Security Scan Report: bahrainhrs.org

Redirected to:
https://www.bahrainhrs.org/
Site favicon
Submitted: Sep 18, 2026, 10:47:30 PMCompleted: Sep 18, 2026, 10:48:33 PMpubliccompleted

This website contacted 25 IPs in 3 countries across 20 domains to perform 129 HTTP transactions. The main domain is bahrainhrs.org and was registered 10 years ago.

Submitted URL: https://bahrainhrs.org

Effective URL:

https://www.bahrainhrs.org/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Likely compromised legitimate NGO site: own domain carries a lummac2 malware Indicator of Compromise and 20 CRITICAL EtherHiding exfiltration IDS alerts with blockchain RPC calls and eval() — it is serving malware.

Risk Factors (5)
Content-malware (lummac2) Indicator of Compromise on the primary domain
Critical IDS malware/Exfiltrations alerts (EtherHiding Exfil M2)
Unexpected blockchain RPC connections in JavaScript
eval()/Function() dynamic code execution
Domain not ranked in Cisco Umbrella top 1M
Domain age information unavailable

Details

Page Title

الرئيسية - الجمعية البحرينية لحقوق الإنسان

Scan Type

public

Domain Name Analysis

The domain 'bahrainhrs.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. The registrable portion 'bahrainhrs' spans 10 characters containing 3 vowels alongside 7 consonants. Segmentation suggests two words: bahrain, hrs. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bahrainhrs.org

Page Load Overview

20.04s
Total Load Time
4.4 MB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:ar
Text Length:7,281 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content85% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
85%
forum community discussion
80%
social media network
46%
government public service
42%
corporate
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
946.30.213.38Copenhagen, Capital Region, Denmark
AS51468One.com A/S
5192.178.183.95Google · CDNUnited States
AS15169Google LLC
5142.251.127.97Google · CDNUnited States
AS15169Google LLC
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5142.251.13.97Google · CDNUnited States
AS15169Google LLC
5142.250.154.95Google · CDNUnited States
AS15169Google LLC
5216.239.32.36Google · CDNUnited States
AS15169Google LLC
515.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
515.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
12925--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CC2318B1D28D0486364A47ACE0A6F62CDEBC9473EA405F79B8F8701C8B995E701B356D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:QaLtl8G32z0RZdapzHxrk5z1BSXSsVixy:3tl8GGAapVrkCSsVN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:46719:YRD4qgOEtSK6BgRFswMABFCgdoBNAGO+VEeQ8HlnhJGoCBuCkggjg0qYATjS1KMRIOUYgoCTAoIi8FUHgipBdA8ICiYlDAiA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffe7000000
Perceptual Hash:b3f11b3b970c4c0e
Difference Hash:1e0ccccc8e17f1c9
Wavelet Hash:efffffff40000000
Color Hash:#bf4048

Scan History

Scan history not available

Unable to load historical scan data