Security Scan: e-sign

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/68519108-f112-4bf7-a597-65d81ef2355a Domain and IP registration (RDAP)/api/v1/rdap/68519108-f112-4bf7-a597-65d81ef2355a Certificate Transparency/api/v1/ct/geotehnica.com How often this domain was scanned/api/v1/domain/stats/geotehnica.com Scan history for this domain/api/v1/domain/history/geotehnica.com?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is geotehnica.com and was registered 19 years ago.

Submitted URL: http://www.geotehnica.com/docusignreader/eDocusign.php

Effective URL:

https://www.geotehnica.com/docusignreader/e-sign.php

Redirected

AI Security Verdict

Moderate Risk

Confidence: 65%

Risk Score

Single-source phishing report and fake e-sign download lure on an aged domain indicate likely phishing/malware; avoid downloading or interacting.

Risk Factors (4)

Single-source threat-intel phishing report on the primary domain

Suspicious e-sign themed URL path referencing DocuSignReader

Page pushes download of an attachment instead of legitimate e-signature functionality

Minimal page content consistent with a phishing or malware lure

Safety Factors (6)

Domain is 7077 days old (registered 2007-05-03)

No credential, password, or payment forms detected

No YARA malware patterns detected

No network IDS alerts detected

No cross-origin credential exfiltration detected

Established domain (7077 days old) with no strong malicious indicators — risk clamped from 7 to 5

Domain age information unavailable

Details

Page Title

e-sign

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.geotehnica.com' on the commercial generic top-level domain (.com) with subdomain 'www'. Its registrable label 'geotehnica' stretches across 10 characters split between 5 vowels and 5 consonants. Tokenizing the label suggests 3 words: geo, teh, nica. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.09s

Total Load Time

24 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:100 chars

Detector Agreement:100%

Website Classification

Primary Category

download file sharing50% confidence

Type: static

Method: ml+structural

All Detected Categories

download file sharing

50%

documentation technical

42%

government public service

38%

healthcare medical

37%

news media journalism

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	94.26.91.102	Bulgaria	AS48452Telco power Ltd
4	1	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T188A1B6A365F30422A58B88217FF6864A3D6C8543944FD9443B9CA70CCFC169ED663BCD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TkaI8ktkK7if+GtpYRfWnr1OzSnqUlsqjPDZDGVHVoegvM+pkg3q:waI8k6KeFYRuiSnPlh7Fg1oeCM+p6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4913:gYAJQKOIGwIgyAwBgCAGAAoghIkFKA9EBQDQjgFsIAJQKIMAIogFwoAWAQRMHTYgSEQBiAlCEAMBEcAGED8AgAABAEBAGAAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3e7c3e7ffffff

Perceptual Hash:b6368ccc3c3199c7

Difference Hash:2e0e0c0e0c000000

Wavelet Hash:8080c3c3e4fcfcfc

Color Hash:#40bfa2

Other Hashes

Crop Resistant:2e0e0c0e0c000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: www.geotehnica.com