info-resmi819[.]blogspot[.]com

This domain, info-resmi819.blogspot.com, is identified as a credential harvesting phishing site targeting users of the e-commerce platform Shopee. Analysis of the page title and infrastructure confirms it presents a fraudulent login interface designed to capture usernames, passwords, and payment details from unsuspecting victims. The domain specifically mimics Shopee’s branding to exploit user trust in legitimate transactions. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain is registered through Google Blogger, a common platform for low-cost phishing deployment due to its free hosting and SSL certificates. According to VirusTotal, 15 out of 95 security vendors have flagged this domain as malicious, indicating broad detection across the security community. It appears on one security blocklist, and its trust score from Gridinsoft is 0/100, further confirming its fraudulent nature. The domain resolves to the IP address 142.251.20.132, which is associated with Google’s infrastructure but has been abused for phishing purposes. Users who visited info-resmi819.blogspot.com should take immediate action to mitigate potential compromise. If credentials were entered, they must be changed immediately across all platforms where the same password was reused. Affected users should also monitor financial statements for unauthorized transactions, as payment details may have been harvested. Enabling multi-factor authentication on all accounts is strongly recommended to prevent future unauthorized access. Security teams should block this domain and its associated IP address within network security controls to prevent further exposure.