pemenang2021[.]blogspot[.]com

PhishDestroy identifies pemenang2021.blogspot.com as a generic phishing domain targeting the Shopee brand. The page title 'SHOPEE2021' suggests it was designed to deceive users into believing they are accessing a legitimate Shopee promotion or login page. No specific drainer kit was identified, but the domain's structure indicates it is part of a credential harvesting campaign.

The domain is registered through Google Blogger and resolves to IP 142.251.20.132, with an SSL certificate issued by Google Trust Services (WE2). VirusTotal analysis shows 17 out of 95 security vendors flagging this domain as malicious, indicating moderate but significant detection. It appears on 1 security blocklist, and its current status is offline, meaning it is no longer accessible. The domain was likely taken down due to abuse reports or automated detection.

As of the investigation, pemenang2021.blogspot.com is offline, reducing immediate risk. However, users who may have visited the site while it was active should monitor for suspicious activity and change any passwords entered. PhishDestroy recommends avoiding similar domains with misspelled brand names or unusual subdomains. Remaining risk is low due to takedown, but vigilance is advised as attackers often register new domains with slight variations.