ScanMalware.com

Security Scan Report: rohanbhagat.com

Redirected to:
https://www.rohanbhagat.com/
Site favicon
Submitted: Oct 12, 2026, 4:20:02 PMCompleted: Oct 12, 2026, 4:21:02 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2064d14c-90b3-42e7-baf4-771001fc98bdDomain and IP registration (RDAP)/api/v1/rdap/2064d14c-90b3-42e7-baf4-771001fc98bdCertificate Transparency/api/v1/ct/rohanbhagat.comHow often this domain was scanned/api/v1/domain/stats/rohanbhagat.comScan history for this domain/api/v1/domain/history/rohanbhagat.com?limit=15

This website contacted 10 IPs in 2 countries across 10 domains to perform 50 HTTP transactions. The main domain is rohanbhagat.com and was registered 3 months ago.

Submitted URL: https://rohanbhagat.com/

Effective URL:

https://www.rohanbhagat.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Established personal blog, but page serves the DarkSword iOS exploit kit / Coruna wallet stealer (YARA CRITICAL + kit roster + 3 CRITICAL IDS alerts) and fetches unranked hostile domains — likely a compromised site distributing malware.

Risk Factors (5)
Known malicious kit (DarkSword iOS exploit kit / Coruna wallet stealer) detected on the page
CRITICAL YARA exploit-kit rule match on page HTML
3 CRITICAL IDS exploit-kit alerts (landing, loader, module pages)
Cross-origin script traffic to unranked .icu and translatevv.com hosts with no legitimate purpose
eval() and Function() constructor usage alongside exploit-kit code
Domain age information unavailable

Details

Page Title

Rohan Bhagat | IT Security Engineer | Cloud Security | DevSecOps | AWS | Kubernetes

Scan Type

public

Domain Name Analysis

The domain name 'rohanbhagat.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 11 characters in 'rohanbhagat' with four vowels and 7 consonants. Segmentation suggests 2 words: rohan, bhagat. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rohanbhagat.com/

Page Load Overview

5.46s
Total Load Time
653 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:9,473 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: dynamic
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Search
Articles
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5134.101.213.45Hamburg, Free and Hanseatic City of Hamburg, Germany
AS15943wilhelm.tel GmbH
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5104.21.32.211Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.67.187.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.184.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.185.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5010--

Detected Technologies11

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Google-AnalyticsvUniversal
100%
PHP
50%
MySQL
50%
HSTS
40%
Debian
40%
Google Analytics
35%
WordPress Block Editor
30%
Twenty Thirteen
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159432A73A26858BB3E8F83E98050BB1CBA95951DCF426BD5F0F6D0545180DFB09BA31E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:EWBOBZdypFbPVAFjeBXA7rRN6jX46zJ+b0vLBW:Ephyp1VAFjeB4rPWX46zRW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:57778:QVgjjuBCwBQAgjKFYARWKAVCSTIgERFgyETITI6FQ0gIIr8OMwZAgCmGABQhABga4CgUES86KCQAZhxhBZAJgSQoEkQoiAgJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8081ffffffefefff
Perceptual Hash:e86e6a6a5a9a9a92
Difference Hash:33071613321a1a1c
Wavelet Hash:0080cfcbdbc3c3cf
Color Hash:#6640bf

Other Hashes

Crop Resistant:33071613321a1a1c,3511125919090b2b

Scan History

Scan history not available

Unable to load historical scan data