Security Report: secure-server-hub--no-replysignin.replit.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/273cc617-7262-4a20-b55d-58619e7e00c0 Domain and IP registration (RDAP)/api/v1/rdap/273cc617-7262-4a20-b55d-58619e7e00c0How often this domain was scanned/api/v1/domain/stats/secure-server-hub--no-replysignin.replit.app Scan history for this domain/api/v1/domain/history/secure-server-hub--no-replysignin.replit.app?limit=15

This website contacted 18 IPs in 2 countries across 11 domains to perform 14 HTTP transactions. The main domain is replit.app and was registered 5 years ago.

Submitted URL: https://secure-server-hub--no-replysignin.replit.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

DocuSign-branded phishing page on a free Replit subdomain: five email/password forms harvest credentials and an embedded Telegram bot token can exfiltrate them. Do not enter any credentials.

Risk Factors (5)

Brand impersonation: DocuSign branding, favicon and styling on a domain that is not DocuSign's

Five credential-capture forms (email + password) on a free shared hosting subdomain

Telegram bot token embedded in page script — exfiltration channel for submitted credentials

Hidden hidden_ip fields capturing visitor IP for each submission

Misleading document-access pretext ('view your document') used to solicit email provider logins

Domain age information unavailable

Details

Page Title

Docusign | #1 in Electronic Signature and Intelligent Agreement Managemen

Scan Type

public

Favicon Hash

MMH3: 259021225

MD5: 47878c4532b1eec5302d1b89b9d2d7aa

Domain Name Analysis

You're looking at domain 'secure-server-hub--no-replysignin.replit.app' on the application-focused generic top-level domain (.app) with subdomain 'secure-server-hub--no-replysignin'. Count 6 characters in 'replit' holding 2 vowels versus 4 consonants. Word splitting yields two words: rep, lit. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

® docusign Home DASHBOARDS dl My dashboard dl Administrator dashboard REPORT TYPE > All (16) vy Envelope (8) Enve Enve Envel Enve Enve Envel lope Report lope Recipient Report lope Statu...

Page Load Overview

1.05s

Total Load Time

344 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:815 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software69% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

69%

documentation technical

66%

phishing scam

31%

government public service

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	172.67.68.11Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	184.24.77.57Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	104.18.40.18Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.14.100Google · CDN	United States	AS15169Google LLC
0	172.67.74.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	13.35.58.72Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
0	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	18	-	-