globalterdaftar[.]com

This domain is flagged as a high-risk credential theft operation impersonating the Shopee e-commerce platform. Analysis indicates the infrastructure is designed to harvest login credentials, payment details, or personal information from victims under the guise of a trusted brand. The threat type is classified as brand impersonation with credential theft objectives, based on page title matching and known attack patterns associated with this domain. Infrastructure analysis reveals the domain globalterdaftar.com was registered on January 23, 2026, through NameMart Pte. Ltd., a registrar frequently observed in phishing campaigns. The domain resolves to IP address 148.66.3.116, located in Hong Kong under AS45753 (Netsec Limited), an autonomous system with historical ties to malicious hosting. Security vendors on VirusTotal flag this domain at 20/95, while it appears on one additional blocklist. The SSL certificate is issued by Let's Encrypt (serial number E8), a common choice for attackers due to its free and automated issuance process. The page title explicitly displays 'Shopee,' confirming the targeted brand impersonation. Mitigation steps for this specific threat type include immediate blocking of the domain and IP address across network security controls. Organizations should implement email filtering rules to quarantine messages containing links to globalterdaftar.com or similar brand-impersonating domains. End users should be educated to verify domain authenticity before entering credentials, particularly on sites mimicking Shopee or other e-commerce platforms. Security teams are advised to monitor for credential reuse attempts, as harvested data may be leveraged in subsequent account takeover attacks. Certificate transparency logs should be reviewed for additional Let's Encrypt certificates issued to this registrar or hosting provider.