signdocs-beta[.]vercel[.]app
“Docusign Login”
signdocs-beta.vercel.app — 内容不可用. 品牌冒充:Genericemail; 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 16/92 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, CyRadar); URLQuery 3 alerts; URLScan malicious verdict; CF Radar malicious; PhishDestroy score 100/100. 注册商: Vercel.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain is flagged as a high-risk phishing infrastructure specifically designed to mimic Docusign login interfaces. Analysis indicates the threat type is credential harvesting through cloned authentication portals, with the domain currently active and serving malicious content to unsuspecting users. Infrastructure analysis reveals the domain signdocs-beta.vercel.app was registered through Vercel Inc. and resolves to IP address 64.29.17.3, located in the United States. The domain appears on one security blocklist and is flagged by 16 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services (WR1), and the domain creation date is recorded as May 07, 2026, which may indicate an attempt to evade detection through future-dated registration. The page title explicitly displays 'Docusign Login,' confirming the impersonation attempt. Organizations should implement immediate mitigation measures to counter this threat. Network-level blocking of the domain signdocs-beta.vercel.app and its resolving IP 64.29.17.3 is recommended. Security teams should deploy email filtering rules to quarantine messages containing links to this domain and conduct user awareness training emphasizing verification of Docusign login URLs. Multi-factor authentication should be enforced for all enterprise accounts to mitigate the impact of potential credential compromise. Monitoring for similar patterns, such as Vercel-hosted domains with 'docs' or 'sign' in their names, can help identify related phishing infrastructure.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | signdocs-beta.vercel.app |
malicious | Sinkholed |
| DNS4EU | signdocs-beta.vercel.app |
malicious | Sinkholed |
| Cloudflare DNS | bafkreicnk3jlvyzabu23hovsnysfumkrps5ombrjgzox4ias3ukxnhz7ke.ipfs.w3s.link |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
Casino / Gambling License Verification
所用技术 · 5 identified
jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.
code.jquery.com 置信度 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.
developers.google.com 置信度 100%VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。