ffgarenafreefireredofgicualredeemsite[.]blogspot[.]fi

Analysis indicates that ffgarenafreefireredofgicualredeemsite.blogspot.fi is an active phishing domain targeting users with fraudulent Pokémon or FireRed-themed offers. The domain, hosted on Blogger infrastructure under Google LLC (AS15169), resolves to the IPv6 address 2a00:1450:4001:82f::2001, located in Germany. As of July 12, 2026, the domain returns an HTTP 302 redirect status, though the destination remains unconfirmed. The page title 'Blogia ei löydy' (Finnish for 'Blog not found') suggests either a placeholder or a deliberate attempt to obscure its true purpose. Infrastructure analysis reveals the domain is flagged by two security blocklists (PhishDestroy and PhishingDB) and holds a Scamadviser trust score of 1/100, indicating high risk. Fifteen of 95 security vendors on VirusTotal have detected malicious activity associated with this domain. The SSL certificate, issued by Google Trust Services (WE2), aligns with standard Blogger hosting practices but does not mitigate the phishing risk. Nameservers (ns1.google.com) and registration through MarkMonitor, Inc. (created March 7, 2011) are consistent with legitimate domains, though threat actors frequently abuse such services for credibility. The inclusion of terms like 'freefirered' and 'redeem' in the domain name implies a scam involving fake game rewards or in-game currency for Pokémon FireRed. However, the exact content and mechanics of the phishing operation are not yet analysed. Defenders should treat this domain as high-risk, block it at the network level, and monitor for related subdomains or redirects. No evidence suggests compromise of legitimate services, but users should avoid interacting with the site or entering credentials.