ScanMalware.com

Security Scan Report: new.express.adobe.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0b21df27-6318-445d-87dd-3de772134aabDomain and IP registration (RDAP)/api/v1/rdap/0b21df27-6318-445d-87dd-3de772134aabHow often this domain was scanned/api/v1/domain/stats/new.express.adobe.comScan history for this domain/api/v1/domain/history/new.express.adobe.com?limit=15
This website contacted 33 IPs in 4 countries across 19 domains to perform 274 HTTP transactions. The main domain is adobe.com and was registered 40 years ago.

Submitted URL: https://new.express.adobe.com/webpage/E9lDLe8tKruFv

The Cisco Umbrella rank of the primary domain is #154 of the top 1 million websitesTop 1K Site

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Unauthenticated Adobe Express stub page using a Polish 'I sent you a document' lure under a third-party company name; no credential or payment form and no threat-intel hits, so suspicious but not confirmed phishing.

Risk Factors (4)
Social-engineering 'I sent you a document' lure text used to drive the visitor to act
Third-party company name displayed on a free Adobe Express template page with no verifiable link to that company
Page age unknown behind a shared publishing platform; apex age not attributable to this content
Low business-legitimacy score for the organisation named on the page
Safety Factors (4)
Hosted on Adobe's own established domain (adobe.com); no domain spoofing of Adobe
No credential, password or payment collection fields on the page
No Indicators of Compromise, no JavaScript malware patterns, no known malicious kit
No cross-origin credential exfiltration; scripts are Adobe's own analytics/consent stack
Domain age information unavailable

Details

Page Title

TSL Brokers Sp. z o.o

Scan Type

public

Domain Name Analysis

You're looking at domain 'new.express.adobe.com' on the commercial generic top-level domain (.com) with subdomain 'new.express'. The second-level label 'adobe' is 5 characters long containing 3 vowels alongside 2 consonants. Segmentation suggests one word: adobe. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

TSL Brokers Sp. Z 0.0 WYSLALEM CI DOKUMENT POKAŽ DOKUMENT Make It Your Own Adobe and its vendors use cookies and similar technologies to improve your experience and measure your interactions with...

Page Load Overview

12.45s
Total Load Time
6.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,660 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software91% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
91%
documentation technical
85%
government public service
83%
blog personal website
78%
news media journalism
72%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1818.66.112.123Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
818.66.112.22Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8184.24.77.134Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
834.252.184.159Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
823.216.77.25Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
8184.24.77.169Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
823.36.156.200Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
823.52.181.12Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
8162.159.140.165Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
27433--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18194829B39A21619DAE7831C9696B6803510A88FFE779CECF14CA3748FCC7E14D5130A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:mFzE2fgPgRcmuKYr6Ej3gE0C6A3ECMM6YDEIDBv:LTv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:448221:FXyNBAq4UgEqUr0AwAZQoiwOGurBEAwOteCxBSBjACQQFAIRArVUXekLKhAIQJAYGQkBbAbRFCr4EogUZoEbFaRiQRAJwEVZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff
Perceptual Hash:b35c48a6f39d4836
Difference Hash:603032088c4c7679
Wavelet Hash:000000efe7e7bfbd
Color Hash:07000000047

Other Hashes

Crop Resistant:100c0c0c4c6c3379,0460302810303210,8727d43ad4d8b24c

Scan History

Scan history not available

Unable to load historical scan data