infoshopee-977[.]blogspot[.]com

This domain is flagged as an elevated-risk credential theft operation targeting users through brand impersonation. Analysis indicates the site masqueraded as a legitimate Shopee rewards portal, using the page title 'HADIAH SHOPEE 2020' to deceive visitors into submitting login credentials or personal information under false pretenses. Infrastructure analysis reveals the domain was hosted on Google Blogger infrastructure, resolving to IP 142.251.13.132 (US, Google LLC). The SSL certificate was issued by Google Trust Services (WE2), a common pattern for abused legitimate platforms. Despite the domain registration date showing March 27, 2026—a likely artifact of misconfigured WHOIS records—the site was actively blocked by one security blocklist and flagged by 16 out of 95 security vendors on VirusTotal. The domain has since been taken offline, though historical records confirm its malicious classification. Mitigation steps for credential theft threats include immediate password resets for any accounts accessed via this domain, enabling multi-factor authentication on all financial and e-commerce platforms, and verifying official communications through Shopee's verified channels. Organizations should update web filtering rules to block subdomains under blogspot.com with reward-themed page titles or anomalous creation dates. Users should treat unsolicited reward notifications as high-risk and cross-reference promotions with the brand's official website or mobile application.