Analysis: 2025-05-08_13-39-41_CST

Back to Analyzed Emails

Email Render

Email Render Screenshot

Extracted Links

===== FOUND IN EMAIL BODY & HTML CONTENT =====
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.us.m.mimecastprotect.com%2Fs%2FNDvyCzpx7xt29plmiotZf9c0fV%3Fdomain%3Ddocusign.com&data=05%7C02%7Cggrenier%40westernexp.com%7C687e6da4bdff4d78667108dd8e5e5a61%7C7574e8407b4e4dde9344850222919bd8%7C0%7C0%7C638823258086551692%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=OOLMTdoKqnJGTHTUsOaySJ%2Bm%2FR7Xct8owpEO0QveGHk%3D&reserved=0
----
https://url.us.m.mimecastprotect.com/s/gIpcCwpRKRt19zMRHqh3fJHAC6?domain=docusign.com
----
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Freport.mimecastcybergraph.com%2F%3Fmagiclink%3Dhttps%253A%252F%252Fapi.services.mimecast.com%252Foauth2%252Fauthorize%253Fresponse_type%253Dcode%2526client_id%253Do20nRkVXf7VUVnANkXhoOwGytEwGN0YAlyeDJn7oBTGNl2kN%2526state%253DeyJhbGciOiJSU0EtT0FFUC0yNTYiLCJlbmMiOiJBMjU2R0NNIn0.M22S11pPhf9CTl1b7-XxSIuGfPV5G2UEsB7Dz6XkR44fAM2Fo7JcsBCY8MQ7hti7TOxqU4xFXd1drd34ZvD8W46q4wXkYTfPJ2xk5vuUi-iL9014gt6CVDKeCGWtWyczJ4o8pFE4-cfRBn1WLcviavR0VQgqlH4tfjq_mWkrtvwq2xIINYz7lWn758rUsO03yDGpEjZ_haBrXuwtx1gAR5mnhzfOrFBougN3fe9EJraFhYpuNJFLwgeq77C529GeNreesz3zd2bzheR4dlL384Y_m2FzVKdULvP8ujqWWwY30dIxO6DylhEPJyA7wR_gqhTqwGK43KHASg3PUt1bcA.PdGztD0B9OuyXUO6.Ph-8JasqF47cNq88RcsXDCIxVF5cuOjvI-ksTuQPadM4MGktVazh9z7Q--O-gc7DubCxziaHxvjrZtkw6JrkpKrmbSo_38F4w24dCCNKt2abtGa0iif4-9ep_F2d5rnbT9AxJknBQrcNcvxVl7gxIqZInwf-XFM21E2GDmMwu8zx9fNpDv8c3juKFd3HhGr6tltVSRtq2x1jZCBC5PiVps_v_CcXeyUJWgRVaq9Yurt52VS-ZSKOVgeWpkquwpWFEzk85xJNG5iW2XTIwhCBwCaJiev3p07EbVmb4vvTg6omiR9qCy-knOFk0mdvSYh21j9rFP7nY5DjNXxwJJ69ECwkLwlRhiOtOswn8k5hkn3uFWBN8Huvyx2Jxwt2Zc8UhWVNqgoCHG9ss6pvOekoHQUQ4D8Z86dtaumEUpqTvECwssA9ANaLtIfue4vQI__5gSscknnFRvXOb8CXZnqdi4JpRreURHVToxEHIG5AV8OgHjFQpkwLD_-kquz2XuzMtrBEvmg_V6ZhPG2PDWOp3dth4yEVh1EpQGd61lN1QX91u5IQw0LURNBgHcJEVJg3YSFQHUddLFPWcz4ePbxDLTYMhxefwZ4ksefThJ7FM-fr35ZxZ6VbQ-3vNCtiG9BTtmNBPV7JcCycaHgMFZqyHbUgfzaT5AUfhA4jb3_quHYiCmgAVyd1KyqIXYfMXgVIMHTM-sf1m4hIcmjGjNWfRDDjAMuKvDlurYLLHpQYzAFLQ8fNVc2ODJ15Kc16smbOTghlY9Cu7TJ-021FdfqeilRsB4WAlkfeaeb2RSHc.WHFiW2s72IEtSFsUZJH9Sg%2526redirect_uri%253Dhttps%253A%252F%252Freport.mimecastcybergraph.com%252Fcallback&data=05%7C02%7Cggrenier%40westernexp.com%7C687e6da4bdff4d78667108dd8e5e5a61%7C7574e8407b4e4dde9344850222919bd8%7C0%7C0%7C638823258086512405%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=2ejF3RnSkin57cd9B0EejRTi2K6YOemBk15SnLca3a8%3D&reserved=0
----
https://url.us.m.mimecastprotect.com/s/XGDZCv2989t6KjmyUQfrfQBcVK?domain=na2.docusign.net
