docusign[.]nzworldtravel[.]com

The domain docusign.nzworldtravel.com is currently flagged as an active generic phishing site. Infrastructure analysis shows the hostname resolves to the IP address 104.21.47.99, which is live as of the report date. HTTP requests receive a 302 redirect and the page title returned is "Account Suspended." VirusTotal has recorded detections from 17 out of 95 scanning engines, indicating a moderate level of malicious confidence. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service. No additional content analysis is available beyond the page title, so the exact phishing payload, credential‑stealing mechanisms, or targeted brand cannot be confirmed. However, the presence of a legitimate‑sounding sub‑domain (docusign) suggests an attempt to imitate the well‑known electronic‑signature service. Defenders should immediately add 104.21.47.99 and the hostname to outbound filtering rules, monitor DNS queries for the domain, and consider broader network‑level blocks. Ongoing observation is recommended to detect any changes in the hosting infrastructure or emergence of new indicators.