img.youtube.com - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned img.youtube.com and returned a unknown verdict (score 6). The page resolved to 142.250.207.14 on Google LLC in JP. The domain was registered 7859 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 26 malware samples communicate with this URL. This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://img.youtube.com/vi/TCnrXsGYgU0/0.jpg - Domain: img.youtube.com · IP: 142.250.207.14 · AS15169 · JP
- Server: sffe
- HTTP status: 404 · image/jpeg
- Registrar: MarkMonitor Inc. · domain age 7859 days · created 2005-02-15
- Scan tier: fast · observed 2026-08-24 02:52:19 UTC
Malware communicating with this URL (26)
These samples were observed contacting or being served from img.youtube.com. Each links to its full analysis.
- 99d578926044274a3915e6632de5421a771af8eb5a88dad3998f625dce2ed8e6 - referenced ·
99d578926044274a3915e6632de5421a· first seen 2026-08-24 - daa983e293ac73e993b8e1f3471b25fe5003363623cb912f854ae5623fb83652 - referenced ·
daa983e293ac73e993b8e1f3471b25fe· first seen 2026-08-23 - 5bc9cd0887086692700434efbd914d78c295070586d3e74a836cd73151454c02 - referenced ·
5bc9cd0887086692700434efbd914d78· first seen 2026-08-23 - 808675a6e948bc06d18cc508464ccea1d7ec72514df154d5fff72ba36534d949 - referenced ·
808675a6e948bc06d18cc508464ccea1· first seen 2026-08-23 - 1edddbb1f62b69c632c5a558b8a24a4e6531fa5c286a915c854ec865150d5c5b - referenced ·
1edddbb1f62b69c632c5a558b8a24a4e· first seen 2026-08-23 - c828ed8736a781c9cab0cfecae84fcdcabd89320767c19272f9e06c0166b8079 - referenced ·
c828ed8736a781c9cab0cfecae84fcdc· first seen 2026-08-22 - 22598a5e1c1d90013a94117c2e0cdb8ae5692579834fffbdf0b521887d7b0a0f - referenced ·
22598a5e1c1d90013a94117c2e0cdb8a· first seen 2026-08-22 - cbe851a67755891aa5a083490a3656b2d990c55ee247d7be0a30c57db44e7475 - referenced ·
cbe851a67755891aa5a083490a3656b2· first seen 2026-08-22 - 582e11f2123922332199be9553d4d4945545efcc1337f94b9f004ba997abf4a9 - referenced ·
582e11f2123922332199be9553d4d494· first seen 2026-08-22 - d32acae3c53811aa5bfbc903b6de504dc40daa3acf0e3d41c5ccba3028e39b73 - referenced ·
d32acae3c53811aa5bfbc903b6de504d· first seen 2026-08-22 - 6048eb85c29c9852a1075997add5a4b00201efd11e0a68ed59f896dfa4ce5dc8 - referenced ·
6048eb85c29c9852a1075997add5a4b0· first seen 2026-08-22 - 323863f2ce50bc7dde48def8144408bd53751a207ad1f9f750f977ff76866f51 - referenced ·
323863f2ce50bc7dde48def8144408bd· first seen 2026-08-21 - c5d311214e7a917b299ea0b2edd00332b2c6c6a644039f9bb4237cce00235b7b - referenced ·
c5d311214e7a917b299ea0b2edd00332· first seen 2026-08-21 - e476e9b003f635fe92e5a6a389bd242e55b6e96a376803d525c9649dabdbbdbc - referenced ·
e476e9b003f635fe92e5a6a389bd242e· first seen 2026-08-21 - de69d264f2959bd42b967726664badfaf0fe151449ce880cf330629ddf6b9010 - referenced ·
de69d264f2959bd42b967726664badfa· first seen 2026-08-20
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Contacted infrastructure
- 142.250.207.14 - AS15169 Google LLC (Japan)
Observed indicators
- img.youtube.com
- 142.250.207.14
- http://img.youtube.com/vi/TCnrXsGYgU0/0.jpg
Other scans of img.youtube.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - benign ·
https://img.youtube.com/vi/ - 23 Aug 2026 - unknown ·
https://argumentua.com/i/file/buripanomugidi.pdf - 23 Aug 2026 - unknown ·
https://argumentua.com/i/file/buripanomugidi.pdf - 22 Aug 2026 - unknown ·
http://img.youtube.com/vi/ - 22 Aug 2026 - unknown ·
http://img.youtube.com/vi/ - 22 Aug 2026 - malicious ·
https://www.steamsport.eu/ - 22 Aug 2026 - unknown ·
http://tdvvietnam.vn/webroot/img/files/96649687853.pdf - 21 Aug 2026 - benign ·
https://aws.amazon.com/s3/ - 21 Aug 2026 - benign ·
https://img.youtube.com/vi/ - 21 Aug 2026 - benign ·
https://aws.amazon.com/s3/
Questions about img.youtube.com
- Is img.youtube.com safe?
- The scan of img.youtube.com on 24 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with img.youtube.com?
- 26 analysed samples communicate with this URL.
- How was img.youtube.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of img.youtube.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan