Security Scan: e-sign

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/40bc8a31-9210-4e82-b351-7d4911d7f5c7 Domain and IP registration (RDAP)/api/v1/rdap/40bc8a31-9210-4e82-b351-7d4911d7f5c7How often this domain was scanned/api/v1/domain/stats/piedrasdecolon.com.ar Scan history for this domain/api/v1/domain/history/piedrasdecolon.com.ar?limit=15

This website contacted 13 IPs in 3 countries across 7 domains to perform 20 HTTP transactions. The main domain is piedrasdecolon.com.ar.

Submitted URL: https://piedrasdecolon.com.ar/docusign

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Confirmed malicious: an aged domain is repurposed as a fake DocuSign 'e-sign' page pushing a bogus PDF download, with a CRITICAL IDS alert for RMM payload delivery and multi-feed phishing intel on the primary domain.

Risk Factors (5)

Phishing IoC on the primary domain corroborated by 2 independent threat-intel feeds

CRITICAL IDS alert for an RMM payload delivery page (malware dropper behaviour)

Impersonation of a DocuSign/e-signature document-sharing workflow on a non-DocuSign domain

Deceptive fake-file-download UX directly tied to a path named '/docusign'

Garbled OCR text and dynamic code (1 eval call) on an otherwise minimal page

Domain age information unavailable

Details

Page Title

e-sign

Scan Type

public

Domain Name Analysis

The domain name 'piedrasdecolon.com.ar' uses the Argentine country-code top-level domain (.com.ar) while skipping any subdomain. Its registrable label 'piedrasdecolon' stretches across 14 characters with 6 vowels and eight consonants. It segments into 4 words: pie, dras, de, colon. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.29s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:4,333 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical65% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

documentation technical

65%

finance banking

58%

healthcare medical

57%

adult content

49%

news media journalism

46%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	167.250.5.47	Argentina	AS264649NUT HOST SRL
1	142.251.127.95Google · CDN	United States	AS15169Google LLC
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	45.43.142.3	United Kingdom	AS16276OVH SAS
1	142.251.110.94Google · CDN	United States	AS15169Google LLC
1	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
20	13	-	-