pagead2.googlesyndication.com - suspicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned pagead2.googlesyndication.com and returned a suspicious verdict (score 25), categorised as phishing. The page resolved to 142.250.195.162 on Google LLC in IN. The domain was registered 8612 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 248 malware samples communicate with this URL (Fileinfector). This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

• Verdict: suspicious (score 25) · Confidence 28%
• Scanned URL: https://pagead2.googlesyndication.com/
• Domain: pagead2.googlesyndication.com · IP: 142.250.195.162 · AS15169 · IN
• Server: sffe
• Page title: Error 404 (Not Found)!!1
• HTTP status: 404 · text/html; charset=UTF-8
• Registrar: MarkMonitor Inc. · domain age 8612 days · created 2003-01-21
• Scan tier: fast · observed 2026-08-20 14:57:23 UTC

Malware communicating with this URL (248)

These samples were observed contacting or being served from pagead2.googlesyndication.com. Each links to its full analysis.

• Fileinfector - contacted · 63802cd8505b8595a84c33afe129f289 · first seen 2026-08-20
• 7127907ce31aa75d8cfc81181ec46fb3d78036addde8025b959158979182f1f7 - referenced · 7127907ce31aa75d8cfc81181ec46fb3 · first seen 2026-08-20
• e3b73b5e0142d335dc8c45a21bcaafeb962460d42a9149893b04cf3c5ee8e214 - referenced · e3b73b5e0142d335dc8c45a21bcaafeb · first seen 2026-08-20
• 534668106a23b519b3f1184b0fbacc5dfc6e5169ebb0c2cbde37fc5ac4a571bb - referenced · 534668106a23b519b3f1184b0fbacc5d · first seen 2026-08-20
• 05402025713e7bf6ee3af65c3c1f4b826bef77f6a460fad93d68782e5539a0ae - referenced · 05402025713e7bf6ee3af65c3c1f4b82 · first seen 2026-08-20
• dcceaf023fe8369c61f315deda7d49554a72b1dd7ef8914e6fdbbbb680beae09 - referenced · dcceaf023fe8369c61f315deda7d4955 · first seen 2026-08-20
• dcc7cb5b07bedb3329bbb525350e7c8130a39221a2c951ebfc55f3edfae8182e - referenced · dcc7cb5b07bedb3329bbb525350e7c81 · first seen 2026-08-20
• daeb7a360f80380b9425e18b1cc75956772d9c5b640908b771bc44c2e1d8488c - referenced · daeb7a360f80380b9425e18b1cc75956 · first seen 2026-08-20
• 87478dcbb3af72b470af5317d377761b22313217afdb5f40f109ee3f05f2843f - referenced · 87478dcbb3af72b470af5317d377761b · first seen 2026-08-20
• 3470d10410ffb47fa7b9a3669a280e0b56f6909f14ac8d5887f3f8c11f49ece7 - referenced · 3470d10410ffb47fa7b9a3669a280e0b · first seen 2026-08-20
• 8e5a9a6e9be1ff5a1bc9c88ad607abc5514b94451ae037320f9e53a37884c913 - referenced · 8e5a9a6e9be1ff5a1bc9c88ad607abc5 · first seen 2026-08-20
• bd56432d8c49039f839455a8545e50c253bdccdde73ee8ecc10307716de32eca - referenced · bd56432d8c49039f839455a8545e50c2 · first seen 2026-08-20
• bd5b15f3cbbe399434e2ecd328075df1fb9cab9742f646122f365614a6db84a8 - referenced · bd5b15f3cbbe399434e2ecd328075df1 · first seen 2026-08-20
• bd551bcf712734ec3228165e2745f34e6ded5e1a14b12c22a067d4f6fbb1a9ed - referenced · bd551bcf712734ec3228165e2745f34e · first seen 2026-08-20
• bd58075d1236bd5beb83c7cf5bdeb5fc06e1139fe108bdd12db0501ac6c4f737 - referenced · bd58075d1236bd5beb83c7cf5bdeb5fc · first seen 2026-08-20

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Categories

• phishing

Why this verdict

• Domain impersonates google (combosquat)

Contacted infrastructure

• 142.250.195.162 - AS15169 Google LLC (India)

Observed indicators

• pagead2.googlesyndication.com
• 142.250.195.162
• https://pagead2.googlesyndication.com/

Other scans of pagead2.googlesyndication.com (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

• 24 Aug 2026 - unknown · http://jotamaria-ccdejoaocamara.blogspot.com/search
• 24 Aug 2026 - unknown · http://jotajunior-servicosrn.blogspot.com/search
• 24 Aug 2026 - unknown · http://jotajunior-servicosrn.blogspot.com/
• 24 Aug 2026 - unknown · http://legendsnewsbr.blogspot.com/
• 24 Aug 2026 - unknown · https://moda.net.pl/
• 24 Aug 2026 - unknown · https://moda.net.pl/moda/polecamy/keep-calm-and-wait-for-friday
• 24 Aug 2026 - unknown · http://jotamaria-atheneurn.blogspot.com/search
• 24 Aug 2026 - unknown · http://jotamaria-atheneurn.blogspot.com/
• 24 Aug 2026 - unknown · http://jotamaria-atheneurn.blogspot.com/2013/
• 24 Aug 2026 - unknown · http://fullpornolariizle.blogspot.com/

Questions about pagead2.googlesyndication.com

Is pagead2.googlesyndication.com safe?

No. MalwareAnalyzer scanned pagead2.googlesyndication.com on 20 Aug 2026 and returned a suspicious verdict with a score of 25 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

What malware is associated with pagead2.googlesyndication.com?

248 analysed samples communicate with this URL, including Fileinfector.

How was pagead2.googlesyndication.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of pagead2.googlesyndication.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan