giftshopee-129[.]blogspot[.]com

This domain, giftshopee-129.blogspot.com, operates as a credential theft platform impersonating the Shopee e-commerce brand. Analysis of the page title, HADIAH AKHIR TAHUN SHOPEE 2020, indicates a targeted campaign aimed at Indonesian-speaking users, falsely presenting itself as an official end-of-year reward program. The fraudulent site likely harvests login credentials, payment details, or personal information under the guise of claiming non-existent prizes, a common tactic in brand impersonation schemes. Infrastructure analysis reveals the domain was registered through Google Blogger, a platform frequently abused for low-cost phishing deployments due to its free hosting and SSL certificates. The domain resolves to IP address 142.251.110.132, associated with Google LLC infrastructure in the United States. Detection metrics show 13 out of 95 security engines on VirusTotal flagged the domain as malicious, while it appears on one security blocklist. Notably, the domain creation date is listed as March 27, 2026, an anomaly suggesting either a typo in registration records or an attempt to obfuscate tracking. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy to potential victims. Users who visited giftshopee-129.blogspot.com should immediately revoke any entered credentials, particularly for Shopee or linked financial accounts. Monitor associated email addresses for unauthorized access attempts and enable multi-factor authentication where available. If payment details were submitted, contact financial institutions to flag potential fraudulent transactions. Given the domain’s current offline status, users should remain vigilant for similar campaigns, as threat actors often redeploy phishing kits under new subdomains or alternative hosting platforms. Organizations should update blocklists to include this domain and its resolved IP to prevent future access attempts.