www.blogger.com - URL scan, 17 Aug 2026
MalwareAnalyzer by Cyble scanned www.blogger.com and returned a unknown verdict (score -12). The page resolved to 172.217.25.169 on Google LLC in JP. 4 domains and 1 IP were contacted. 188 malware samples communicate with this URL. This is a point-in-time observation from 17 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://www.blogger.com/feeds/3763054390910767539/posts/default - Domain: www.blogger.com · IP: 172.217.25.169 · AS15169 · JP
- Server: blogger-renderd
- Page title: KHMER-UNICODE(IOS-ANDRIODS)-MOVIE
- HTTP status: 200 · application/atom+xml; charset=UTF-8
- TLS issuer: C=US, O=Google Trust Services, CN=WR2 · valid to Oct 28 20: · subject CN=*.blogger.com
- Scan tier: fast · observed 2026-08-17 00:12:52 UTC
Malware communicating with this URL (188)
These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.
- 11b0a94a4329eb77e29e5784fb41f5ecfad572709450fec237bb8b308ada1cdc - referenced ·
11b0a94a4329eb77e29e5784fb41f5ec· first seen 2026-08-17 - 11b720edf0766eab7626ca6804b3b2ab325f409128258adea68813d596e98992 - referenced ·
11b720edf0766eab7626ca6804b3b2ab· first seen 2026-08-16 - 11b1df604e8bca143a70f34ad007cb04b3698c1a66a14d0d6557bb969e9471ed - referenced ·
11b1df604e8bca143a70f34ad007cb04· first seen 2026-08-16 - 3b41b6effad27604d275485f119b011af0c7f286164a90dba65210e9ef6d62ab - referenced ·
3b41b6effad27604d275485f119b011a· first seen 2026-08-16 - 325311e1198869f56226ec9d7983696c8099315e6abebeb7d514696d35a2d988 - referenced ·
325311e1198869f56226ec9d7983696c· first seen 2026-08-16 - ffd9ce3aca028159504330d3cf8994925b06d451fe3b86c525b853d9e688c12e - referenced ·
ffd9ce3aca028159504330d3cf899492· first seen 2026-08-16 - 39c11df781fa5cfbf24fcb3514327ba40be82c6618e92e463df63c47a5d16879 - referenced ·
39c11df781fa5cfbf24fcb3514327ba4· first seen 2026-08-16 - 11be6882a8aa4693e20ff9b51fad85722dc718cba02bd50d47fe9f335ce08140 - referenced ·
11be6882a8aa4693e20ff9b51fad8572· first seen 2026-08-16 - c3e6d3f192d7491b04ed60c428b5efaea684f1ede8d31bdd54714783cad96fcd - referenced ·
c3e6d3f192d7491b04ed60c428b5efae· first seen 2026-08-16 - 11b56ce9e4dd84d46148864de39493700d74a84690a8bd9e5e8d0dfe28fa1f88 - referenced ·
11b56ce9e4dd84d46148864de3949370· first seen 2026-08-16 - 11bd82da74da37c96afdf3dd1c30bf82ed5bedd103e9f85518ceb60228dce7d7 - referenced ·
11bd82da74da37c96afdf3dd1c30bf82· first seen 2026-08-16 - 3bd660d5a68559f377571af75ea2515a035749db3db0274220ebb1c4c01c83d1 - referenced ·
3bd660d5a68559f377571af75ea2515a· first seen 2026-08-16 - 74aa505d313e337b996fd5996a71c73ff458c399c455268a56f3ee4f28b5bab8 - referenced ·
74aa505d313e337b996fd5996a71c73f· first seen 2026-08-16 - 11bf63f817e4e526da3af2dba49f70ae5f557409b850003c4453ad724f15026e - referenced ·
11bf63f817e4e526da3af2dba49f70ae· first seen 2026-08-16 - 11ba7aef120b9edc2b40484073f99e9baf34511221bb704d580059a5abf94c7b - referenced ·
11ba7aef120b9edc2b40484073f99e9b· first seen 2026-08-16
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- WordPress
Contacted infrastructure
- 172.217.25.169 - AS15169 Google LLC (Japan)
Observed indicators
- www.blogger.com
- khmer-unicode-ios-andriods.blogspot.com
- pubsubhubbub.appspot.com
- img1.blogblog.com
- 172.217.25.169
- https://www.blogger.com/feeds/3763054390910767539/posts/default
- http://www.blogger.com/styles/atom.css
- https://khmer-unicode-ios-andriods.blogspot.com/feeds/posts/default
- https://khmer-unicode-ios-andriods.blogspot.com/
- http://pubsubhubbub.appspot.com/
- https://www.blogger.com/feeds/3763054390910767539/posts/default?start-index=26&max-results=25
- https://img1.blogblog.com/img/b16-rounded.gif
- https://www.blogger.com/feeds/3763054390910767539/posts/default/7397201516225354635
- https://khmer-unicode-ios-andriods.blogspot.com/2014/08/stock-rom-s4-lte-e330-mode-s5-andriods.html
- https://www.blogger.com/feeds/3763054390910767539/posts/default/6403185265669538252
- https://khmer-unicode-ios-andriods.blogspot.com/2014/08/menukhmer-e210-s-k-ll-rom-442-fix-all.html
- https://www.blogger.com/feeds/3763054390910767539/posts/default/2251707858111778669
- https://khmer-unicode-ios-andriods.blogspot.com/2014/08/rom-shv-e210s-android-43-fixed.html
- https://www.blogger.com/feeds/3763054390910767539/posts/default/8029280361533236354
- https://khmer-unicode-ios-andriods.blogspot.com/2014/08/s5-stock-ng5-port-for-e330l-andriods-442.html
Other scans of www.blogger.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/983411471944363842/posts/default - 24 Aug 2026 - unknown ·
http://phimhddd.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
http://phimhddd.blogspot.com/search/label/M%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%83%C3%83%C2 - 24 Aug 2026 - suspicious ·
https://www.blogger.com/static/v1/jsbin/1957234192-lbx__pt_br.js - 24 Aug 2026 - unknown ·
http://istana-sepeda.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
http://istana-sepeda.blogspot.com/2012/04/fork-rst-first-platinum-travel-100.html - 24 Aug 2026 - unknown ·
http://agamakejawen.blogspot.com/feeds/posts/default?alt=rss - 24 Aug 2026 - unknown ·
http://agamakejawen.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
http://agamakejawen.blogspot.com/2010/07/wejangan-dewa-ruci-cerita-dalam_9537.html - 24 Aug 2026 - unknown ·
http://agamakejawen.blogspot.com/favicon.ico
Questions about www.blogger.com
- Is www.blogger.com safe?
- The scan of www.blogger.com on 17 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.blogger.com?
- 188 analysed samples communicate with this URL.
- How was www.blogger.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.blogger.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan