Scan report · 11 days agoPublic

taslimaenterprise.com

161.248.189.34AS153523 · BD

Submittedhttps://taslimaenterprise.com/adobe/

Suspicious: this page offers the visitor no link at all, yet its own script carries the address ipapi.co

a different site from the one being visitedand navigates there with what the visitor types. A page whose only destination is somewhere else is a hand-off, not a document

Engine tags

Verdict

2 of 7 enginesMaliciousAutomated

Own this site?

What happened

Step by step, from what the scanner recorded.

Load 15.0 s · 12 requests

01 · Visitor openstaslimaenterprise.com/adobe/

02 · Page shown

PDF Viewerstyled as Adobe · medium

03 · OutcomeA program on the machineAn executable or installer was handed to the visitor under a pretext.

Dangerous — confirmed threat

Automated

Its page title claims to be Adobe, which this address is not associated with. It is listed on external threat-intelligence feeds. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first

SupportingPage delivers an executable under a document pretext

https://ipapi.co/json/ · brand impersonation (Adobe, medium); presented as "Acrobat_Reader.exe", delivers ""; execution instructions ("downloads folder")

The page presents itself as a document but its button downloads a program to run, not a document to read.

Analyst noteConfirm what the download actually serves. A document workflow that delivers an installer is the tell; the file itself may be signed and clean.

InfoBrand impersonation detected

Adobe · medium · logo shown, brand named only in body text

The page DISPLAYS a known brand's logo while carrying almost no content of its own — no article, no navigation, nothing the brand's own site would have.

Analyst noteThe brand is in the page's images, not just its words, and the page has nothing else on it. Check what the page is asking the visitor to do.

Infrastructure

IP: 161.248.189.34UHB-AS-AP - Ummah Host BD, BD · AS153523BD
TLS: CN=YR2, O=Let's Encrypt, C=US · expires Nov 21, 2026

WHOIS

Registrar: NameSilo, LLC
Created: Feb 21, 2026
Expires: Feb 21, 2027
Nameservers: cdns1.servercpanel.comcdns2.servercpanel.com

80 malicious11 suspicious

Hashes & fingerprints

Page Hasha3469440721357bece68f79340986741c6e6f9b6be18c9f1ebff218f2679b6ea DOM Hash127a729a5ade23a80978638ec730e17cf9ca8afffa2ea2374bd50232a4ec9747 Screenshot pHashb0fd4d90b4c4c07f JARM29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae JA4Xa373a9f83c6b_7022c563de38_2e3757343cb0 Cert Thumbprint47077E0E6ECDA03722E5C41766D8F7266AC61202 Cert IssuerCN=YR2, O=Let's Encrypt, C=US

Page capture

Live

Title “PDF Viewer” · brand shown: Adobe (medium)

Visit Site

Engines

7 · time to verdict