info-resmi219[.]blogspot[.]com

PhishDestroy identifies info-resmi219.blogspot.com as an elevated-risk phishing domain specifically targeting Shopee users. This threat is a generic phishing campaign designed to trick visitors into disclosing sensitive credentials and personal information under the guise of a legitimate Shopee login or account page. The domain was registered through Google Blogger, which is commonly abused for quick phishing setups due to its free hosting and ease of deployment.

Technical indicators reveal that the domain resolves to IP address 192.178.183.132 and carries an SSL certificate issued by Google Trust Services (WE2), lending it a false sense of legitimacy. VirusTotal reports that 5 out of 95 security vendors flagged this domain as malicious, and it currently appears on one security blocklist. While the domain has been taken offline, its prior activity and the low detection rate highlight the need for vigilance. The page title was set to "shopee", clearly impersonating the popular e-commerce platform. The domain's registration through a free service and its recent takedown underscore the ephemeral nature of such threats.

To stay protected, Shopee users should always verify URLs before logging in, ensure the site uses the official shopee.co.id or shopee.com domain, and never enter credentials on third-party pages. Enable two-factor authentication on your Shopee account and use a password manager to avoid reusing passwords. If you have already visited this domain or entered any information, change your Shopee password immediately and monitor your account for unauthorized activity. Report any phishing attempts to Shopee's security team and consider scanning your device for malware. PhishDestroy recommends blocking the domain and educating users about common phishing lures involving fake login pages.