shopee-tbk778[.]blogspot[.]com
“Hadiah Shopee 2020”
shopee-tbk778.blogspot.com — 内容不可用. 品牌冒充:ShopeePay; 诈骗类型:Generic Phishing. 证据摘要: VirusTotal 17/91 (Criminal IP, alphaMountain.ai, BitDefender, CyRadar, ESET); URLScan malicious verdict; PhishDestroy score 95/100. 注册商: Google Blogger.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain shopee-tbk778.blogspot.com was created on June 24, 2026 and is hosted on Google Blogger infrastructure. DNS resolution points to the IP address 142.250.183.33, which belongs to AS15169 Google LLC and is geolocated in Germany. The site presents a valid SSL certificate issued by Google Trust Services, indicating that TLS termination is performed by Google’s hosting platform. Threat intelligence classifies the domain as a brand‑impersonation campaign targeting ShopeePay. The only page title observed during a brief crawl was "Hadiah Shopee 2020", a phrase commonly used in promotional or giveaway scams.
The domain appears on one security blocklist and is explicitly listed as blocked by PhishDestroy. VirusTotal scans show that 17 of 91 security vendors have flagged the domain, reinforcing the malicious classification. Infrastructure‑level indicators further reduce confidence in the site’s legitimacy. Gridinsoft assigns a trust score of 0 out of 100, and an HTTP request returns a 404 status, suggesting that the malicious content may have been removed or the site is currently inactive. Nameserver information is unavailable (NS_NOT_FOUND), which aligns with Blogger’s default DNS handling.
The current operational status is recorded as offline, and no live content could be retrieved for deeper analysis. Defenders should treat any traffic to shopee-tbk778.blogspot.com as suspicious. Recommended actions include adding the domain to perimeter blocklists, monitoring outbound connections to the associated Google IP, and correlating any email or messaging references to "Hadiah Shopee 2020" with this indicator. Because the domain uses a legitimate SSL certificate, reliance on certificate validation alone is insufficient; contextual threat tags and the observed page title should drive detection.
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。