Security Scan Report: 135461223.site

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 4 domains to perform 27 HTTP transactions. The main domain is 135461223.site and was registered 6 years ago.

Submitted URL: https://135461223.site/1990/27707926089121906-30390110286315/760405/x

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Page impersonates DocuSign (and Microsoft) on the unrelated domain 135461223.site, which is flagged as phishing by two independent threat-intel feeds. A code copy/paste identity-verification lure. Do not interact.

Risk Factors (4)
Threat-intel phishing report on the primary domain, corroborated by 2 independent feeds
Brand impersonation of DocuSign on a non-official domain (and of Microsoft in the same flow)
Unranked domain presenting itself as a major brand's signing portal
Identity-verification/code-paste lure designed to route the victim to an attacker-controlled verification step
Domain age information unavailable

Details

Page Title

DocuSign

Scan Type

public

Domain Name Analysis

The domain name '135461223.site' uses the .site top-level domain and has no subdomain. The second-level label '135461223' is 9 characters long containing 0 vowels alongside zero consonants; bonus characters include nine digits. Segmentation suggests 1 word: 135461223. Average segment length settles at nine characters. No strong language cues emerged from the frequency lists.

Screenshot

Agreement_Review.pdt Identity verttcation required Verify to sign Please verify your identity with Microsoft to access and sign this document. Pcuntvesinicarron\co) CanvTrneso @ Copy the code abo...

Page Load Overview

1.28s
Total Load Time
327 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:378 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software69% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
69%
documentation technical
55%
corporate business
39%
government public service
38%
adult content
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9116.203.212.240Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
3138.199.36.7Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3142.251.13.94Google · CDNUnited States
AS15169Google LLC
3136.243.42.10Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
3142.251.13.95Google · CDNUnited States
AS15169Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
277--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19522C75353A51029662BEA913FE6BB0FB798D407D40695383CDD4288CFCEAA195F738C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:m2aiF6BburTG6kxDa1fZjvc8cDaLnYd34ji5D3CgHFHCYlBYsNJCdhMF4hgwdhkQ:1XSyriEHnGjZoPtKnB6IIIX0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10117:hkCqCRcUTH/mNHCBAIAEBdIwkwgQJRCQaMBAKBI0pcAXMAYCEH4RlChF4gAUIEykEpANo1ECq0ThRhMuKKCaSHngAoEkBQyg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183c1818181818
Perceptual Hash:d977747366cc8884
Difference Hash:70b2b23269b2b2b2
Wavelet Hash:803c3c3c3c3c3c3c
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data