Security Scan: Connexion DocuSign

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cdaab191-2af8-437d-8f69-071be0926502 Domain and IP registration (RDAP)/api/v1/rdap/cdaab191-2af8-437d-8f69-071be0926502How often this domain was scanned/api/v1/domain/stats/rplyyinfo.duckdns.org Scan history for this domain/api/v1/domain/history/rplyyinfo.duckdns.org?limit=15

This website contacted 2 IPs in 2 countries across 3 domains to perform 15 HTTP transactions. The main domain is duckdns.org and was registered 13 years ago.

Submitted URL: http://rplyyinfo.duckdns.org/DocuSign77%20(4).html

Effective URL:

https://rplyyinfo.duckdns.org/DocuSign77%20(4).html

Redirected

The Cisco Umbrella rank of the primary domain is #76,811 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Phishing page impersonating DocuSign with a credential‑stealing login form; treat as high‑risk.

Risk Factors (4)

Credential collection on non‑official domain

Brand impersonation of a well‑known service

Free subdomain (duckdns.org) – typical for phishing kits

Unverified threat‑intel match to known malware IP

Domain age information unavailable

Details

Page Title

Connexion DocuSign

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'rplyyinfo.duckdns.org' is registered; it also runs on subdomain 'rplyyinfo'. The second-level label 'duckdns' is 7 characters long holding 1 vowel versus six consonants. Word splitting yields two words: duck, dns. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.37s

Total Load Time

125 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:388 chars

Detector Agreement:50%

Website Classification

Primary Category

documentation technical36% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

36%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	185.80.130.208	Lithuania	AS61053UAB ESNET
15	2	-	-

Detected Technologies2

PasswordField

100%

WordPress

75%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17E02816776F319256A43C0AC3BE7A6453520C0079A0ACD487EAC8799CFC6ED1A4B37DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:IrU0S1VgjpSzmCjbggF8fAVd63rChNF0iiwqkQ7kdrsJUa:IrISSicb+aNiiinkdoX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8702:lvDAKogKjOMA4JYKEGAoRLIFD0EYG0UgEKTDkCMGI1RCBkhApogU0FDCAMAJHAAEQDirE3HgEgUBCdQQFRvDQIAtGTDAEEB0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:88981018d8ffffff

Perceptual Hash:dd5db2b06027a372

Difference Hash:3032727232081919

Wavelet Hash:8098001098ffffff

Color Hash:#6ce089

Other Hashes

Crop Resistant:3032727232081919,1430727272727236,e5c78199492d1d69,41514d7373734d51

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: rplyyinfo.duckdns.org