njj.standard.us-east-1.oortstorages.com

DocuSign

https://njj.standard.us-east-1.oortstorages.com/docusign.luk?EMAIL=danis@bc3c804019af3f60270c7764b678c19d03ff.org Access site

Screenshot

Investigate

Domain njj.standard.us-east-1.oortstorages.com4 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 170.106.62.62

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://njj.standard.us-east-1.oortstorages.com/docusign.lu…

urlscan

Wayback

archive.today

Cert DNSPod DV TLS RSA CA 2025

crt.sh

Censys

Google CT

Phishunt analysis Beta

75 high suspicion likely_phishingheuristic risk score · not a probability

Why?

+5.3 Keyword match
+4.5 Brand in title
+3.9 Password field
+3.2 Brand favicon
+3.0 OpenPhish
+2.6 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+1.0 Site cluster
+0.6 Brand impersonation in path
+0.6 Long domain
+0.6 Login text in screenshot
+0.6 Script exfil endpoint
+0.5 Deep subdomain
+0.2 Hyphens
+0.2 Suspicious TLD
+0.1 External scripts
Boosted to 75: Credential exfil kit

20 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

High-confidence DocuSign phishing page hosted on Tencent infrastructure under a cloud storage domain, with a target email address embedded in the URL. Contains a password input field and a detected script exfiltration endpoint; confirmed malicious by OpenPhish.

Script exfil endpointPassword fieldOpenPhish

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-26 · confidence 95%

Domain & Network

Whois

Registrar GoDaddy.com, LLC

Network

IP 170.106.62.62

Country