ptshopee445[.]blogspot[.]com

PhishDestroy has identified ptshopee445.blogspot.com as a high-risk phishing site currently active and impersonating the popular e-commerce platform Shopee. The domain's page title, "HADIAH SHOPEE 2020," is a classic lure promising free gifts or vouchers, a common tactic to trick users into entering their Shopee account credentials on a fake login page. This threat is classified as generic phishing, specifically a brand impersonation attack targeting Shopee customers.

The domain was registered through Google Blogger and resolves to the IP address 142.251.127.132, with an SSL certificate issued by Google Trust Services (WE2). Despite its active status, an alarming 20 out of 95 security vendors on VirusTotal flag this domain as malicious, and it appears on one security blocklist. These technical indicators strongly suggest that the site is designed for credential harvesting, with no legitimate purpose. The low blocklist count may indicate a relatively new or quickly rotating domain, but the high vendor detection rate underscores the consensus among security solutions that this is a threat.

Because ptshopee445.blogspot.com remains active, users who encounter it should under no circumstances enter any personal information, including Shopee usernames, passwords, or payment details. PhishDestroy strongly advises avoiding interaction with this site entirely. If you have already submitted credentials, change your Shopee password immediately and enable two-factor authentication. For further verification, always access Shopee directly through its official website or app, and report any suspicious links to the platform's security team. PhishDestroy continues to monitor this domain and will update its assessment if the threat evolves.