malsup.com - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned malsup.com and returned a unknown verdict (score 6). The page resolved to 54.191.145.5 on Amazon.com, Inc. in US. The domain was registered 7585 days ago through eNom, LLC. 12 domains and 1 IP were contacted, over 7 HTTP requests. 25 malware samples communicate with this URL. This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://malsup.com/jquery/block/ - Domain: malsup.com · IP: 54.191.145.5 · AS16509 · US
- Server: nginx
- Page title: jQuery BlockUI Plugin
- HTTP status: 200 · text/html
- Registrar: eNom, LLC · domain age 7585 days · created 2005-11-17
- HTTP requests captured: 7
- Scan tier: fast · observed 2026-08-24 02:23:36 UTC
Malware communicating with this URL (25)
These samples were observed contacting or being served from malsup.com. Each links to its full analysis.
- 65b670b781a1a80ee787445215a1e3fc292f4eb45a618c232eafa70e47cf9b57 - referenced ·
65b670b781a1a80ee787445215a1e3fc· first seen 2026-08-24 - b6e9587584884b0cff27204efbd740ccda5d47deb27e6261685d373974ca73e3 - referenced ·
b6e9587584884b0cff27204efbd740cc· first seen 2026-08-24 - fe9ec242c8e1d01a9b0e63da9b01c8c9044a88e50b5727c1aa556e3aa7f97242 - referenced ·
fe9ec242c8e1d01a9b0e63da9b01c8c9· first seen 2026-08-23 - 5bc6601ea04292c5bc86692f54bd73174586c6b28f73fe648221c298c7455748 - referenced ·
5bc6601ea04292c5bc86692f54bd7317· first seen 2026-08-23 - 13d72132cc2b9a165a1e171e407a3b15b637e1e55a6c20fadd8833e4f5662cd2 - referenced ·
13d72132cc2b9a165a1e171e407a3b15· first seen 2026-08-23 - dbb3beb00e49113bf09df27a712a3fb637424462b1dcfab72465992853534d4d - referenced ·
dbb3beb00e49113bf09df27a712a3fb6· first seen 2026-08-23 - f82c0702ca42c3b4a78b9ed5eeafbe4f3f2ae1c22970ed14d2c2752ce536fac8 - referenced ·
f82c0702ca42c3b4a78b9ed5eeafbe4f· first seen 2026-08-22 - f726976d12111292e490c45fb23970af9bf5db2b387c2ce9fd02af82a4a42ed8 - referenced ·
f726976d12111292e490c45fb23970af· first seen 2026-08-22 - 7e921b0e6504812a1688d260e8a33fb3bfc5ca16b7168780fedb213f78576b86 - referenced ·
7e921b0e6504812a1688d260e8a33fb3· first seen 2026-08-22 - a6d622955c2bab36867a9fd7ba0928d62a26e436b1c5155f186b64cc7e9459da - referenced ·
a6d622955c2bab36867a9fd7ba0928d6· first seen 2026-08-22 - d32ce15309765186e5fd3a257b4c1cfbff65b7ff225f980ac26189e9dd5a0a1b - referenced ·
d32ce15309765186e5fd3a257b4c1cfb· first seen 2026-08-22 - 3f7899ba69ccc7a23a418c62625e579ea9d406b1d02e28768d5cf8b18bc1d7d6 - referenced ·
3f7899ba69ccc7a23a418c62625e579e· first seen 2026-08-21 - 323b09a0dc664b18338036d2546899d907c218fdea8ed75bcf0d3452640d0aa2 - referenced ·
323b09a0dc664b18338036d2546899d9· first seen 2026-08-21 - df066392d67063967325fcddf0440399235a135700429a5a238539f363b2ef67 - referenced ·
df066392d67063967325fcddf0440399· first seen 2026-08-21 - df0d093b69189150a507865b74bef77ada93cb7dcd8299383c9eb0f4d53f598b - referenced ·
df0d093b69189150a507865b74bef77a· first seen 2026-08-21
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Nginx
- Google Analytics
- jQuery
Contacted infrastructure
- 54.191.145.5 - AS16509 Amazon.com, Inc. (United States)
Observed indicators
- malsup.com
- ajax.googleapis.com
- malsup.github.io
- $.com
- pagead2.googlesyndication.com
- www.ericmmartin.com
- dev.iceburg.net
- stanlemon.net
- www.shadowbox-js.com
- github.com
- forum.jquery.com
- www.google-analytics.com
- 54.191.145.5
- http://malsup.com/jquery/block/
- https://ajax.googleapis.com/ajax/libs/jqueryui/1/themes/smoothness/jquery-ui.css
- http://malsup.com/jquery/jq.css
- http://malsup.com/jquery/block/block.css?v3
- https://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js
- https://ajax.googleapis.com/ajax/libs/jqueryui/1.9.2/jquery-ui.min.js
- http://malsup.com/jquery/block/jquery.blockUI.js
Other scans of malsup.com (5)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 15 Aug 2026 - unknown
- 13 Aug 2026 - unknown
Questions about malsup.com
- Is malsup.com safe?
- The scan of malsup.com on 24 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with malsup.com?
- 25 analysed samples communicate with this URL.
- How was malsup.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of malsup.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan