shopee5477[.]blogspot[.]com

Analysis of the domain shopee5477.blogspot.com indicates it is an active phishing infrastructure impersonating ShopeePay, a digital payment service associated with the e-commerce platform Shopee. The domain, registered on March 26, 2026, via Google Blogger, currently resolves to the IP address 142.251.141.65, hosted by Google LLC in the United States. The page title, 'shopee,' aligns with the targeted brand, and the domain is explicitly categorized as an e-commerce scam. As of July 12, 2026, the site remains operational, returning an HTTP 200 status code, and is flagged by 17 of 94 security vendors on VirusTotal. It is also listed on one security blocklist, PhishDestroy, and has received a trust score of 1/100 from Scamadviser and 0/100 from Gridinsoft, further corroborating its malicious classification. Infrastructure analysis reveals the domain lacks configured nameservers, a common but not definitive indicator of low-effort phishing setups. The SSL certificate is issued by Google Trust Services, consistent with Blogger-hosted domains, and does not provide additional malicious signals. While the exact content of the site has not been analyzed, the available data confirms its intent to impersonate ShopeePay for fraudulent purposes. Defenders should treat this domain as high-risk and prioritize blocking or monitoring traffic to it. Given its active status and confirmed malicious intent, organizations are advised to update filtering rules and alert users to avoid interaction with the domain.