www.blogger.com - suspicious URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned www.blogger.com and returned a suspicious verdict (score 39). The page resolved to 142.250.207.9 on Google LLC in JP. The domain was registered 9922 days ago through MarkMonitor Inc.. 1 domain and 1 IP were contacted. 439 malware samples communicate with this URL. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 39) · Confidence 45%
- Scanned URL:
https://www.blogger.com/static/v1/jsbin/1957234192-lbx__pt_br.js - Domain: www.blogger.com · IP: 142.250.207.9 · AS15169 · JP
- Server: sffe
- HTTP status: 200 · text/javascript
- Registrar: MarkMonitor Inc. · domain age 9922 days · created 1999-06-22
- Scan tier: fast · observed 2026-08-22 01:51:48 UTC
Malware communicating with this URL (439)
These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.
- 187490be06b303d2efbaedce124eab76d5605215cacaa589a60ad3c602b4f3bd - referenced ·
187490be06b303d2efbaedce124eab76· first seen 2026-08-22 - 74cacd07a33d09c576af8b3fd4ee19f30e3319a5d37991ca400ad1854cb98242 - referenced ·
74cacd07a33d09c576af8b3fd4ee19f3· first seen 2026-08-22 - 94344a7ea5b0839462e19af1d2f28ec4b96472cf76d4a202a0c9aab54f0d2299 - referenced ·
94344a7ea5b0839462e19af1d2f28ec4· first seen 2026-08-22 - 3f7445ba08e375cc0bec22acc7529a8166fdd85a864df483167eedfd747d45a9 - referenced ·
3f7445ba08e375cc0bec22acc7529a81· first seen 2026-08-22 - 3f70ac3b4bdb4fd8b75c5e8c6361f6e63360bf2473703e004ed43a450a42ce91 - referenced ·
3f70ac3b4bdb4fd8b75c5e8c6361f6e6· first seen 2026-08-22 - 89c8bc15c6311b711126d8ee1a0cd3012596af0003d9522d16a4079f05b8df66 - referenced ·
89c8bc15c6311b711126d8ee1a0cd301· first seen 2026-08-22 - 7e2969194bd3b46de8098dd2a53dd79cd2d52fa33339a8f0178fcb6b83069721 - referenced ·
7e2969194bd3b46de8098dd2a53dd79c· first seen 2026-08-22 - 3f7bc46ba042e45b6040a19cbd123f8e8994a9885fae7c7b84c5cf767ce0c542 - referenced ·
3f7bc46ba042e45b6040a19cbd123f8e· first seen 2026-08-22 - 3f784118c0a53a7994d2322e3b2bccac5649a7dd5c128809daec401e049e4a85 - referenced ·
3f784118c0a53a7994d2322e3b2bccac· first seen 2026-08-22 - 3f7e70ef30d0f961888eaefda415bd82a2889a5af6a807f457a6a3d3ead67422 - referenced ·
3f7e70ef30d0f961888eaefda415bd82· first seen 2026-08-21 - 106de1f4b44d9f462f522b4426c74464ddb8c447a2131d39f69b1f53cc353a85 - referenced ·
106de1f4b44d9f462f522b4426c74464· first seen 2026-08-21 - 2a6e1e9c48e4912db81f107d8a98c186fb38438763f33e247cc16270a77b0414 - referenced ·
2a6e1e9c48e4912db81f107d8a98c186· first seen 2026-08-21 - ac250d4bf81ef079c00d40b5d0b606e69ae7d3dbd278cc2660eb82bf99298032 - referenced ·
ac250d4bf81ef079c00d40b5d0b606e6· first seen 2026-08-21 - 6513fe79e6adbcc32125f8a238a30d931576023d98b8aa7429e55ac3d5bb5d5e - referenced ·
6513fe79e6adbcc32125f8a238a30d93· first seen 2026-08-21 - d863759f68a4af3c249e1ecd4b1ab7d0b2d8320adf9077a582b06d32948b9d05 - referenced ·
d863759f68a4af3c249e1ecd4b1ab7d0· first seen 2026-08-21
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Grabbed file (1957234192-lbx__pt_br.js) is known suspicious in the corpus
- File download routed to the malware sandbox (1957234192-lbx__pt_br.js)
Contacted infrastructure
- 142.250.207.9 - AS15169 Google LLC (Japan)
Files served by this page
- 1957234192-lbx__pt_br.js ·
3fd4edfa4121016e4536c4c49e1bd813
Observed indicators
- www.blogger.com
- 142.250.207.9
- https://www.blogger.com/static/v1/jsbin/1957234192-lbx__pt_br.js
Other scans of www.blogger.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/2582161586136327681/posts/default - 24 Aug 2026 - unknown ·
http://selintasdunia.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
http://selintasdunia.blogspot.com/2011/02/10-isi-kepala-perempuan-yang-perlu.html - 24 Aug 2026 - unknown ·
http://feeds.feedburner.com/blogspot/kQMcr - 24 Aug 2026 - unknown ·
http://feeds.feedburner.com/blogspot/kQMcr - 24 Aug 2026 - unknown ·
http://feeds.feedburner.com/blogspot/kQMcr - 24 Aug 2026 - unknown ·
http://jotamaria-cearense.blogspot.com/search - 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/4303548154641744104/posts/default - 24 Aug 2026 - unknown ·
http://freecodeshare.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
https://www.blogger.com/static/v1/v-css/368954415-lightbox_bundle.css
Questions about www.blogger.com
- Is www.blogger.com safe?
- No. MalwareAnalyzer scanned www.blogger.com on 22 Aug 2026 and returned a suspicious verdict with a score of 39 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with www.blogger.com?
- 439 analysed samples communicate with this URL.
- How was www.blogger.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.blogger.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan