ScanMalware.com

Security Scan Report: new.express.adobe.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/40f70cf4-0f96-4019-a23c-f038f81b79ceDomain and IP registration (RDAP)/api/v1/rdap/40f70cf4-0f96-4019-a23c-f038f81b79ceHow often this domain was scanned/api/v1/domain/stats/new.express.adobe.comScan history for this domain/api/v1/domain/history/new.express.adobe.com?limit=15
This website contacted 43 IPs in 4 countries across 19 domains to perform 273 HTTP transactions. The main domain is adobe.com and was registered 40 years ago.

Submitted URL: https://new.express.adobe.com/webpage/QWoUOXhpy7d9r

The Cisco Umbrella rank of the primary domain is #154 of the top 1 million websitesTop 1K Site

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Adobe Express user page wearing the AT&T Yahoo! brand with a 'CLICK HERE TO VERIFY AND CONTINUE' lure. No credential fields on-page, but clear brand impersonation pointing to an off-site verification step.

Risk Factors (4)
Impersonates the AT&T/Yahoo! brand on a domain belonging to a different company (Adobe) with no disclosure
Verification/continue call-to-action designed to funnel visitors toward entering account details elsewhere
Hosted on a free user-generated Adobe Express page, not an AT&T or Yahoo! property
No affiliation or authorization notice anywhere on the page
Domain age information unavailable

Details

Page Title

AT&T Yahoo! Notifications

Scan Type

public

Domain Name Analysis

Domain 'new.express.adobe.com' uses the commercial generic top-level domain (.com) and includes subdomain 'new.express'. The registrable portion 'adobe' spans 5 characters holding three vowels versus 2 consonants. Breaking it apart gives one word: adobe. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

AT&T Yahoo! Notifications Currently, | yahoo! from AT&T CLICK HERE TO VERIFY AND CONTINUE TO EMAIL Make It Your Own Adobe and its vendors use cookies and similar technologies to improve your expe...

Page Load Overview

6.91s
Total Load Time
6.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,677 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software85% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
85%
documentation technical
75%
government public service
74%
blog personal website
68%
news media journalism
66%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20218.66.112.26Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
16104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
618.66.112.22Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6184.24.77.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
652.48.126.58Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
623.216.77.28Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
6184.24.77.169Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
6162.159.140.165Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.18.87.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
663.140.62.236Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
27343--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14594609B39A21619DAE7831C9696B6803510A88FFE7B9CDCF54CA3748FCC7E14D5130A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:uFzy2fgPgRcmuKYr6Ej3gE0C6A3ECMM6YDEI4b:/Wb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:419634:FAEBFVoBmIPkY2LJU8FM7AMigiQDhBMFmBakwEHUzrJGTUaYEwIKaEyAiEDIRGRKhUpABHsCNigGCirkAjIGWUfEkmeKvdIG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff
Perceptual Hash:8f444bb4e3b54a35
Difference Hash:303232080c506679
Wavelet Hash:000000ffffff9785
Color Hash:07000000180

Other Hashes

Crop Resistant:0c0c4d0440601b79,100432323032b004

Scan History

Scan history not available

Unable to load historical scan data