Skip to security report
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 17. Exercise extreme caution — do not enter credentials or personal information.
Domain security and threat intelligence

shopee-002[.]blogspot[.]com

Phishing and security check for shopee-002.blogspot.com

“SHOPEE”

Threat verdict Critical 100/100 evidence score
Availability Last known active Latest stored reachability observation
Risk signals
VirusTotal detections: 17/91 Brand impersonation: ShopeePay Last known active
17/91 VT Aug 7, 2026 ShopeePay Impersonation FI FI

Evidence Summary

Ref CC665295 100/100 CRITICAL

shopee-002.blogspot.com is a tenant hostname on Google LLC, not a separately registered domain. PhishDestroy first observed the hostname on Aug 7, 2026. Stored content metadata identifies ShopeePay as the apparent target. Evidence score: 100/100 (critical).

3 independent sources recorded positive findings: VirusTotal, Cloudflare Radar, and URLScan. VirusTotal recorded 17 detections among 91 engines: ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET, Emsisoft on Aug 7, 2026 at 08:42 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Shopee and assigned phishing as its category on Aug 8, 2026 at 03:30 UTC.

HTTP 200 was recorded on Aug 9, 2026 at 02:42 UTC. Google LLC is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 142.251.20.132 on AS15169 (GOOGLE - Google LLC, US). The evidence archive retains 4 visual captures from PhishDestroy, URLScan, and Cloudflare Radar.

VirusTotal
VirusTotal
17 det.
CF Radar
Malicious
URLScan
URLScan
Report ↗
TLS Certificate
Google Trust Services
Observed status
Last known active 200
PhishDestroy
DestroyList
Listed
Data coverage12 recorded checks
VirusTotal 17 / 91 URLQuery not checked PhishStats not checked OTX no community references CF Radar provider verdict: malicious URLScan capture stored report URLScan verdict malicious DNS blocks not checked TLS valid certificate, 66d WHOIS not parsed Screenshot 4 captures · 3 sources Redirect chain not probed
Network Security Intelligence
CF Cloudflare Radar Verdict Malicious
Phishing
View full Cloudflare Radar report

Threat Response Pipeline

Discovery
Checks
Reports
Availability
12/14

Public Blocklist Status

Stored Capture

Primary capture 1 / 4
View Full Size Wayback Download

Domain Intelligence

Domain
URLScan Verdict Malicious score 100 Phishing brand: Shopee report ↗
Server / ASN GSE · AS15169 GOOGLE - Google LLC, US
IP Reputation abuse score 0/100 26 reports checked Aug 7, 2026
Platform provider Google Domains US(US)
Abuse contactabuse@google.com, network-abuse@google.com
IP Address 142.251.20.132 FI
GeoFI Hamina, FI
NetworkAS15169 · Google LLC
Reverse IPviewdns.info → rapiddns.io →
HTTP Status200
Technical detailsDNS, SSL SANs, timestamps
First DetectedAug 7, 2026
DOM Analysisanalyzed Aug 7, 2026score 93/100
IoC Extractionscanned Aug 8, 20260 wallet · 0 Telegram IoCs
Submitted URLhttp://shopee-002.blogspot.com/
TLS Fingerprint
TLS Observationvalid from Jul 20, 2026scanned Aug 7, 2026
TLS SAN Domainsblogspot.aeblogspot.alblogspot.amblogspot.bablogspot.beblogspot.bgblogspot.cablogspot.chblogspot.clblogspot.co.atblogspot.co.idblogspot.co.ilblogspot.co.keblogspot.co.nzblogspot.co.uk+55
Page Title
SHOPEE
TLS Certificate
Valid transport encryption · Issued by Google Trust Services · valid for 66 days
Technologies · 6 identified
Blogger
Blogs

Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.

www.blogger.com 100% confidence
Java
Programming languages

Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.

java.com 100% confidence
Python
Programming languages

Python is an interpreted and general-purpose programming language.

python.org 100% confidence
YouTube
Video players

YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.

www.youtube.com 100% confidence
OpenGSE
Web servers

OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.

code.google.com 100% confidence
HTTP/3
Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

httpwg.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

17 / 91 security vendors flagged this domain
View on VT
Last analyzed
ADMINUSLabs
Criminal IP
alphaMountain.ai
BitDefender
Chong Lua Dao
CyRadar
ESET
Emsisoft
Fortinet
G-Data
Gridinsoft
Kaspersky
Lionic
Netcraft
Sophos
VIPRE
Webroot

Archived Evidence

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive
Site Performance Analysis

Google PageSpeed Insights — mobile performance audit of shopee-002.blogspot.com · checked Aug 7, 2026

55
Needs Work
Performance
FCP
6.79s
First Contentful Paint
LCP
26.6s
Largest Contentful Paint
CLS
0.005
Cumulative Layout Shift
TBT
96ms
Total Blocking Time
SI
13.32s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Evidence & External ReportsIndependent lookups and source reports
Security Analysis
URLScan Malicious VirusTotal 17 det. ChainPatrol URLQuery Open lookup Gridinsoft SSL Labs Stored TLS valid CF Radar Malicious WOT ScamAdviser Blacklist Checker URLVoid Sucuri SiteCheck MDN Observatory
OSINT & Intelligence
Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Hudson Rock Sign-in search IntelX crt.sh Certs WHOIS Wayback Archived
DNS & Network
nslookup.io DNS bgp.tools ASN/Route
SEO & Domain
SpyFu Moz DA/PA Ahrefs Backlinks Deep Analysis
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
PhishDestroy listing review Not a law-enforcement report
Domain Appeal
Request a review if you own this domain and believe the listing is incorrect
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself
Embed This ReportRead-only HTML widget
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html 
<iframe
  src="https://phishdestroy.io/embed/domain/shopee-002.blogspot.com"
  title="PhishDestroy threat report for shopee-002.blogspot.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>