vcnb23k24[.]blogspot[.]com

On July 22, 2026, analysis identified the subdomain vcnb23k24.blogspot.com as an active credential‑harvesting site. The domain is registered through Google LLC, indicating it resides on the Blogger platform, and it resolves to the IPv4 address 192.178.183.132. No authoritative name‑server records were returned, and the domain does not publish a custom SSL certificate; its HTTPS status is therefore inherited from the Blogger service.

Threat intelligence from PhishDestroy has already listed the domain on its blocklist, and it appears on one additional security blocklist, confirming that at least two independent sources have flagged the host as malicious. Apart from the blocklist entries, no public page title, HTTP response code, or Safe Browsing verdict is available, and no malware analysis platforms have reported on the site. The absence of detailed content data means the exact phishing lure (e.g., login clone, survey, or other credential‑capture vector) cannot be confirmed at this time.

Defenders should continue to block DNS resolution for vcnb23k24.blogspot.com at network perimeters and ensure that endpoint URL filtering solutions reference the current blocklist entries. Monitoring of the underlying IP address and any future changes to the subdomain’s hosting configuration is advised, as the Blogger infrastructure can be repurposed rapidly. Organizations should educate users about the risk of unsolicited links to blogspot.com subdomains, especially those that are not part of known corporate communications, and encourage reporting of suspicious URLs to security teams for prompt investigation.