info-resmi472[.]blogspot[.]com

This domain, info-resmi472.blogspot.com, is identified as a phishing resource impersonating the Shopee e-commerce platform. Analysis of the page title and content confirms the presence of a brand impersonation scheme, likely designed to harvest user credentials or financial information under the guise of a legitimate Shopee interface. No direct evidence of a cryptocurrency drainer kit was observed, though the infrastructure supports dynamic scripting consistent with credential theft operations. Infrastructure analysis reveals the domain was registered through Google Blogger, a platform frequently exploited for low-cost phishing deployments. The resource resolves to IP address 142.251.13.132, a Google-hosted endpoint. Detection metrics indicate 20 of 95 security vendors on VirusTotal have flagged the domain, while a single security blocklist includes it. The SSL certificate is issued by Google Trust Services, providing a veneer of legitimacy. Technologies detected on the page include Blogger, Java, Python, OpenGSE, and HTTP/3, suggesting a layered hosting environment with potential for server-side malicious activity. The domain has been taken offline, reducing immediate exposure risk. However, the registrar’s history of abuse and the use of a major hosting provider’s infrastructure indicate a pattern of rapid deployment and takedown. Remaining risk includes potential re-emergence under a similar subdomain or migration to another free hosting service. Organizations are advised to monitor for related indicators, including the IP address and registrar, and to implement domain-based blocking for subdomains under the blogspot.com parent domain associated with phishing activity.