info-resmi-24[.]blogspot[.]com

The domain info-resmi-24.blogspot.com, registered through Google LLC, is currently active and classified as a high‑risk generic phishing site. Infrastructure analysis shows the domain resolves to the IP address 142.251.20.132, which is associated with Google’s hosting infrastructure. Public blocklist monitoring indicates the domain appears on two security blocklists and is actively blocked by PhishDestroy and OpenPhish, confirming its malicious intent.

VirusTotal scans have returned 15 positive detections out of 91 security vendors, reinforcing the presence of phishing‑related payloads or indicators. The registrar’s name server information is unavailable (NS_NOT_FOUND), limiting deeper DNS chain analysis. No additional details such as SSL certificate data, HTTP response codes, or page title have been disclosed, leaving the visual or content characteristics of the hosted page unverified.

Defenders should prioritize immediate blocking of the domain at network perimeters and update endpoint protection rules to reflect the 15 VirusTotal detections. Continuous monitoring of the associated IP address and any future changes to its DNS records is advised, as the hosting environment may be leveraged for further malicious campaigns. Organizations should also consider alerting users about potential phishing attempts originating from this domain, especially if they receive unsolicited communications referencing the URL.