Security Report: bhabanagarafoundation.org - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1eb2d5b4-380f-428e-89a3-905e1292ee57 Domain and IP registration (RDAP)/api/v1/rdap/1eb2d5b4-380f-428e-89a3-905e1292ee57How often this domain was scanned/api/v1/domain/stats/bhabanagarafoundation.org Scan history for this domain/api/v1/domain/history/bhabanagarafoundation.org?limit=15

This website contacted 7 IPs in 3 countries across 6 domains to perform 9 HTTP transactions. The main domain is bhabanagarafoundation.org and was registered 5 years ago.

Submitted URL: https://bhabanagarafoundation.org/johnpardeyarchitects/RequestTender.php

AI Security Verdict

Confirmed Scam

Confidence: 80%

Risk Score

Fake 'Adobe Acrobat Sign' document-access page hosted on a foundation domain, harvesting emails. Primary domain has a phishing report and its IP is flagged for Cobalt Strike; do not enter any details.

Risk Factors (5)

Brand impersonation of Adobe Acrobat Sign on a non-Adobe domain

Email-harvesting form disguised as secure document access

Primary domain reported for phishing

Hosting address reported as Cobalt Strike malware C2

Domain not present in Cisco Umbrella top 1M despite 5-year age

Domain age information unavailable

Details

Page Title

Adobe Acrobat Sign - Secure Document Access

Scan Type

public

Favicon Hash

MMH3: -48635826

MD5: bd8f64043432f6f433bc8732068ad7e1

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'bhabanagarafoundation.org' is registered while skipping any subdomain. The registrable portion 'bhabanagarafoundation' spans 21 characters holding ten vowels versus 11 consonants. Segmentation suggests four words: b, habana, gara, foundation. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.41s

Total Load Time

442 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:531 chars

Detector Agreement:75%

Website Classification

Primary Category

technology software80% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

80%

documentation technical

49%

government public service

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	103.65.139.82	Bangladesh	AS151967DLITS
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	216.195.86.20	Cincinnati, Ohio, United States	AS62CyrusOne LLC
1	142.250.154.94Google · CDN	United States	AS15169Google LLC
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	2.16.10.156Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
9	7	-	-