shopeejkt-62[.]blogspot[.]com

This domain, shopeejkt-62.blogspot.com, is flagged as a generic phishing threat targeting users of the e-commerce platform Shopee. Analysis of the page title, "HADIAH SHOPEE 2020," indicates an attempt to deceive victims into believing they have won prizes or rewards, a common tactic in credential harvesting and financial fraud campaigns. The domain appears to lack association with any known drainer kit but leverages Blogger’s infrastructure to host the fraudulent content, increasing its perceived legitimacy. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 192.178.183.132 and was registered through Google Blogger, with an anomalous creation date of May 19, 2026, suggesting potential manipulation or misconfiguration. The SSL certificate is issued by Google Trust Services, providing a false sense of security. Detection metrics include a VirusTotal score of 17/95 security vendors flagging the domain, a Gridinsoft trust score of 0/100, and presence on one security blocklist. Technologies detected on the domain include Blogger, Java, Python, OpenGSE, and HTTP/3, which may facilitate the delivery of malicious payloads or data exfiltration. As of the latest assessment, shopeejkt-62.blogspot.com is offline, reducing immediate exposure risk. However, the domain’s infrastructure remains registered, and similar campaigns may resurface under different subdomains or aliases. Users who interacted with the domain should assume potential credential or financial data compromise and initiate password resets, monitor accounts for unauthorized activity, and verify communications from official Shopee channels. Organizations are advised to update blocklists with the provided indicators to prevent future access attempts.