uksporty[.]blogspot[.]com

Analysis of uksporty.blogspot.com shows that the domain is currently offline, returning an HTTP 404 status code. The site resolves to IP address 142.251.111.132, which belongs to AS15169 owned by Google LLC and is geolocated in the United States. Registration data indicates the domain was created on July 31, 2000 and is managed through MarkMonitor, Inc., a registrar commonly associated with high‑profile brand protection. The SSL certificate presented is issued by Google Trust Services under the WE2 designation, confirming that the TLS layer is provided by Google’s own certificate authority. Technical fingerprinting reveals the use of Blogger as the content platform, with server‑side components identified as Java, Python, and OpenGSE, and the connection is negotiated over HTTP/3. The page title reported by the scanner is "UK sporty," but no substantive page content could be captured due to the 404 response, leaving the exact phishing payload or credential‑stealing mechanisms unverified.

Threat intelligence sources have added the domain to two independent blocklists, specifically PhishDestroy and ScamSniffer, and it appears on two broader security blocklists. VirusTotal analysis shows that two out of ninety‑five scanning engines flagged the domain, indicating a low but non‑zero detection consensus. No additional public indicators such as malware hashes, command‑and‑control endpoints, or phishing email samples are currently linked to the domain.

Given the hosting on Google infrastructure, the domain benefits from legitimate‑looking TLS and reputable DNS servers (ns1‑ns4.google.com). This combination can increase user trust if the site is re‑activated. Defenders should continue to block the IP address 142.251.111.132 and the fully qualified domain name at perimeter and proxy layers, monitor DNS queries for any sudden resolution changes, and add the domain to internal threat‑intel feeds.