www.blogger.com - suspicious URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned www.blogger.com and returned a suspicious verdict (score 39). The page resolved to 142.251.42.105 on GOOGLE - Google LLC, US in US. The domain was registered 9924 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 683 malware samples communicate with this URL. This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 39) · Confidence 45%
- Scanned URL:
https://www.blogger.com/static/v1/jsbin/3903731066-lbx__pt_br.js - Domain: www.blogger.com · IP: 142.251.42.105 · AS15169 · US
- Server: sffe
- HTTP status: 200 · text/javascript
- Registrar: MarkMonitor Inc. · domain age 9924 days · created 1999-06-22
- Scan tier: fast · observed 2026-08-24 11:03:43 UTC
Malware communicating with this URL (683)
These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.
- e53ee6b0a1d95426911fba2d626dd2957e4648fc8ee0ad7f63de552f1f00280e - referenced ·
e53ee6b0a1d95426911fba2d626dd295· first seen 2026-08-24 - 5e054d16bdc4deec5df9938ae7f363faf72e394bcb453ef69d0b6e5562687eba - referenced ·
5e054d16bdc4deec5df9938ae7f363fa· first seen 2026-08-24 - 5ed227508f7e5aecef1bf47398e5db6683099dffcc4cc49345322b53d6815846 - referenced ·
5ed227508f7e5aecef1bf47398e5db66· first seen 2026-08-24 - 5ed66e617aaf9c9a2b61279106c6a7233e3062e2e9ca2061b8a5f0c79bfdd6cf - referenced ·
5ed66e617aaf9c9a2b61279106c6a723· first seen 2026-08-24 - 5edcd4cedaec09de313bee52609e60103d9169adc8fc0730387866e78e0bc000 - referenced ·
5edcd4cedaec09de313bee52609e6010· first seen 2026-08-24 - 6b3074e52f511d9d8c9603a1138c4ffd840a448153232606cdf2ad84e615b8ba - referenced ·
6b3074e52f511d9d8c9603a1138c4ffd· first seen 2026-08-24 - 5ed7d0281e808fd6ed620e297485be60062158860ae682da1cf15653cc9fd018 - referenced ·
5ed7d0281e808fd6ed620e297485be60· first seen 2026-08-24 - 5ed6bb4a23466591d1c7af1f71b918f0a920d7063bdbba119d3572489ca02fae - referenced ·
5ed6bb4a23466591d1c7af1f71b918f0· first seen 2026-08-24 - 5ed9f1fff2fd74df2a2efab6fe0f75237bd54bf2ad901a6895573cc3a7f124ac - referenced ·
5ed9f1fff2fd74df2a2efab6fe0f7523· first seen 2026-08-24 - 83a73cca342a6fa2b261270cb00b004097be1fd93f6b76cef4e0eec832aa1399 - referenced ·
83a73cca342a6fa2b261270cb00b0040· first seen 2026-08-24 - 5edde4b601f3b79a6a18e120898d718ac6aabad41de3c482eb393e9b5e363eb6 - referenced ·
5edde4b601f3b79a6a18e120898d718a· first seen 2026-08-24 - b1c39147e289079f0891640c1d70b1b5f98d8c484016eee30b2036213eaec557 - referenced ·
b1c39147e289079f0891640c1d70b1b5· first seen 2026-08-24 - 62131d8c5e462500702401bfe42205ef40ca5d37bda85c2ec12b51e49f0d64fa - referenced ·
62131d8c5e462500702401bfe42205ef· first seen 2026-08-24 - fe0239862808b5fa9591c9a79254c21ac4516dcde2a5a2b9d8b5b40e63217829 - referenced ·
fe0239862808b5fa9591c9a79254c21a· first seen 2026-08-24 - 6332575d83d9e3484109bd1aa2d52732df555f63bcdda281e8ce66f958e78032 - referenced ·
6332575d83d9e3484109bd1aa2d52732· first seen 2026-08-24
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Grabbed file (3903731066-lbx__pt_br.js) is known suspicious in the corpus
- File download routed to the malware sandbox (3903731066-lbx__pt_br.js)
Contacted infrastructure
- 142.251.42.105 - AS15169 GOOGLE - Google LLC, US (US)
Files served by this page
- 3903731066-lbx__pt_br.js ·
f7e2bc3ee0d4f9ae4d1267999a73f2e2
Observed indicators
- www.blogger.com
- 142.251.42.105
- https://www.blogger.com/static/v1/jsbin/3903731066-lbx__pt_br.js
Other scans of www.blogger.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
http://jotamaria-cachiblema.blogspot.com/search - 24 Aug 2026 - unknown ·
http://jotamaria-bmdesaogoncalo.blogspot.com/ - 24 Aug 2026 - unknown ·
http://jotamaria-bmdesaogoncalo.blogspot.com/2016/08/banda-de-musica-de-sao-goncalo.html - 24 Aug 2026 - unknown ·
http://jotamaria-acjus.blogspot.com/search - 24 Aug 2026 - unknown ·
http://jotamaria-acjus.blogspot.com/ - 24 Aug 2026 - unknown ·
http://jotamaria-cearamirim.blogspot.com/search - 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/8052993434881065940/posts/default - 24 Aug 2026 - unknown ·
https://roupinhastransparentes.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
https://roupinhastransparentes.blogspot.com/search/label/Port - 24 Aug 2026 - unknown ·
http://jotamaria-ccdejardimdepiranhas.blogspot.com/
Questions about www.blogger.com
- Is www.blogger.com safe?
- No. MalwareAnalyzer scanned www.blogger.com on 24 Aug 2026 and returned a suspicious verdict with a score of 39 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with www.blogger.com?
- 683 analysed samples communicate with this URL.
- How was www.blogger.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.blogger.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan