www.blogger.com - suspicious URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned www.blogger.com and returned a suspicious verdict (score 39). The page resolved to 142.250.195.105 on Google LLC in IN. The domain was registered 9921 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 334 malware samples communicate with this URL (Autolike). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 39) · Confidence 45%
- Scanned URL:
https://www.blogger.com/static/v1/jsbin/945919205-lbx__pt_br.js - Domain: www.blogger.com · IP: 142.250.195.105 · AS15169 · IN
- Server: sffe
- HTTP status: 200 · text/javascript
- Registrar: MarkMonitor Inc. · domain age 9921 days · created 1999-06-22
- Scan tier: fast · observed 2026-08-21 01:03:27 UTC
Malware communicating with this URL (334)
These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.
- 10d68302eb6ceac285a43f092144f9f957399da7e977c571beb0c5c20e1e6878 - referenced ·
10d68302eb6ceac285a43f092144f9f9· first seen 2026-08-21 - e0da1271a9e432b1e26f41a5df95ac1a0dc3a4b6bbbe0fbbddf43f974976487f - referenced ·
e0da1271a9e432b1e26f41a5df95ac1a· first seen 2026-08-21 - e0d41d773525c4e520dc913470d36e8627c6c2e5f9e3587d24483f39d89e462d - referenced ·
e0d41d773525c4e520dc913470d36e86· first seen 2026-08-21 - 4631b06e95385fa9087001553392a5f6ca4251c36dc871e3401a011fc688bd02 - referenced ·
4631b06e95385fa9087001553392a5f6· first seen 2026-08-21 - Autolike - referenced ·
e0dd608c77e678e46f45daedb8f19c1f· first seen 2026-08-21 - dcc28efe2e0f47222cac08003fa45892e9131afe766a3ebc7b83f0ce2aee07b6 - referenced ·
dcc28efe2e0f47222cac08003fa45892· first seen 2026-08-20 - cd68698836a7344ab60b15e7fa45142c270d243ea1b75b4075b1a9e8c793a1d2 - referenced ·
cd68698836a7344ab60b15e7fa45142c· first seen 2026-08-20 - 05393eaacd5d4076e20ea96b2396631282174f10cd5235ee2a9cbe6fd40137e4 - referenced ·
05393eaacd5d4076e20ea96b23966312· first seen 2026-08-20 - ebdf980ac30b78bdff8a732b8718acb2dc7c857e0963468260047b111d909a84 - referenced ·
ebdf980ac30b78bdff8a732b8718acb2· first seen 2026-08-20 - dccdb8fff9af16095967d9df83c2bb27e784f44f9863e94d5e40fc6d1030ab49 - referenced ·
dccdb8fff9af16095967d9df83c2bb27· first seen 2026-08-20 - dcc655189ea41cb28c4b34b607d7cb3da6021eef6303edafbe7e6d78773cee74 - referenced ·
dcc655189ea41cb28c4b34b607d7cb3d· first seen 2026-08-20 - dcc1053dd00b1bb7f1ee495afa28a6f588a527b93c0500f12c7e5e1df39a285b - referenced ·
dcc1053dd00b1bb7f1ee495afa28a6f5· first seen 2026-08-20 - 13456afad58b913d949ba3f9f1b5b6093c20828783cfa04e1ec2160829858b00 - referenced ·
13456afad58b913d949ba3f9f1b5b609· first seen 2026-08-20 - dac76dd3a9d243ec67019f9c468b09a616978d44621062e0b4d502d7c2fd9589 - referenced ·
dac76dd3a9d243ec67019f9c468b09a6· first seen 2026-08-20 - dcc4b4bb821d3af30e4bcda572f8a5302d21d1cae1dc4de3c038d9b5f7789151 - referenced ·
dcc4b4bb821d3af30e4bcda572f8a530· first seen 2026-08-20
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Grabbed file (945919205-lbx__pt_br.js) is known suspicious in the corpus
- File download routed to the malware sandbox (945919205-lbx__pt_br.js)
Contacted infrastructure
- 142.250.195.105 - AS15169 Google LLC (India)
Files served by this page
- 945919205-lbx__pt_br.js ·
97d3352db3608186c89704e39cf04023
Observed indicators
- www.blogger.com
- 142.250.195.105
- https://www.blogger.com/static/v1/jsbin/945919205-lbx__pt_br.js
Other scans of www.blogger.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/4726179998866654911/posts/default - 24 Aug 2026 - unknown ·
http://ialcars.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
http://jotamaria-bandamusica.blogspot.com/search - 24 Aug 2026 - unknown ·
http://jotamaria-bandamusica.blogspot.com/ - 24 Aug 2026 - unknown ·
https://www.blogger.com/static/v1/jsbin/1788216410-lbx__pt_br.js - 24 Aug 2026 - unknown ·
http://jotamaria-caerndeseveriano.blogspot.com/search - 24 Aug 2026 - unknown ·
http://jotamaria-caerndeseveriano.blogspot.com/ - 24 Aug 2026 - suspicious ·
https://www.blogger.com/static/v1/jsbin/3382421118-ieretrofit.js - 24 Aug 2026 - unknown ·
http://jotaemeshon-saaguarn.blogspot.com/search - 24 Aug 2026 - unknown ·
http://jotaemeshon-saaguarn.blogspot.com/2010/
Questions about www.blogger.com
- Is www.blogger.com safe?
- No. MalwareAnalyzer scanned www.blogger.com on 21 Aug 2026 and returned a suspicious verdict with a score of 39 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with www.blogger.com?
- 334 analysed samples communicate with this URL, including Autolike.
- How was www.blogger.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.blogger.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan