Fake DocuSign email hides tricky phishing attempt

This report details a layered DocuSign-themed phishing campaign that weaponized Webflow preview links and randomized redirect domains to perform browser and system fingerprinting via a fake CAPTCHA, then redirected victims to a real Google login page to cloak the operation; while no malware was delivered, the infrastructure and tactics indicate credential harvesting and follow-on targeted attacks are likely.