Phishing detection: review-docusign-document.top

DocuSign
http://review-docusign-document.top Access site
Screenshot
Screenshot of review-docusign-document.top

Screenshot captured by urlscan.io on 2026-10-04T07:03 UTC: our own render of this page came back blank.

Investigate
Domain review-docusign-document.top0 CT hosts on apex

See every phishunt record for this domain

URL http://review-docusign-document.top
Phishunt analysis Beta
31 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.1 Brand in screenshot
  • +4.0 Young domain
  • +3.0 ASN reputation
  • +3.0 TweetFeed
  • +1.3 Suspicious TLD
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.9 No registrar lock
  • +0.7 Unrecognised DNS provider
  • +0.6 Long domain
  • +0.6 Registrar reputation
  • +0.2 Hyphens
16 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Hyphenated domain themed around reviewing a DocuSign document, imitating the e-signature service to phish credentials. Listed in the TweetFeed threat feed, uses the abuse-prone .top TLD, runs over plain HTTP on Akamai cloud hosting, and sits in an IP cluster.

TweetFeedSuspicious TLDSite cluster
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-04 · confidence 80%
Domain & Network
Whois
Registrar NameSilo, LLC
Network
IP 172.232.24.235 Akamai Linode
Country United StatesUnited States
ASN AS63949
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io · SANS ISC
Report this phishing
Network / ASN Akamai Connected Cloud
Registrar NameSilo, LLC

Tracked from 2026-10-04 04:02 UTC  ·  Last refreshed 2026-10-04 15:30 UTC