www.blogger.com - suspicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned www.blogger.com and returned a suspicious verdict (score 39). The page resolved to 142.250.195.137 on Google LLC in IN. The domain was registered 9922 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 438 malware samples communicate with this URL. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

• Verdict: suspicious (score 39) · Confidence 45%
• Scanned URL: https://www.blogger.com/static/v1/jsbin/129205357-lbx__pt_br.js
• Domain: www.blogger.com · IP: 142.250.195.137 · AS15169 · IN
• Server: sffe
• HTTP status: 200 · text/javascript
• Registrar: MarkMonitor Inc. · domain age 9922 days · created 1999-06-22
• Scan tier: fast · observed 2026-08-22 01:37:57 UTC

Malware communicating with this URL (438)

These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.

• 74cacd07a33d09c576af8b3fd4ee19f30e3319a5d37991ca400ad1854cb98242 - referenced · 74cacd07a33d09c576af8b3fd4ee19f3 · first seen 2026-08-22
• 94344a7ea5b0839462e19af1d2f28ec4b96472cf76d4a202a0c9aab54f0d2299 - referenced · 94344a7ea5b0839462e19af1d2f28ec4 · first seen 2026-08-22
• 3f7445ba08e375cc0bec22acc7529a8166fdd85a864df483167eedfd747d45a9 - referenced · 3f7445ba08e375cc0bec22acc7529a81 · first seen 2026-08-22
• 3f70ac3b4bdb4fd8b75c5e8c6361f6e63360bf2473703e004ed43a450a42ce91 - referenced · 3f70ac3b4bdb4fd8b75c5e8c6361f6e6 · first seen 2026-08-22
• 89c8bc15c6311b711126d8ee1a0cd3012596af0003d9522d16a4079f05b8df66 - referenced · 89c8bc15c6311b711126d8ee1a0cd301 · first seen 2026-08-22
• 7e2969194bd3b46de8098dd2a53dd79cd2d52fa33339a8f0178fcb6b83069721 - referenced · 7e2969194bd3b46de8098dd2a53dd79c · first seen 2026-08-22
• 3f7bc46ba042e45b6040a19cbd123f8e8994a9885fae7c7b84c5cf767ce0c542 - referenced · 3f7bc46ba042e45b6040a19cbd123f8e · first seen 2026-08-22
• 3f784118c0a53a7994d2322e3b2bccac5649a7dd5c128809daec401e049e4a85 - referenced · 3f784118c0a53a7994d2322e3b2bccac · first seen 2026-08-22
• 3f7e70ef30d0f961888eaefda415bd82a2889a5af6a807f457a6a3d3ead67422 - referenced · 3f7e70ef30d0f961888eaefda415bd82 · first seen 2026-08-21
• 106de1f4b44d9f462f522b4426c74464ddb8c447a2131d39f69b1f53cc353a85 - referenced · 106de1f4b44d9f462f522b4426c74464 · first seen 2026-08-21
• 2a6e1e9c48e4912db81f107d8a98c186fb38438763f33e247cc16270a77b0414 - referenced · 2a6e1e9c48e4912db81f107d8a98c186 · first seen 2026-08-21
• ac250d4bf81ef079c00d40b5d0b606e69ae7d3dbd278cc2660eb82bf99298032 - referenced · ac250d4bf81ef079c00d40b5d0b606e6 · first seen 2026-08-21
• 6513fe79e6adbcc32125f8a238a30d931576023d98b8aa7429e55ac3d5bb5d5e - referenced · 6513fe79e6adbcc32125f8a238a30d93 · first seen 2026-08-21
• d863759f68a4af3c249e1ecd4b1ab7d0b2d8320adf9077a582b06d32948b9d05 - referenced · d863759f68a4af3c249e1ecd4b1ab7d0 · first seen 2026-08-21
• 961470b17d477918718421e21846958b4ecc480bb9e2ca71850b74ec1254470c - referenced · 961470b17d477918718421e21846958b · first seen 2026-08-21

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

• Grabbed file (129205357-lbx__pt_br.js) is known suspicious in the corpus
• File download routed to the malware sandbox (129205357-lbx__pt_br.js)

Contacted infrastructure

• 142.250.195.137 - AS15169 Google LLC (India)

Files served by this page

• 129205357-lbx__pt_br.js · 7957d117a68d99b69544472996d943f9

Observed indicators

• www.blogger.com
• 142.250.195.137
• https://www.blogger.com/static/v1/jsbin/129205357-lbx__pt_br.js

Other scans of www.blogger.com (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

• 24 Aug 2026 - unknown · http://health-healng.blogspot.com/feeds/posts/default
• 24 Aug 2026 - unknown · http://health-healng.blogspot.com/2014/09/blog-post_178.html
• 24 Aug 2026 - unknown · http://www.blogger.com/openid-server.g
• 24 Aug 2026 - unknown · https://www.blogger.com/static/v1/widgets/2326567743-css_bundle_v2_rtl.css
• 24 Aug 2026 - unknown · https://www.blogger.com/feeds/499748205289863852/posts/default
• 24 Aug 2026 - unknown · http://youssef-tawil.blogspot.com/feeds/posts/default
• 24 Aug 2026 - malicious · http://youssef-tawil.blogspot.com/2014/02/gta-v-xbox-360-16.html
• 24 Aug 2026 - unknown · https://www.blogger.com/static/v1/widgets/3836660484-widget_css_bundle_rtl.css
• 24 Aug 2026 - unknown · http://jotamaria-centraloeste.blogspot.com/2013/08/
• 24 Aug 2026 - unknown · https://www.blogger.com/feeds/3738958643329850614/posts/default

Questions about www.blogger.com

Is www.blogger.com safe?

No. MalwareAnalyzer scanned www.blogger.com on 22 Aug 2026 and returned a suspicious verdict with a score of 39 out of 100. Treat it as hostile until it is re-checked.

What malware is associated with www.blogger.com?

438 analysed samples communicate with this URL.

How was www.blogger.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.blogger.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan