# layanan-shopee44.blogspot.com — MALICIOUS

> layanan-shopee44.blogspot.com hosts credential harvesting phishing targeting Shopee users. 11/95 vendors flag it. Check the full report.

## Summary
The domain layanan-shopee44.blogspot.com is actively engaged in credential harvesting phishing schemes designed to steal login information from unsuspecting users. This threat poses a significant risk as attackers impersonate legitimate Shopee services to trick victims into submitting sensitive data such as usernames and passwords. Falling victim can lead to unauthorized account access, financial loss, and further identity compromise.

PhishDestroy's investigation found this domain flagged by 11 out of 95 security vendors on VirusTotal, confirming its malicious nature. The domain resolves to IP address 172.217.16.161 and uses an SSL certificate issued by Google Trust Services, which may lend it an appearance of legitimacy. It is listed on one security blocklist and is actively blocked by OpenPhish, a well-known anti-phishing service. The domain is hosted on the Blogspot platform, which attackers often exploit for phishing due to its free hosting and trusted domain reputation.

If you have visited layanan-shopee44.blogspot.com, it is critical not to enter any credentials or personal information. Immediately change passwords for any accounts that may have been exposed, especially Shopee accounts. Enable two-factor authentication where possible to add an extra security layer. Run a comprehensive antivirus scan to detect any malware that might have been downloaded. Finally, report the phishing attempt to Shopee and your email provider to help protect others from this ongoing threat.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 172.217.16.161

## Detection Status
- VirusTotal: 11 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["OpenPhish"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/58ad29f5-e9e7-4ef0-868b-798af27d1dc2
- PhishDestroy: https://phishdestroy.io/domain/layanan-shopee44.blogspot.com/
- LLM endpoint: https://phishdestroy.io/domain/layanan-shopee44.blogspot.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/layanan-shopee44.blogspot.com/
Last updated: 2026-03-27