info-pemenang72[.]blogspot[.]com

This domain, info-pemenang72.blogspot.com, is flagged as a generic phishing site targeting users of the Shopee Indonesia e-commerce platform. Analysis indicates the page title explicitly mimics the legitimate brand, displaying 'SHOPEE INDONESIA' to deceive victims into entering sensitive account credentials or payment details. The infrastructure is hosted on Google Blogger, a common tactic to exploit trusted cloud services for malicious purposes, though no specific drainer kit signatures have been confirmed at this stage. Infrastructure analysis reveals the domain resolves to the IP address 142.251.127.132, associated with Google’s content delivery network. The SSL certificate is issued by Google Trust Services (WE2), a legitimate provider, which does not mitigate the phishing risk. VirusTotal detection metrics show 19 out of 95 security vendors have flagged the domain as malicious. The domain is registered through Google Blogger’s platform, with no independent WHOIS creation date available due to its subdomain status. It appears on one security blocklist and is currently offline, though no Google Safe Browsing (GSB) listing was recorded prior to takedown. Current status indicates the phishing page has been taken offline, likely following reports to the hosting provider or automated abuse detection systems. However, residual risk remains due to the potential for rapid redeployment under a new subdomain or domain. Users who interacted with the site should immediately reset credentials for Shopee Indonesia and monitor financial statements for unauthorized transactions. Organizations are advised to block the domain and IP at the perimeter, and security teams should treat any future subdomains under blogspot.com with elevated scrutiny, particularly those mimicking regional e-commerce brands.