Security Scan Report: 135461223.site

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 27 HTTP transactions. The main domain is 135461223.site and was registered 6 years ago.

Submitted URL: https://135461223.site/sv/2014/79778438-d433-4fbe-bfd5-0bdaf51658ac/762420/x

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

DocuSign-impersonating phishing page on a domain flagged by two threat feeds; it pushes a copy-and-paste verification code to hijack Microsoft sign-in. Do not interact.

Risk Factors (5)
Brand impersonation of DocuSign on an unrelated domain
Multi-source corroborated phishing threat-intel match on the primary domain
Verification/device-code phishing lure directing the user to Microsoft sign-in
Unranked domain presenting as a major brand
Fake document-signing pretext to induce urgency around identity verification
Domain age information unavailable

Details

Page Title

DocuSign

Scan Type

public

Domain Name Analysis

Domain '135461223.site' uses the .site top-level domain and has no subdomain. Count 9 characters in '135461223' holding 0 vowels versus 0 consonants, along with 9 digits. Tokenizing the label suggests one word: 135461223. The median word length lands at 9 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://135461223.site/sv/2014/79778438-d433-4fbe-bfd5-0bdaf51658ac/762420/x

Page Load Overview

4.87s
Total Load Time
330 KB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:411 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software58% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
58%
documentation technical
48%
corporate business
33%
government public service
31%
adult content
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7116.203.212.240Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
578.46.69.199Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
578.46.92.118Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
275--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D822C65343644429A11BEA913FE6EB0FB398D407D806953838CD4288CFCEAE195F778C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:22aiy6BjZMuraG6kxDa1fZjvc8cDaLnYd34ji5D3CgHFHCYlBYsNJCdhMF4hgwdr:lXznr5EHnGjZoPHjZnn6IIIs2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10146:aBYOKJCGpCDogDmDA0jJRFqLJMZCEkSBFajFLwEEAFHlhKh1GcECMCGIZkAEFguViCJEIAAEkNUsHEAkbE0AwAExNx3QApOU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183c1818181818
Perceptual Hash:d977747366cc8884
Difference Hash:70b2b23269b2b2b2
Wavelet Hash:803c3c3c3c3c3c3c
Color Hash:#2dd24e

Scan History

Scan history not available

Unable to load historical scan data