galerihadiah-shopee789[.]blogspot[.]com

This domain is flagged as a high-risk phishing site specifically targeting users through fake reward schemes under the guise of PT SHOPEE INDONESIA. Analysis indicates the infrastructure is designed to mimic legitimate e-commerce platforms to harvest credentials, payment details, or personal information through social engineering tactics. Infrastructure analysis reveals the domain galerihadiah-shopee789.blogspot.com was registered through Google Blogger and resolves to the IP address 142.251.20.132. It is detected by 21 out of 95 security vendors on VirusTotal, with Google Safe Browsing specifically flagging it for SOCIAL_ENGINEERING. The domain appears on at least one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services, and the site employs technologies including Blogger, Java, Python, OpenGSE, Google AdSense, and HTTP/3. The page title explicitly uses PT SHOPEE INDONESIA, a clear indicator of brand impersonation. Mitigation steps for this type of threat include immediate blocking of the domain and IP address across network security controls. Organizations should update endpoint protection rules to detect and prevent access to this infrastructure. Users who may have interacted with the domain should be instructed to reset credentials for any accounts accessed during the exposure window, particularly those tied to e-commerce or financial services. Security teams should monitor for indicators of compromise, including unusual login attempts or unauthorized transactions, and conduct a review of any systems that accessed the domain. Awareness training should emphasize the risks of reward-based phishing schemes and the tactics used to impersonate trusted brands.