www.blogger.com - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned www.blogger.com and returned a unknown verdict (score 0). The page resolved to 172.217.25.169 on Google LLC in JP. The domain was registered 9924 days ago through MarkMonitor Inc.. 4 domains and 1 IP were contacted. 615 malware samples communicate with this URL (CobaltStrike, Autolike). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 0%
- Scanned URL:
https://www.blogger.com/feeds/23771015/posts/default - Domain: www.blogger.com · IP: 172.217.25.169 · AS15169 · JP
- Server: blogger-renderd
- Page title: نگاه توفیق
- HTTP status: 200 · application/atom+xml; charset=UTF-8
- Registrar: MarkMonitor Inc. · domain age 9924 days · created 1999-06-22
- Scan tier: fast · observed 2026-08-23 22:37:23 UTC
Malware communicating with this URL (615)
These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.
- CobaltStrike - referenced ·
cee4721630424c4f9908978c031e7e6e· first seen 2026-08-23 - fe9ec242c8e1d01a9b0e63da9b01c8c9044a88e50b5727c1aa556e3aa7f97242 - referenced ·
fe9ec242c8e1d01a9b0e63da9b01c8c9· first seen 2026-08-23 - 601e3259b5a9dfd758de37acc84923689505917ba85c65e292f2a5875fd87c48 - referenced ·
601e3259b5a9dfd758de37acc8492368· first seen 2026-08-23 - fe94594d23dd8bd28a93ffc9c014cd9b64a1e2f4e2eb697ebfe0c72223a5d1c8 - referenced ·
fe94594d23dd8bd28a93ffc9c014cd9b· first seen 2026-08-23 - Autolike - referenced ·
fe9b1725cf2e9ca1a754892b131f9a4d· first seen 2026-08-23 - fe9676bcd9ba191c04c845ea4809999e426eca46bd361a1bf086dd7661bad512 - referenced ·
fe9676bcd9ba191c04c845ea4809999e· first seen 2026-08-23 - fe98f92d23ef756eca079765de5bc2b66625b020d9e0cdcf993d62c063efa917 - referenced ·
fe98f92d23ef756eca079765de5bc2b6· first seen 2026-08-23 - fe9797cb40538c075b0059c1f5a690b9c678cd6466d5beb8e4f6a665c4271f3d - referenced ·
fe9797cb40538c075b0059c1f5a690b9· first seen 2026-08-23 - ecda843853b37ec8feafc9f1d226d3401383ce9bf0960b3ccf9a7e52c106c238 - referenced ·
ecda843853b37ec8feafc9f1d226d340· first seen 2026-08-23 - d071f8385ea48be86c63d061fd7ecdb3da146f95b77f3ab3e50e28e3ea912b1d - referenced ·
d071f8385ea48be86c63d061fd7ecdb3· first seen 2026-08-23 - fe94b25e630257483fe43121b14418badee44a44205e93a5db6e45023841444e - referenced ·
fe94b25e630257483fe43121b14418ba· first seen 2026-08-23 - 4bf8253dcefbb1684389ea961a0f9c7ef280f9c916f16137b1002489a7e40ddf - referenced ·
4bf8253dcefbb1684389ea961a0f9c7e· first seen 2026-08-23 - fe9709bfa4b32e1aaee1beb125b284371aef704dc2bfe2478e902800eb5b4978 - referenced ·
fe9709bfa4b32e1aaee1beb125b28437· first seen 2026-08-23 - fe9d8f0f3c5797d6af84b5fc48c422505f71ba1531e5023a2e0a41070d6e7103 - referenced ·
fe9d8f0f3c5797d6af84b5fc48c42250· first seen 2026-08-23 - e4b91a51c79f466640d93cbce4613df07ca7a44c5c64a627caa7a1951b9a1c28 - referenced ·
e4b91a51c79f466640d93cbce4613df0· first seen 2026-08-23
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Contacted infrastructure
- 172.217.25.169 - AS15169 Google LLC (Japan)
Observed indicators
- www.blogger.com
- negahtofigh.blogspot.com
- pubsubhubbub.appspot.com
- www.iranianartistsinexile.org
- 172.217.25.169
- https://www.blogger.com/feeds/23771015/posts/default
- http://www.blogger.com/styles/atom.css
- https://negahtofigh.blogspot.com/feeds/posts/default
- https://negahtofigh.blogspot.com/
- http://pubsubhubbub.appspot.com/
- https://www.blogger.com/feeds/23771015/posts/default?start-index=26&max-results=25
- http://www.iranianartistsinexile.org/images/stories/t1.jpg
- https://negahtofigh.blogspot.com/feeds/8984807374017977992/comments/default
- https://negahtofigh.blogspot.com/2015/03/blog-post.html#comment-form
- https://www.blogger.com/feeds/23771015/posts/default/8984807374017977992
- https://negahtofigh.blogspot.com/2015/03/blog-post.html
- https://negahtofigh.blogspot.com/feeds/4114195287046318325/comments/default
- https://negahtofigh.blogspot.com/2015/01/blog-post_15.html#comment-form
- https://www.blogger.com/feeds/23771015/posts/default/4114195287046318325
- https://negahtofigh.blogspot.com/2015/01/blog-post_15.html
Other scans of www.blogger.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/4303548154641744104/posts/default - 24 Aug 2026 - unknown ·
http://freecodeshare.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
https://www.blogger.com/static/v1/v-css/368954415-lightbox_bundle.css - 24 Aug 2026 - suspicious ·
https://www.blogger.com/static/v1/jsbin/945919205-lbx__pt_br.js - 24 Aug 2026 - unknown ·
http://jotamaria-ccdejoaocamara.blogspot.com/search - 24 Aug 2026 - unknown ·
http://jotajunior-servicosrn.blogspot.com/search - 24 Aug 2026 - unknown ·
http://jotajunior-servicosrn.blogspot.com/ - 24 Aug 2026 - unknown ·
https://atun27dvd.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
https://www.blogger.com/static/v1/widgets/3822632116-css_bundle_v2.css - 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/6595682936165641126/posts/default
Questions about www.blogger.com
- Is www.blogger.com safe?
- The scan of www.blogger.com on 23 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.blogger.com?
- 615 analysed samples communicate with this URL, including CobaltStrike, Autolike.
- How was www.blogger.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.blogger.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan