Phishing detection: objectstorage.ap-kulai-2.oraclecloud.com

DocuSign
https://objectstorage.ap-kulai-2.oraclecloud.com/n/axqwdn9ov3iw/b/bucket-20260730-1024/o/DocuSign.html?cms=miryn9@b7e2de675cbd56e72e01235186b7c0c84b2a.org Access site
Screenshot
Screenshot of objectstorage.ap-kulai-2.oraclecloud.com
Investigate
Domain objectstorage.ap-kulai-2.oraclecloud.com14968 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 149.118.168.1
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://objectstorage.ap-kulai-2.oraclecloud.com/n/axqwdn9o…
urlscan Wayback archive.today
Cert DigiCert Global G2 TLS RSA SHA256 2020 CA1
crt.sh Censys Google CT
Phishunt analysis Beta
33 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +4.1 Site cluster
  • +3.9 Password field
  • +3.0 OpenPhish
  • +2.2 Country mismatch
  • +1.2 ASN reputation
  • +1.1 No CSP header
  • +0.7 Unrecognised DNS provider
  • +0.6 Brand impersonation in path
  • +0.6 Long domain
  • +0.6 Login text in screenshot
  • +0.3 Deep subdomain
  • +0.2 Hyphens
  • +0.2 External scripts
  • +0.2 Suspicious TLD
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates DocuSign to steal credentials, delivered as a static HTML page abusing Oracle Cloud object storage for hosting. A target email address is embedded in the URL, indicating a spear-phishing campaign. Confirmed malicious by OpenPhish; a password input field is present.

OpenPhishBrand impersonation in pathPassword field
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-06 · confidence 87%
Domain & Network
Whois
Registrar MarkMonitor Inc.
Network
IP 149.118.168.1
Country MalaysiaMalaysia
Hosting Oracle Corporation
ASN AS31898
TLS Cert DigiCert Global G2 TLS RSA SHA256 2020 CA1
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Oracle Corporation
abuse_report@oracle.com
Registrar MarkMonitor Inc.
abusecomplaints@markmonitor.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-09-06 01:04 UTC  ·  Last refreshed 2026-09-13 09:30 UTC