www.bzip.org - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned www.bzip.org and returned a unknown verdict (score 12). The page resolved to 87.98.154.146 on OVH SAS in FR. The domain was registered 8053 days ago through Name.com, Inc.. 7 domains and 1 IP were contacted, over 6 HTTP requests. 6 malware samples communicate with this URL (Filerepmalware, Delf, Vindor, HUILoader). The request followed 2 redirects before landing. This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 18%
- Scanned URL:
https://bzip.org/ - Domain: www.bzip.org · IP: 87.98.154.146 · AS16276 · FR
- Server: Apache
- Page title: bzip2
- HTTP status: 200 · text/html; charset=UTF-8
- Registrar: Name.com, Inc. · domain age 8053 days · created 2004-08-06
- HTTP requests captured: 6
- Scan tier: fast · observed 2026-08-24 01:12:30 UTC
Redirect chain
https://bzip.org/http://bzip.org/http://www.bzip.org/
Malware communicating with this URL (6)
These samples were observed contacting or being served from www.bzip.org. Each links to its full analysis.
- Filerepmalware - referenced ·
831c85492732cbed4b3698dd785c5f1b· first seen 2026-08-24 - Delf - referenced ·
7de8f68891d0aba0cc155c4e1643ba05· first seen 2026-08-23 - Vindor - referenced ·
f85fb511f4c7535d8776199ab689aa8a· first seen 2026-08-23 - HUILoader - referenced ·
1467fc8f3719d8ac44e1a604296f30b8· first seen 2026-08-20 - Genpack - referenced ·
3c6e473c0eb14175d8d8a88a39bfe738· first seen 2026-08-20 - HUILoader - referenced ·
29f283507b101a6c82b5399e08abd63f· first seen 2026-08-16
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Cross-host redirect chain
- Served over plaintext HTTP
Detected technologies
- Apache
- PHP
- WordPress
- jQuery
Contacted infrastructure
- 87.98.154.146 - AS16276 OVH SAS (France)
Observed indicators
- www.bzip.org
- gmpg.org
- fonts.googleapis.com
- s.w.org
- fonts.gstatic.com
- www.theblogstarter.com
- wordpress.org
- 87.98.154.146
- http://www.bzip.org/
- http://gmpg.org/xfn/11
- http://www.bzip.org/xmlrpc.php
- http://www.bzip.org/wp-content/themes/twentyfifteen/js/html5.js
- http://fonts.googleapis.com/
- http://s.w.org/
- https://fonts.gstatic.com/
- http://www.bzip.org/feed
- http://www.bzip.org/comments/feed
- https://fonts.googleapis.com/css?family=Noto+Sans%3A400italic%2C700italic%2C400%2C700%7CNoto+Serif%3A400italic%2C700italic%2C400%2C700%7CInconsolata%3A400%2C700&subset=latin%2Clatin-ext
- http://www.bzip.org/wp-content/themes/twentyfifteen/genericons/genericons.css?ver=3.2
- http://www.bzip.org/wp-content/themes/twentyfifteen/style.css?ver=4.9.31
Other scans of www.bzip.org (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 20 Aug 2026 - unknown
Questions about www.bzip.org
- Is www.bzip.org safe?
- The scan of www.bzip.org on 24 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.bzip.org?
- 6 analysed samples communicate with this URL, including Filerepmalware, Delf, Vindor, HUILoader.
- How was www.bzip.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.bzip.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan