Security Scan: Docusign %3 Sign In

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f95b142b-7508-429d-bc2e-aa6832e8da63 Domain and IP registration (RDAP)/api/v1/rdap/f95b142b-7508-429d-bc2e-aa6832e8da63How often this domain was scanned/api/v1/domain/stats/yrterwertyfghg-dpc5m37szygx.edgeone.dev Scan history for this domain/api/v1/domain/history/yrterwertyfghg-dpc5m37szygx.edgeone.dev?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://yrterwertyfghg-dpc5m37szygx.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake Docusign sign-in on an edgeone.dev throwaway subdomain harvesting email/password, with CRITICAL JavaScript exfiltrating credentials to a Telegram bot. Confirmed phishing — do not enter credentials.

Risk Factors (5)

Brand impersonation of Docusign on a non-Docusign domain

Credential harvesting form (password field) on a throwaway hosting subdomain

CRITICAL JavaScript credential-exfiltration pattern posting to a Telegram bot

External IP-lookup scripts and right-click/anti-analysis blocking

Unranked domain offering no verifiable ownership or legitimacy signals

Domain age information unavailable

Details

Page Title

Docusign %3 Sign In

Scan Type

public

Domain Name Analysis

The domain 'yrterwertyfghg-dpc5m37szygx.edgeone.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'yrterwertyfghg-dpc5m37szygx'. The registrable portion 'edgeone' spans 7 characters split between 4 vowels and 3 consonants. It segments into two words: edge, one. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

® {Docusign) Eye ane yen eey Heoeaeoe icy Docusign Sign in Enter your email address to continue document access Email address Privacy & Legal - Gookie Preferences ‘Copyright © 2026 Dacusign, inc....

Page Load Overview

1.74s

Total Load Time

16 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:996 chars

Detector Agreement:100%

Website Classification

Primary Category

download file sharing71% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

download file sharing

71%

corporate business

60%

government public service

59%

documentation technical

58%

technology software

53%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	43.174.246.29	Singapore	AS139341ACE
1	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	2	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15604DE7CB351C86DEE7346BBFDBC6715A0449E83ECD922C4386C00552FE19AAB4263D9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:LpgRr0uoydRxwtQ1W0Dx2dRxwtQ1W0Dx0EX3fwW3gNTDEX3fwW3gNTK8IN1/qu:awtQ1QwtQ1RwW3rwW3Ou

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:177639:hb5JAdCAakKYAhIISxCg0IMoQVIAAVLDMAgQieQwVGQtCIR8CMrMkGYEIWQ1WgA1tQIywOE6Fgk80EakAYWEMQAEAJIAACEV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f0f0f0f0f0f0f0f

Perceptual Hash:99e2b64969961d69

Difference Hash:3a98bbbeb3bb383a

Wavelet Hash:0f0f0f0f0f0f0f0f

Color Hash:N/A

Other Hashes

Crop Resistant:00001410960e0000,8cd4b615a66a958b

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: yrterwertyfghg-dpc5m37szygx.edgeone.dev