TS0139a03f

Path

You're looking at domain 'cdaas.americanexpress.com' on the commercial generic top-level domain (.com) and includes subdomain 'cdaas'. The second-level label 'americanexpress' is 15 characters long containing six vowels alongside 9 consonants. Tokenizing the label suggests 2 words: american, express. Median word length comes out to 7.5 characters. No strong language cues emerged from the frequency lists.

html/4c/2c/4c2c6ac1-b1f3-4634-b089-8097164c8f29_fallback.html.gz

html/4c/2c/4c2c6ac1-b1f3-4634-b089-8097164c8f29.html.gz

default-src 'self' https://qwww.aexp-static.com https://www.aexp-static.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://qwww.aexp-static.com https://www.aexp-static.com; img-src 'self' https://qwww.aexp-static.com https://www.aexp-static.com; connect-src 'self' https://www.google-analytics.com; frame-ancestors ‘self’ https://gim-qaeusw1.americanexpress.com https://gim.americanexpress.com https://cdaas.americanexpress.com;

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Requests	IP Address	Location	AS Autonomous System
2	139.71.113.91	United States	AS6307AMERICAN-EXPRESS
2	1	-	-

Security Scan Report: cdaas.americanexpress.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History