shopeecoo[.]blogspot[.]com

This domain is flagged as a high-risk brand impersonation threat specifically targeting ShopeePay, a Southeast Asian digital payment service. Analysis indicates the infrastructure is designed to deceive users into believing they are interacting with legitimate ShopeePay promotions or reward programs, as evidenced by the page title 'PROGRAM SHOPEE' and the domain’s visual mimicry of official branding. Infrastructure analysis reveals the domain shopeecoo.blogspot.com is hosted on Google Blogger, resolving to the IP address 192.178.183.132. The domain is detected by 19 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It appears on two security blocklists and is actively blocked by PhishDestroy and OpenPhish. The SSL certificate is issued by Google Trust Services, which aligns with the hosting platform but does not mitigate the malicious intent. No historical registration data is publicly available due to the use of a free subdomain service. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and associated IP address (192.178.183.132) at the network perimeter. Organizations should deploy email and web filtering rules to prevent users from accessing the domain, particularly in regions where ShopeePay is widely used. End-user education should emphasize verifying URLs and avoiding engagement with unsolicited promotions, even if they appear to originate from trusted brands. Security teams are advised to monitor for similar subdomains under blogspot.com or other free hosting services that may emerge as part of this campaign.