# shopee436.blogspot.com — MALICIOUS

> shopee436.blogspot.com is actively pushing fake online store phishing under blogspot hosting. Check the full report.

## Summary
PhishDestroy identifies shopee436.blogspot.com as an elevated-risk fake online store scam domain currently hosting a counterfeit shopping portal that mimics legitimate e-commerce platforms to harvest payment credentials. The lure leverages the popular Blogspot subdomain space to appear legitimate at first glance while directing victims to fraudulent checkout pages designed to siphon card data and personal information. Active traffic redirection and live phishing content confirm this is not a dormant or parked domain, so immediate caution is warranted for users encountering this URL.  This domain was flagged by 12 of 95 VirusTotal security vendors and resolves to IP 142.250.154.132 via Google’s Blogspot infrastructure. The page is served through Blogger’s CDN and lacks HTTPS, exposing form submissions to interception. No historical WHOIS blocklist entries or low trust scores were externally recorded, indicating the threat is newly emerged and largely undocumented outside initial VT detections. The seed identifier 9cf2c0 categorizes this as part of a cluster targeting SEA users with Shoppe lookalike brands.  To mitigate exposure, users should avoid clicking links from unsolicited messages referencing shopee436.blogspot.com or any Blogspot domain promising discounts. Report the URL immediately to your email provider for phishing classification and consider deploying DNS sinkholing rules for 142.250.154.132. If payment data was entered, initiate card reissuance and credit monitoring while preserving browser session logs for law enforcement. Always verify merchant authenticity through official channels before completing transactions.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 142.250.154.132

## Detection Status
- VirusTotal: 12 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- PhishDestroy: https://phishdestroy.io/domain/shopee436.blogspot.com/
- LLM endpoint: https://phishdestroy.io/domain/shopee436.blogspot.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/shopee436.blogspot.com/
Last updated: 2026-03-26