forminformation[.]blogspot[.]com

forminformation.blogspot.com is a tenant hostname on Google Blogger, not a separately registered domain. PhishDestroy first observed the hostname on Apr 14, 2026. Stored content metadata identifies DHL as the apparent target. The captured page title is “DHL Express”. Stored page analysis classifies the content as crypto drainer. Current evidence score: 100/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, DNS security resolvers, Cloudflare Radar, and URLQuery. VirusTotal recorded 15 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Sophos, VIPRE, Webroot on Jul 27, 2026 at 03:11 UTC. DNS security checks returned 3 blocking results across 12 tested policies: Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories phishing and security threats; its verdict timestamp was not retained. URLQuery recorded 2 threat-system alerts on May 23, 2026 at 17:42 UTC. Non-positive and contextual checks: ScamAdviser assigned a trust score of 1/100 (Very Likely Unsafe); no observation timestamp was retained. The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 06:20 UTC. Google Safe Browsing returned no flag on Apr 14, 2026 at 14:20 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:42 UTC. PhishStats returned no feed match on Apr 14, 2026 at 14:21 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:01 UTC. Google Blogger is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 142.251.110.132 on AS15169 (Google LLC). The recorded endpoint location is Mountain View, US. The IP and ASN identify shared Google Blogger infrastructure, not the tenant operator. The stored server header is GSE. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. The platform TLS certificate was issued by Google Trust Services with validity through Jun 15, 2026; checked Apr 14, 2026 at 17:00 UTC.

The content indicators and 4 positive source findings support the current DHL-themed crypto drainer classification.