shopee3336[.]blogspot[.]com

shopee3336.blogspot.com is currently flagged as an active generic phishing site with an elevated risk rating. VirusTotal records indicate that 18 of 91 security vendors have classified the domain as malicious, demonstrating a moderate consensus of detection across multiple engines. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that at least one commercial sinkhole has taken action against it. Infrastructure analysis shows the domain was registered through Google’s Blogger platform, a free‑hosting service that often provides a legitimate SSL certificate and shared IP space. DNS resolution points to the IP address 142.251.14.132, which belongs to Google’s hosting infrastructure.

No additional hosting details, such as autonomous system number or country of operation, are disclosed in the available intelligence. The domain creation date is recorded as July 31, 2000, indicating that the underlying Blogger account has existed for many years, though the malicious activity may be recent. Publicly available metadata does not contain a page title, SSL certificate details, or HTTP response codes, so the exact content served by the site remains unknown. Consequently, analysts cannot confirm the specific phishing lure, credential‑capture form, or targeted brand without direct observation. The absence of these details limits the ability to attribute the campaign to a known phishing kit or to map its victim profile.

Given the existing vendor detections and the active blocklist entry, defensive teams should add shopee3336.blogspot.com to URL filtering and DNS sinkhole rules. Monitoring of outbound DNS queries for the 142.251.14.132 address may help identify compromised clients. Organizations using Google services should be aware that legitimate Blogger hosting can be abused for phishing, and should consider applying additional content‑inspection controls for traffic to Blogger subdomains.