www.blogger.com - suspicious URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned www.blogger.com and returned a suspicious verdict (score 27). The page resolved to 142.250.195.169 on Google LLC in IN. The domain was registered 9923 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 508 malware samples communicate with this URL (Autolike). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 27) · Confidence 36%
- Scanned URL:
https://www.blogger.com/static/v1/jsbin/1957234192-lbx__pt_br.js - Domain: www.blogger.com · IP: 142.250.195.169 · AS15169 · IN
- Server: sffe
- HTTP status: 200 · text/javascript
- Registrar: MarkMonitor Inc. · domain age 9923 days · created 1999-06-22
- TLS issuer: C=US, O=Google Trust Services, CN=WR2 · valid to Oct 28 20: · subject CN=*.blogger.com
- Scan tier: fast · observed 2026-08-22 19:48:11 UTC
Malware communicating with this URL (508)
These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.
- 57e4dfd4f713c66c90080f2f371b9aed9f8cfb44ed3315808e1bb56a19283f3c - referenced ·
57e4dfd4f713c66c90080f2f371b9aed· first seen 2026-08-22 - 225268fb12149f9e6c66f31d96c8be2e83b3e70004d62726632f1576e08fc091 - referenced ·
225268fb12149f9e6c66f31d96c8be2e· first seen 2026-08-22 - 2251e4b83d20deac67cdc8505e5f5f4855536f65acb543e9f6c9cb58d858ed07 - referenced ·
2251e4b83d20deac67cdc8505e5f5f48· first seen 2026-08-22 - 225ab9f52b2bdb2f8a1ddde4cb2cbcf42718b8440bdbaeef0b13462bf1a18957 - referenced ·
225ab9f52b2bdb2f8a1ddde4cb2cbcf4· first seen 2026-08-22 - 225ca7375117c92811e1ecd78b55a07e56b8f49f6ee79a047c54f299c93b5776 - referenced ·
225ca7375117c92811e1ecd78b55a07e· first seen 2026-08-22 - 22533fe18cdbcc17e46e537ebfccf244a68188248360695ffad66fec75b0761f - referenced ·
22533fe18cdbcc17e46e537ebfccf244· first seen 2026-08-22 - c0febc254fa7aa3480ffe9f56bdf41052b2f2671dd9bb80a68bbc344b7e45979 - referenced ·
c0febc254fa7aa3480ffe9f56bdf4105· first seen 2026-08-22 - 2251e1a50e4f3c88754bf4764f834b4ccecc039925fa1f2710c89e7e15114874 - referenced ·
2251e1a50e4f3c88754bf4764f834b4c· first seen 2026-08-22 - 2258e21e7b543c73d03d2770aeeef6188e11767859cb6a6ed09f2d9d894dcfbf - referenced ·
2258e21e7b543c73d03d2770aeeef618· first seen 2026-08-22 - Autolike - referenced ·
2250e7f4cbfd97e6705f188b41dc8cdc· first seen 2026-08-22 - 42e8847a284ba4fb05a54cf647328c8afeebd14fbb8bf932492a9b55b905c15c - referenced ·
42e8847a284ba4fb05a54cf647328c8a· first seen 2026-08-22 - 225aa81fcd6cc71c3e4c6523fe57ad963fabc0d7c9660a97abebcecf622d17e1 - referenced ·
225aa81fcd6cc71c3e4c6523fe57ad96· first seen 2026-08-22 - 22598a5e1c1d90013a94117c2e0cdb8ae5692579834fffbdf0b521887d7b0a0f - referenced ·
22598a5e1c1d90013a94117c2e0cdb8a· first seen 2026-08-22 - 738a1c63381792710c9c2645e015115e491100a5791c482eac83056e46c1dd68 - referenced ·
738a1c63381792710c9c2645e015115e· first seen 2026-08-22 - 22512d26d7f9ab034eb323ce95af9203d845c7da6236b06bf082e93edb702f8c - referenced ·
22512d26d7f9ab034eb323ce95af9203· first seen 2026-08-22
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Grabbed file (1957234192-lbx__pt_br.js) is known suspicious in the corpus
- File download routed to the malware sandbox (1957234192-lbx__pt_br.js)
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 142.250.195.169 - AS15169 Google LLC (India)
Files served by this page
- 1957234192-lbx__pt_br.js ·
3fd4edfa4121016e4536c4c49e1bd813
Observed indicators
- www.blogger.com
- 142.250.195.169
- https://www.blogger.com/static/v1/jsbin/1957234192-lbx__pt_br.js
Other scans of www.blogger.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/2582161586136327681/posts/default - 24 Aug 2026 - unknown ·
http://selintasdunia.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
http://selintasdunia.blogspot.com/2011/02/10-isi-kepala-perempuan-yang-perlu.html - 24 Aug 2026 - unknown ·
http://feeds.feedburner.com/blogspot/kQMcr - 24 Aug 2026 - unknown ·
http://feeds.feedburner.com/blogspot/kQMcr - 24 Aug 2026 - unknown ·
http://feeds.feedburner.com/blogspot/kQMcr - 24 Aug 2026 - unknown ·
http://jotamaria-cearense.blogspot.com/search - 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/4303548154641744104/posts/default - 24 Aug 2026 - unknown ·
http://freecodeshare.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
https://www.blogger.com/static/v1/v-css/368954415-lightbox_bundle.css
Questions about www.blogger.com
- Is www.blogger.com safe?
- No. MalwareAnalyzer scanned www.blogger.com on 22 Aug 2026 and returned a suspicious verdict with a score of 27 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with www.blogger.com?
- 508 analysed samples communicate with this URL, including Autolike.
- How was www.blogger.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.blogger.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan