ScanMalware.com

Security Scan Report: adobe-40q.pages.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/25399d90-a728-4e70-a817-9dc69556839dDomain and IP registration (RDAP)/api/v1/rdap/25399d90-a728-4e70-a817-9dc69556839dHow often this domain was scanned/api/v1/domain/stats/adobe-40q.pages.devScan history for this domain/api/v1/domain/history/adobe-40q.pages.dev?limit=15
This website contacted 8 IPs in 1 country across 6 domains to perform 13 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://adobe-40q.pages.dev/

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

Page claims to be a Docusign secure sign-in but is hosted on adobe-40q.pages.dev, a mismatched pages.dev subdomain. No credential form was captured, but the brand impersonation is highly suspicious.

Risk Factors (4)
Brand impersonation of Docusign on an unrelated pages.dev subdomain
Mismatched brand signals: 'adobe' in hostname, 'Docusign' in page title
Hosted on a shared pages.dev platform where the subdomain could have been created recently
Unranked domain with no established reputation
Domain age information unavailable

Details

Page Title

Docusign Secure Sign-in

Scan Type

public

Domain Name Analysis

You're looking at domain 'adobe-40q.pages.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'adobe-40q'. Its registrable label 'pages' stretches across 5 characters containing two vowels alongside 3 consonants. Word splitting yields 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Secure Portal "3 verifying... countrane . aor * Hep

Page Load Overview

0.52s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:42 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism51% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
51%
finance banking
49%
healthcare medical
49%
government public service
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6172.66.44.213Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.47.43Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
138--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E24177CB9CE301463713D5A81773930A3B93D407C48DD9643E8DA2A8DFCA694C99778C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nnWAP9fACBl7+tJcaUWSENOQsCsennW05G:nnjJ1Bl7+tJcaU2senWAG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2185:AAgAUBAgAAAAAEYAABBIQAAAKEAABAAQggBAAEAEEAAEIEAAJAQAYABIBIBAAgAEAAAAAACCAAAAAKAgAAQAAACMAAAgFIgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefefee6e6fefe
Perceptual Hash:f7cc8c7322cc8933
Difference Hash:0202022a4c0e1202
Wavelet Hash:ccccc8d8061e0c0c
Color Hash:070000001c0

Other Hashes

Crop Resistant:0202022a4c0e1202

Scan History

Scan history not available

Unable to load historical scan data