www.blogger.com - suspicious URL scan, 25 Aug 2026
MalwareAnalyzer by Cyble scanned www.blogger.com and returned a suspicious verdict (score 27). The page resolved to 142.250.183.41 on Google LLC in IN. The domain was registered 9925 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 733 malware samples communicate with this URL. This is a point-in-time observation from 25 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 27) · Confidence 36%
- Scanned URL:
https://www.blogger.com/static/v1/jsbin/3766621756-lbx__pt_br.js - Domain: www.blogger.com · IP: 142.250.183.41 · AS15169 · IN
- Server: sffe
- HTTP status: 200 · text/javascript
- Registrar: MarkMonitor Inc. · domain age 9925 days · created 1999-06-22
- TLS issuer: C=US, O=Google Trust Services, CN=WR2 · valid to Oct 28 20: · subject CN=*.blogger.com
- Scan tier: fast · observed 2026-08-25 01:28:33 UTC
Malware communicating with this URL (733)
These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.
- ffadd5c3987d3a595dd1d53545e61bdb2db073ee387f500326e88e979a917a2c - referenced ·
ffadd5c3987d3a595dd1d53545e61bdb· first seen 2026-08-25 - e330f4197132a112b3abcfd315a28c556c7744977a98fe2e7484c03103508de7 - referenced ·
e330f4197132a112b3abcfd315a28c55· first seen 2026-08-25 - 974344e91e75a09af30013ace55c9a0d2811d66ba4030569f9c95246bc486e65 - referenced ·
974344e91e75a09af30013ace55c9a0d· first seen 2026-08-25 - e2097f31ea73053ac77e2e5088a8a27642dc99b7de6325bd8d487190dc756465 - referenced ·
e2097f31ea73053ac77e2e5088a8a276· first seen 2026-08-25 - 19c9acc5eea4321e92b8275f420c088aa1e42b9b0cb3f0d9ac2233e954439002 - referenced ·
19c9acc5eea4321e92b8275f420c088a· first seen 2026-08-25 - e33fb966bd4bea737232d39d3bae7dc1fbf4e9817014ababbc7f3920f0485c65 - referenced ·
e33fb966bd4bea737232d39d3bae7dc1· first seen 2026-08-25 - 5a7618969e1aa07efe9addf72c5b93768d35455104764c82bd6ec6f6d4aa1513 - referenced ·
5a7618969e1aa07efe9addf72c5b9376· first seen 2026-08-25 - e331ed052353799a30035fd5dd9d7d4f1a135d6e383a3f06b7704f145019e899 - referenced ·
e331ed052353799a30035fd5dd9d7d4f· first seen 2026-08-24 - e339bafb2bc032e859c5a8e38f7ef009e64665e1281448b18c1e098cd6d076af - referenced ·
e339bafb2bc032e859c5a8e38f7ef009· first seen 2026-08-24 - e33eb934e1a2d8c7547e37e3221e4be887662736bbc7216b1e656e7260e9a4c3 - referenced ·
e33eb934e1a2d8c7547e37e3221e4be8· first seen 2026-08-24 - e33899e6e6a30768961e456fff075aaa723b54d5d66821fa3b36982f1f1e89c3 - referenced ·
e33899e6e6a30768961e456fff075aaa· first seen 2026-08-24 - 1ef48454383b4cd82cb14b3ef7191050145729d5a6d251e0571755f072efdf23 - referenced ·
1ef48454383b4cd82cb14b3ef7191050· first seen 2026-08-24 - e33e65244f1decd595657ed55bb1ca0bd06407bc21788700acd899471ae3a049 - referenced ·
e33e65244f1decd595657ed55bb1ca0b· first seen 2026-08-24 - e336ce17fb6e796ba840d04f8d6bb20965d5dd550ad006f7304d44e559e98565 - referenced ·
e336ce17fb6e796ba840d04f8d6bb209· first seen 2026-08-24 - 4d30254096fd6a6e8d8e5102099b1535eee633f51ee8a0974d259d6f652f6428 - referenced ·
4d30254096fd6a6e8d8e5102099b1535· first seen 2026-08-24
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Grabbed file (3766621756-lbx__pt_br.js) is known suspicious in the corpus
- File download routed to the malware sandbox (3766621756-lbx__pt_br.js)
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 142.250.183.41 - AS15169 Google LLC (India)
Files served by this page
- 3766621756-lbx__pt_br.js ·
e5823aed4ddaed520ef63a3ab556cae7
Observed indicators
- www.blogger.com
- 142.250.183.41
- https://www.blogger.com/static/v1/jsbin/3766621756-lbx__pt_br.js
Other scans of www.blogger.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 25 Aug 2026 - unknown ·
http://jotamaria-aquirn.blogspot.com/search - 25 Aug 2026 - unknown ·
http://jotamaria-aquirn.blogspot.com/ - 25 Aug 2026 - unknown ·
http://jotamaria-aquirn.blogspot.com/2018/07/parque-beira-mar.html - 25 Aug 2026 - unknown ·
https://www.blogger.com/static/v1/jsbin/437863797-lbx__pt_br.js - 25 Aug 2026 - unknown ·
http://jotamaria-asfarnpraiana.blogspot.com/search - 25 Aug 2026 - unknown ·
http://jotamaria-asfarnpraiana.blogspot.com/ - 25 Aug 2026 - unknown ·
https://www.blogger.com/static/v1/jsbin/3342979976-lbx__nl.js - 25 Aug 2026 - unknown ·
http://josevanoers.blogspot.com/search - 25 Aug 2026 - unknown ·
http://josevanoers.blogspot.com/search/label/Interlace - 25 Aug 2026 - unknown ·
http://josie-scraps.blogspot.com/
Questions about www.blogger.com
- Is www.blogger.com safe?
- No. MalwareAnalyzer scanned www.blogger.com on 25 Aug 2026 and returned a suspicious verdict with a score of 27 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with www.blogger.com?
- 733 analysed samples communicate with this URL.
- How was www.blogger.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.blogger.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan