Security Report: kitchenworld.com.mx - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9968bd22-ac5e-4baa-a4e5-d9bd74f0e52f Domain and IP registration (RDAP)/api/v1/rdap/9968bd22-ac5e-4baa-a4e5-d9bd74f0e52f Certificate Transparency/api/v1/ct/kitchenworld.com.mx How often this domain was scanned/api/v1/domain/stats/kitchenworld.com.mx Scan history for this domain/api/v1/domain/history/kitchenworld.com.mx?limit=15

This website contacted 5 IPs in 3 countries across 4 domains to perform 4 HTTP transactions. The main domain is kitchenworld.com.mx and was registered 19 years ago.

Submitted URL: https://kitchenworld.com.mx/docusigine/docusign.html?sid=yKSNTMNfSrqETwcqjjEpkuK0KEf9e8T94QGOKUMw1Kl2uP3omSg8QQcv0615oHhMrm9utbr9K1PHwgljIwRGBGWld8DR5l3Elj9BPDyqGM0pfEpFjkw3E8IlGtK

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake DocuSign 'Security Module' page on a compromised domain that tricks users into downloading and running a ScreenConnect remote-access installer — malware distribution and brand impersonation.

Risk Factors

Brand impersonation of DocuSign on a non-DocuSign domain

Prompts download and execution of a remote-access/MSI installer (ScreenConnect) — malware distribution

Disguised document-signing lure to socially engineer victim into running attacker-controlled software

Legitimate domain repurposed/compromised to host malicious landing page

URL carries a long randomized session token typical of tracked phishing campaigns

Domain age information unavailable

Details

Page Title

DocuSign - Secure Document

Scan Type

public

Favicon Hash

MMH3: -414204657

MD5: dabe9ce5581670f84e89a789a78d09b8

Domain Name Analysis

The domain 'kitchenworld.com.mx' uses the Mexican country-code top-level domain (.com.mx) while skipping any subdomain. The core label 'kitchenworld' covers 12 characters split between 3 vowels and 9 consonants. Splitting it apart reveals 2 words: kitchen, world. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.82s

Total Load Time

112 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:698 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

71%

documentation technical

66%

government public service

45%

news media journalism

34%

healthcare medical

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	70.32.23.82	Detroit, Michigan, United States	AS55293A2 Hosting, Inc.
0	2.19.11.105Akamai · CDN	Düsseldorf, North Rhine-Westphalia, Germany	AS20940Akamai International B.V.
0	45.43.142.6	United Kingdom	AS16276OVH SAS
0	45.43.142.8	United Kingdom	AS16276OVH SAS
0	50.116.93.117	Phoenix, Arizona, United States	AS31898Oracle Corporation
4	5	-	-