Security Report: www.install-grayinv-docu.icu - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b806ac45-3f51-457a-81cf-8575c0b82b27 Domain and IP registration (RDAP)/api/v1/rdap/b806ac45-3f51-457a-81cf-8575c0b82b27How often this domain was scanned/api/v1/domain/stats/install-grayinv-docu.icu Scan history for this domain/api/v1/domain/history/install-grayinv-docu.icu?limit=15

This website contacted 9 IPs in 1 country across 6 domains to perform 9 HTTP transactions. The main domain is install-grayinv-docu.icu and was registered 1 month ago.

Submitted URL: https://www.install-grayinv-docu.icu/

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Fake Docusign page on a ≤1-day-old .icu domain pushing a bogus 'Docusign Desktop' download; brand impersonation with malware-delivery lure. Do not download or interact.

Risk Factors (5)

Brand impersonation of Docusign on a mismatched, non-official domain

Domain registered ≤1 day ago with no reputation (Cisco Umbrella unranked)

Untrusted .icu TLD flagged by IDS in DNS and TLS SNI

Lure instructs users to download and install a third-party 'Docusign Desktop' application, a common malware-distribution pattern

Unverifiable trust badges ('Trusted by: ISO 27001 FedRAMP') used to appear legitimate

Domain age information unavailable

Details

Page Title

Docusign - Download to Review & Sign Document

Scan Type

public

Domain Name Analysis

Domain 'www.install-grayinv-docu.icu' uses the .icu top-level domain and includes subdomain 'www'. Its registrable label 'install-grayinv-docu' stretches across 20 characters split between 6 vowels and 12 consonants; bonus characters include two hyphens. Word splitting yields six words: install, gray, in, v, do, cu. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

® docusign. Review and sign your document A protected document has been shared with you. To view the full contents and apply your legally binding signature, download the Docusign desktop application...

Page Load Overview

3.00s

Total Load Time

877 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:702 chars

Detector Agreement:100%

Website Classification

Primary Category

download file sharing86% confidence

Type: static

Method: ml+structural

All Detected Categories

download file sharing

86%

technology software

80%

documentation technical

72%

finance banking

59%

corporate business

55%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	64.29.17.65Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	13.33.187.16Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
1	216.198.79.65Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	13.33.187.2Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
1	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	3.33.186.135Aws · CLOUD	United States	AS16509Amazon.com, Inc.
9	9	-	-