infohadiah354[.]blogspot[.]com

The domain infohadiah354.blogspot.com is currently active and has been classified as a high‑risk generic phishing infrastructure. Registration information shows that the site was created through the Google Blogger platform, indicating that the attacker leveraged a free hosting service to obscure ownership details. DNS resolution points to the IP address 142.251.13.132, an address owned by Google, which is consistent with Blogger‑hosted content. Nameserver data could not be retrieved (NS_NOT_FOUND), limiting the ability to trace upstream DNS infrastructure.

VirusTotal analysis reports that 15 out of 91 security vendors flag the domain as malicious, providing independent confirmation of its suspicious nature. The domain appears on one external security blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing the consensus that it is being used for malicious purposes. Google Safe Browsing categorises the site under "social engineering," which aligns with the generic phishing designation. No public page title, brand target, or kit information has been disclosed, so the exact visual or functional characteristics of the site remain unknown.

Defenders should add the domain to URL filtering and web‑proxy block lists, monitor DNS queries for the associated IP, and consider employing threat‑intelligence feeds that include PhishDestroy and Google Safe Browsing to ensure rapid detection. Continuous re‑scanning with VirusTotal or similar multi‑engine services is advised, as additional vendor detections may emerge. Given the high‑risk rating and active status, immediate mitigation is recommended to prevent credential harvesting or other social‑engineering attacks.