----
https://image-tracking-service.us-1.mimecastcybergraph.com/v1/image?imageData=D2x%2BYVbVSIpSaZcygc2YB08rg0w2zKuk1yiOhBlBFu9JrimCLwDsXtZmX8eaX6OrUzpSqiYESdShoyhrItlCxkipx8nhmITsdUboYThPjqZU3lpJoJNZT9%2B5JhYV49kvKPpQJkfJWVRNsUfJd0wTcjpXwybH0xBpVgrKYbbjWAn7XEVJYoU5EQYnV9b5tTv8fpIi43wZN8a69Xz82WvLpB%2BAgBKqDfidbgXNc%2FHwvV2dpLQjkPRVGQcDERPLhSSdI91yg%2B1UNVca56PiHQToGODN2nVNcr0Y6qAnKngoHVzNI2hddQzM8hTQOg%3D%3D
----
https://image-tracking-service.us-1.mimecastcybergraph.com/v1/image?imageData=eQObjhzQJOwJmdPwd%2BVH6pRHybYqakB0jZdWtGSlpCnsELwZ86AJbueRqykHzpu4GVIX1kVuSJqyYByeHJeS4XEu9ZKpSocYMr5%2BdusSxiUvLvmCuEHsE570dJiTn3j%2B%2Blri7hyvaXd%2FgVjsJ3Elxw16EEhUZ2mxdLtD%2F8qU%2BXvyuqzA%2BY7HkQC4AWh41D1%2FEcbn61%2BZZOHIx9pc0jhwD2X7LvsGPgcg7G%2FcVzkvqyVEQu9p3LaZpFrtPIFD5wVz4pnOV3bGVbZ%2B0qumMIyVe0x2lItE
----
https://image-tracking-service.us-1.mimecastcybergraph.com/v1/image?imageData=1%2BXh6pL4v2PHmdx84HWaDcGLrraguP%2Bhaz6DwJHfgTXZj3uQuANo1JUal90aDc%2FDFydrhEvmVdEaEdTw39rROyDzYSYmZk%2FTnOPUPWqdZjeHGBHHxEjXPQtK1xzy4mGCWedqqXwv3kLIgY7Bx4rStl7IxlP96X0%2FR5ObhE79RtHSl9VrhlnXXDwK2aQHJpkNKH0B%2FEp7oqcwtNxG1fSk0uH8dQC%2F3M7d1GT%2FHzuBIh4GLC%2FpjFsSQWQX8ptqH0TAGTD2AYf4S1My8MAPm5Ub%2F1MWgWwNDAvXuxKACDDncqNUcQSc9yW321jj8zScMjnXhAo%3D
----
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.us.m.mimecastprotect.com%2Fs%2FXGDZCv2989t6KjmyUQfrfQBcVK%3Fdomain%3Dna2.docusign.net&data=05%7C02%7Cggrenier%40westernexp.com%7C687e6da4bdff4d78667108dd8e5e5a61%7C7574e8407b4e4dde9344850222919bd8%7C0%7C0%7C638823258086533784%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=71Euug%2BePJU8fSIL8%2FyrLMfS9x7bBUMEwVwqMJIpW%2Bo%3D&reserved=0
----
http://DocuSign.com
----
https://image-processing-service.us-1.mimecastcybergraph.com/v2/banners?e=MHDZbdTSbevbRD0zUODAD2eRNHpGICETX4Lb4BljYU4LklNsdQuXiTkWgELCtsETF0XGrAHMxDx1UA7OL4p2sBddwAEpvoj3bdewn48ZhJ-zLZuawHJuSMTn0eV9gjV6yjCuSDUNlOIhkUz4I-6z84Rds_w9YvXPvSBOHQ2H6PrdSlF09x_TaQPUfG73XTou-GASMUwKbn4rXgdRPishiPIntMDrV_Bjr03NvpT2IWrdsLD4ciG-ZDfEhBRP5qrsKhT2_t18eTCl0dUBdopTIbO0DjwKV6i0rKOoyfz3XLWjRauTO6wRd-uLV8GZlI_K6uZiDCudoBr-EcSbC-a8TR_k4J7C7SmSaPtnf9ywowtd3T_q46WVJFRyuQ==
----
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.us.m.mimecastprotect.com%2Fs%2FvHjqCyPJ9JCMkzvyfRsGfxD8ja%3Fdomain%3Dd2690b33-66f5-4e8f-ac64-2d72b2757c23.to&data=05%7C02%7Cggrenier%40westernexp.com%7C687e6da4bdff4d78667108dd8e5e5a61%7C7574e8407b4e4dde9344850222919bd8%7C0%7C0%7C638823258086489034%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=TcqQLN9XZJdRAo8O50w%2FokeMLhj5VR8Z0O3PoT4xY3w%3D&reserved=0
----

