.43.142.3United Kingdom
AS16276OVH SAS
145.43.142.4United Kingdom
AS16276OVH SAS
1412--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CE72E86B9BF700166C0390A42BF75A0A3661E413D406DDB93FDE1290DF8E9E4E99778C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:Brw5x9LfodiPAa2cgvNauCsMbCiDisiTsGLsw:+x9LfoYPAa2rvNSsMbrmhTswsw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17021:AQCRRcgTDAtcBCYBIAEYUBiGWrisLgaB4lgAKIwYQhRk1MEIRiY7FkoVCgVQNwzQTEAISEiU0goAIgOQBwiXoAgNAkACEKAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00467e7e6e7e7e7e
Perceptual Hash:903e2e2e2eaaaaab
Difference Hash:8c9c9c9e9e96acb8
Wavelet Hash:00466e46467e7e7e
Color Hash:#d2512d

Scan History

Scan history not available

Unable to load historical scan data