pemenang-shopee58[.]blogspot[.]com

Analysis of the domain pemenang-shopee58.blogspot.com indicates it was active as a phishing site targeting users of the e-commerce platform referenced in its page title, 'SHOPEE 2021.' The domain resolved to IP address 142.250.184.193, part of AS15169 (Google LLC) in the United States, and was hosted on Blogger infrastructure, as evidenced by the detected technologies including OpenGSE and HTTP/3. Nameservers were managed by Google (ns1.google.com through ns4.google.com), and the domain was registered through MarkMonitor, Inc. The SSL certificate was issued by Google Trust Services, consistent with Blogger-hosted properties. At the time of assessment on July 24, 2026, the domain returned an HTTP 404 status, suggesting it had been taken offline or removed by the hosting provider. Detection data from security vendors indicates elevated risk: 13 of 95 engines on VirusTotal flagged the domain, and it appeared on one security blocklist, specifically PhishDestroy, which classified it as an e-commerce scam.

The page title, 'SHOPEE 2021,' suggests the campaign may have impersonated promotional events or giveaways associated with the Shopee brand, though the exact content and mechanics of the phishing attempt remain unconfirmed due to the site's offline status. The domain was originally created on July 31, 2000, though this date likely refers to the underlying Blogspot subdomain infrastructure rather than the phishing content itself. No evidence links this domain to a broader campaign or known phishing kit.

Defenders are advised to treat any residual references to pemenang-shopee58.blogspot.com as malicious and update blocklists accordingly. Organizations should monitor for user reports of unsolicited messages directing traffic to similar Blogspot-hosted domains, particularly those using 'shopee' or other e-commerce brand names in subdomains.