Security Scan: DocuSign

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/222025aa-b6b4-470d-9c09-0748ae332c50 Domain and IP registration (RDAP)/api/v1/rdap/222025aa-b6b4-470d-9c09-0748ae332c50How often this domain was scanned/api/v1/domain/stats/vapedragonsquad.co.za Scan history for this domain/api/v1/domain/history/vapedragonsquad.co.za?limit=15

This website contacted 6 IPs in 2 countries across 5 domains to perform 6 HTTP transactions. The main domain is vapedragonsquad.co.za and was registered 3 years 9 months ago.

Submitted URL: https://vapedragonsquad.co.za/newall.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

DocuSign-branded credential phishing page hosted on the unrelated, likely compromised domain vapedragonsquad.co.za, with a password-harvesting form and a Telegram exfiltration token in its script.

Risk Factors (5)

Impersonation of DocuSign on a non-official domain (vapedragonsquad.co.za)

Credential-harvesting login form (password + email fields)

Telegram bot token embedded in inline script — credential exfiltration conduit

Hacked/repurposed established domain being used to host a phishing page

Kit-style multilingual error strings and fake session-expiry lure

Domain age information unavailable

Details

Page Title

DocuSign

Scan Type

public

Domain Name Analysis

You're looking at domain 'vapedragonsquad.co.za' on the South African country-code top-level domain (.co.za). Count 15 characters in 'vapedragonsquad' holding six vowels versus nine consonants. It segments into 4 words: v, ape, dragon, squad. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Your email login time has expired, Please log in again. Email address: Enter Email

Page Load Overview

2.26s

Total Load Time

92 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:ko

Text Length:266 chars

Detector Agreement:100%

Language mismatch: Declared as ko but detected as en

Website Classification

Primary Category

documentation technical61% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

61%

news media journalism

54%

phishing scam

50%

government public service

45%

adult content

44%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	41.72.149.125	Johannesburg, Gauteng, South Africa	AS37153Xneelo (Pty) Ltd
1	142.250.154.95Google · CDN	United States	AS15169Google LLC
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	142.250.154.94Google · CDN	United States	AS15169Google LLC
1	104.18.24.163Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.25.163Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	6	-	-