shopeeindonesiiaa[.]my[.]id

This domain, shopeeindonesiiaa.my.id, is under investigation for brand impersonation targeting ShopeePay, a digital payment service affiliated with the Shopee e-commerce platform. Analysis indicates the domain is designed to mimic legitimate ShopeePay login or transaction pages, likely to harvest user credentials, payment details, or deploy malicious scripts such as drainer kits. The threat type is classified as brand impersonation, a tactic commonly used to exploit user trust in recognized brands for fraudulent activities, including account takeovers or unauthorized financial transactions.

Technical indicators reveal the domain was registered on July 09, 2026, through PT Digital Registra Indonesia, a registrar frequently associated with high-risk domains. It resolves to the IP address 203.175.9.152, which has not been flagged in public blocklists at the time of this assessment. The domain currently holds a VirusTotal detection score of 0/95, indicating no security vendors have identified it as malicious. Google Safe Browsing (GSB) status remains unlisted, and no blocklist entries were found. The SSL certificate is issued by Let's Encrypt, a common provider for both legitimate and malicious domains, which does not inherently indicate trustworthiness.

As of the latest assessment, the domain remains active and unresolved by security providers, posing an ongoing risk to users. No takedown actions have been observed, and the infrastructure appears operational. Organizations and users are advised to block the domain at the network level and monitor for related indicators of compromise, such as the resolving IP or SSL certificate thumbprints. End-users should be educated to verify domain authenticity before entering credentials, particularly for financial services. Given the lack of detection and active status, this domain warrants continued monitoring for emerging threats or shifts in infrastructure.