mitrausahaglobal[.]com

mitrausahaglobal.com was registered on March 10 2026 through NameMart Pte. Ltd. The authoritative nameservers are ns1.domainnamens.com and ns2.domainnamens.com, which resolve to the IPv4 address 148.66.3.117. The IP belongs to ASN45753 Netsec Limited and is geolocated in Hong Kong. No SSL certificate is presented; the site was served over plain HTTP, indicating an absence of transport‑level encryption. The HTTP response includes a page title of "Shopee", implying an attempt to reference the e‑commerce brand, although no further page‑content analysis is available.

Fingerprinting of the server stack identified Vue.js, Nginx, Cloudflare, Swiper, jQuery and cdnjs, a combination frequently observed in fraudulent clone sites. The domain appears on one security blocklist and has been actively blocked by the PhishDestroy mitigation service. VirusTotal scans recorded 11 of 95 security engines flagging the domain as malicious, reinforcing the phishing classification. Current intelligence marks the site as taken offline, confirming that it is no longer reachable.

Defensive recommendations include continued monitoring of DNS queries for the associated IP and nameserver records, adding the domain and IP to perimeter blocklists, and inspecting any outbound traffic that appears to target the "Shopee" brand for credential‑harvesting behavior. Because the site is offline, direct forensic capture of the page is not possible; further evidence would be needed to detail the exact phishing technique employed. Based on registration data, hosting location, lack of TLS, page title, and multi‑engine detections, an elevated risk posture remains justified for this infrastructure.