info-resmi311[.]blogspot[.]com

This domain, info-resmi311.blogspot.com, is flagged as a generic phishing site specifically targeting users of the e-commerce platform Shopee. Analysis indicates the page title explicitly references 'shopee,' suggesting an attempt to impersonate the brand’s login or account verification portal. No crypto drainer kit signatures were detected, but the infrastructure aligns with credential harvesting tactics commonly used to capture user credentials through deceptive login forms. Infrastructure analysis reveals the following technical indicators: the domain is registered through Google Blogger and resolves to the IP address 142.251.110.132. VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious. The SSL certificate is issued by Google Trust Services, a common characteristic of Blogger-hosted content. The domain appears on one security blocklist and is currently blocked by at least one threat intelligence feed. Detected technologies include Blogger, Java, Python, OpenGSE, and HTTP/3, which are consistent with legitimate and malicious Blogger deployments alike. As of the latest assessment, info-resmi311.blogspot.com has been taken offline, likely following abuse reports or automated takedown mechanisms. However, the elevated risk level persists due to the domain’s recent association with phishing activity. Users who may have interacted with this site are advised to reset credentials for any accounts accessed during the exposure window, particularly those linked to Shopee. Organizations should monitor for related indicators of compromise, including the IP address and associated blocklist entries, to prevent further exploitation attempts.