Security Scan: DocuSign

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7001a692-85a9-4bac-ba5f-7dce0ab78c99 Domain and IP registration (RDAP)/api/v1/rdap/7001a692-85a9-4bac-ba5f-7dce0ab78c99How often this domain was scanned/api/v1/domain/stats/hostmyclaudehtml.com Scan history for this domain/api/v1/domain/history/hostmyclaudehtml.com?limit=15

This website contacted 12 IPs in 1 country across 7 domains to perform 11 HTTP transactions. The main domain is hostmyclaudehtml.com and was registered 7 months ago.

Submitted URL: https://hostmyclaudehtml.com/p/reQJWm7Gkn#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

DocuSign-branded credential phishing page on hostmyclaudehtml.com: victim email in URL fragment, email+password form, and a Telegram exfiltration script. Do not enter credentials.

Risk Factors (6)

DocuSign brand impersonation on a non-official domain

Credential harvesting form (email + password) on a domain unrelated to the claimed brand

Victim email address injected via URL fragment as a tracking/lure token

Telegram bot token in inline JavaScript indicating credential exfiltration channel

Multi-source corroborated phishing threat-intel match on the primary domain

Domain unranked in Cisco Umbrella despite claiming a major brand

Domain age information unavailable

Details

Page Title

DocuSign

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'hostmyclaudehtml.com' is registered while skipping any subdomain. The second-level label 'hostmyclaudehtml' is 16 characters long containing 4 vowels alongside 12 consonants. Splitting it apart reveals four words: host, my, claude, html. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Logging in... galel@f0eOd4e61f7b6a4d4672e0362b944f5c0ad6.com Change Password Enter Email Password Use another account

Page Load Overview

0.87s

Total Load Time

191 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:ko

Text Length:295 chars

Detector Agreement:100%

Language mismatch: Declared as ko but detected as en

Website Classification

Primary Category

documentation technical51% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

51%

news media journalism

50%

phishing scam

47%

gambling betting

44%

government public service

44%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	34.111.179.208Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	142.251.14.95Google · CDN	United States	AS15169Google LLC
0	142.251.20.95Google · CDN	United States	AS15169Google LLC
0	142.251.14.94Google · CDN	United States	AS15169Google LLC
0	142.251.153.119Google · CDN	United States	AS15169Google LLC
0	192.178.183.106Google · CDN	United States	AS15169Google LLC
0	104.18.25.163Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	192.178.183.95Google · CDN	United States	AS15169Google LLC
0	142.251.110.94Google · CDN	United States	AS15169Google LLC
0	142.251.157.119Google · CDN	United States	AS15169Google LLC
11	12	-	-