www.blogger.com - suspicious URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned www.blogger.com and returned a suspicious verdict (score 27). The page resolved to 142.250.195.137 on Google LLC in IN. The domain was registered 9920 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 243 malware samples communicate with this URL (Coinminer). This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 27) · Confidence 36%
- Scanned URL:
https://www.blogger.com/static/v1/jsbin/3903731066-lbx__pt_br.js - Domain: www.blogger.com · IP: 142.250.195.137 · AS15169 · IN
- Server: sffe
- HTTP status: 200 · text/javascript
- Registrar: MarkMonitor Inc. · domain age 9920 days · created 1999-06-22
- TLS issuer: C=US, O=Google Trust Services, CN=WR2 · valid to Oct 28 20: · subject CN=*.blogger.com
- Scan tier: fast · observed 2026-08-20 00:58:22 UTC
Malware communicating with this URL (243)
These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.
- 34256a011fb695e1c82e53c8caeef83dbb9158cec74c960b64e039243478d59b - referenced ·
34256a011fb695e1c82e53c8caeef83d· first seen 2026-08-20 - Coinminer - referenced ·
990d7200b73f6bb5b8d0dfc0d3b3553c· first seen 2026-08-20 - e95a95816552bbc2fadcd47e4b12556084785a78f0ce507ea814de0edf924917 - referenced ·
e95a95816552bbc2fadcd47e4b125560· first seen 2026-08-20 - 99009da333d26a0ef953bc52b9e7b75ab032c420b49443c1bd9100b7d9b19861 - referenced ·
99009da333d26a0ef953bc52b9e7b75a· first seen 2026-08-19 - 990031d55ca060c89ed7d33833d955529963c00fd57665788cbf1a6665b23209 - referenced ·
990031d55ca060c89ed7d33833d95552· first seen 2026-08-19 - 990e8f45756e791de727a869962ab2b332f9924eff1faedd36d46382c25c2bb4 - referenced ·
990e8f45756e791de727a869962ab2b3· first seen 2026-08-19 - 990ff0daab21470e66ad0c7227c3c507ee70692995aba5a26ca440d52e79a7bf - referenced ·
990ff0daab21470e66ad0c7227c3c507· first seen 2026-08-19 - 9c6fa584165193422ad9836f679d4a03b8f16ba0c2a373e310302e35e639b772 - referenced ·
9c6fa584165193422ad9836f679d4a03· first seen 2026-08-19 - 4235e231232c0707fc91c26792765a7e74749af5ddc0bb7e1ee18ef552bcf525 - referenced ·
4235e231232c0707fc91c26792765a7e· first seen 2026-08-19 - 99013baaebb5e65c025171a1a7781d4a0da5b0b803aaaa8fe3afdaa8e68a72e3 - referenced ·
99013baaebb5e65c025171a1a7781d4a· first seen 2026-08-19 - 1b1763d494eaee6600fb1f5d3e0648886c97cfc6fd1db02acee45fea0b8317aa - referenced ·
1b1763d494eaee6600fb1f5d3e064888· first seen 2026-08-19 - 4671b296be3a5fb8970fb42bfaf903f5436d54a528eebd11b995c977be0d3875 - referenced ·
4671b296be3a5fb8970fb42bfaf903f5· first seen 2026-08-19 - 68929b9a212bfcbf4b2c7b17b031ffc6d26e7ce60183ba8ac61c32a6f228b891 - referenced ·
68929b9a212bfcbf4b2c7b17b031ffc6· first seen 2026-08-19 - 772295d39d684458ce90b0404d4944bf0f4e0be70b0c9e311ccc19b83ca97d23 - referenced ·
772295d39d684458ce90b0404d4944bf· first seen 2026-08-19 - c438bfcb75687b2ac901f5623476242c8e3370b2dcb48858c4f62d876eadd358 - referenced ·
c438bfcb75687b2ac901f5623476242c· first seen 2026-08-19
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Grabbed file (3903731066-lbx__pt_br.js) is known suspicious in the corpus
- File download routed to the malware sandbox (3903731066-lbx__pt_br.js)
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 142.250.195.137 - AS15169 Google LLC (India)
Files served by this page
- 3903731066-lbx__pt_br.js ·
f7e2bc3ee0d4f9ae4d1267999a73f2e2
Observed indicators
- www.blogger.com
- 142.250.195.137
- https://www.blogger.com/static/v1/jsbin/3903731066-lbx__pt_br.js
Other scans of www.blogger.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/2582161586136327681/posts/default - 24 Aug 2026 - unknown ·
http://selintasdunia.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
http://selintasdunia.blogspot.com/2011/02/10-isi-kepala-perempuan-yang-perlu.html - 24 Aug 2026 - unknown ·
http://feeds.feedburner.com/blogspot/kQMcr - 24 Aug 2026 - unknown ·
http://feeds.feedburner.com/blogspot/kQMcr - 24 Aug 2026 - unknown ·
http://feeds.feedburner.com/blogspot/kQMcr - 24 Aug 2026 - unknown ·
http://jotamaria-cearense.blogspot.com/search - 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/4303548154641744104/posts/default - 24 Aug 2026 - unknown ·
http://freecodeshare.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
https://www.blogger.com/static/v1/v-css/368954415-lightbox_bundle.css
Questions about www.blogger.com
- Is www.blogger.com safe?
- No. MalwareAnalyzer scanned www.blogger.com on 20 Aug 2026 and returned a suspicious verdict with a score of 27 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with www.blogger.com?
- 243 analysed samples communicate with this URL, including Coinminer.
- How was www.blogger.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.blogger.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan