Security Scan Report: new.express.adobe.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 41 IPs in 5 countries across 19 domains to perform 274 HTTP transactions. The main domain is adobe.com and was registered 39 years ago.

Submitted URL: https://new.express.adobe.com/webpage/E9lDLe8tKruFv

The Cisco Umbrella rank of the primary domain is #154 of the top 1 million websitesTop 1K Site

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Empty-looking Adobe Express page titled with a real Polish company's name plus a Polish 'I sent you the document' lure. No credential or payment forms and no threat-intel, YARA or IDS evidence of malware; suspicious only as a possible document lure.

Risk Factors (2)
Company-name + document-lure text on a third-party page builder is the shape of a 'here is your document' social-engineering delivery page, though the page currently serves no payload
Content appears to use a real company's name without any visible disclosure of affiliation
Safety Factors (4)
Hosted on Adobe's own established domain (Adobe Express), with Adobe cookie, Terms of Use and Report Abuse infrastructure present
No password, payment or disguised credential fields anywhere on the page
No Indicators of Compromise, no YARA matches, no Safe Browsing hit, no credential exfiltration
Only informational IDS alerts explicitly described by the scanner as unreliable on their own
Domain age information unavailable

Details

Page Title

TSL Brokers Sp. z o.o

Scan Type

public

Domain Name Analysis

The domain 'new.express.adobe.com' uses the commercial generic top-level domain (.com) and includes subdomain 'new.express'. The core label 'adobe' covers 5 characters with 3 vowels and two consonants. Segmentation suggests 1 word: adobe. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://new.express.adobe.com/webpage/E9lDLe8tKruFv

Page Load Overview

5.93s
Total Load Time
6.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,660 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software91% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
91%
documentation technical
85%
government public service
83%
blog personal website
78%
news media journalism
72%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3418.66.112.123Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6184.24.77.188Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
634.250.67.152Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
62.21.110.201Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
6184.24.77.209Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
623.52.180.165Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
623.35.208.223Akamai · CDNVienna, Vienna, Austria
AS16625Akamai Technologies, Inc.
6162.159.140.165Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
663.140.62.172Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
27441--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F394819B39A21619D6E7831C9696B6803510A88FFE7B9CECF14CA3748FCC7E14D5134A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:NFzC2fgPgRcmuKYr6Ej3gE0C6A3ECMM6YDEIDBv:yTv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:446601:AQwOAwAF8wBJqYIQEAGYSVIygEMQ+dKMihkhEuxR8Y5CCiZIocylgQSLoZyKKICmEsQYlRAwIYoQBA8ISCIZEgQpIyATMqKm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff
Perceptual Hash:b35c48a6f39d4836
Difference Hash:703032088c4c7679
Wavelet Hash:000000efe7e7bfbd
Color Hash:#40acbf

Scan History

Scan history not available

Unable to load historical scan data