Security Scan Report: vsgsf186131753.d2eqjx8wyk1d6n.amplifyapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 4 domains to perform 8 HTTP transactions. The main domain is amplifyapp.com and was registered 8 years ago.

Submitted URL: https://vsgsf186131753.d2eqjx8wyk1d6n.amplifyapp.com/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fake DocuSign sign-in page on an AWS Amplify subdomain using a fabricated shared-document workspace to lure visitors into a Google account sign-in; clear brand impersonation and phishing lure.

Risk Factors (5)
Impersonation of DocuSign brand on a domain DocuSign does not own
Fabricated 'shared RFP documents' workspace used as credential lure
Google sign-in prompt ('Continue with Google') on a non-Google, non-DocuSign host
Random-string subdomain on shared AWS Amplify hosting
Unranked subdomain with no legitimate reputation
Domain age information unavailable

Details

Page Title

Sign in – DocuSign · MSA/RFP Documents

Scan Type

public

Domain Name Analysis

The domain 'vsgsf186131753.d2eqjx8wyk1d6n.amplifyapp.com' uses the commercial generic top-level domain (.com) with subdomain 'vsgsf186131753.d2eqjx8wyk1d6n'. Its registrable label 'amplifyapp' stretches across 10 characters with three vowels and 7 consonants. It segments into 2 words: amplify, app. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vsgsf186131753.d2eqjx8wyk1d6n.amplifyapp.com/

Page Load Overview

0.34s
Total Load Time
366 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,210 chars
Detector Agreement:33%

Website Classification

Primary Category

technology software51% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
51%
government public service
48%
corporate business
40%
adult content
40%
documentation technical
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23.161.82.46Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.161.82.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
13.33.186.135Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
13.161.82.72Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
87--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195F2837BA6F314692C6791A43FEB5B573A64A403D40AC91C3F9C53888FC5ED8AC53788

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:n79XLRpF+2ah6zvYZJIUb/Je/J2/J4Uw/J7/J4U62/Jj/JnV:pRpEp6zWIK/Je/J2/J4X/J7/J4Y/Jj/n

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35161:EEZgUSJFAwOgxHDAQAglUBBURzMBhDCFWIIEX0KIiABL8A1AEgQl/sUHBgCiJ8AhWGCHExiwAOEMwKREmwEmQojBoIGUSqhA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:9d1162cec83399f9
Difference Hash:cc32323232322004
Wavelet Hash:3e829a989a9a82ff
Color Hash:N/A

Other Hashes

Crop Resistant:cc32323232322004

Scan History

Scan history not available

Unable to load historical scan data