# rpggamesfun.blogspot.com — SUSPICIOUS

> rpggamesfun.blogspot.com exposed as a fake gaming portal phishing site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies rpggamesfun.blogspot.com as an active fake gaming portal phishing domain designed to harvest user credentials under the guise of RPG game promotions. The site mimics legitimate gaming blogs, luring visitors to input login details into fraudulent forms that exfiltrate data to attacker-controlled servers. Technical analysis reveals the domain resolves to Google’s IP range (142.251.20.132) via a Google Trust Services SSL certificate, a tactic often used to bypass basic security checks that rely on domain reputation rather than content inspection. The absence of VirusTotal detections (0/95) indicates this campaign has evaded automated scanning, emphasizing the need for behavioral and content-based detection methods.  This domain was flagged during routine monitoring with the following characteristics: VirusTotal detection ratio of 0/95 engines as of the latest scan, hosted by Google (AS15169), and currently unlisted on major blocklists such as OpenPhish, PhishTank, and URLVoid. The domain utilizes the Blogger platform (blogspot.com), which is frequently abused for phishing due to its subdomain flexibility and low barrier to deployment. While the SSL certificate is valid, it does not correlate with legitimate gaming portals, raising further suspicion about the site’s authenticity. The risk level remains classified as under_investigation due to the absence of historical data, but the combination of low detection rates and deceptive content patterns warrants immediate caution.  Users who visited rpggamesfun.blogspot.com should assume potential exposure of credentials or personal information entered into any forms on the site. Immediately change passwords used on the domain and enable multi-factor authentication (MFA) on all accounts, particularly gaming platforms, email services, or financial portals. Scan devices for malware using reputable antivirus tools and monitor accounts for unusual activity such as unauthorized logins or transactions. Report the domain to your organization’s security team or to PhishDestroy’s threat intelligence platform using the unique seed identifier 43cfcc for further analysis. Avoid revisiting the site, as it may host additional malicious payloads or persistent tracking mechanisms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 142.251.20.132

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bda05d52-8f41-44cd-ae63-4b2499890ddb
- PhishDestroy: https://phishdestroy.io/domain/rpggamesfun.blogspot.com/
- LLM endpoint: https://phishdestroy.io/domain/rpggamesfun.blogspot.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rpggamesfun.blogspot.com/
Last updated: 2026-03-31