Security Scan Report: kevincloete.co.za

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is kevincloete.co.za and was registered 5 years ago.

Submitted URL: https://kevincloete.co.za/doc/index.html

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fake DocuSign-branded review page on an unrelated domain, using a contract-signing lure and anti-analysis JavaScript; no credential form detected, but brand impersonation warrants avoidance.

Risk Factors (4)
Brand impersonation of DocuSign on an unrelated domain
Document-signing lure involving a funding/payment schedule
Anti-analysis JavaScript blocking DevTools and right-click
Unranked domain inconsistent with claimed DocuSign service
Domain age information unavailable

Details

Page Title

DocuSign – Review Document

Scan Type

public

Domain Name Analysis

You're looking at domain 'kevincloete.co.za' on the South African country-code top-level domain (.co.za) with no subdomain. The second-level label 'kevincloete' is 11 characters long split between five vowels and 6 consonants. Word splitting yields three words: kevin, cloe, te. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kevincloete.co.za/doc/index.html

Page Load Overview

0.92s
Total Load Time
40 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,183 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing86% confidence
Type: static
Method: ml+structural

All Detected Categories

download file sharing
86%
government public service
82%
technology software
74%
finance banking
72%
documentation technical
70%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1196.41.123.144Midrand, Gauteng, South Africa
AS36874Cybersmart
11--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1670394AA76F320366513A1742BBFA70A3375A103910EC9157EDC53848FC5EE5A973B88

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:9pP+7Q6QZ2Kp+NvHwgcn8dSFP/SeuTDRCCWIIIIIezlje3L9+u5/ek/5sm:9F+7Q6419qeuTDRCCWIIIILzlje3L9+2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41415:EhZqKTiIBREIP4YYqJJARASpCDAYRQijJXCiRQAQAJQXAATiDWpACQyMAQEHcoMgcMKMigBkmSQt1FLwMAojCHofEVAlgYiA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:809c9c9c1c1c1c00
Perceptual Hash:99ff650066db7222
Difference Hash:72313939b9b1b180
Wavelet Hash:809c9c9c1c1c1c00
Color Hash:#4e1f93

Scan History

Scan history not available

Unable to load historical scan data