shopeejkt195[.]blogspot[.]com
“PUSAT SHOPEE 2020”
shopeejkt195.blogspot.com — Conteúdo indisponível. Representação da marca: Shopee; Tipo de golpe: Credential Phishing. Resumo das evidências: VirusTotal 20/91 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Chong Lua Dao); URLScan malicious verdict; CF Radar malicious; PhishDestroy score 95/100. Registrador: Google Blogger.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain, shopeejkt195.blogspot.com, is identified as a phishing site impersonating the legitimate Shopee e-commerce platform. The page title 'PUSAT SHOPEE 2020' suggests a targeted campaign aimed at Southeast Asian users, likely attempting to harvest login credentials, payment details, or personal information through fraudulent login forms. Analysis indicates the site mimics official Shopee branding to deceive visitors into submitting sensitive data under false pretenses. Infrastructure analysis reveals the domain was registered through Google Blogger, resolving to the IPv6 address 2a00:1450:4001:c17::84, hosted on Google LLC infrastructure (AS15169) in Germany. Security vendors flagged this domain in 20 out of 95 VirusTotal scans, indicating a consensus on its malicious nature. The domain appears on one security blocklist and was previously blocked by PhishDestroy, further corroborating its classification as phishing infrastructure. No legitimate creation date is available, as the domain operates under a subdomain of blogspot.com, a common tactic to evade detection and reduce hosting costs. Users who visited shopeejkt195.blogspot.com should assume their credentials or payment details may have been compromised. Immediate action is required: reset passwords for any accounts accessed after visiting the domain, enable multi-factor authentication where available, and monitor financial statements for unauthorized transactions. If personal or financial data was entered, consider reporting the incident to local cybercrime authorities and credit monitoring services. Browser caches and saved passwords should be cleared to prevent automatic redirection to similar phishing sites. Network administrators are advised to block the domain and its resolving IP address at the perimeter to prevent further exposure.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 5 identified
Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.
www.blogger.com 100% de confiançaJava is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.
java.com 100% de confiançaOpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.
code.google.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo