Security Scan: DocuSign

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7b3b8075-6763-4cce-bbb2-efb8a33451cb Domain and IP registration (RDAP)/api/v1/rdap/7b3b8075-6763-4cce-bbb2-efb8a33451cbHow often this domain was scanned/api/v1/domain/stats/pub-a3e08f1e20654012950677ebfdae9bed.r2.dev Scan history for this domain/api/v1/domain/history/pub-a3e08f1e20654012950677ebfdae9bed.r2.dev?limit=15

This website contacted 8 IPs in 1 country across 5 domains to perform 18 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: http://pub-a3e08f1e20654012950677ebfdae9bed.r2.dev/doc.html

Effective URL:

https://pub-a3e08f1e20654012950677ebfdae9bed.r2.dev/doc/access/9c5b0f3...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

DocuSign-branded credential phishing on an R2 bucket: it harvests email addresses and POSTs them to the unrelated domain srnithind.com. Do not enter any information.

Risk Factors (5)

Brand impersonation of DocuSign on a non-official domain

Cross-origin submission of the collected email address to srnithind.com

Right-click/context-menu blocking to hinder inspection

Hosted on a free Cloudflare R2 public bucket with no attribution to the claimed brand

Fabricated post-submission 'verification' and redirect messaging

Domain age information unavailable

Details

Page Title

DocuSign

Scan Type

public

Domain Name Analysis

Domain 'pub-a3e08f1e20654012950677ebfdae9bed.r2.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-a3e08f1e20654012950677ebfdae9bed'. The second-level label 'r2' is 2 characters long containing 0 vowels alongside one consonant, along with 1 digit. Breaking it apart gives two words: r, 2. The median word length lands at one character. No strong language cues emerged from the frequency lists.

Screenshot

@ docusign. Secure Document Access Please verify your emall address to access this document Enter your email Verify you are human ctounFeane tivooy Hele (Poxerea by Docusian) [remsorusell Mf supc...

Page Load Overview

2.77s

Total Load Time

2.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:245 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software37% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

37%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.95Google · CDN	United States	AS15169Google LLC
2	13.33.187.102Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
2	142.250.154.94Google · CDN	United States	AS15169Google LLC
2	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	13.33.187.2Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
18	8	-	-