97ee6[.]blogspot[.]com

97ee6.blogspot.com is currently active and classified as a high‑risk generic phishing site. The domain was registered through Google LLC and resolves to the IP address 142.251.20.132. No authoritative nameservers were returned (NS_NOT_FOUND), indicating that the domain relies on the default hosting infrastructure provided by the registrar. The domain has been added to three public blocklists and is already blocked by PhishDestroy, MetaMask, and SEAL. Its presence on multiple blocklists suggests that it has been observed delivering phishing content, although the exact payload or targeted brand has not been disclosed in the available intelligence. VirusTotal has recorded 95 scans but none have flagged the domain; this lack of detections does not imply safety and should not be used as a confidence metric. Defenders should continue to deny network traffic to 142.251.20.132 and enforce URL filtering for the full host name. Continuous monitoring of the domain’s DNS resolution and any future VirusTotal or sandbox analyses is recommended to detect potential changes in behavior. Because the site is hosted on a Google‑controlled blog platform, takedown requests may be directed to Google’s abuse reporting channel. Until further evidence is obtained, organizations should treat any email or message containing this URL as malicious and educate users to avoid clicking the link.