hoantienshopee[.]info

hoantienshopee.info was observed on July 24, 2026 and is currently reported as offline. The domain resolves to the IPv4 address 199.191.50.11, which is geolocated to Germany and is announced by AS47846 belonging to SEDO GmbH. Registration data shows the domain was created on June 22, 2026 through the registrar Name.com, Inc., and the authoritative name servers are ns1jsv.name.com, ns2jqz.name.com, ns3gnv.name.com, and ns4kpx.name.com. The site presented an HTTP 200 response and the page title returned exactly “hoantienshopee.info”, providing no additional context about the content or targeted brand.

TLS negotiation succeeded using a DigiCert Inc issued certificate signed by the Encryption Everywhere DV TLS CA - G2, indicating that the operator obtained a publicly trusted certificate. The domain appears on a single security blocklist and was flagged by PhishDestroy, confirming its classification as a phishing resource. VirusTotal analysis recorded a single positive detection out of 91 scanned security vendors, reinforcing the suspicion despite a relatively low detection count. No further intelligence such as Safe Browsing verdicts, Open Threat Exchange tags, or malware kit identifiers were available.

The limited evidence set suggests a short‑lived phishing infrastructure that was taken down shortly after deployment, as indicated by the recent creation date and current offline status. Defenders should continue to block traffic to 199.191.50.11 and to hoantienshopee.info at the DNS layer, monitor for reuse of the associated name servers or IP range, and consider adding the domain to internal deny lists. Ongoing vigilance is advised because the registrar and hosting provider are publicly accessible, allowing rapid re‑registration of similar identifiers.