html5shiv.googlecode.com - suspicious URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned html5shiv.googlecode.com and returned a suspicious verdict (score 31), categorised as phishing. The page resolved to 142.251.12.82 on Google LLC in SG. The domain was registered 7837 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 46 malware samples communicate with this URL. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 31) · Confidence 37%
- Scanned URL:
http://html5shiv.googlecode.com/svn/trunk/html5.js - Domain: html5shiv.googlecode.com · IP: 142.251.12.82 · AS15169 · SG
- Page title: Error 404 (Not Found)!!1
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: MarkMonitor Inc. · domain age 7837 days · created 2005-03-09
- Scan tier: fast · observed 2026-08-23 23:57:22 UTC
Malware communicating with this URL (46)
These samples were observed contacting or being served from html5shiv.googlecode.com. Each links to its full analysis.
- b6e10717d2162ceec12ba8d1f56753657b0ea088dd048f756be0e64e1caa4014 - referenced ·
b6e10717d2162ceec12ba8d1f5675365· first seen 2026-08-23 - fe9676bcd9ba191c04c845ea4809999e426eca46bd361a1bf086dd7661bad512 - referenced ·
fe9676bcd9ba191c04c845ea4809999e· first seen 2026-08-23 - fe98f92d23ef756eca079765de5bc2b66625b020d9e0cdcf993d62c063efa917 - referenced ·
fe98f92d23ef756eca079765de5bc2b6· first seen 2026-08-23 - 5bcced0d9aabd09bd77588a5d3a6465d436762d542893b2fd520e566e2a27c50 - referenced ·
5bcced0d9aabd09bd77588a5d3a6465d· first seen 2026-08-23 - 5bc746a1d8bb04b6e410c392d7078b9091b1bbbec2e966e9387f8f520eb3b804 - referenced ·
5bc746a1d8bb04b6e410c392d7078b90· first seen 2026-08-23 - f82ad4c2e0a792000a318248e2e392569943545cecb2ed8b89e92c10c6c67fc1 - referenced ·
f82ad4c2e0a792000a318248e2e39256· first seen 2026-08-23 - f8288619c1daa21ad38f68b01dae070eca6993d76f047dc75f3a3e77d8be7759 - referenced ·
f8288619c1daa21ad38f68b01dae070e· first seen 2026-08-23 - f82d54e9e87f6447098f16642d65bd268034af6cc8eba42e58cd1702813dfa93 - referenced ·
f82d54e9e87f6447098f16642d65bd26· first seen 2026-08-23 - f82476551ddee55fc25aec8260af5b72e9a2d9d64473fcd2dd98a91b1c5281c4 - referenced ·
f82476551ddee55fc25aec8260af5b72· first seen 2026-08-22 - 2251e4b83d20deac67cdc8505e5f5f4855536f65acb543e9f6c9cb58d858ed07 - referenced ·
2251e4b83d20deac67cdc8505e5f5f48· first seen 2026-08-22 - 2258e21e7b543c73d03d2770aeeef6188e11767859cb6a6ed09f2d9d894dcfbf - referenced ·
2258e21e7b543c73d03d2770aeeef618· first seen 2026-08-22 - f99e252da81838b493f81d90320009556081c70164c8b93c30a75cff0ee2ba64 - referenced ·
f99e252da81838b493f81d9032000955· first seen 2026-08-22 - f995338391b25e653588570dfd6a945ced9c9eb2cc8f9411e1b7e7d6e0045c37 - referenced ·
f995338391b25e653588570dfd6a945c· first seen 2026-08-22 - 13593af0fee8da071c7a6fad188b526d1f8e2e3c0f0adc081f886a31a6ea23dc - referenced ·
13593af0fee8da071c7a6fad188b526d· first seen 2026-08-22 - d32fae7810d4455a1a2008d864aa07f003a9579d45f331dd433571fa36cce331 - referenced ·
d32fae7810d4455a1a2008d864aa07f0· first seen 2026-08-22
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Categories
- phishing
Why this verdict
- Domain impersonates google (combosquat)
- Served over plaintext HTTP
Contacted infrastructure
- 142.251.12.82 - AS15169 Google LLC (Singapore)
Observed indicators
- html5shiv.googlecode.com
- 142.251.12.82
- http://html5shiv.googlecode.com/svn/trunk/html5.js
Other scans of html5shiv.googlecode.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.osgeurope.com/sites/osg-corporate.dev/files/webform/19824824677.pdf - 24 Aug 2026 - unknown ·
https://www.osgeurope.com/sites/osg-corporate.dev/files/webform/19824824677.pdf - 23 Aug 2026 - unknown ·
http://himeaime.blogspot.com/2015/01/jodha-akbar-episode-312.html - 23 Aug 2026 - suspicious ·
http://www.medical-psychology.gr/wp-content/plugins/formcraft/file-upload/server/content/files/16088 - 23 Aug 2026 - unknown ·
http://pandancoco.blogspot.com/2015/02/scop-281.html - 23 Aug 2026 - suspicious ·
https://www.musicacelestial.net/2015/06/planetshakers-outback-worship-sessions.html - 23 Aug 2026 - suspicious
- 23 Aug 2026 - unknown ·
http://fadlijayamotor.blogspot.com/2016/09/cdi-toyota-kijang-kapsul-karbulator-7k.html - 23 Aug 2026 - unknown ·
https://diversifiedhumansolutions.com/wp-content/plugins/super-forms/uploads/php/files/d4dcb49e25c72 - 23 Aug 2026 - unknown ·
https://bettenbaehren.de/wp-content/plugins/formcraft/file-upload/server/content/files/1613ca6e430fb
Questions about html5shiv.googlecode.com
- Is html5shiv.googlecode.com safe?
- No. MalwareAnalyzer scanned html5shiv.googlecode.com on 23 Aug 2026 and returned a suspicious verdict with a score of 31 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
- What malware is associated with html5shiv.googlecode.com?
- 46 analysed samples communicate with this URL.
- How was html5shiv.googlecode.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of html5shiv.googlecode.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan