The scan of 48bulls.com on 19 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with 48bulls.com?

2 analysed samples communicate with this URL, including Phishing.

How was 48bulls.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

48bulls.com - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned 48bulls.com and returned a unknown verdict (score -12). The page resolved to 202.226.37.22 on XSERVER Inc. in JP. 8 domains and 1 IP were contacted, over 5 HTTP requests. 2 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: http://48bulls.com/js/upload/files/44475113234.pdf
Domain: 48bulls.com · IP: 202.226.37.22 · AS131965 · JP
Server: nginx
Page title: ページが見つかりませんでした – フォーティーエイトブルズ
HTTP status: 404 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 13 09: · subject CN=www.48bulls.com
HTTP requests captured: 5
Scan tier: standard · observed 2026-08-19 11:22:39 UTC

Redirect chain

http://48bulls.com/js/upload/files/44475113234.pdf
https://48bulls.com/js/upload/files/44475113234.pdf

Malware communicating with this URL (2)

These samples were observed contacting or being served from 48bulls.com. Each links to its full analysis.

Phishing - referenced · 426be66b04da45a9351732128a59ae8a · first seen 2026-08-14
Phishing - referenced · 788f09322e119caf07d575c0fe030487 · first seen 2026-08-11

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Detected technologies

Nginx
WordPress
Google Analytics
jQuery

Contacted infrastructure

202.226.37.22 - AS131965 XSERVER Inc. (Japan)

Observed indicators

48bulls.com
gmpg.org
ajax.googleapis.com
www.googletagmanager.com
www.instagram.com
48bulls.blog28.fc2.com
carbooth.site
www.google.com
202.226.37.22
https://48bulls.com/js/upload/files/44475113234.pdf
http://gmpg.org/xfn/11
https://48bulls.com/xmlrpc.php
https://48bulls.com/wp-content/uploads/2024/03/48favi.png
https://48bulls.com/wp-content/uploads/2024/03/48.png
https://48bulls.com/wp-content/themes/template_basic/css/swiper.css
https://ajax.googleapis.com/
https://48bulls.com/feed/
https://48bulls.com/comments/feed/
https://48bulls.com/wp-content/plugins/wp-pagenavi/css/wp-pagenavi.css?ver=3.0.0
https://48bulls.com/wp-content/themes/template_basic/style.css?ver=7.0.4

Questions about 48bulls.com

Is 48bulls.com safe?: The scan of 48bulls.com on 19 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with 48bulls.com?: 2 analysed samples communicate with this URL, including Phishing.
How was 48bulls.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of 48bulls.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan