www.blogger.com - URL scan, 14 Aug 2026
MalwareAnalyzer by Cyble scanned www.blogger.com and returned a unknown verdict (score -12). The page resolved to 142.251.42.105 on GOOGLE - Google LLC, US in US. The domain was registered 9914 days ago through MarkMonitor Inc.. 4 domains and 1 IP were contacted. 80 malware samples communicate with this URL (Autolike, Coinminer). This is a point-in-time observation from 14 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://www.blogger.com/feeds/8341162350881279039/posts/default - Domain: www.blogger.com · IP: 142.251.42.105 · AS15169 · US
- Server: blogger-renderd
- Page title: ==► ELSANCOCHO.NET
- HTTP status: 200 · application/atom+xml; charset=UTF-8
- Registrar: MarkMonitor Inc. · domain age 9914 days · created 1999-06-22
- TLS issuer: C=US, O=Google Trust Services, CN=WR2 · valid to Oct 12 18: · subject CN=*.blogger.com
- Scan tier: fast · observed 2026-08-14 08:36:27 UTC
Malware communicating with this URL (80)
These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.
- 80e131cb8a008d25ddeb8b294ad40308737dc3aad7d705df88f95d959b4e5860 - referenced ·
80e131cb8a008d25ddeb8b294ad40308· first seen 2026-08-14 - Autolike - referenced ·
80ebe87e24b0190356507f301a5e4387· first seen 2026-08-14 - 80ee3d12acdd5e45c75645dd1b01d53df0a03bc9eb748947946393c008c6d744 - referenced ·
80ee3d12acdd5e45c75645dd1b01d53d· first seen 2026-08-14 - ee1bae0b40a44b6be95b6291eab0ef2e1f8464af5e04754ab8594d5e2593ead7 - referenced ·
ee1bae0b40a44b6be95b6291eab0ef2e· first seen 2026-08-14 - 80eaeda90b11e8e5973d9a108cda7b85513dd3e63032f8d1e427f1831e4618a7 - referenced ·
80eaeda90b11e8e5973d9a108cda7b85· first seen 2026-08-14 - b084933541e297d81640aa2e11f3c2ac40ff564a678ebbbaeff2e5f58da34425 - referenced ·
b084933541e297d81640aa2e11f3c2ac· first seen 2026-08-14 - Coinminer - referenced ·
80e56e418b757e267af35a0b02f7bb06· first seen 2026-08-14 - f6002203812cb94929778aa44d7ac4f2a010c145ff21b580fe18a08fcc218d92 - referenced ·
f6002203812cb94929778aa44d7ac4f2· first seen 2026-08-14 - 3249447b70ba135fc67d5e77c20df07fba5dcf2eaa9003794fe5a34030435369 - referenced ·
3249447b70ba135fc67d5e77c20df07f· first seen 2026-08-14 - 80e54adbef08625446ae3197b24d74206834b1a305458c9094cae343f021dbd0 - referenced ·
80e54adbef08625446ae3197b24d7420· first seen 2026-08-14 - ebaa16017aca8d9d0b751d027380bbd497a6ff58ba90f9425932fb95b5b80062 - referenced ·
ebaa16017aca8d9d0b751d027380bbd4· first seen 2026-08-14 - d36c0e1eabe5f7b775755cc5d74d295ec9539b71302b8030c2b0430bed3c34c8 - referenced ·
d36c0e1eabe5f7b775755cc5d74d295e· first seen 2026-08-14 - 0f86cc0f4ee9e9f6d5d7f7f9a4242e26aee4432e2d636c9967e771942f511042 - referenced ·
0f86cc0f4ee9e9f6d5d7f7f9a4242e26· first seen 2026-08-14 - bb2ae3799510ca93c722c34c1c202da1c336b755b1df87fc800ef041f1412ba9 - referenced ·
bb2ae3799510ca93c722c34c1c202da1· first seen 2026-08-13 - 636055e61b0b0d95fee2d57b8b541607ecb36f93079630f4e39fba7592c58871 - referenced ·
636055e61b0b0d95fee2d57b8b541607· first seen 2026-08-13
Antivirus & YARA (0 of 44 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- WordPress
Contacted infrastructure
- 142.251.42.105 - AS15169 GOOGLE - Google LLC, US (US)
Observed indicators
- www.blogger.com
- siempretipico.blogspot.com
- pubsubhubbub.appspot.com
- img1.blogblog.com
- 142.251.42.105
- https://www.blogger.com/feeds/8341162350881279039/posts/default
- http://www.blogger.com/styles/atom.css
- https://siempretipico.blogspot.com/feeds/posts/default
- https://siempretipico.blogspot.com/
- http://pubsubhubbub.appspot.com/
- https://img1.blogblog.com/img/b16-rounded.gif
- https://siempretipico.blogspot.com/feeds/3171480927150874340/comments/default
- https://siempretipico.blogspot.com/2013/04/ay-mi-madre-melymel-se-chulea-terrol.html#comment-form
- https://www.blogger.com/feeds/8341162350881279039/posts/default/3171480927150874340
- https://siempretipico.blogspot.com/2013/04/ay-mi-madre-melymel-se-chulea-terrol.html
- https://siempretipico.blogspot.com/feeds/5109950964233142276/comments/default
- https://siempretipico.blogspot.com/2013/04/video-venya-carolina-dios-mio.html#comment-form
- https://www.blogger.com/feeds/8341162350881279039/posts/default/5109950964233142276
- https://siempretipico.blogspot.com/2013/04/video-venya-carolina-dios-mio.html
- https://siempretipico.blogspot.com/feeds/1310032206664651959/comments/default
Other scans of www.blogger.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.blogger.com/static/v1/v-css/368954415-lightbox_bundle.css - 24 Aug 2026 - unknown ·
http://jotamaria-angicos.blogspot.com/search - 24 Aug 2026 - unknown ·
http://jotamaria-angicos.blogspot.com/ - 24 Aug 2026 - unknown ·
https://www.soratemplates.com/ - 24 Aug 2026 - unknown ·
http://jotamaria-cbomparnamirim.blogspot.com/search - 24 Aug 2026 - unknown ·
http://jotamaria-cbomparnamirim.blogspot.com/ - 24 Aug 2026 - unknown ·
http://jotamaria-baseaerea.blogspot.com/search - 24 Aug 2026 - unknown ·
http://jotamaria-baseaerea.blogspot.com/ - 24 Aug 2026 - unknown ·
http://jotamaria-baseaerea.blogspot.com/2016/09/base-aerea-de-natal_94.html - 24 Aug 2026 - unknown ·
https://www.blogger.com/rpc_relay.html
Questions about www.blogger.com
- Is www.blogger.com safe?
- The scan of www.blogger.com on 14 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.blogger.com?
- 80 analysed samples communicate with this URL, including Autolike, Coinminer.
- How was www.blogger.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.blogger.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan