broukhaven.blogspot.com — Phishing Site Detected

This domain, broukhaven.blogspot.com, is a Blogspot sub‑domain registered through Google LLC. Passive DNS shows it resolving to the IP address 142.251.20.132, which belongs to Google’s public‑facing infrastructure. The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing service has observed malicious use. VirusTotal reports that the URL has been scanned by 91 antivirus and URL‑reputation engines; none of the engines currently flag the domain, but the absence of detections does not constitute a safety guarantee.

No page title, SSL certificate details, or HTTP response codes are available in the current intelligence set, and the nameserver query returned NS_NOT_FOUND, limiting further resolution data. The available evidence points to a generic phishing operation, but the lack of visible payload or target brand prevents a more granular classification.

Defenders should treat the domain as hostile: add it to URL filtering rules, consider blocking the associated IP range only after evaluating collateral impact on legitimate Google services, and continue to monitor threat‑intel feeds for any new indicators such as phishing kits, compromised credentials, or changes in hosting. Ongoing re‑scans with VirusTotal and periodic WHOIS checks are recommended to detect any future changes in registration or hosting that could alter the risk profile.