pt-shopee239[.]blogspot[.]com

This domain is flagged at an elevated risk level for brand impersonation targeting Shopee users, specifically designed to facilitate credential theft. Analysis indicates the page title explicitly mimics the legitimate Shopee platform, increasing the likelihood of successful social engineering attacks against users familiar with the brand. Infrastructure analysis reveals the domain was registered through Google Blogger, resolving to IP address 142.251.110.132. The SSL certificate is issued by Google Trust Services, a common tactic to lend false legitimacy. Detection metrics show 17 out of 95 security vendors on VirusTotal flagged the domain as malicious. The domain appears on one security blocklist and holds a trust score of 0/100. Current status indicates the domain has been taken offline, though prior activity remains a concern. Mitigation steps for this threat type include immediate revocation of any credentials entered on the site, particularly for users who accessed it during its active period. Organizations should update web filtering rules to block the domain and its resolved IP address (142.251.110.132) at the perimeter. Users should be alerted to verify domain authenticity before entering login details, especially for e-commerce platforms. Monitoring for secondary phishing attempts via email or SMS is recommended, as attackers may pivot to alternative domains or communication channels.