===== FOUND IN ATTACHMENTS =====

===== CRAWLED LINKS =====
https://www.docusign.com/
----
https://www.docusign.com/#main-content
----
https://support.docusign.com/s/
----
https://www.docusign.net/Signing/Authenticate.aspx
----
https://support.docusign.com/s/?language=en_US
----
https://www.docusign.com/agreement-trap
----
https://www.docusign.com/intelligent-agreement-management
----
https://apps.docusign.com/send
----
https://www.docusign.com/deloitte-agreement-study-2024
----
https://www.docusign.com/solutions/departments/sales
----
https://www.docusign.com/support
----
https://www.docusign.com/legal/terms-and-conditions/
----
https://www.docusign.com/company/privacy-policy
----
https://www.docusign.com/solutions/iam-core
----

===== CRAWL HIERARCHY (GROUPED BY DOMAIN) =====

Domain: www.docusign.com
   https://www.docusign.com/ -> https://www.docusign.com/#main-content

Domain: www.docusign.com
   https://www.docusign.com/ -> https://www.docusign.com/deloitte-agreement-study-2024

Domain: support.docusign.com
   https://www.docusign.com/ -> https://support.docusign.com/s/?language=en_US

Domain: www.docusign.net
   https://www.docusign.com/ -> https://www.docusign.net/Signing/Authenticate.aspx

Domain: apps.docusign.com
   https://www.docusign.com/ -> https://apps.docusign.com/send

Domain: www.docusign.com
   https://www.docusign.com/

Domain: www.docusign.com
   https://www.docusign.com/ -> https://www.docusign.com/intelligent-agreement-management

Domain: www.docusign.com
   https://www.docusign.com/ -> https://www.docusign.com/agreement-trap

Domain: www.docusign.com
   https://www.docusign.com/ -> https://www.docusign.com/solutions/iam-core

Domain: www.docusign.com
   https://www.docusign.com/ -> https://www.docusign.com/solutions/departments/sales

Domain: www.docusign.com
   https://na2.docusign.net/Signing/ActivateSecurityChecks.aspx?a=2c7bb8c1-f9ab-410f-ad5d-944d4455c76b&ti=7195257d840e48038af425f391b85a38 -> https://www.docusign.com/legal/terms-and-conditions/

Domain: www.docusign.com
   https://na2.docusign.net/Signing/ActivateSecurityChecks.aspx?a=2c7bb8c1-f9ab-410f-ad5d-944d4455c76b&ti=7195257d840e48038af425f391b85a38 -> https://www.docusign.com/support

Domain: support.docusign.com
   https://na2.docusign.net/Signing/ActivateSecurityChecks.aspx?a=2c7bb8c1-f9ab-410f-ad5d-944d4455c76b&ti=7195257d840e48038af425f391b85a38 -> https://support.docusign.com/s/

Domain: www.docusign.com
   https://na2.docusign.net/Signing/ActivateSecurityChecks.aspx?a=2c7bb8c1-f9ab-410f-ad5d-944d4455c76b&ti=7195257d840e48038af425f391b85a38 -> https://www.docusign.com/company/privacy-policy

