Security Report: tidalprotelns.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ed7c100f-985e-4932-af2b-7708c6555470 Domain and IP registration (RDAP)/api/v1/rdap/ed7c100f-985e-4932-af2b-7708c6555470How often this domain was scanned/api/v1/domain/stats/tidalprotelns.com Scan history for this domain/api/v1/domain/history/tidalprotelns.com?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 14 HTTP transactions. The main domain is tidalprotelns.com and was registered 2 months ago.

Submitted URL: https://tidalprotelns.com/w-t/usgz9yj0?k=JNimnu0Fv7-BGFe7mOHwhM7e

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

DocuSign-branded 'identity verification' page on an unrelated 51-day-old domain, fronted by a fake Cloudflare bot check and anti-analysis JavaScript — a classic DocuSign phishing/credential-harvest pattern.

Risk Factors (5)

Impersonation of the DocuSign brand on an unrelated, non-official domain

Anti-analysis JavaScript: right-click blocked and 3 anti-analysis techniques detected

Cloaking interstitial ('Just a moment' / 'Checking your connection') obscuring the real page content from scanners

Newly registered domain (51 days) with no reputation or ranking

Lure language pressuring recipients into 'identity verification' and session authorization

Domain age information unavailable

Details

Page Title

DocuSign | Action Required: Identity Verification

Scan Type

public

Favicon Hash

MMH3: 723344415

MD5: 81130fd89a398bfe52659318b65c7955

Domain Name Analysis

The domain 'tidalprotelns.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 13 characters in 'tidalprotelns' holding four vowels versus nine consonants. Tokenizing the label suggests four words: tidal, pro, tel, ns. Median word length is 3 characters. No strong language cues emerged from the frequency lists.