Security Scan Report: transcript.onekey-policyreview.com

Submitted: Completed: publiccompleted
This website contacted 14 IPs in 3 countries across 12 domains to perform 34 HTTP transactions. The main domain is onekey-policyreview.com and was registered 1 month ago.

Submitted URL: https://transcript.onekey-policyreview.com/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Fake Docusign page on a 50-day-old unrelated domain instructing visitors to download a supposed 'Docusign Desktop' app to sign a document — a classic brand-impersonation malware lure. Do not download anything.

Risk Factors (5)
Brand impersonation of Docusign on a non-Docusign domain
Social-engineering lure directing users to download a fake 'Docusign desktop application' (probable malware payload)
Newly registered domain (50 days) with no reputation and no affiliation with the impersonated brand
HIGH-severity IDS alert (Spamhaus DROP listed traffic) recorded against page traffic
Falsified trust markers ('Trusted by: ISO 27001 FedRAMP', 'bank-level encryption') not attributable to this host
Domain age information unavailable

Details

Page Title

Docusign - Download to Review & Sign Document

Scan Type

public

Domain Name Analysis

You're looking at domain 'transcript.onekey-policyreview.com' on the commercial generic top-level domain (.com) with subdomain 'transcript'. Count 19 characters in 'onekey-policyreview' containing 8 vowels alongside 10 consonants; it also includes one hyphen. Tokenizing the label suggests 4 words: one, key, policy, review. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://transcript.onekey-policyreview.com/

Page Load Overview

1.87s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:701 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing82% confidence
Type: static
Method: ml+structural

All Detected Categories

download file sharing
82%
technology software
73%
documentation technical
73%
finance banking
55%
corporate business
46%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8158.94.211.192Rotterdam, South Holland, Netherlands
AS202412Omegatech LTD
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
23.174.46.114Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2146.75.121.137Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2142.251.110.94Google · CDNUnited States
AS15169Google LLC
22.16.1.171Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
223.50.131.153Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
23.174.46.20Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
223.50.131.150Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
22.17.100.185Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3414--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CF720B6B87A312256C47816C6FB56B053166C00BD844E9787FEE5398DF8E4C0AC637EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:BrWP42f/casS6cAtAXmtcJ9SM9jrMiXOmYw+tWitlKsxvhg4+pKe0x7x3KxdObrE:BrewL85IruYvjaY8AK9mA2Cj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16327:wKCAOCtekQgFAI0iCL5NmISHngYyAJEiChSDCgXRAkDxMSEWCCxhgghLQ0UAEBQJ0BAQF4AEwoXBQVhCPEIZWgAyTBB0iSED

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffdbf1d19bfeff
Perceptual Hash:eda992966dc59a18
Difference Hash:c2383303333200e0
Wavelet Hash:7fcf81818190fc7c
Color Hash:#797bd2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data