Website Screenshots

Phishing Status: phishing

Detected Phishing Indicators

Detected Phishing Related Links

  • https://url.us.m.mimecastprotect.com/s/gIpcCwpRKRt19zMRHqh3fJHAC6?domain=docusign.com
  • https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Freport.mimecastcybergraph.com%2F%3Fmagiclink%3Dhttps%253A%252F%252Fapi.services.mimecast.com%252Foauth2%252Fauthorize%253Fresponse_type%253Dcode%2526client_id%253Do20nRkVXf7VUVnANkXhoOwGytEwGN0YAlyeDJn7oBTGNl2kN%2526state%253DeyJhbGciOiJSU0EtT0FFUC0yNTYiLCJlbmMiOiJBMjU2R0NNIn0.M22S11pPhf9CTl1b7-XxSIuGfPV5G2UEsB7Dz6XkR44fAM2Fo7JcsBCY8MQ7hti7TOxqU4xFXd1drd34ZvD8W46q4wXkYTfPJ2xk5vuUi-iL9014gt6CVDKeCGWtWyczJ4o8pFE4-cfRBn1WLcviavR0VQgqlH4tfjq_mWkrtvwq2xIINYz7lWn758rUsO03yDGpEjZ_haBrXuwtx1gAR5mnhzfOrFBougN3fe9EJraFhYpuNJFLwgeq77C529GeNreesz3zd2bzheR4dlL384Y_m2FzVKdULvP8ujqWWwY30dIxO6DylhEPJyA7wR_gqhTqwGK43KHASg3PUt1bcA.PdGztD0B9OuyXUO6.Ph-8JasqF47cNq88RcsXDCIxVF5cuOjvI-ksTuQPadM4MGktVazh9z7Q--O-gc7DubCxziaHxvjrZtkw6JrkpKrmbSo_38F4w24dCCNKt2abtGa0iif4-9ep_F2d5rnbT9AxJknBQrcNcvxVl7gxIqZInwf-XFM21E2GDmMwu8zx9fNpDv8c3juKFd3HhGr6tltVSRtq2x1jZCBC5PiVps_v_CcXeyUJWgRVaq9Yurt52VS-ZSKOVgeWpkquwpWFEzk85xJNG5iW2XTIwhCBwCaJiev3p07EbVmb4vvTg6omiR9qCy-knOFk0mdvSYh21j9rFP7nY5DjNXxwJJ69ECwkLwlRhiOtOswn8k5hkn3uFWBN8Huvyx2Jxwt2Zc8UhWVNqgoCHG9ss6pvOekoHQUQ4D8Z86dtaumEUpqTvECwssA9ANaLtIfue4vQI__5gSscknnFRvXOb8CXZnqdi4JpRreURHVToxEHIG5AV8OgHjFQpkwLD_-kquz2XuzMtrBEvmg_V6ZhPG2PDWOp3dth4yEVh1EpQGd61lN1QX91u5IQw0LURNBgHcJEVJg3YSFQHUddLFPWcz4ePbxDLTYMhxefwZ4ksefThJ7FM-fr35ZxZ6VbQ-3vNCtiG9BTtmNBPV7JcCycaHgMFZqyHbUgfzaT5AUfhA4jb3_quHYiCmgAVyd1KyqIXYfMXgVIMHTM-sf1m4hIcmjGjNWfRDDjAMuKvDlurYLLHpQYzAFLQ8fNVc2ODJ15Kc16smbOTghlY9Cu7TJ-021FdfqeilRsB4WAlkfeaeb2RSHc.WHFiW2s72IEtSFsUZJH9Sg%2526redirect_uri%253Dhttps%253A%252F%252Freport.mimecastcybergraph.com%252Fcallback&data=05%7C02%7Cggrenier%40westernexp.com%7C687e6da4bdff4d78667108dd8e5e5a61%7C7574e8407b4e4dde9344850222919bd8%7C0%7C0%7C638823258086512405%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=2ejF3RnSkin57cd9B0EejRTi2K6YOemBk15SnLca3a8%3D&reserved=0
  • https://url.us.m.mimecastprotect.com/s/XGDZCv2989t6KjmyUQfrfQBcVK?domain=na2.docusign.net
  • https://image-tracking-service.us-1.mimecastcybergraph.com/v1/image?imageData=D2x%2BYVbVSIpSaZcygc2YB08rg0w2zKuk1yiOhBlBFu9JrimCLwDsXtZmX8eaX6OrUzpSqiYESdShoyhrItlCxkipx8nhmITsdUboYThPjqZU3lpJoJNZT9%2B5JhYV49kvKPpQJkfJWVRNsUfJd0wTcjpXwybH0xBpVgrKYbbjWAn7XEVJYoU5EQYnV9b5tTv8fpIi43wZN8a69Xz82WvLpB%2BAgBKqDfidbgXNc%2FHwvV2dpLQjkPRVGQcDERPLhSSdI91yg%2B1UNVca56PiHQToGODN2nVNcr0Y6qAnKngoHVzNI2hddQzM8hTQOg%3D%3D
