info-resmi366[.]blogspot[.]com

This domain, info-resmi366.blogspot.com, is identified as a credential theft operation impersonating the Shopee Indonesia e-commerce platform. Analysis indicates the site presents a fraudulent login interface designed to harvest user credentials, including usernames, passwords, and potentially payment details. The page title explicitly displays "SHOPEE INDONESIA," leveraging brand recognition to deceive visitors into entering sensitive information under the guise of a legitimate transaction or account verification process. Infrastructure analysis reveals the domain is hosted on Google Blogger, resolving to the IP address 142.250.183.33, and utilizes an SSL certificate issued by Google Trust Services. Detection metrics confirm its malicious nature, with 18 out of 95 security vendors on VirusTotal flagging the domain as malicious. The domain appears on one security blocklist and holds a Gridinsoft trust score of 0/100. Technologies detected include Blogger, Java, Python, OpenGSE, and HTTP/3, suggesting a blend of legitimate and potentially obfuscated components to evade detection. Users who visited info-resmi366.blogspot.com should immediately revoke any entered credentials, particularly for Shopee or associated financial accounts. It is recommended to scan the device for malware using updated security tools, as credential theft sites may deploy additional payloads. Affected individuals should enable multi-factor authentication on all critical accounts and monitor for unauthorized transactions. If financial data was submitted, contacting the relevant institution to report potential fraud is advised. Awareness of similar impersonation tactics targeting regional e-commerce platforms should be heightened.