docusign.ostiumterms.com
Category: Malicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of docusign.ostiumterms.com
This domain appears to present itself as a DocuSign-related document review and signing page. Based on the page title, screenshot, and visible branding, it claims that a protected document has been shared with the visitor and instructs them to download a desktop application in order to review and sign it.
The site is hosted on the subdomain docusign.ostiumterms.com rather than on an official DocuSign-owned domain. Its content imitates the look and messaging of an e-signature service landing page, including references to document access, legally binding signatures, and enterprise-grade protection. Based on the available page content, the apparent operator is not clearly identified beyond the branding shown on the page.
The domain is very new and does not appear to have an established traffic presence. The combination of a newly registered third-party domain and branding associated with a well-known document-signing platform may indicate that the page was created to resemble a legitimate service rather than to operate as an independently branded website.
Safety Assessment for docusign.ostiumterms.com
Multiple scan signals indicate elevated risk at the time of this scan. The domain was flagged by 15 out of 91 security engines, with several classifying it as phishing, malware, or fraud-related. In addition, the page closely resembles DocuSign branding and uses a subdomain format that may cause visitors to believe they are interacting with the real service, even though the domain is not an official DocuSign domain.
The page also appears to encourage a software download to review a document, which is a common social-engineering pattern in credential theft and malware delivery campaigns. A malware scan produced a suspicious result and identified a flagged external resource, while one linked URL points to a downloadable batch file hosted on a code-sharing platform. Although major content-malice blocklists were clean at the time of this scan, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker but still cautionary signal.
The domain is only 3 days old, has no established ranking, and combines brand-like presentation with a download prompt on a non-official domain. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid SSL/TLS certificate issued by a mainstream certificate authority, expiring in October 2026. It is served through Cloudflare infrastructure and resolves to an IP address associated with Cloudflare in Toronto, Canada. The domain uses Cloudflare nameservers, and DNSSEC appears to be unsigned.
From a security perspective, the presence of HTTPS should not be treated as proof of legitimacy, since malicious and deceptive sites may also use valid certificates. Additional concerns include the domain's very recent registration date, lack of DNSSEC, suspicious external download-related resources, and the use of a branded subdomain on a separate parent domain.
Share your experience with this website. Was it safe? Did you encounter any issues?