Original Phishing Message

From: DocuSign | Review via E-sign© <postmaster[@]5d1058bb30[.]nxcli[.]io>
Subject: Completed: Complete viaSign- #6 -CL Rep Letter

Where did the link lead?

The link led to a branded fake document viewing site that asked you to authenticate. It pre-filled your email address then asked for your password. Never enter your credentials on sites you do not recognize.

Tips for Detection

  • The email sender was postmaster[@]5d1058bb30[.]nxcli[.]io which should be suspicious. Legitimate emails sent from DocuSign will come from docusign.com or docusign.net.
  • Always hover over the link before clicking. The link did not lead to a DocuSign website but instead went to https://eu2[.]contabostorage[.]com/623730bdf84d4c8c8cca3738d92e65c2:newd/doc[.]html.
  • Notice in the body of the email, it says “E-Signature sent you a document to review”. The generic name should arouse suspicion.
  • In the footer of the email, it says “This message was sent to you by Gill Denson & Company Tax Advisors”. Are you expecting an email from that company?
  • For more information from DocuSign about phishing, see https://www.docusign.com/blog/how-docusign-users-can-spot-avoid-and-report-fraud.
  • For DocuSign emails, instead of clicking the link, you can always look for the 33-character security code and go directly to docusign.com to access the document if you are not sure if the email is legitimate. For more info, see https://support.docusign.com/s/articles/what-is-this-long-number-cf7dfbc5d3ec45c88af98827dbefad051-and-what-do-i-do.

Text of Phishing Message

From: DocuSign | Review via E-sign© <postmaster[@]5d1058bb30[.]nxcli[.]io>
Subject: Completed: Complete viaSign- #6 -CL Rep Letter

E-Signature sent you a document to review and sign.
REVIEW DOCUMENTS

Do Not Share This Email
This email contains a secure link to DocuSign. Please do not share this email, link, or access code with others.

About DocuSign
Sign documents electronically in just minutes. It’s safe, secure, and legally binding. Whether you’re in an office, at home, on-the-go — or even across the globe — DocuSign provides a professional trusted solution for Digital Transaction Management™.

Questions about the Document?
If you need to modify the document or have questions about the details in the document, please reach out to the sender by emailing them directly.

Stop receiving this email
Report this email or read more about Declining to sign and Managing notifications.

If you are having trouble signing the document, please visit the Help with Signing page on our Support Center.

Download the DocuSign App

This message was sent to you by Gill Denson & Company Tax Advisors who is using the DocuSign Electronic Signature Service. If you would rather not receive email from this sender you may contact the sender with your request.