Security Scan Report: docusign.taylorporter.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 5 domains to perform 11 HTTP transactions. The main domain is taylorporter.com and was registered 26 years ago.

Submitted URL: https://docusign.taylorporter.com/

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

DocuSign-branded sign-in served from a third-party subdomain (taylorporter.com) that posts the entered email to that host, not to DocuSign. Consistent with a credential-harvesting page; enter nothing and reach DocuSign only via its official domain.

Risk Factors (3)
Impersonation of the DocuSign brand on a domain (taylorporter.com) that DocuSign does not own
Credential-entry form (email/username) submitting to the non-DocuSign origin
Phishing-style subdomain naming that mimics the impersonated brand in the hostname
Domain age information unavailable

Details

Page Title

Docusign Login - Enter email to start sign inother network

Scan Type

public

Domain Name Analysis

Domain 'docusign.taylorporter.com' uses the commercial generic top-level domain (.com), featuring subdomain 'docusign'. The second-level label 'taylorporter' is 12 characters long with 4 vowels and 8 consonants. Breaking it apart gives 2 words: taylor, porter. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

docusign. Log in to Dacusign Enter your email to log in. Email * Enter email Sign Up for Free Powared by Wdlocusign (EesERETY) contacts 1 Temsofse | Preasy | intallectuolProperty | Trust Copyrig...

Page Load Overview

1.75s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:305 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software67% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
67%
documentation technical
37%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
320.4.162.54Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
154.244.14.140Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
1184.24.77.83Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1100.20.35.96Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
132.187.46.68Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
1184.24.77.57Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
154.187.197.138Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
120.4.162.53Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
118--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T148243BACDD0D3838FE542902B8CA37F542ABB6C72C2372D9D51FF59143EC99913A1629

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:xb4gxJjdVF2Btcmbib9t0FyfftoBjQa/+Rwg2wgy6h4nReh:6gEBtcmbm9t0FGrd6hMY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:229631:cEgNg8Q3IBBAhIAGRLAIggA/iE9GEg2rAAAKiWgIZEUWEoDDBOkFhNphK4T4MLDAVByYgYCKYKKQHswJb0AjwAzBDAlAFQRA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fd3ffffe7e7fbff
Perceptual Hash:b38d8c263399b366
Difference Hash:802458304d4c328c
Wavelet Hash:7f002c3c273f00ff
Color Hash:07000c00000

Other Hashes

Crop Resistant:802458304d4c328c

Scan History

Scan history not available

Unable to load historical scan data