shopeejkt619[.]blogspot[.]com

This domain, shopeejkt619.blogspot.com, is identified as a phishing portal specifically designed to impersonate the Shopee e-commerce platform. Analysis indicates the site presents a fraudulent login interface under the title PUSAT SHOPEE 2020, targeting users with credential harvesting tactics. The domain is currently offline, though prior activity suggests it was actively used for malicious purposes. Infrastructure analysis reveals the domain was registered through Google Blogger and resolved to the IP address 142.251.141.65, associated with AS15169 (Google LLC) in the United States. The SSL certificate is issued by Google Trust Services (WE2), a common characteristic of Blogger-hosted sites. Despite this legitimate hosting context, the domain was flagged by 18 of 95 security vendors on VirusTotal, appears on one security blocklist, and was explicitly blocked by PhishDestroy. The domain creation date is recorded as March 10, 2026, which may indicate an attempt to evade detection through anomalous registration timestamps. Current status confirms the domain is offline, reducing immediate risk to users. However, the infrastructure remains under the control of the same hosting provider, and similar domains may emerge. Recommendations include monitoring for re-activation, blocking the domain and associated IP at network perimeters, and educating users on identifying phishing attempts, particularly those impersonating e-commerce platforms. Security teams should also review logs for prior interactions with this domain to assess potential credential exposure.