Is biyou-writer-aoi.com safe?

No. MalwareAnalyzer scanned biyou-writer-aoi.com on 20 Aug 2026 and returned a malicious verdict with a score of 80 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.

What malware is associated with biyou-writer-aoi.com?

1 analysed samples communicate with this URL, including Phishing.

How was biyou-writer-aoi.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

biyou-writer-aoi.com - malicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned biyou-writer-aoi.com and returned a malicious verdict (score 80), categorised as credential-harvest. The page resolved to 172.67.211.124 on Cloudflare, Inc. in US. The domain was registered 5 days ago through NameCheap, Inc.. 22 domains and 2 IPs were contacted, over 24 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 80) · Confidence 89%
Scanned URL: https://atlastoursntravels.com/userfiles/file/jobatobifadatusemurojob.pdf
Domain: biyou-writer-aoi.com · IP: 172.67.211.124 · AS13335 · US
Server: cloudflare
Page title: PIKASLOT : Situs Slot Gacor 777 Gampang Maxwin Terpercaya Hari Ini Pasti Jp
HTTP status: 200 · text/html; charset=UTF-8
Registrar: NameCheap, Inc. · domain age 5 days · created 2026-08-15
HTTP requests captured: 24
Scan tier: fast · observed 2026-08-20 22:31:33 UTC

Redirect chain

https://atlastoursntravels.com/userfiles/file/jobatobifadatusemurojob.pdf
https://biyou-writer-aoi.com/

Malware communicating with this URL (1)

These samples were observed contacting or being served from biyou-writer-aoi.com. Each links to its full analysis.

Phishing - referenced · 5757bbb3179df34144f060f671df4a7c · first seen 2026-08-20

Antivirus & YARA (1 of 47 engines)

YARA: JPCERT/CC [yara]: JPCERT_LODEINFO (page content)

Why this verdict

Credential-harvesting form
Antivirus/YARA detection in page content: JPCERT_LODEINFO
Domain registered 5 day(s) ago

Detected technologies

Cloudflare

Contacted infrastructure

172.67.211.124 - AS13335 Cloudflare, Inc. (United States)
172.67.177.224 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

biyou-writer-aoi.com
writer.biyou-writer-aoi.com
image-storage-855.b-cdn.net
www.samsung.com
images.samsung.com
assets.adobedtm.com
in2.ecom-qa.samsung.com
account.samsung.com
shop.samsung.com
r1.community.samsung.com
via.placeholder.com
static.cloudflareinsights.com
facebook.com
twitter.com
instagram.com
youtube.com
cdnjs.cloudflare.com
www.google.com
play.google.com
apps.apple.com

Questions about biyou-writer-aoi.com

Is biyou-writer-aoi.com safe?: No. MalwareAnalyzer scanned biyou-writer-aoi.com on 20 Aug 2026 and returned a malicious verdict with a score of 80 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.
What malware is associated with biyou-writer-aoi.com?: 1 analysed samples communicate with this URL, including Phishing.
How was biyou-writer-aoi.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of biyou-writer-aoi.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan