The scan of bia2fun.com on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with bia2fun.com?

1 analysed samples communicate with this URL.

How was bia2fun.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

bia2fun.com - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned bia2fun.com and returned a unknown verdict (score 6). The page resolved to 38.11.74.117 on PEG TECH INC in US. The domain was registered 209 days ago through DropCatch.com 1264 LLC. 3 domains and 1 IP were contacted, over 4 HTTP requests. 1 malware sample communicates with this URL. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://bia2fun.com/url/Telegram/join.js
Domain: bia2fun.com · IP: 38.11.74.117 · AS54600 · US
Server: nginx
HTTP status: 404 · text/html; charset=utf-8
Registrar: DropCatch.com 1264 LLC · domain age 209 days · created 2026-01-23
HTTP requests captured: 4
Scan tier: fast · observed 2026-08-21 18:52:25 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from bia2fun.com. Each links to its full analysis.

3f7207c0fa5781776880058c9f0182c26bbbfc2d7a7d255f4b8c8b0b36d4bea0 - referenced · 3f7207c0fa5781776880058c9f0182c2 · first seen 2026-08-21

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Nginx

Contacted infrastructure

38.11.74.117 - AS54600 PEG TECH INC (United States)

Observed indicators

bia2fun.com
fa.sl260204.top
fm.sl25914.com
38.11.74.117
http://bia2fun.com/url/Telegram/join.js
http://bia2fun.com/static/images/favicon.ico
http://bia2fun.com/static/css/base.css
http://bia2fun.com/static/css/skins/nord/skin.css
http://bia2fun.com/static/css/asddas.css
http://bia2fun.com/static/js/header.rabbit
http://bia2fun.com/tbkc/99450.html
http://bia2fun.com/a9f.html
http://bia2fun.com/zidb/83836.html
http://bia2fun.com/search/迷人的保姆电影免费全集观看.html
http://bia2fun.com/fadc/03114.html
http://bia2fun.com/static/images/loading.gif
https://fa.sl260204.top/upload/vod/20251213-1/b9d0cd7869256e449d79df119e4ee32d.jpg
http://bia2fun.com/fadc/39425.html
https://fa.sl260204.top/upload/vod/20251202-1/76f25f70d23b871c7d8398d47896a627.jpg
http://bia2fun.com/fadc/86380.html

Questions about bia2fun.com

Is bia2fun.com safe?: The scan of bia2fun.com on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with bia2fun.com?: 1 analysed samples communicate with this URL.
How was bia2fun.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of bia2fun.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan