pestahadiahshopee2779[.]blogspot[.]com

The domain pestahadiahshopee2779.blogspot.com is currently listed as active and classified as a generic phishing site with a high risk rating. Registration information shows the domain was created through Google LLC, which is the registrar for the underlying Blogger hosting platform. DNS queries return no nameserver records (NS_NOT_FOUND), a condition that often accompanies fast‑flux or evasive infrastructure.

The domain resolves to the IPv4 address 142.251.127.132, an address that belongs to Google’s public‑facing network and is shared by many legitimate Blogger sites, complicating direct host‑based blocking. Threat‑intelligence feeds have added the domain to one security blocklist, and the anti‑phishing service PhishDestroy reports it as blocked, confirming that at least one external sinkhole has taken action against it. VirusTotal analysis shows that five of ninety‑one scanned security vendors have flagged the domain as malicious, indicating partial consensus among scanners while the majority remain silent, which is typical for newly observed phishing infrastructure.

No additional context such as page title, SSL certificate details, or HTTP response codes is available, leaving the exact payload and lure mechanisms unverified. Given the high risk label, the active status, and the presence on a blocklist, defenders should prioritize blocking the domain at DNS and proxy layers, monitor traffic to the associated IP for anomalous patterns, and consider adding the IP to reputation‑based blocking lists despite its shared nature. Continuous re‑scanning with VirusTotal and other sandboxes is advised to capture evolving detections, and any future observations of page content or credential‑harvesting forms should be incorporated into incident response playbooks.