ScanMalware.com

Security Scan Report: a5c33326-c5c4-8159-b0a9-docusign.rajesh-das1010.workers.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f189a1f1-fa21-45fa-b905-983be61790c4Domain and IP registration (RDAP)/api/v1/rdap/f189a1f1-fa21-45fa-b905-983be61790c4How often this domain was scanned/api/v1/domain/stats/a5c33326-c5c4-8159-b0a9-docusign.rajesh-das1010.workers.devScan history for this domain/api/v1/domain/history/a5c33326-c5c4-8159-b0a9-docusign.rajesh-das1010.workers.dev?limit=15
This website contacted 2 IPs in 1 country across 5 domains to perform 10 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://a5c33326-c5c4-8159-b0a9-docusign.rajesh-das1010.workers.dev/zx5ysdxtb/vukwp

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fake DocuSign eSignature page on a workers.dev subdomain that impersonates DocuSign and lures victims into copying a one-time code to 'continue to Microsoft' — a credential/device-code phishing pattern. Do not sign in or paste any code.

Risk Factors (5)
Brand impersonation of DocuSign on a domain that is not docusign.com
Deceptive hostname embedding the impersonated brand ('...docusign...workers.dev')
Device-code / 'copy the code and paste it' verification flow designed to capture an authentication code
External third-party host (panel.grunig-signtronics.com) unrelated to the claimed brands
Free instant-hosting subdomain with unknown creation date and no domain reputation
Domain age information unavailable

Details

Page Title

DocuSign - Review Document

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'a5c33326-c5c4-8159-b0a9-docusign.rajesh-das1010.workers.dev' is registered and includes subdomain 'a5c33326-c5c4-8159-b0a9-docusign.rajesh-das1010'. The registrable portion 'workers' spans 7 characters with 2 vowels and five consonants. Word splitting yields 1 word: workers. The median word length lands at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Docusign Please verify your identity with Microsoft to access and sign this document. YOUR VERIFICATION CODE] BESPCH2P4 Grcopy Code ® Copy the cade above (2)) Click continue and paste (Ctrl+V) (...

Page Load Overview

0.73s
Total Load Time
238 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,990 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software80% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
80%
documentation technical
77%
corporate business
57%
government public service
56%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5172.67.212.40Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
102--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T163F21B626264002D754B05907B36FF076A24D193EA0B993A399D0698CFCD8D2ED7B7FC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BrZ4F/9MQ2ijDEVTsKVQO+uyKWDFNRbiTk2FpPy71A0lhQlr15eyp8jG7X2PFRiP:UFBGMqFP98255pR6PFUYP92l8i

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35706:RBBMMDUIkNak6IRYRdARImGZEROBoDgdErIDA+IQLQEIkC8IsIOEYEMAqBA0gYBfRwAIqMgwMMgwmUQqEAKtRRFJvIaBIWSC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01183c24383c3c3c
Perceptual Hash:98352c5d333666cd
Difference Hash:9eb2aa4db2b03169
Wavelet Hash:011f1d0559dd9d3d
Color Hash:N/A

Other Hashes

Crop Resistant:9eb2aa4db2b03169,6543032323234349,6061d0c848313068

Scan History

Scan history not available

Unable to load historical scan data