Is www.bzip.org safe?

The scan of www.bzip.org on 20 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with www.bzip.org?

2 analysed samples communicate with this URL, including Genpack, HUILoader.

How was www.bzip.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.bzip.org - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned www.bzip.org and returned a unknown verdict (score 12). The page resolved to 87.98.154.146 on OVH SAS in FR. 7 domains and 1 IP were contacted, over 6 HTTP requests. 2 malware samples communicate with this URL (Genpack, HUILoader). The request followed 2 redirects before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 12) · Confidence 18%
Scanned URL: https://bzip.org/
Domain: www.bzip.org · IP: 87.98.154.146 · AS16276 · FR
Server: Apache
Page title: bzip2
HTTP status: 200 · text/html; charset=UTF-8
HTTP requests captured: 6
Scan tier: fast · observed 2026-08-20 17:26:13 UTC

Redirect chain

https://bzip.org/
http://bzip.org/
http://www.bzip.org/

Malware communicating with this URL (2)

These samples were observed contacting or being served from www.bzip.org. Each links to its full analysis.

Genpack - referenced · 3c6e473c0eb14175d8d8a88a39bfe738 · first seen 2026-08-20
HUILoader - referenced · 29f283507b101a6c82b5399e08abd63f · first seen 2026-08-16

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Cross-host redirect chain
Served over plaintext HTTP

Detected technologies

Apache
PHP
WordPress
jQuery

Contacted infrastructure

87.98.154.146 - AS16276 OVH SAS (France)

Observed indicators

www.bzip.org
gmpg.org
fonts.googleapis.com
s.w.org
fonts.gstatic.com
www.theblogstarter.com
wordpress.org
87.98.154.146
http://www.bzip.org/
http://gmpg.org/xfn/11
http://www.bzip.org/xmlrpc.php
http://www.bzip.org/wp-content/themes/twentyfifteen/js/html5.js
http://fonts.googleapis.com/
http://s.w.org/
https://fonts.gstatic.com/
http://www.bzip.org/feed
http://www.bzip.org/comments/feed
https://fonts.googleapis.com/css?family=Noto+Sans%3A400italic%2C700italic%2C400%2C700%7CNoto+Serif%3A400italic%2C700italic%2C400%2C700%7CInconsolata%3A400%2C700&subset=latin%2Clatin-ext
http://www.bzip.org/wp-content/themes/twentyfifteen/genericons/genericons.css?ver=3.2
http://www.bzip.org/wp-content/themes/twentyfifteen/style.css?ver=4.9.31

Other scans of www.bzip.org (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

24 Aug 2026 - unknown
23 Aug 2026 - unknown

Questions about www.bzip.org

Is www.bzip.org safe?: The scan of www.bzip.org on 20 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with www.bzip.org?: 2 analysed samples communicate with this URL, including Genpack, HUILoader.
How was www.bzip.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.bzip.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan