rubt-2kjq-r97v[.]adobe-signature-sharedoc-mail-com-s-account[.]workers[.]dev

This domain, rubt-2kjq-r97v.adobe-signature-sharedoc-mail-com-s-account.workers.dev, poses a significant threat by attempting to steal user credentials through brand impersonation. It masquerades as a legitimate service to deceive users into providing sensitive login information, which can lead to unauthorized access to personal or corporate accounts.

The domain was created on April 11, 2026, and is registered through Cloudflare Workers. It is currently active and has been flagged by 8 out of 95 security vendors on VirusTotal, indicating a high risk. The domain is also listed on a security blocklist maintained by PhishDestroy. The server resolves to IP address 188.114.96.3, located in Canada, and utilizes a Let's Encrypt SSL certificate.

If you have visited this site or provided any information, it is crucial to immediately change your passwords for any potentially compromised accounts. Additionally, enabling two-factor authentication where available can enhance your security. Monitoring your accounts for unusual activity and reporting the domain to relevant security teams can also help mitigate potential risks. Remain vigilant and cautious when interacting with unfamiliar domains, especially those mimicking well-known brands.