Security Report: violaoeguitarrapiox.com.br - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6c0a699a-9175-4e74-88ed-ec9d49f20ea6 Domain and IP registration (RDAP)/api/v1/rdap/6c0a699a-9175-4e74-88ed-ec9d49f20ea6How often this domain was scanned/api/v1/domain/stats/violaoeguitarrapiox.com.br Scan history for this domain/api/v1/domain/history/violaoeguitarrapiox.com.br?limit=15

This website contacted 9 IPs in 4 countries across 7 domains to perform 13 HTTP transactions. The main domain is violaoeguitarrapiox.com.br and was registered 9 years ago.

Submitted URL: https://violaoeguitarrapiox.com.br/Document_update/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Fake DocuSign document portal on an unrelated, likely compromised domain, pushing a bogus 'old version' download while a Telegram bot-token script exfiltrates data. Brand impersonation confirmed.

Risk Factors (6)

Impersonation of DocuSign brand on a non-DocuSign domain

Telegram bot-token exfiltration script loaded from a Cloudflare workers.dev subdomain

Fake 'old version / unauthorized DocuSign' update lure designed to push a download

Fake 'checking your browser / verification complete' security theater

Right-click and context-menu blocking (anti-analysis)

Cross-origin IP-lookup beacons (ipapi.co, api.ipify.org) used for visitor fingerprinting

Domain age information unavailable

Details

Page Title

DocuSign - Document Portal

Scan Type

public

Domain Name Analysis

You're looking at domain 'violaoeguitarrapiox.com.br' on the Brazilian country-code top-level domain (.com.br) with no subdomain. The registrable portion 'violaoeguitarrapiox' spans 19 characters with eleven vowels and 8 consonants. It segments into 5 words: viola, oe, guitarra, pio, x. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

um Oe a do) Porto PN ~ 38 2 = 3 Bee we car vane docusign Unauthorized DocuSign Version * usam enemy a ane sal This PDF can't be displayed because you're using an old É teme version of DocuSign o Ch...

Page Load Overview

1.73s

Total Load Time

217 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,149 chars

Detector Agreement:100%

Website Classification

Primary Category

entertainment media62% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media

62%

adult content

52%

documentation technical

41%

phishing scam

34%

government public service

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	108.179.252.149	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
1	142.251.13.95Google · CDN	United States	AS15169Google LLC
1	23.194.190.152Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	142.251.110.94Google · CDN	United States	AS15169Google LLC
1	104.21.87.212Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	149.154.166.110	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
1	23.194.190.147Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
13	9	-	-