Found via IP pivot from googlemeeettinvitee.click

Indicator doc-docsign.cyou Type domain Category Lure Page Confidence medium VT Score 19/94 Source urlscan First Seen 2026-04-26 08:00:28 UTC Last Seen 2026-08-07 08:00:23 UTC urlscan View scan result ↗
Raw JSON
{
  "submitter": {},
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "doc-docsign.cyou",
    "apexDomain": "doc-docsign.cyou",
    "time": "2026-04-26T02:58:44.489Z",
    "uuid": "019dc7b9-88ac-70e8-ac3e-5018c09a44a2",
    "url": "https://doc-docsign.cyou/eDocusign.php"
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 25507,
    "encodedDataLength": 22918,
    "requests": 3
  },
  "page": {
    "country": "US",
    "server": "LiteSpeed",
    "ip": "104.225.130.131",
    "apexDomainAgeDays": 2,
    "language": "en",
    "mimeType": "text/html",
    "title": "Signature required",
    "url": "https://doc-docsign.cyou/eDocusign.php",
    "tlsValidDays": 89,
    "tlsAgeDays": 2,
    "ptr": "fl-s2.serverpanel.com",
    "domainAgeDays": 2,
    "tlsValidFrom": "2026-04-23T07:01:21.000Z",
    "domain": "doc-docsign.cyou",
    "apexDomain": "doc-docsign.cyou",
    "asnname": "SHOCK-1 - Shock Hosting LLC, US",
    "asn": "AS395092",
    "tlsIssuer": "R13",
    "status": "200"
  },
  "_id": "019dc7b9-88ac-70e8-ac3e-5018c09a44a2",
  "_score": null,
  "sort": [
    1777172324489,
    "019dc7b9-88ac-70e8-ac3e-5018c09a44a2"
  ],
  "result": "https://urlscan.io/api/v1/result/019dc7b9-88ac-70e8-ac3e-5018c09a44a2/",
  "screenshot": "https://urlscan.io/screenshots/019dc7b9-88ac-70e8-ac3e-5018c09a44a2.png"
}