docu-signs.net
Appeared in the .net zone on Wednesday, September 9, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
docu-signs.net is a clear brand-squat of DocuSign (a top e-signature phishing lure) newly registered via a retail registrar behind Cloudflare NS; the site currently serves only an aaPanel 'website has been stopped' placeholder with no content, so there is no active deception yet but no plausible legitimate use of the name either.
The domain docu-signs.net contains 'docusign' (DocuSign brand) in its name, registered via retail registrar with Cloudflare nameservers—a common phishing infrastructure pattern. However, the page currently displays only a generic 'website stopped' placeholder with no active phishing form or credential-capture attempt. This is a brand-typosquat domain with suspended/placeholder content; the infrastructure suggests malicious intent, but without an active deceptive page, the verdict is abuse (squat
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Wednesday, September 9, 2026
Same data as JSON: /api/zone/domain/docu-signs.net. This page is not indexed by search engines and does not link to the site it describes.