Security Scan Report: www.install-grays-documents.icu

Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 6 domains to perform 9 HTTP transactions. The main domain is install-grays-documents.icu and was registered 1 month ago.

Submitted URL: https://www.install-grays-documents.icu/

AI Security Verdict

High Risk

Confidence: 89%

8
Risk Score

Fake DocuSign signing page on a 1-day-old .icu domain pushing a bogus 'Docusign Desktop' download; OpenPhish phishing report and IDS .icu alerts corroborate brand impersonation. Do not download or enter data.

Risk Factors (5)
Impersonation of the DocuSign brand on a domain that is not DocuSign's official domain
Domain registered 1 day ago (CRITICAL age category)
OpenPhish phishing report against the primary domain
Fake desktop-app download lure for a well-known e-signature service
Trust badges (ISO 27001, FedRAMP, 'bank-level encryption') used without any legitimate business evidence; legitimacy score only 10/100
Domain age information unavailable

Details

Page Title

Docusign - Download to Review & Sign Document

Scan Type

public

Domain Name Analysis

The domain 'www.install-grays-documents.icu' uses the .icu top-level domain, featuring subdomain 'www'. The registrable portion 'install-grays-documents' spans 23 characters split between 6 vowels and 15 consonants, along with two hyphens. Splitting it apart reveals 3 words: install, grays, documents. Expect seven characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

® docusign. Review and sign your document A protected document has been shared with you. To view the full contents and apply your legally binding signature, download the Docusign desktop application...

Page Load Overview

0.91s
Total Load Time
877 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:702 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing86% confidence
Type: static
Method: ml+structural

All Detected Categories

download file sharing
86%
technology software
80%
documentation technical
72%
finance banking
59%
corporate business
55%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1216.198.79.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
113.33.187.16Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
164.29.17.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
113.33.187.25Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.33.186.135Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
99--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14882D55F87F302266C0780682FBA2A013965D407D458E8693FDD5388CF8E8D0ACA37DD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:oFiGf3kiM6qswNwnOF0R1Sc9rr8CvW2Y9eON2CtNa0p3pQA2xyGcRjRfKRlmCZlB:QonjM5Xuwvja4MAKb+AnK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18335:QIHIgIhBADOJuFgQIENEIL7yEgUAMIYwJgEvUFGR8mAQmFQEhqAk1CUIqECgDZgBqQIkyEM5AAACAXkAggRGgTxxNGCWGUD8

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fcf8fc39393ff7f
Perceptual Hash:bcb1c38cc3c33c3c
Difference Hash:c0383613333700e0
Wavelet Hash:7f8f8b818193ff00
Color Hash:N/A

Other Hashes

Crop Resistant:c0383613333700e0

Scan History

Scan history not available

Unable to load historical scan data