97ee6[.]blogspot[.]si

The domain 97ee6.blogspot.si is currently flagged as a high-risk phishing domain and remains active as of the report date, July 21, 2026. It has been detected on three security blocklists, indicating a consensus among cybersecurity platforms regarding its malicious intent. Specifically, it has been blocked by PhishDestroy, MetaMask, and SEAL, which are known services for protecting users from phishing attempts. Infrastructure analysis reveals that the domain resolves to the IP address 142.250.154.132, which may be associated with broader malicious activity.

The domain was registered through Markmonitor Inc., a registrar that is often utilized for legitimate purposes, but in this case, it is linked to a known phishing threat. The nameservers for this domain are ns1.google.com, ns2.google.com, ns3.google.com, and ns4.google.com, which suggests that it is hosted on Google's infrastructure. However, this does not mitigate the risks associated with the domain.

The domain was created on July 23, 2007, indicating a long history, but its current usage raises significant concerns. The domain has been flagged by three out of 95 security vendors on VirusTotal, signifying potential threats, although the specific details of these flags are not provided. Defenders are advised to implement blocking strategies for this domain and educate users on identifying phishing attempts to mitigate risks associated with this active threat.