shopee5849[.]blogspot[.]com

On 29 July 2026, the domain shopee5849.blogspot.com was evaluated as part of an elevated‑risk generic phishing investigation. The site is hosted on the Google Blogger platform, indicating that the registrant used a free blogging service rather than a dedicated domain registrar. WHOIS data shows the domain was created on 31 July 2000, a date that predates the current phishing trend but may reflect a repurposed or compromised account. DNS resolution points to the IP address 142.251.127.132, which belongs to Google’s infrastructure and is commonly shared by many Blogger sites.

VirusTotal reports that 16 of 91 scanned security vendors flagged the domain as malicious, providing moderate confidence that the domain is being used for abusive purposes. The blocklist count shows the domain appears on a single security blocklist, and PhishDestroy has already taken action to block it. No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP status code, trust‑score, or page‑title information is presently available for this URL, limiting the depth of the technical profile. Analysts should treat the domain as hostile: network perimeter controls should deny outbound connections to the resolved IP, DNS‑based filtering should block the domain, and endpoint protection should be configured to recognize the 16 vendor detections.

Continuous monitoring of the IP address and the Blogger host for new malicious artifacts is advised, as compromised accounts on shared platforms can be re‑used quickly. Because the hosting environment is shared, remediation may require coordination with the platform provider to suspend the underlying account. Until further forensic evidence is obtained, the recommendation is to maintain the domain on deny lists and to watch for any escalation in detection counts or additional blocklist listings.