Is booking.bankstoday.net safe?

No. MalwareAnalyzer scanned booking.bankstoday.net on 23 Aug 2026 and returned a suspicious verdict with a score of 36 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.

How was booking.bankstoday.net checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

booking.bankstoday.net - suspicious URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned booking.bankstoday.net and returned a suspicious verdict (score 36), categorised as credential-harvest. The page resolved to 185.178.208.130 on DDOS-GUARD LTD in RU. The domain was registered 3863 days ago through Registrar of Domain Names REG.RU LLC. 10 domains and 7 IPs were contacted, over 20 HTTP requests. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 36) · Confidence 45%
Scanned URL: https://booking.bankstoday.net/
Domain: booking.bankstoday.net · IP: 185.178.208.130 · AS57724 · RU
Server: ddos-guard
Page title: Домен не прилинкован ни к одной из директорий на сервере!
HTTP status: 200 · text/html
Registrar: Registrar of Domain Names REG.RU LLC · domain age 3863 days · created 2016-01-25
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 21 02: · subject CN=booking.bankstoday.net
HTTP requests captured: 20 · cookies set: 4 · outgoing links: 23
Scan tier: standard · observed 2026-08-23 21:33:05 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post
Certificate issued < 48h ago

Detected technologies

jQuery

Contacted infrastructure

185.178.208.130 - AS57724 DDOS-GUARD LTD (Russian Federation)
104.17.24.14 - AS13335 Cloudflare, Inc. (United States)
172.67.142.245 - AS13335 Cloudflare, Inc. (United States)
142.250.195.227 - AS15169 Google LLC (India)

Observed indicators

booking.bankstoday.net
cdnjs.cloudflare.com
code.jquery.com
fonts.googleapis.com
use.fontawesome.com
sendix.beget.tech
beget.com
cp.beget.com
join.skype.com
fonts.gstatic.com
185.178.208.130
104.17.24.14
151.101.65.155
142.250.183.42
172.67.142.245
142.250.195.227
178.248.232.144
https://booking.bankstoday.net/
https://cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.10/lodash.min.js
https://code.jquery.com/jquery-3.3.1.min.js

Questions about booking.bankstoday.net

Is booking.bankstoday.net safe?: No. MalwareAnalyzer scanned booking.bankstoday.net on 23 Aug 2026 and returned a suspicious verdict with a score of 36 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.
How was booking.bankstoday.net checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of booking.bankstoday.net

Scanned on MalwareAnalyzer by Cyble · Open interactive scan