gebyar-shopee96[.]blogspot[.]com

Analysis of gebyar-shopee96.blogspot.com shows a short‑lived blog hosted on Google Blogger that was created on March 22, 2026 and subsequently taken offline. The site presented the page title “SHOPEE2021”, aligning it with an e‑commerce brand and matching the classified scam type of an E‑Commerce Scam. Technical fingerprints indicate the presence of Blogger as the content platform, with supporting libraries for Java, Python, OpenGSE, and HTTP/3, suggesting a typical Blogger deployment rather than a custom infrastructure. The domain resolves to the IP address 142.251.208.1, an address owned by Google LLC in the United States, confirming that the hosting is provided by Google’s infrastructure.

SSL is issued by Google Trust Services, consistent with the hosting provider. An HTTP request to the site returned a 404 status, indicating that the content is no longer reachable, and the site is currently listed as offline. VirusTotal records show that 17 of 94 security scanners flagged the domain, providing independent confirmation of malicious intent. The domain appears on a single security blocklist and is actively blocked by PhishDestroy, reinforcing the assessment of malicious activity.

While the domain’s registration through Google Blogger is legitimate, the combination of the deceptive page title, the e‑commerce scam classification, and multiple vendor detections points to a phishing operation targeting shoppers of the Shopee platform. Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms, as the site is no longer accessible for direct inspection. Defenders should continue to block the domain at network perimeter controls, update URL filtering and threat intelligence feeds with the domain and its associated IP, and monitor for any re‑registration attempts or similar patterns leveraging Blogger for fraudulent e‑commerce pages.