Security Scan Report: universitywebsit-5lzl2gwfv4.live-website.com

Site favicon
Submitted: Oct 4, 2026, 4:25:32 AMCompleted: Oct 4, 2026, 4:26:18 AMpubliccompleted

This website contacted 5 IPs in 2 countries across 4 domains to perform 5 HTTP transactions. The main domain is universitywebsit-5lzl2gwfv4.live-website.com and was registered 35 years ago.

Submitted URL: https://universitywebsit-5lzl2gwfv4.live-website.com/wp-content/plugins/shell/onlines01/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

DocuSign-branded credential phishing page on a free-host subdomain: fake 'password protected document' login form harvesting email/password, with multi-source phishing Indicators of Compromise on the primary domain.

Risk Factors (4)
DocuSign brand impersonation on a non-DocuSign domain
Login form capturing email + password behind a fake 'password protected document' pretext
Multi-source corroborated phishing Indicators of Compromise against the primary domain
Hosted in a webshell-like path on a commodity/free hosting subdomain
Domain age information unavailable

Details

Page Title

DocuSign Login

Scan Type

public

Domain Name Analysis

The domain 'universitywebsit-5lzl2gwfv4.live-website.com' uses the commercial generic top-level domain (.com) and includes subdomain 'universitywebsit-5lzl2gwfv4'. Its registrable label 'live-website' stretches across 12 characters with 5 vowels and six consonants, plus 1 hyphen. Tokenizing the label suggests 2 words: live, website. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://universitywebsit-5lzl2gwfv4.live-website.com/wp-content/plugins/shell/onlines01/

Page Load Overview

11.05s
Total Load Time
239 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:303 chars
Detector Agreement:50%

Website Classification

Primary Category

documentation technical44% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
44%
technology software
43%
government public service
42%
adult content
33%
gambling betting
29%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
174.208.236.93United States
AS8560IONOS SE
1184.24.77.57Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
123.52.181.208Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
1184.24.77.83Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
55--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10512959775E30452B807E4B93BA7970536A1C003D50AC8787EEC629C9FDAE8699737CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:VcCVpJmFpl/yqYTv2aA1MOILHj5nGd5PJzaLP4+9ii+4q3nDL:Vc8JmlPmnIEOeP4xl4kX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9711:KDg0MB0BTEEAYA4S0NC4BVARqVCCBGXIMURJX1BGAQRIEUBSqlnB1aqIBMLOGBYgUK8EEcACIVHwCGEyAriCgMAYJKShcCGg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffa623a63637e6f
Perceptual Hash:a1dcda229c9d23cd
Difference Hash:808acad282cecace
Wavelet Hash:7f62222a7a626e6a
Color Hash:#53ac62

Other Hashes

Crop Resistant:808acad282cecace

Scan History

Scan history not available

Unable to load historical scan data