gebyar-shopee71[.]blogspot[.]com
“Blog not found”
gebyar-shopee71.blogspot.com — Conteúdo indisponível. Representação da marca: ["google"]; Tipo de golpe: E Commerce Scam. Resumo das evidências: VirusTotal 10/95 (Criminal IP, alphaMountain.ai, BitDefender, CyRadar, G-Data); PhishDestroy score 80/100. Registrador: MarkMonitor.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of gebyar-shopee71.blogspot.com shows that the domain is hosted on Google’s Blogger platform and resolves to the Google Cloud IP 142.250.217.1 (AS15169, United States). The domain was registered on July 31, 2000 through MarkMonitor, Inc., and uses Google’s default name servers (ns1‑ns4.google.com). TLS is provided by Google Trust Services under the WE2 certificate, indicating a legitimate Google‑issued certificate but offering no protection against abuse of the underlying account. HTTP requests return a 404 status with the page title “Blog not found”, confirming that no content is currently served.
The site was classified as an e‑commerce phishing scam, and the blocklist PhishDestroy has already listed it as offline. VirusTotal reports ten detections out of ninety‑five scanners, and the domain appears on one additional security blocklist, reinforcing the risk assessment. Technologies identified include Blogger, Java, Python, OpenGSE, and support for HTTP/3, all typical of a standard Blogger deployment. No additional intelligence such as specific credential‑stealing pages or phishing kits has been observed, leaving the exact malicious payload unknown.
Defenders should continue to block the domain at perimeter filters, monitor for any re‑activation, and consider adding the IP address to reputation lists. Because the TLS certificate is valid, users may be misled by the appearance of HTTPS; user education should stress verification of the actual site content rather than reliance on the lock icon. Ongoing observation of the domain’s registration and DNS records is advised to detect potential changes that could signal a re‑use of the infrastructure for future campaigns.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 5 identified
Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.
www.blogger.com 100% de confiançaJava is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.
java.com 100% de confiançaOpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.
code.google.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências arquivadas
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo