Security Scan: Adobe Acrobat Sign

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e55ee437-6c7b-4281-8ea7-f7ad5ef50273 Domain and IP registration (RDAP)/api/v1/rdap/e55ee437-6c7b-4281-8ea7-f7ad5ef50273 Certificate Transparency/api/v1/ct/edge-edge-e7da3cbfb704853eb3.rentalescpade.workers.dev How often this domain was scanned/api/v1/domain/stats/edge-edge-e7da3cbfb704853eb3.rentalescpade.workers.dev Scan history for this domain/api/v1/domain/history/edge-edge-e7da3cbfb704853eb3.rentalescpade.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 3 domains to perform 7 HTTP transactions. The main domain is edge-edge-e7da3cbfb704853eb3.rentalescpade.workers.dev and was registered 18 years ago.

Submitted URL: https://edge-edge-e7da3cbfb704853eb3.rentalescpade.workers.dev/mNcsdTevCEOxM4puyIBwB2hTVcitynePtpNPbFyfA48?id=refds%3D0&_rt=1

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

EvilTokens device-code phishing kit on a disposable Cloudflare Workers subdomain impersonating Adobe Acrobat Sign and Microsoft; YARA-confirmed ghost loader, IDS phishing alerts, anti-analysis cloaking. Do not interact.

Risk Factors (6)

Known EvilTokens device-code phishing kit (roster-anchored, YARA-confirmed)

AES-GCM ghost loader cloaking page content

Brand impersonation of Adobe and Microsoft on a non-brand disposable subdomain

Device-code / OAuth-consent credential-theft lure instead of a conventional form

DevTools and right-click blocking with inline obfuscation

Unranked domain on a shared workers.dev namespace of unknown tenant age

Domain age information unavailable

Details

Page Title

Adobe Acrobat Sign

Scan Type

public

Favicon Hash

MMH3: -1158712232

MD5: 0c5151858d0c0b985d628f7056e9469d

Domain Name Analysis

Domain 'edge-edge-e7da3cbfb704853eb3.rentalescpade.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'edge-edge-e7da3cbfb704853eb3.rentalescpade'. The core label 'workers' covers 7 characters holding 2 vowels versus five consonants. Splitting it apart reveals 1 word: workers. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.33s

Total Load Time

117 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:484 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software62% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

62%

documentation technical

44%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	172.67.205.254Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.217.208.95Google · CDN	United States	AS15169Google LLC
1	142.250.154.94Google · CDN	United States	AS15169Google LLC
1	104.21.61.42Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	4	-	-