ScanMalware.com

Security Scan Report: zone-data-95529d585562.rentalescpade.workers.dev

Site favicon
Submitted: Aug 27, 2026, 12:45:15 PMCompleted: Aug 27, 2026, 12:46:55 PMpubliccompleted

Summary

This website contacted 4 IPs in 1 country across 3 domains to perform 2 HTTP transactions. The main domain is zone-data-95529d585562.rentalescpade.workers.dev and was registered 18 years ago.

Submitted URL: https://zone-data-95529d585562.rentalescpade.workers.dev/DKR_3aqmfk03mvOzujSQhBGvpLPq6bC46h-vXebgQ10?ref=docks=0&_rt=1

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Page hosts a known phishing kit impersonating Adobe, with strong malicious indicators; treat as high‑risk phishing.

Risk Factors
Hosted on free workers.dev subdomain (unknown creation date)
Brand impersonation of Adobe without official domain
Anti‑analysis JavaScript (devtools/right‑click blocking)
Multiple high‑severity IDS phishing alerts
Domain age information unavailable

Details

Page Title

Adobe Acrobat Sign

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(64%)

Domain Information

The domain name 'zone-data-95529d585562.rentalescpade.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'zone-data-95529d585562.rentalescpade'. The second-level label 'workers' is 7 characters long containing 2 vowels alongside 5 consonants. Tokenizing the label suggests 1 word: workers. Median word length is 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of fonts.googleapis.com

Page Load Overview

12.12s
Total Load Time
11
HTTP Requests
3
Domains
236 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:484 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
64%
documentation technical
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5172.67.205.254Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2104.21.61.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
114--

Page Statistics

11
Requests
3
Unique Domains
258.8 KB
Total Size

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T187C2F150BC267C5863790F6E515BE3DC9AE67D8B008CD888F38E19D8E93C65443DAED2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:dD0lsAnXksOVfmRK+gxRPSA1op94JVoXsBvEHVcSAX1HReokM5XArEZXcKogTod2:dDmnXGVO4vRH2iJ1w2ZReSArU1Tod2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27811:1QEDQOQLEUQgbCn5EEcIhAgkMmglsqKAgiZBgCQQJwBIYKwVIqGcQPgoLDUUlhARSID0cqEmC6IBBoDARWqIQsjy0iCGEEIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818181800
Perceptual Hash:9cc6669927339966
Difference Hash:2430b2b2b2b23204
Wavelet Hash:00183fffff3f1800
Color Hash:#631f93

Other Hashes

Crop Resistant:2430b2b2b2b23204

Scan History

Scan history not available

Unable to load historical scan data