ms-shopee[.]com

Analysis of the domain ms-shopee.com shows that it was registered on 13 July 2026 through the registrar Gransy, s.r.o. and is served by the Cloudflare name servers kayleigh.ns.cloudflare.com and moura.ns.cloudflare.com. DNS resolution points to the IPv4 address 135.181.141.188, which remains active at the time of writing. The domain is classified as a generic phishing infrastructure and carries a high risk rating. VirusTotal has recorded a single positive detection out of 91 scanned security vendors, indicating that at least one scanner has identified malicious behavior associated with the domain. No additional intelligence such as associated malware kits, compromised credentials, or targeted brands has been disclosed. The limited age of the domain (registered only one day prior to the report) and the sparse detection footprint suggest a recently deployed campaign that may still be in its early stages. Defenders should add ms-shopee.com and its resolving IP address to blocklists for inbound and outbound traffic, enable DNS sinkholing where possible, and monitor for any related command‑and‑control activity or credential‑theft attempts. Continuous re‑evaluation is advised, as further detections or infrastructure changes could increase the threat surface.