freegrowagarden[.]blogspot[.]com

The domain freegrowagarden.blogspot.com is currently active and has been identified as a generic phishing infrastructure targeting credential collection. Registration data shows the domain was created through Google LLC, indicating it resides on the Blogger platform and inherits Google’s hosting infrastructure. DNS resolution points to IP address 142.251.13.132, an address owned by Google, confirming the hosting relationship.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, demonstrating that at least one threat‑intel feed has flagged it as malicious. VirusTotal records indicate the URL was examined by 95 scanning engines, none of which reported a detection; however, the lack of detections is not evidence of safety and may reflect evasion techniques or limited visibility. Nameserver information is unavailable, likely because Blogspot subdomains rely on Google’s default name servers, and no public page title or SSL certificate details have been disclosed in the current intelligence set.

Consequently, the exact content served by the site, its TLS posture, and any brand‑specific impersonation remain uncertain. Defenders should treat the domain as hostile: incorporate the domain into URL filtering and DNS sinkhole policies, monitor outbound connections for attempts to contact the IP 142.251.13.132, and keep the entry on blocklists up‑to‑date. Continuous re‑scanning with multi‑vendor services is advised to detect any future changes in payload or hosting that could increase risk.