click-hostopoint-ch-redirect4624571[.]blogspot[.]com

The domain click-hostopoint-ch-redirect4624571.blogspot.com is currently classified as a generic phishing site and remains active as of July 12, 2026. VirusTotal analysis shows that 11 of 95 security vendors have flagged the domain, reinforcing the high‑risk assessment. The hosting service is identified as Google Blogger, which aligns with the registration information supplied.

Infrastructure analysis reveals that the domain resolves to the IP address 172.253.63.132, which is allocated to Google LLC (AS15169) and geolocated in Germany. The TLS certificate presented is issued by Google Trust Services under the WE2 designation, indicating a valid SSL chain that may lend the site an appearance of legitimacy. HTTP requests to the domain return a 200 status code, confirming that content is being served without interruption.

Content inspection indicates that the page title displayed to visitors is "office.hostpoint.ch," a clear impersonation of the legitimate Hostpoint service. This mismatch between the observed title and the underlying Blogger URL suggests a credential‑harvesting landing page designed to deceive users familiar with the Hostpoint brand. The domain is presently listed on one security blocklist and has been blocked by the PhishDestroy mitigation platform, demonstrating that defensive communities have already taken action against it.

Defenders should prioritize adding the domain and its resolved IP address to outbound and inbound filtering rules, as well as monitoring for any related sub‑domains that may be provisioned under the same Blogger account. Continuous re‑evaluation of VirusTotal and blocklist status is advisable, given the dynamic nature of phishing infrastructure. Where possible, organizations should educate end‑users about the discrepancy between the expected Hostpoint portal and the observed Blogger URL to reduce successful credential capture.