Security Scan Report: secureviewingss.kasekamche.ir

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is kasekamche.ir.

Submitted URL: https://secureviewingss.kasekamche.ir/microdocurespondsing/

AI Security Verdict

Low Risk

Confidence: 82%

3
Risk Score

Impersonates DocuSign/Microsoft on an unrelated .ir domain, collecting work email via a fake secure-message login. Do not enter credentials; treat as credential phishing.

Risk Factors (4)
Brand impersonation of DocuSign and Microsoft on an unrelated .ir domain.
Credential-collection form requesting work email with a fake Microsoft sign-in button.
Deceptive 'awaiting document' lure designed to prompt immediate action.
Form submits to a non-official domain path rather than DocuSign or Microsoft infrastructure.
Safety Factors (6)
No password fields were detected.
No payment fields were detected.
No JavaScript malware or hunting-rule patterns detected.
No network IDS alerts detected.
No Indicators of Compromise matches or cross-origin credential exfiltration detected.
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 3
Domain age information unavailable

Details

Page Title

DocuSign + Microsoft · agreement

Scan Type

public

Domain Name Analysis

Domain 'secureviewingss.kasekamche.ir' uses the Iranian country-code top-level domain (.ir), featuring subdomain 'secureviewingss'. The registrable portion 'kasekamche' spans 10 characters with four vowels and six consonants. Segmentation suggests 4 words: k, as, ekam, che. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Bp Microsoft Everything you need to agree You have an awaiting document A document has been prepared and is awaiting your attention. Please review and sign securely. Work email | & you@company.com...

Page Load Overview

0.86s
Total Load Time
5 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:414 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
75%
adult content
68%
corporate business
66%
documentation technical
57%
government public service
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
245.79.193.127Atlanta, Georgia, United States
AS63949Akamai Connected Cloud
21--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19192731AA6F305527803D4A87BB76B8962909007CD07CC293FDE5768CF8C795B993B9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Vx5o1AbWq9Qc0tV8VH1VfsC96Q9mc1/QoiiJofpHj29QE+1029ncbFlnTX9xncQE:Vx74iuH5+Z+tngIIIVvIIIGLinS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19720:OyAAErd1ScxCuLoQRYKMCgBigkAZDFsMASillU5gIKyEDC2C6cIkDkERarIAgRgQQAEBs4VAcxZACDRq6qoYBXBlIYgEGZUI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:defce4e4ece8d0bc
Perceptual Hash:f3a4cc99994c3333
Difference Hash:30304c085a1a2060
Wavelet Hash:dcf8e0e0e8f8c0bc
Color Hash:N/A

Other Hashes

Crop Resistant:30304c085a1a2060

Scan History

Scan history not available

Unable to load historical scan data