bloodsweatart[.]breonny[.]com

The domain bloodsweatart.breonny.com is listed as a generic phishing infrastructure and was taken offline prior to the report date of July 25, 2026. Registration data shows the domain was created on January 30, 2008 and is hosted by Bluehost Inc., using the nameservers ns1.bluehost.com and ns2.bluehost.com. DNS resolution points to the IP address 50.87.248.14, which belongs to the United States and is announced by ASN46606 (Unified Layer). The web server identified by fingerprinting tools is Apache HTTP Server running on a Bluehost‑provided environment. The site presented the page title "Blood.

Sweat. ART. — Coming Soon," indicating a placeholder landing page rather than active credential‑stealing content at the time of capture. SSL termination is provided by a Let’s Encrypt certificate (R12), confirming the use of a publicly trusted TLS certificate.

Threat intelligence sources have flagged the domain: PhishDestroy has actively blocked it, VirusTotal reports that eleven of ninety‑five scanning engines flagged the host, and the domain appears on one external security blocklist. Current status is offline, suggesting the operators have either retired the site or are temporarily suspending activity. Defenders should continue to monitor the associated IP address and ASN for any resurgence, enforce outbound filtering to block connections to 50.87.248.14, and add the domain and its resolver IP to internal blocklists. Ongoing vigilance is recommended since the underlying hosting provider, Bluehost, may host additional malicious artifacts that could be re‑used in future campaigns.