program-resmi029[.]blogspot[.]com

PhishDestroy identifies program-resmi029.blogspot.com as an active Google credential-stealing page posing as an official Google service. The rogue site mimics Google’s login flow to harvest usernames and passwords entered by unwitting visitors.

This domain resolves to the IP address 142.251.36.97 and carries a valid Google Trust Services SSL certificate, which helps it bypass browser warnings that would otherwise flag the site as suspicious. VirusTotal analysis shows that 7 out of 95 security vendors already classify the domain as malicious, evidencing rapid detection by multiple engines. The blogspot.com subdomain technically belongs to Google’s hosting platform, complicating quick blocklisting and increasing the risk of user exposure.

If you visited program-resmi029.blogspot.com and entered any Google account credentials, immediately change your password at accounts.google.com and enable two-factor authentication. Revoke any unknown application permissions linked to your account and run a full antivirus scan. Avoid saving passwords in browsers and verify every URL begins with https://accounts.google.com before signing in.