99nightsintheforest[.]blogspot[.]com

This domain, 99nightsintheforest.blogspot.com, has been observed hosting a generic phishing campaign as of July 16 2026. DNS queries resolve the hostname to the IPv4 address 142.251.14.132; the authoritative name servers could not be retrieved (NS_NOT_FOUND). The domain remains active and is listed with a risk level of under_investigation. VirusTotal scans have been performed by 91 vendors, none of which currently flag the domain, but the absence of detections does not constitute a safety assurance. The limited intelligence indicates that the site is being used to lure victims into providing credentials or personal data, consistent with the generic_phishing classification. No additional artifacts such as page titles, brand references, or malicious payload hashes have been disclosed. Analysts should treat the infrastructure as hostile, incorporate the IP address and domain into blocklists, and monitor for any changes in DNS resolution or new associated indicators. Ongoing surveillance is recommended to determine whether the campaign expands or adopts new tactics.