Blurred Adobe invoice behind a login box that asks for your email password
A page titled "Invoice Portal" shows a blurred Adobe invoice in the background, with an amount due, an agreement number and payment instructions that cannot be read. On top of it, a box says "This is a permissions-based security document" and asks you to "Log in using your email address" with your email and password. It was first observed in Egypt on October 31, 2026, at titan-invoice[.]surge[.]sh, a free web hosting address that has nothing to do with Adobe. The page code sends what you type to a Discord chat channel.