fulljosbindonesia[.]net

fulljosbindonesia.net was registered on 21 February 2026 and is currently offline. DNS resolution points to 188.114.96.3, an address owned by Cloudflare (AS13335) located in the United States. The site presented a page title of "Shopee", indicating an attempt to lure users of the Shopee e‑commerce platform. On VirusTotal the domain received 14 positive detections from 93 scanning engines, confirming malicious classification.

AlienVault OTX includes the domain in two separate threat‑intel pulses, reinforcing its reputation as a phishing resource. The domain is listed on a single public blocklist and has been actively blocked by the PhishDestroy sink‑hole, demonstrating that defensive feeds have already taken action against it. The SSL certificate on the host is identified as "WE1", suggesting a generic or self‑signed certificate typically used by malicious actors. Because the site is no longer reachable, content analysis is limited to the observed page title and the infrastructure signals.

Defenders cannot confirm the exact payload or credential‑capture mechanisms without a live snapshot. However, the convergence of multiple vendor detections, OTX references, and blocklist inclusion provides high confidence that the domain was used for credential harvesting against Shopee users. Recommendation: add fulljosbindonesia.net and its resolving IP 188.114.96.3 to firewall and DNS block lists, monitor other Cloudflare‑hosted IP ranges for similar registrations, and update intrusion‑detection signatures to flag HTTP requests containing the "Shopee" title from newly created domains. Continuous threat‑intel feed ingestion will help identify successor domains that reuse the same tactics.