getgrowagardenaks[.]blogspot[.]com

On 2026-08-07 the domain getgrowagardenaks.blogspot.com was observed to resolve to the IP address 142.251.110.132, an address owned by Google LLC and commonly used for Blogger-hosted sites. Registration metadata confirms the domain was created through Google LLC, indicating that the attacker leveraged Google’s free blogging platform to obtain a legitimate‑looking URL. DNS queries return NS_NOT_FOUND, meaning no custom authoritative name servers are published and the domain relies on the default Blogger DNS configuration.

The domain has been flagged by the anti‑phishing vendor PhishDestroy and appears on one additional security blocklist, providing concrete evidence that at least one independent mitigation service has taken action against it. No further indicators such as Safe Browsing alerts, Open Threat Exchange entries, SSL certificate details, HTTP status codes, trust‑score metrics, page‑title strings, or evidence links have been captured in the available intelligence. The absence of a published SSL certificate may indicate reliance on Blogger’s default HTTPS provisioning, but the lack of explicit certificate data prevents verification of encryption status.

The limited but concrete evidence points to a generic phishing operation that remains active. Defenders should add the domain to inbound and outbound filtering policies, enforce reputation‑based blocking that references the known blocklist entry, and monitor DNS traffic for the associated Google IP range for any anomalous spikes. Ongoing surveillance is recommended to detect potential changes in hosting, DNS configuration, or content that could elevate the threat’s impact.