www.youtube.com - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned www.youtube.com and returned a benign verdict (score 0). The page resolved to 142.251.157.4 on Google LLC in US. The domain was registered 7855 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 180 malware samples communicate with this URL (Obfus, Maldoc). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: benign (score 0) · Confidence 15%
- Scanned URL:
https://www.youtube.com/iframe_api - Domain: www.youtube.com · IP: 142.251.157.4 · AS15169 · US
- Server: ESF
- HTTP status: 200 · text/javascript; charset=utf-8
- Registrar: MarkMonitor Inc. · domain age 7855 days · created 2005-02-15
- TLS issuer: C=US, O=Google Trust Services, CN=WR2 · valid to Oct 28 20: · subject CN=*.google.com
- Scan tier: fast · observed 2026-08-19 22:58:15 UTC
Malware communicating with this URL (180)
These samples were observed contacting or being served from www.youtube.com. Each links to its full analysis.
- 43bb3e10b43659a0d45331d299e564b02e6ba9d97c6b60811a1052504562bfe6 - referenced ·
43bb3e10b43659a0d45331d299e564b0· first seen 2026-08-19 - e07affe0ff90e2a656e93dff625711547ce078dda432fc678dc4537e848b0ee6 - referenced ·
e07affe0ff90e2a656e93dff62571154· first seen 2026-08-19 - 0e61123c22deb54cceacc8c2d484546cab4aec046d70c60c7bc1b9648d054ff6 - referenced ·
0e61123c22deb54cceacc8c2d484546c· first seen 2026-08-19 - 9c6fa584165193422ad9836f679d4a03b8f16ba0c2a373e310302e35e639b772 - referenced ·
9c6fa584165193422ad9836f679d4a03· first seen 2026-08-19 - 4235e231232c0707fc91c26792765a7e74749af5ddc0bb7e1ee18ef552bcf525 - referenced ·
4235e231232c0707fc91c26792765a7e· first seen 2026-08-19 - Obfus - referenced ·
990dff7ba8267b11d35402e8acab13d6· first seen 2026-08-19 - d498ab02aab6595c465d272a05f73cd3b6406f592a9f309286f9427b82b9c1e8.ps1 - referenced ·
d498ab02aab6595c465d272a05f73cd3· first seen 2026-08-13 - Maldoc - referenced ·
2d1ec17083ea606da07bf3a9ec8b23e2· first seen 2026-08-19 - 1b1763d494eaee6600fb1f5d3e0648886c97cfc6fd1db02acee45fea0b8317aa - referenced ·
1b1763d494eaee6600fb1f5d3e064888· first seen 2026-08-19 - normal_5f873a9a94c69.pdf - referenced ·
1ff5e7561f63291a2b11f1e388aefe0b· first seen 2026-08-19 - 904ba9cedd81e5b19dec43b57661f80cd50fc8f8581c17b2454dc5d7ce59932d - referenced ·
904ba9cedd81e5b19dec43b57661f80c· first seen 2026-08-19 - 68929b9a212bfcbf4b2c7b17b031ffc6d26e7ce60183ba8ac61c32a6f228b891 - referenced ·
68929b9a212bfcbf4b2c7b17b031ffc6· first seen 2026-08-19 - 3c82da6cc4cc2feb20242656e6e0eda087b38ff6d2532ac7e0afe671969817c1 - referenced ·
3c82da6cc4cc2feb20242656e6e0eda0· first seen 2026-08-19 - 772295d39d684458ce90b0404d4944bf0f4e0be70b0c9e311ccc19b83ca97d23 - referenced ·
772295d39d684458ce90b0404d4944bf· first seen 2026-08-19 - fe47c899d05a1f5bafd6f9432e67c58fb6091399d6387b70a0fcb541895896b4 - referenced ·
fe47c899d05a1f5bafd6f9432e67c58f· first seen 2026-08-19
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 142.251.157.4 - AS15169 Google LLC (US)
Observed indicators
- www.youtube.com
- 142.251.157.4
- https://www.youtube.com/iframe_api
Other scans of www.youtube.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.yahoo.com/ - 24 Aug 2026 - suspicious ·
https://onlinebiblecollege.com/ - 24 Aug 2026 - unknown ·
https://5.me/ - 24 Aug 2026 - unknown ·
https://deshdunya.com/blogimage/file/96657463789.pdf - 24 Aug 2026 - unknown ·
https://loca-granderoue-montaletang.com/ckfinder/userfiles/files/77399895396.pdf - 24 Aug 2026 - unknown ·
https://www.oracle.com/java/weblogic/ - 24 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/mevupuxapiledowitire.pdf - 24 Aug 2026 - unknown ·
https://www.osgeurope.com/sites/osg-corporate.dev/files/webform/19824824677.pdf - 24 Aug 2026 - suspicious ·
https://naatsihwp.org.au/ - 24 Aug 2026 - unknown ·
https://www.osgeurope.com/sites/osg-corporate.dev/files/webform/19824824677.pdf
Questions about www.youtube.com
- Is www.youtube.com safe?
- The scan of www.youtube.com on 19 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.
- What malware is associated with www.youtube.com?
- 180 analysed samples communicate with this URL, including Obfus, Maldoc.
- How was www.youtube.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.youtube.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan