pt-shopee1577[.]blogspot[.]com

This domain, pt-shopee1577.blogspot.com, is actively impersonating ShopeePay as of July 12, 2026. Registered on May 11, 2026, through Google Blogger, it resolves to IP 142.251.13.132 (US, Google LLC) and returns an HTTP 200 status. The page title is explicitly 'shopee,' aligning with the brand impersonation classification. Infrastructure analysis reveals the use of Blogger, Java, Python, and HTTP/3, with an SSL certificate issued by Google Trust Services (WE2). The domain currently appears on one security blocklist, and 21 of 92 security vendors on VirusTotal flag it as malicious. Scamadviser and Gridinsoft both assign a trust score of 1/100 and 0/100, respectively, further indicating high-risk activity. No nameservers are detected, which may suggest an attempt to evade tracking or automated analysis. Defenders should prioritize blocking this domain at the network level, particularly in regions where ShopeePay operates, and monitor for related subdomains or redirects. While the exact content of the site remains unanalyzed, the combination of brand impersonation, low trust scores, and vendor detections confirms its malicious intent. No evidence of takedown or sinkholing is present, and the domain remains active.