html5shiv.googlecode.com - suspicious URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned html5shiv.googlecode.com and returned a suspicious verdict (score 31), categorised as phishing. The page resolved to 142.251.10.82 on Google LLC in SG. The domain was registered 7836 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 34 malware samples communicate with this URL (Fromcharcode). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 31) · Confidence 37%
- Scanned URL:
http://html5shiv.googlecode.com/svn/trunk/html5.js - Domain: html5shiv.googlecode.com · IP: 142.251.10.82 · AS15169 · SG
- Page title: Error 404 (Not Found)!!1
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: MarkMonitor Inc. · domain age 7836 days · created 2005-03-09
- Scan tier: fast · observed 2026-08-22 13:02:17 UTC
Malware communicating with this URL (34)
These samples were observed contacting or being served from html5shiv.googlecode.com. Each links to its full analysis.
- f995338391b25e653588570dfd6a945ced9c9eb2cc8f9411e1b7e7d6e0045c37 - referenced ·
f995338391b25e653588570dfd6a945c· first seen 2026-08-22 - 13593af0fee8da071c7a6fad188b526d1f8e2e3c0f0adc081f886a31a6ea23dc - referenced ·
13593af0fee8da071c7a6fad188b526d· first seen 2026-08-22 - d32fae7810d4455a1a2008d864aa07f003a9579d45f331dd433571fa36cce331 - referenced ·
d32fae7810d4455a1a2008d864aa07f0· first seen 2026-08-22 - 3f7d31aba27eb29d72c872dbad66dc0744ac280a9a81f08d8e076e7d786bec91 - referenced ·
3f7d31aba27eb29d72c872dbad66dc07· first seen 2026-08-22 - Fromcharcode - referenced ·
3701473332a7fd7b4fafc7b5fa359ee5· first seen 2026-08-22 - 3f784118c0a53a7994d2322e3b2bccac5649a7dd5c128809daec401e049e4a85 - referenced ·
3f784118c0a53a7994d2322e3b2bccac· first seen 2026-08-22 - 3f79aeb9f488b72388f0c8b2546f038bf826e5e929741cf111518028fce848e0 - referenced ·
3f79aeb9f488b72388f0c8b2546f038b· first seen 2026-08-21 - 3f76d907f5b9a6633164f78a65964bc406a76b79e6d4139c0e824c489609c4ac - referenced ·
3f76d907f5b9a6633164f78a65964bc4· first seen 2026-08-21 - 3236a2700abbd192141978702166143a9c874a4c2e9fd2ef3338efe6bad51c4c - referenced ·
3236a2700abbd192141978702166143a· first seen 2026-08-21 - df0b6d5fe59640afed53654288ca772f7eccd8fa37680e6abdd347d6a2e2c701 - referenced ·
df0b6d5fe59640afed53654288ca772f· first seen 2026-08-21 - df05cd3736dd18eb19d506b05d8290e05aa4ee725c0457830f55c6cac87919f9 - referenced ·
df05cd3736dd18eb19d506b05d8290e0· first seen 2026-08-21 - df09af1faee3a5b5d585ce268dab72265e0ea36df6f95343e3e0153f5ec755e3 - referenced ·
df09af1faee3a5b5d585ce268dab7226· first seen 2026-08-21 - dcc900c8d8966d92a7c259d5994b90288ed07b5f6003643aa1ee99fe7225a02a - referenced ·
dcc900c8d8966d92a7c259d5994b9028· first seen 2026-08-20 - dcc7cb5b07bedb3329bbb525350e7c8130a39221a2c951ebfc55f3edfae8182e - referenced ·
dcc7cb5b07bedb3329bbb525350e7c81· first seen 2026-08-20 - bd551bcf712734ec3228165e2745f34e6ded5e1a14b12c22a067d4f6fbb1a9ed - referenced ·
bd551bcf712734ec3228165e2745f34e· first seen 2026-08-20
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Categories
- phishing
Why this verdict
- Domain impersonates google (combosquat)
- Served over plaintext HTTP
Contacted infrastructure
- 142.251.10.82 - AS15169 Google LLC (Singapore)
Observed indicators
- html5shiv.googlecode.com
- 142.251.10.82
- http://html5shiv.googlecode.com/svn/trunk/html5.js
Other scans of html5shiv.googlecode.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.osgeurope.com/sites/osg-corporate.dev/files/webform/19824824677.pdf - 24 Aug 2026 - unknown ·
https://www.osgeurope.com/sites/osg-corporate.dev/files/webform/19824824677.pdf - 23 Aug 2026 - unknown ·
http://himeaime.blogspot.com/2015/01/jodha-akbar-episode-312.html - 23 Aug 2026 - suspicious
- 23 Aug 2026 - suspicious ·
http://www.medical-psychology.gr/wp-content/plugins/formcraft/file-upload/server/content/files/16088 - 23 Aug 2026 - unknown ·
http://pandancoco.blogspot.com/2015/02/scop-281.html - 23 Aug 2026 - suspicious ·
https://www.musicacelestial.net/2015/06/planetshakers-outback-worship-sessions.html - 23 Aug 2026 - suspicious
- 23 Aug 2026 - unknown ·
http://fadlijayamotor.blogspot.com/2016/09/cdi-toyota-kijang-kapsul-karbulator-7k.html - 23 Aug 2026 - unknown ·
https://diversifiedhumansolutions.com/wp-content/plugins/super-forms/uploads/php/files/d4dcb49e25c72
Questions about html5shiv.googlecode.com
- Is html5shiv.googlecode.com safe?
- No. MalwareAnalyzer scanned html5shiv.googlecode.com on 22 Aug 2026 and returned a suspicious verdict with a score of 31 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
- What malware is associated with html5shiv.googlecode.com?
- 34 analysed samples communicate with this URL, including Fromcharcode.
- How was html5shiv.googlecode.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of html5shiv.googlecode.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan