malsup.com - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned malsup.com and returned a unknown verdict (score 6). The page resolved to 54.191.145.5 on Amazon.com, Inc. in US. 12 domains and 1 IP were contacted, over 7 HTTP requests. 21 malware samples communicate with this URL. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://malsup.com/jquery/block/ - Domain: malsup.com · IP: 54.191.145.5 · AS16509 · US
- Server: nginx
- Page title: jQuery BlockUI Plugin
- HTTP status: 200 · text/html
- HTTP requests captured: 7
- Scan tier: fast · observed 2026-08-23 13:58:42 UTC
Malware communicating with this URL (21)
These samples were observed contacting or being served from malsup.com. Each links to its full analysis.
- 13d72132cc2b9a165a1e171e407a3b15b637e1e55a6c20fadd8833e4f5662cd2 - referenced ·
13d72132cc2b9a165a1e171e407a3b15· first seen 2026-08-23 - dbb3beb00e49113bf09df27a712a3fb637424462b1dcfab72465992853534d4d - referenced ·
dbb3beb00e49113bf09df27a712a3fb6· first seen 2026-08-23 - f82c0702ca42c3b4a78b9ed5eeafbe4f3f2ae1c22970ed14d2c2752ce536fac8 - referenced ·
f82c0702ca42c3b4a78b9ed5eeafbe4f· first seen 2026-08-22 - f726976d12111292e490c45fb23970af9bf5db2b387c2ce9fd02af82a4a42ed8 - referenced ·
f726976d12111292e490c45fb23970af· first seen 2026-08-22 - 7e921b0e6504812a1688d260e8a33fb3bfc5ca16b7168780fedb213f78576b86 - referenced ·
7e921b0e6504812a1688d260e8a33fb3· first seen 2026-08-22 - a6d622955c2bab36867a9fd7ba0928d62a26e436b1c5155f186b64cc7e9459da - referenced ·
a6d622955c2bab36867a9fd7ba0928d6· first seen 2026-08-22 - d32ce15309765186e5fd3a257b4c1cfbff65b7ff225f980ac26189e9dd5a0a1b - referenced ·
d32ce15309765186e5fd3a257b4c1cfb· first seen 2026-08-22 - 3f7899ba69ccc7a23a418c62625e579ea9d406b1d02e28768d5cf8b18bc1d7d6 - referenced ·
3f7899ba69ccc7a23a418c62625e579e· first seen 2026-08-21 - 323b09a0dc664b18338036d2546899d907c218fdea8ed75bcf0d3452640d0aa2 - referenced ·
323b09a0dc664b18338036d2546899d9· first seen 2026-08-21 - df066392d67063967325fcddf0440399235a135700429a5a238539f363b2ef67 - referenced ·
df066392d67063967325fcddf0440399· first seen 2026-08-21 - df0d093b69189150a507865b74bef77ada93cb7dcd8299383c9eb0f4d53f598b - referenced ·
df0d093b69189150a507865b74bef77a· first seen 2026-08-21 - df0ef9309df98dff8135bfe1a08588dd8a29cbb51370642265d9bb2a8b1911fa - referenced ·
df0ef9309df98dff8135bfe1a08588dd· first seen 2026-08-21 - bd551bcf712734ec3228165e2745f34e6ded5e1a14b12c22a067d4f6fbb1a9ed - referenced ·
bd551bcf712734ec3228165e2745f34e· first seen 2026-08-20 - 99069d33ec4f87abf797c9591435e7a3d904d138ed0098fb5e78b72a9b9bf8df - referenced ·
99069d33ec4f87abf797c9591435e7a3· first seen 2026-08-20 - 11ba9e6c2091a692ffc734431fc130be39b3103c60eaa07c0548bab50de11687 - referenced ·
11ba9e6c2091a692ffc734431fc130be· first seen 2026-08-16
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Nginx
- Google Analytics
- jQuery
Contacted infrastructure
- 54.191.145.5 - AS16509 Amazon.com, Inc. (United States)
Observed indicators
- malsup.com
- ajax.googleapis.com
- malsup.github.io
- $.com
- pagead2.googlesyndication.com
- www.ericmmartin.com
- dev.iceburg.net
- stanlemon.net
- www.shadowbox-js.com
- github.com
- forum.jquery.com
- www.google-analytics.com
- 54.191.145.5
- http://malsup.com/jquery/block/
- https://ajax.googleapis.com/ajax/libs/jqueryui/1/themes/smoothness/jquery-ui.css
- http://malsup.com/jquery/jq.css
- http://malsup.com/jquery/block/block.css?v3
- https://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js
- https://ajax.googleapis.com/ajax/libs/jqueryui/1.9.2/jquery-ui.min.js
- http://malsup.com/jquery/block/jquery.blockUI.js
Other scans of malsup.com (5)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 15 Aug 2026 - unknown
- 13 Aug 2026 - unknown
Questions about malsup.com
- Is malsup.com safe?
- The scan of malsup.com on 23 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with malsup.com?
- 21 analysed samples communicate with this URL.
- How was malsup.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of malsup.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan