Skip to main content
Sandfish

Sign in to your account

https://login.microsoftonline.com/common/oauth2/devicea…

WACZ
Group12b5f94b-098c-46d2-bdd3-bdabac7e7e36submitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation
Findings
5Critical
Impersonated brand
DocusignOther cases impersonating Docusign Search for this value.
Submitted URL
http://docu-signs.net/ Search for this value.
Effective URL
https://login.microsoftonline.com/common/oauth2/deviceauth Search for this value.
Domain registration
docu-signs.net31-90 days oldRegistered 2026-09-07 · Registrar Ultahost, Inc.
Language
Detecting...
Network
19 requests across 9 hosts
Cookies
13 observed
Favicon
90cdaf48…b8c6cd21 Search for this value.
Infrastructure
Loading...
Behavior
1 recorded events
Interaction
2 actions · 0 submissions · stopped: known provider login
  1. 1. clicksucceeded⏳ Ready to verify
  2. 2. clicksucceededOpen

Analysis metadata

How and when the analysis ran.

Input kind
url
Execution kind
capture
Duration
20.0s
Navigation
5 navigations
Engine version
0.4.0
Created
2026-10-23 20:57:35Z
Started
2026-10-23 20:57:35Z
Finished
2026-10-23 20:57:55Z
Archive
328 KB
Favicon source
html_link / favicon-v5
Analysis ID
2ea0abe4-7ac4...

Signals by severity

Detected findings grouped by risk

Request activity

Network requests grouped by resource type

Behavior

Recorded actions grouped by type

Network contacts

Requests to the most active hosts

Request ownership

First-party and third-party requests

Response MIME types

Network responses grouped by MIME type