Is hamm-leverkusen.blogspot.com safe?

The scan of hamm-leverkusen.blogspot.com on 23 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with hamm-leverkusen.blogspot.com?

1 analysed samples communicate with this URL.

How was hamm-leverkusen.blogspot.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

hamm-leverkusen.blogspot.com - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned hamm-leverkusen.blogspot.com and returned a unknown verdict (score 18). The page resolved to 142.250.183.33 on Google LLC in IN. The domain was registered 9518 days ago through MarkMonitor Inc.. 5 domains and 1 IP were contacted, over 3 HTTP requests. 1 malware sample communicates with this URL. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 18) · Confidence 24%
Scanned URL: http://hamm-leverkusen.blogspot.com/
Domain: hamm-leverkusen.blogspot.com · IP: 142.250.183.33 · AS15169 · IN
Server: GSE
Page title: Wir 2 privat
HTTP status: 200 · text/html; charset=UTF-8
Registrar: MarkMonitor Inc. · domain age 9518 days · created 2000-07-31
HTTP requests captured: 3
Scan tier: fast · observed 2026-08-23 15:47:23 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from hamm-leverkusen.blogspot.com. Each links to its full analysis.

5bc472a3a60e81e47a1db9890c2292a205bd72c3864fa9640566561fb20277d5 - referenced · 5bc472a3a60e81e47a1db9890c2292a2 · first seen 2026-08-23

Antivirus & YARA (1 of 48 engines)

ClamAV (daily) [av]: Html.Exploit.Agent-6598769-0 (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

A signature matched text in the page (Html.Exploit.Agent-6598769-0) — pages that discuss malware can match, so this alone is not a malicious verdict
Served over plaintext HTTP

Detected technologies

jQuery

Contacted infrastructure

142.250.183.33 - AS15169 Google LLC (India)

Observed indicators

hamm-leverkusen.blogspot.com
www.blogger.com
ajax.googleapis.com
blogger.googleusercontent.com
www.gstatic.com
142.250.183.33
http://hamm-leverkusen.blogspot.com/
https://www.blogger.com/static/v1/widgets/4165133002-widget_css_bundle.css
http://hamm-leverkusen.blogspot.com/favicon.ico
http://hamm-leverkusen.blogspot.com/feeds/posts/default
http://hamm-leverkusen.blogspot.com/feeds/posts/default?alt=rss
https://www.blogger.com/feeds/6864906178019282140/posts/default
https://www.blogger.com/profile/17539897321937853267
http://ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
https://www.blogger.com/dyn-css/authorization.css?targetBlogID=6864906178019282140&zx=3fe90b8a-90ce-4ed4-9ca3-7ffafe7513d6
https://www.blogger.com/interstitial/blog?u=http://hamm-leverkusen.blogspot.com/
http://hamm-leverkusen.blogspot.com/2009/02/caseiras-lindas.html
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQbM9rsi0XuBt-mOjs92Od-Rhty2INcNA3O5OytbJv9qBkcObA7rBNh1bLzbGfNeEuzOhTTOh5mZHZ_Jc2p9omk4qKxt3VxLLU5mLShyphenhyphen5qxpY6kD538wXgW-jtilEMytg5CDNrAa5pN7s/w72-h72-p-k-no-nu/AsmeninasdaUniversidadeNova16.JPG
http://hamm-leverkusen.blogspot.com/2012/10/o-gostinho-da-praia-part2.html
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhI3sv_c9e1t_zUfWL_ii7qYbc4RYpQgwD25646zwsjrLOKCoPbghz35d52KpVG8IZO2WCAGSzkKneg8WhodIGw_W0o90L8CzZnrGuAsECmgH8HYlcyXoDm5o7_2yWE2cin1O0ztIP7hxY/w72-h72-p-k-no-nu/1.png

Other scans of hamm-leverkusen.blogspot.com (4)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

23 Aug 2026 - unknown · https://www.blogger.com/feeds/6864906178019282140/posts/default
23 Aug 2026 - unknown · http://hamm-leverkusen.blogspot.com/feeds/posts/default?alt=rss
23 Aug 2026 - unknown · http://hamm-leverkusen.blogspot.com/feeds/posts/default
23 Aug 2026 - unknown · http://hamm-leverkusen.blogspot.com/favicon.ico

Questions about hamm-leverkusen.blogspot.com

Is hamm-leverkusen.blogspot.com safe?: The scan of hamm-leverkusen.blogspot.com on 23 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with hamm-leverkusen.blogspot.com?: 1 analysed samples communicate with this URL.
How was hamm-leverkusen.blogspot.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of hamm-leverkusen.blogspot.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan