info-resmi697[.]blogspot[.]com

The domain info-resmi697.blogspot.com is identified as a credential theft phishing site impersonating Shopee. It is currently offline. Analysis indicates that this domain was created on June 12, 2026, and is registered through Google Blogger. The domain has been flagged by 18 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion and potential threat. Infrastructure analysis reveals that the domain resolves to the IP address 142.251.110.132, and it is secured with an SSL certificate from Google Trust Services / WE2. The domain appears on one known security blocklist and is specifically blocked by the PhishDestroy service.

Given the elevated risk level and the specific threat of credential theft, the current offline status of the domain is a positive development. However, the domain's infrastructure, including its registration through Google Blogger and its resolution to a Google-owned IP address, suggests a sophisticated attempt to appear legitimate. The relatively high number of VirusTotal vendors flagging the domain (18 out of 95) further supports the assessment that this domain poses a significant risk to users attempting to access Shopee services.

While the domain is currently offline, it is recommended that users remain vigilant and avoid accessing any similar or related domains. Security teams should monitor for any reactivation of the domain and ensure that all Shopee-related communications and transactions are conducted only through verified and official channels. Additionally, organizations should update their security policies and user training programs to include the latest threat indicators and best practices for identifying and reporting phishing attempts.