Is na2.docusign.net safe?

A real DocuSign access-code screen

The page shows a DocuSign access-code prompt: "Please enter the access code to check out this document." It carries the DocuSign name and the na2.docusign.net host in its own header, which is how DocuSign's signing portal normally looks.

The document is branded for Lake Trust Credit Union, with the name Josie Tobias shown alongside it. That branding is what the sender chose to display; it tells you who the document claims to come from, not who actually sent it.

Clean technical checks on a long-standing domain

The registrable domain docusign.net is about 10,005 days old, and the host is a subdomain of it rather than a separate lookalike name. That age applies to the parent domain, not to how long this particular subdomain has existed.

The saved checks found no threat warning from the browser threat feed, zero malicious or suspicious detections across 93 engines, and a valid encrypted connection. These results mean nothing malicious was detected on the page; they do not vouch for the sender of any document.

DocuSign's own fraud resources confirm that a valid link may include a server prefix such as "na2", "na3", "na4", "jp", "au", "ca", "eu" or "demo", which matches the host in this link. The page is script-built, so its own contact details were not visible to the page reader and were not reviewed.

What happens when you enter the access code

Entering the access code on this page opens the document inside DocuSign's own signing environment, on the host DocuSign lists as one of its valid servers. The code is the gate the sender set, so only someone given it can view the document.

Because the page sits on DocuSign's infrastructure, the exposure here is not a fake login form harvesting a password. The practical question is whether you were expecting a document from this sender at all.