raibbywalllet[.]blogspot[.]com

The domain raibbywalllet.blogspot.com is flagged as a high‑risk generic phishing site as of 22 July 2026. Registration data shows the domain was created through Google LLC, indicating it resides within Google’s blog‑hosting ecosystem. DNS resolution returns a single A‑record pointing to 142.251.20.132, an IP address owned by Google’s global infrastructure, which is consistent with the registrar’s hosting environment. VirusTotal analysis reports that two of ninety‑five scanned security vendors have flagged the domain, providing modest but concrete detection evidence.

Additionally, the domain appears on one external security blocklist and is actively blocked by the PhishDestroy service, reinforcing the perception of malicious activity. Nameserver information is unavailable (NS_NOT_FOUND), and no public SSL certificate details, HTTP status codes, or Safe Browsing verdicts have been disclosed. Consequently, page‑level attributes such as title, content, or brand targeting remain unverified.

The combination of registrar affiliation, Google‑owned IP, vendor detections, and blocklist presence suggests a deliberate use of a trusted hosting platform to increase credibility for phishing attempts. Defenders should add the domain to outbound and inbound filtering policies, monitor DNS queries for the IP 142.251.20.132 for additional suspicious activity, and consider sharing the indicator with threat‑intel feeds to improve collective detection. Ongoing verification of the site’s content and SSL posture is recommended to confirm the current threat actor’s tactics and to adjust mitigation measures as new evidence emerges.