datacompliancereview[.]com

This domain is flagged as a high-risk phishing threat specifically designed to impersonate DocuSign document delivery services. Analysis indicates the site employs social engineering tactics, presenting a fraudulent "Download to View Document" prompt to harvest user credentials, payment details, or deploy malware. The threat type is classified as credential harvesting with potential secondary payload delivery, targeting both enterprise and individual users under the guise of legitimate document processing. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain datacompliancereview.com is registered through Squarespace Domains LLC and currently resolves to IP address 91.92.241.250. Security vendors on VirusTotal detect malicious activity, with 24 out of 95 engines flagging the domain. The site appears on three independent security blocklists and is actively blocked by enterprise-grade threat intelligence platforms. Google Safe Browsing classifies this as a phishing site, while SSL certificate analysis shows a Let's Encrypt YR1 certificate, commonly used in short-lived phishing campaigns. The page title "DocuSign - Download to View Document" confirms the specific impersonation tactic employed. Mitigation requires immediate action across multiple layers. Network administrators should implement DNS-level blocking for the domain and its resolving IP 91.92.241.250, while endpoint protection systems should update signatures to detect the 24 identified malicious indicators. User awareness training should emphasize verification of document sources, particularly for unsolicited DocuSign notifications, and encourage manual URL inspection before credential submission. Security teams should monitor for attempted access to this domain in proxy logs and implement additional authentication requirements for any internal systems that may have been exposed. Given the domain's active status and high detection rate, complete isolation from corporate networks is recommended until thorough investigation confirms no compromise has occurred.