click-hostopoint-ch-redirect5824312[.]blogspot[.]com

Analysis indicates that the domain click-hostopoint-ch-redirect5824312.blogspot.com is actively serving phishing content targeting users of HostPoint, a Swiss web hosting provider. The domain is registered through Google Blogger and currently resolves to the IP address 192.178.218.132, hosted on infrastructure belonging to Google LLC (AS15169) in Germany. The page title, 'office.hostpoint.ch,' directly references HostPoint’s legitimate webmail or administrative portal, suggesting an intent to deceive users into entering credentials or other sensitive information. Infrastructure review reveals the domain is flagged by 15 of 91 security vendors, with a Gridinsoft trust score of 0/100, and is listed on at least one security blocklist. The site remains accessible, returning an HTTP 200 status, indicating active hosting of malicious content. No nameservers are currently associated with the domain, which may reflect transient or obfuscated DNS configuration typical of short-lived phishing campaigns. While the exact content of the page has not been manually analyzed, the combination of the page title, domain naming pattern, and detection by multiple security engines strongly supports classification as a credential phishing site. Defenders are advised to block the domain at the DNS or network layer and monitor for related subdomains or redirects using similar naming conventions. The use of a free blogging platform for hosting further complicates takedown efforts, as such services often require manual abuse reporting and may delay enforcement actions.