Security Scan: DocuSign

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e9cb51e5-f140-4d3d-aff6-d9cac65ecc48 Domain and IP registration (RDAP)/api/v1/rdap/e9cb51e5-f140-4d3d-aff6-d9cac65ecc48How often this domain was scanned/api/v1/domain/stats/sihohuk.dyn.home-webserver.de Scan history for this domain/api/v1/domain/history/sihohuk.dyn.home-webserver.de?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is home-webserver.de and was registered 1 year 3 months ago.

Submitted URL: https://sihohuk.dyn.home-webserver.de/fobuvu/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake DocuSign login page on a dynamic-DNS host impersonating Docusign and harvesting email/password credentials via a 'document awaiting signature' lure. Do not enter credentials.

Risk Factors (4)

Brand impersonation of DocuSign on a non-official, dynamic-DNS domain

Credential collection form (email + password) on a domain unrelated to the impersonated brand

Urgency/lure language pressuring the victim to sign in to view a supposed document

Domain not in Cisco Umbrella top 1M while claiming a major brand

Domain age information unavailable

Details

Page Title

DocuSign

Scan Type

public

Favicon Hash

MMH3: 831702766

MD5: 17a782f04369cc79f490a976243511f6

Domain Name Analysis

The domain 'sihohuk.dyn.home-webserver.de' uses the German country-code top-level domain (.de) with subdomain 'sihohuk.dyn'. The core label 'home-webserver' covers 14 characters with 5 vowels and 8 consonants, notching 1 hyphen. Word splitting yields three words: home, web, server. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.46s

Total Load Time

6 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:392 chars

Detector Agreement:50%

Website Classification

Primary Category

documentation technical27% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

27%

government public service

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	148.135.91.149	Los Angeles, California, United States	AS35916MULTACOM CORPORATION
3	1	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19A4251AB66E300027943F5783BE7975A7665C043D106DD6C3EDC638C9F8AA849E6378C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:uLDW7V+u++2mmPS6mpI+AlCHjlFMXn9t9Np3szFHFQ05HvyJRw0:uCcPxWFM2FHFww0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12404:GxgSAlAgBBFCmQSqLqtAiAIQnDCAkNpSkYBRFN8EDEALBArnBAkhcUSZaUhYYmACEKhZCaySYaY0hFZk0AgCADKJVFVEggAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f3c3c2c3c243c3c

Perceptual Hash:938d8d27a98d278d

Difference Hash:e9796969694d71e8

Wavelet Hash:7f3c3c2c3c243c3c

Color Hash:#797bd2

Other Hashes

Crop Resistant:e9796969694d71e8

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: sihohuk.dyn.home-webserver.de