doprblxdop[.]blogspot[.]com

Analysis of the domain doprblxdop.blogspot.com indicates that it is actively being used for phishing attacks. The domain resolves to the IP address 142.250.203.129, which is hosted by Google LLC, the same registrar listed in the registration records. No nameserver information is available, as the record shows NS_NOT_FOUND. The site has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, confirming that external threat‑intel feeds consider the domain malicious.

VirusTotal reports that the domain was scanned by 91 antivirus and URL‑reputation vendors; none of the vendors have raised a detection at the time of the scan, but the absence of detections does not constitute evidence of safety. No public SSL certificate details, HTTP status codes, or Safe Browsing verdicts are provided in the current intelligence set, and the page title has not been captured, leaving the visual content of the site unverified. Defenders should treat the domain as hostile and incorporate it into web‑filtering, DNS‑sinkhole, and intrusion‑prevention rules.

Network traffic destined for 142.250.203.129 should be monitored for anomalous patterns, and any authentication attempts that route through this host should be blocked or flagged for further investigation. Because the domain is registered through Google LLC, standard corporate policies that restrict access to high‑risk Google‑hosted subdomains may help mitigate exposure. Continuous re‑evaluation is advised, as future scans or blocklist updates could provide additional context about the threat actor’s tactics, techniques, and procedures.