info-resmi887[.]blogspot[.]com

This domain, info-resmi887.blogspot.com, is flagged for Shopee brand impersonation phishing. Analysis indicates that the domain was designed to mimic legitimate Shopee login pages, thereby tricking users into entering their credentials, which could then be harvested by malicious actors. The primary risk is unauthorized access to user accounts and potential financial loss.

Infrastructure analysis reveals that the domain is registered through Google Blogger and resolves to the IP address 172.217.25.193. The domain appears on one security blocklist and is currently blocked by PhishDestroy. According to VirusTotal, 13 out of 95 security vendors flag this domain as malicious. The SSL certificate is issued by Google Trust Services, which might initially lend a false sense of legitimacy to the site.

If users have visited this domain, they are advised to immediately change their Shopee account passwords and enable two-factor authentication. It is also recommended to monitor account activity for any unauthorized transactions and to update any other accounts where the same credentials were used. Additionally, users should consider running a full system scan to ensure no malware was installed.