ScanMalware.com

Security Scan Report: docusigndocumentreview-yourelectricalsolutionsexecutedagreement.aqueousvets.top

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8086c113-88cd-4c05-8834-4800b441958eDomain and IP registration (RDAP)/api/v1/rdap/8086c113-88cd-4c05-8834-4800b441958eHow often this domain was scanned/api/v1/domain/stats/docusigndocumentreview-yourelectricalsolutionsexecutedagreement.aqueousvets.topScan history for this domain/api/v1/domain/history/docusigndocumentreview-yourelectricalsolutionsexecutedagreement.aqueousvets.top?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is aqueousvets.top and was registered 9 months ago.

Submitted URL: https://docusigndocumentreview-yourelectricalsolutionsexecutedagreement.aqueousvets.top/UjBSSLGZMq4FB8vqAyC1JA_JKuOgDp5R_Z7RoCV08QAvD_BwE/

AI Security Verdict

High Risk

Confidence: 76%

8
Risk Score

Non-DocuSign .top domain mimics DocuSign with a 'document ready for review' lure, flagged hostile by IDS. No form rendered, but brand impersonation on a phishing-pattern host warrants avoiding it.

Risk Factors (5)
Impersonation of the DocuSign brand on an unrelated, non-official domain
Use of a low-reputation .top TLD flagged by IDS as likely hostile
Phishing-typical concatenated hostname and random path token
Unranked domain claiming to represent a major brand
Broken/error state ('Service unavailable') on a page that purports to host a DocuSign document
Domain age information unavailable

Details

Page Title

DocuSign

Scan Type

public

Domain Name Analysis

The domain name 'docusigndocumentreview-yourelectricalsolutionsexecutedagreement.aqueousvets.top' uses the .top top-level domain; it also runs on subdomain 'docusigndocumentreview-yourelectricalsolutionsexecutedagreement'. Count 11 characters in 'aqueousvets' split between six vowels and five consonants. Word splitting yields 2 words: aqueous, vets. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Service unavailable DocuSign Document ready for your r

Page Load Overview

0.48s
Total Load Time
11 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:68 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.21.23.219Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.213.244Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C80275365788201CF627F958E5B12B8FB080A907961253A8DDE77BB6C58B07327B734D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ItJi1Qrx0mBKy9rqU/9k/2kkNg79lWhubuWnNSm1DMg:ItCQOkxqUgQC9l0SrxDMg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9005:FAqAQyACdQVBSdwEAypHIRQBNhKAkpCwQRByBwOESAEERLKzKEQAEoqhkMQLRgtayA2FiACZIKEUZIPAJJADogSYCQ5cqkIq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8ef104e30fd792f0
Difference Hash:6a6c686868686868
Wavelet Hash:030f0f0f0f0f0f0f
Color Hash:N/A

Other Hashes

Crop Resistant:8888808080808080,083a300000000000

Scan History

Scan history not available

Unable to load historical scan data