Security Report: www.install-docsreview.sbs - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d3c764ab-e347-4dbc-8afe-a46ee92eced7 Domain and IP registration (RDAP)/api/v1/rdap/d3c764ab-e347-4dbc-8afe-a46ee92eced7How often this domain was scanned/api/v1/domain/stats/install-docsreview.sbs Scan history for this domain/api/v1/domain/history/install-docsreview.sbs?limit=15

This website contacted 9 IPs in 1 country across 6 domains to perform 9 HTTP transactions. The main domain is install-docsreview.sbs and was registered 3 weeks ago.

Submitted URL: https://www.install-docsreview.sbs/

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Day-old .sbs domain impersonating Docusign and pushing a fake 'Docusign Desktop' download. No forms or confirmed payload, but brand impersonation on a new domain is a strong lure to malware — avoid.

Risk Factors (5)

Brand impersonation of Docusign on a non-official, day-old .sbs domain

Solicits download/installation of a fake 'Docusign Desktop' executable

Fabricated trust claims ('Trusted by: ISO 27001 FedRAMP') unrelated to the hosting entity

Domain age ≤1 day combined with impersonation of a major brand

Document-review urgency pretext ('A protected document has been shared with you')

Domain age information unavailable

Details

Page Title

Docusign - Download to Review & Sign Document

Scan Type

public

Domain Name Analysis

Domain 'www.install-docsreview.sbs' uses the .sbs top-level domain and includes subdomain 'www'. The second-level label 'install-docsreview' is 18 characters long split between 6 vowels and eleven consonants; bonus characters include one hyphen. Word splitting yields three words: install, docs, review. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

® docusign. © 2026 Docusign, Inc. All rights reserved. Review and sign your document A protected document has been shared with you. To view the full contents and apply your legally binding signatur...

Page Load Overview

1.04s

Total Load Time

877 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:702 chars

Detector Agreement:100%

Website Classification

Primary Category

download file sharing86% confidence

Type: static

Method: ml+structural

All Detected Categories

download file sharing

86%

technology software

80%

documentation technical

72%

finance banking

59%

corporate business

55%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	64.29.17.65Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.1Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	142.251.127.95Google · CDN	United States	AS15169Google LLC
1	3.174.46.114Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.13.94Google · CDN	United States	AS15169Google LLC
1	3.174.46.31Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	3.33.186.135Aws · CLOUD	United States	AS16509Amazon.com, Inc.
9	9	-	-