speedkeywr[.]blogspot[.]com

Analysis as of July 22, 2026 indicates that the domain speedkeywr.blogspot.com resolves to IP 142.251.110.132, which is part of Google LLC's hosting infrastructure. The domain remains active and appears on a single security blocklist, with PhishDestroy explicitly blocking it. Registration data shows the domain was created through Google LLC, and a nameserver query returned no result (NS_NOT_FOUND). VirusTotal records reveal the domain was submitted to 95 scanning engines, none of which reported a detection at the time of analysis; the absence of detections does not constitute proof of safety.

No additional threat‑intelligence feeds such as OTX or Safe Browsing are referenced in the supplied data, and no information about TLS/SSL, HTTP status codes, or page title is available. The .blogspot.com suffix identifies the site as a Blogger‑hosted page, a free service frequently abused to host malicious landing pages while leveraging legitimate infrastructure. The combination of blocklist presence, active blocking by PhishDestroy, and the generic phishing classification suggests malicious intent despite the benign‑looking hosting environment. Uncertainty remains regarding the specific content, the existence of HTTPS, and the exact phishing lure employed.

Defenders should continue to monitor the domain, enforce blocklist rules, and consider network‑level filtering for the associated IP address. Additional investigation—such as retrieving the page title, examining TLS certificates, and capturing traffic for credential‑harvesting patterns—is recommended to confirm the threat vector. Until further evidence is gathered, the domain should be treated as a potential phishing resource and incorporated into internal deny lists and URL filtering solutions.