  • https://image-tracking-service.us-1.mimecastcybergraph.com/v1/image?imageData=eQObjhzQJOwJmdPwd%2BVH6pRHybYqakB0jZdWtGSlpCnsELwZ86AJbueRqykHzpu4GVIX1kVuSJqyYByeHJeS4XEu9ZKpSocYMr5%2BdusSxiUvLvmCuEHsE570dJiTn3j%2B%2Blri7hyvaXd%2FgVjsJ3Elxw16EEhUZ2mxdLtD%2F8qU%2BXvyuqzA%2BY7HkQC4AWh41D1%2FEcbn61%2BZZOHIx9pc0jhwD2X7LvsGPgcg7G%2FcVzkvqyVEQu9p3LaZpFrtPIFD5wVz4pnOV3bGVbZ%2B0qumMIyVe0x2lItE
  • https://image-tracking-service.us-1.mimecastcybergraph.com/v1/image?imageData=1%2BXh6pL4v2PHmdx84HWaDcGLrraguP%2Bhaz6DwJHfgTXZj3uQuANo1JUal90aDc%2FDFydrhEvmVdEaEdTw39rROyDzYSYmZk%2FTnOPUPWqdZjeHGBHHxEjXPQtK1xzy4mGCWedqqXwv3kLIgY7Bx4rStl7IxlP96X0%2FR5ObhE79RtHSl9VrhlnXXDwK2aQHJpkNKH0B%2FEp7oqcwtNxG1fSk0uH8dQC%2F3M7d1GT%2FHzuBIh4GLC%2FpjFsSQWQX8ptqH0TAGTD2AYf4S1My8MAPm5Ub%2F1MWgWwNDAvXuxKACDDncqNUcQSc9yW321jj8zScMjnXhAo%3D
  • https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.us.m.mimecastprotect.com%2Fs%2FXGDZCv2989t6KjmyUQfrfQBcVK%3Fdomain%3Dna2.docusign.net&data=05%7C02%7Cggrenier%40westernexp.com%7C687e6da4bdff4d78667108dd8e5e5a61%7C7574e8407b4e4dde9344850222919bd8%7C0%7C0%7C638823258086533784%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=71Euug%2BePJU8fSIL8%2FyrLMfS9x7bBUMEwVwqMJIpW%2Bo%3D&reserved=0
  • http://DocuSign.com
  • https://image-processing-service.us-1.mimecastcybergraph.com/v2/banners?e=MHDZbdTSbevbRD0zUODAD2eRNHpGICETX4Lb4BljYU4LklNsdQuXiTkWgELCtsETF0XGrAHMxDx1UA7OL4p2sBddwAEpvoj3bdewn48ZhJ-zLZuawHJuSMTn0eV9gjV6yjCuSDUNlOIhkUz4I-6z84Rds_w9YvXPvSBOHQ2H6PrdSlF09x_TaQPUfG73XTou-GASMUwKbn4rXgdRPishiPIntMDrV_Bjr03NvpT2IWrdsLD4ciG-ZDfEhBRP5qrsKhT2_t18eTCl0dUBdopTIbO0DjwKV6i0rKOoyfz3XLWjRauTO6wRd-uLV8GZlI_K6uZiDCudoBr-EcSbC-a8TR_k4J7C7SmSaPtnf9ywowtd3T_q46WVJFRyuQ==
  • https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.us.m.mimecastprotect.com%2Fs%2FvHjqCyPJ9JCMkzvyfRsGfxD8ja%3Fdomain%3Dd2690b33-66f5-4e8f-ac64-2d72b2757c23.to&data=05%7C02%7Cggrenier%40westernexp.com%7C687e6da4bdff4d78667108dd8e5e5a61%7C7574e8407b4e4dde9344850222919bd8%7C0%7C0%7C638823258086489034%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=TcqQLN9XZJdRAo8O50w%2FokeMLhj5VR8Z0O3PoT4xY3w%3D&reserved=0
  • https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.us.m.mimecastprotect.com%2Fs%2FNDvyCzpx7xt29plmiotZf9c0fV%3Fdomain%3Ddocusign.com&data=05%7C02%7Cggrenier%40westernexp.com%7C687e6da4bdff4d78667108dd8e5e5a61%7C7574e8407b4e4dde9344850222919bd8%7C0%7C0%7C638823258086551692%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=OOLMTdoKqnJGTHTUsOaySJ%2Bm%2FR7Xct8owpEO0QveGHk%3D&reserved=0