vvbattambanghotel[.]blogspot[.]com

Analysis indicates that vvbattambanghotel.blogspot.com is an active phishing endpoint hosted on Google’s Blogspot platform, registered through Google LLC. The domain currently resolves to IP address 142.251.14.132, a Google-owned infrastructure node, and lacks configured nameservers, which is atypical for legitimate subdomains on the platform. As of August 1, 2026, the domain has been flagged by 13 of 91 security vendors on VirusTotal, a detection rate consistent with confirmed malicious activity rather than benign false positives. Additionally, the domain appears on two security blocklists, specifically PhishDestroy and OpenPhish, both of which specialize in real-time phishing threat intelligence.

Infrastructure review reveals that the domain operates within Google’s hosting environment, which is frequently abused for phishing due to its free availability and trusted reputation. The absence of nameserver records may suggest an attempt to evade automated detection systems that rely on DNS resolution patterns. While the exact content and target of the phishing campaign have not been fully analyzed, the domain is classified as a generic phishing threat with a high risk level.

Defenders should prioritize blocking access to this endpoint at the network and endpoint levels, particularly in environments where Google services are permitted. Monitoring for additional subdomains under the battambanghotel.blogspot.com structure is recommended, as threat actors often rotate subdomains to sustain phishing operations. No evidence of SSL misuse or HTTP anomalies was provided, but the domain remains active and should be treated as a confirmed malicious resource until further analysis or takedown occurs.