ScanMalware.com

Security Scan Report: brimsharedfile.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/49276f84-1039-46ae-a259-9fe09de0e232Domain and IP registration (RDAP)/api/v1/rdap/49276f84-1039-46ae-a259-9fe09de0e232How often this domain was scanned/api/v1/domain/stats/brimsharedfile.comScan history for this domain/api/v1/domain/history/brimsharedfile.com?limit=15
This website contacted 5 IPs in 1 country across 3 domains to perform 13 HTTP transactions. The main domain is brimsharedfile.com and was registered 4 weeks ago.

Submitted URL: https://brimsharedfile.com/d/docusign-project-new-pro-c3485c25

Downloads:

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake DocuSign 'secure download' page on a 14-day-old domain that auto-downloads a ScreenConnect .msi installer from Supabase — brand impersonation used for malware/RAT delivery.

Risk Factors (6)
Impersonation of DocuSign on an unrelated, 14-day-old domain
Automatic executable (.msi) download served from an unranked Supabase subdomain
Remote-access client (ScreenConnect) delivered via a fake 'shared document' pretext
Deceptive progress/verification messaging to induce installation
OCR shows a misspelled 'DecuSign' header, inconsistent with a genuine brand
Domain not present in Cisco Umbrella top 1M despite brand claim
Domain age information unavailable

Details

Page Title

DocuSign — Secure Download

Scan Type

public

Domain Name Analysis

You're looking at domain 'brimsharedfile.com' on the commercial generic top-level domain (.com) and has no subdomain. The core label 'brimsharedfile' covers 14 characters containing five vowels alongside 9 consonants. Segmentation suggests three words: brim, shared, file. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

DecuSign Docusign Download DocuSign to view your document A protected document has been shared with you and to sign it, please download and install the Docusign application. ‘Secure download - Scre...

Page Load Overview

1.28s
Total Load Time
210 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:288 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing71% confidence
Type: static
Method: ml+structural

All Detected Categories

download file sharing
71%
technology software
48%
documentation technical
44%
news media journalism
39%
healthcare medical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
575.2.60.5Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2172.67.73.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.38.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.6.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.64.149.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
135--

Detected Technologies3

Bolt.new
100%
Netlify
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1105155A341214D1B11638488E4A4FF3CE286D14AC749D959B1FD41A9FFD9C52CDE31D8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nQKZ2GtIjh/SjcQGRUrdWxFEgeAO8ckRZA2k:nQKZsaMRUrcxFEzAokRZA2k

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3111:ABABIAAoIABkAQAAAgBABAFEDRAOQAgABAGCESIACAAAQBJAQgTAAIAAEAAIAAAEAEAAQiQgEAEgAgAA0AAQqAAgCAQAgAgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffff38383dfffff
Perceptual Hash:bc64c39a3c6cc792
Difference Hash:041006363634000c
Wavelet Hash:f0f0f381818fff00
Color Hash:N/A

Other Hashes

Crop Resistant:041006363634000c

Scan History

Scan history not available

Unable to load historical scan data