info-resmi043[.]blogspot[.]com

PhishDestroy identifies info-resmi043.blogspot.com as a credential theft threat specifically designed to impersonate the e-commerce brand Shopee. This domain is currently offline, but during its active period it posed a significant risk to users who may have been tricked into entering their login credentials on a fraudulent page. The site was hosted on Google Blogger infrastructure, resolving to IP address 142.250.201.65, and was registered on March 07, 2026.

Technical analysis reveals that the domain is flagged by 19 of 95 VirusTotal security vendors, indicating broad recognition of its malicious nature. It appears on one security blocklist and carries an elevated risk level. The SSL certificate was issued by Google Trust Services, which is common for legitimate sites but here was used to lend false credibility. The page title was simply "SHOPEE," a clear attempt to deceive visitors into believing they were on an official Shopee login page.

Given that the domain has already been taken offline, the immediate threat is neutralized. However, PhishDestroy recommends that users who may have interacted with this site change their Shopee passwords and enable two-factor authentication. Organizations should ensure that their security filters block this domain and similar variants. Continuous monitoring for related domains is advised, as threat actors often create new lookalike URLs after takedowns.