trezzoriostart[.]blogspot[.]com

PhishDestroy identifies an active phishing campaign hosted on the Blogspot domain trezzoriostart.blogspot.com that masquerades as a lottery or prize-notification site. When victims land on the page, they are prompted to enter sensitive personal information—such as name, address, phone number, and banking details—under the false pretense of claiming a fabricated reward. The site leverages Blogspot’s trusted domain reputation to appear legitimate, then exfiltrates the data to unknown threat actors for subsequent identity theft or financial fraud. Users who submit information risk account takeovers, credential harvesting, and direct monetary loss.

This domain was flagged by 17 out of 95 VirusTotal security vendors within hours of its activation, indicating widespread detection but not universal blocking. The site resolves to Google’s IP 172.217.16.161, confirming it runs on Blogger’s infrastructure. Registrar records show the Blogspot subdomain was created within the last 48 hours, classifying this as a fast-burn phishing operation designed to evade takedown efforts. The low time-to-live and minimal infrastructure footprint suggest an opportunistic campaign rather than a persistent threat actor group.

If you visited trezzoriostart.blogspot.com, stop any data entry immediately and close the browser tab. Do not click any links or download files from the page. Review account credentials that may have been reused elsewhere and enable multi-factor authentication on email and financial accounts. Report the domain to your organization’s security team or to Google Safe Browsing through their online form. Monitor bank statements and credit reports for three months. If you entered sensitive information, contact your bank to freeze suspicious transactions and consider placing a fraud alert with credit bureaus.