ordercontractdocumentsonpdffilesazxm[.]pages[.]dev

The domain ordercontractdocumentsonpdffilesazxm.pages.dev is identified as a brand impersonation phishing site specifically targeting Adobe Document Cloud services. Analysis of the page title, 'A.d.o.b.e | Edit - Sign - View', confirms the domain is designed to deceive users into believing they are interacting with legitimate Adobe document editing and signing tools. As of the latest verification, this domain has been taken offline, though prior activity remains a documented threat. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Cloudflare, Inc. and resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.) with a geolocation listed as the United States. The domain is flagged by 19 of 95 security vendors on VirusTotal, indicating a high confidence level in its malicious classification. It appears on one security blocklist and lacks an SSL certificate, further reducing its legitimacy. Detection engines, including PhishDestroy, have actively blocked this domain due to confirmed phishing behavior. Current status confirms the domain is offline, though residual risk remains for users who may have interacted with it prior to takedown. Organizations and individuals are advised to block the domain and IP address 188.114.97.3 at the network perimeter. Users should verify the authenticity of any document signing or editing portal by cross-referencing the URL with official Adobe domains and enabling multi-factor authentication on all accounts. Security teams are recommended to monitor logs for connections to the domain or IP and conduct retrospective analysis for potential credential exposure or unauthorized access attempts.