Security Scan Report: www.docusign.bkinterim.com

Submitted: Sep 25, 2026, 12:45:08 PMCompleted: Sep 25, 2026, 12:45:46 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

Bare directory listing at docusign.bkinterim.com: a DocuSign-branded subdomain of a domain reported as a phishing wallet drainer. No forms served yet, but hostname and threat-intel point to active abuse infrastructure.

Risk Factors
Brand-name subdomain (docusign) hosted on an unrelated, unflagged-by-name third-party domain
Content-malware threat-intel match (wallet drainer/phishing) on the registrable domain
No legitimate content — empty directory index served only as a file listing
Domain age information unavailable

Details

Page Title

Index of /

Scan Type

public

Domain Name Analysis

Domain 'www.docusign.bkinterim.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www.docusign'. The second-level label 'bkinterim' is 9 characters long with three vowels and six consonants. Breaking it apart gives 2 words: bk, interim. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.docusign.bkinterim.com/

Page Load Overview

0.31s
Total Load Time
6 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:63%
Script:Latin
Direction:ltr

Detection Details

Text Length:123 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software65% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
65%
documentation technical
58%
government public service
45%
blog personal website
38%
cryptocurrency blockchain
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5138.201.14.18Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
51--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DE2114B1F4C2947F0223B2659068F36D60C89118C7289E747DE440A967E5FA5C87EDD0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:haHkMfACZCL+8MAVGMLVjvJRA3ZO+7Xetj7iuQ2u36swWpzyRRk4D:WfpIPz+7XIj7iuQ2u36hS+rD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1217:ACBAAAAAAABABQAgAAAAAAAQgkAAAIQAFAAAAAAwABAQAABAAAYKAAEAAAAABgIAAAAAAAAAgAAAgAAAABAAAAIAAAAgAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9c0c000000000000
Perceptual Hash:9e9e9e9e1c2c2c2c
Difference Hash:2828140000000000
Wavelet Hash:1f0f0c0c0f0f0f0f
Color Hash:#40931f

Other Hashes

Crop Resistant:2828140000000000

Scan History

Scan history not available

Unable to load historical scan data