Is banksbahrain.org safe?

The scan of banksbahrain.org on 19 Aug 2026 reached no verdict either way (score -2). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with banksbahrain.org?

2 analysed samples communicate with this URL, including Gootloader.

How was banksbahrain.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

banksbahrain.org - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned banksbahrain.org and returned a unknown verdict (score -2), categorised as credential-harvest. The page resolved to 162.255.163.56 on PrivateSystems Networks GA in US. 27 domains and 1 IP were contacted, over 22 HTTP requests. 2 malware samples communicate with this URL (Gootloader). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -2) · Confidence 8%
Scanned URL: https://banksbahrain.org/
Domain: banksbahrain.org · IP: 162.255.163.56 · AS63410 · US
Server: Apache
Page title: Bahrain Association of Banks
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 31 15: · subject CN=banksbahrain.org
HTTP requests captured: 22
Scan tier: fast · observed 2026-08-19 19:40:06 UTC

Malware communicating with this URL (2)

These samples were observed contacting or being served from banksbahrain.org. Each links to its full analysis.

fad1c38d261556b10b33fffff80563064735bdfb511766f78a93c0eb9fcd8d30 - referenced · fad1c38d261556b10b33fffff8056306 · first seen 2026-08-19
Gootloader - referenced · a219dfaf4b5acc45855fdd5fc1e5278f · first seen 2026-08-19

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post
Credential-harvesting form

Detected technologies

Apache
WordPress
jQuery

Contacted infrastructure

162.255.163.56 - AS63410 PrivateSystems Networks GA (United States)

Observed indicators

banksbahrain.org
fonts.googleapis.com
www.albaraka.bh
www.alsalambank.com
www.alubafbank.com
secure.americanexpress.com.bh
www.arabbank.bh
afs.com.bh
www.arcapita.com
bahrainbourse.com
www.bcfc.bh
www.bdb-bh.com
www.bisb.com
www.bank-abc.com
www.bbkonline.com
benefit.bh
group.bnpparibas
bokintl.com
www.citigroup.com
credimax.com.bh

Questions about banksbahrain.org

Is banksbahrain.org safe?: The scan of banksbahrain.org on 19 Aug 2026 reached no verdict either way (score -2). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with banksbahrain.org?: 2 analysed samples communicate with this URL, including Gootloader.
How was banksbahrain.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of banksbahrain.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan