Highscore 55 · flagged Friday, September 11, 2026

downloadwithdocusign.live

Appeared in the .live zone on Friday, September 11, 2026; by the end of that day the census found boilerplate page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: docusign
+30
form on a brand-styled page
matched: has_form
+18
identical page on many newborns
matched: 46 identical pages
+10
Registrar
Nameserver provider
Nameservers
ns1.systemdns.com, ns2.systemdns.com, ns3.systemdns.com
First-day state
boilerplate page
HTTP status
200
Page title
Rebrandly
Has a form
yes
Brand echoed
docusign

Model opinions

Second opinionlooks like abusetarget: DocuSignconfidence 68%· claude-opus-5

The name explicitly borrows the DocuSign brand while the site is only a Rebrandly branded-short-domain placeholder, meaning the domain has been provisioned as a link-shortener to cloak redirects behind a DocuSign-looking URL; part of a cluster of 46 identical Rebrandly placeholder pages. No deceptive content is served yet, so it is a brand-squat/redirect abuse rather than a live phish.

First passlooks benignconfidence 92%· claude-haiku-4-5

The page is a Rebrandly landing page—a legitimate URL shortening service—showing that downloadwithdocusign.live is a branded short domain registered through Rebrandly. The page title, logo, and content all identify Rebrandly as the actual service, not DocuSign. While the domain name contains 'docusign', it is being used as a shortened URL alias by Rebrandly's customers, not as an impersonation of DocuSign itself.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, September 11, 2026

Screenshot of downloadwithdocusign.live taken by the zone census on 2026-09-11

Same data as JSON: /api/zone/domain/downloadwithdocusign.live. This page is not indexed by search engines and does not link to the site it describes.