info-resmi781[.]blogspot[.]com

The domain info-resmi781.blogspot.com is assessed as having an elevated risk level, specifically identified as a generic phishing threat. This evaluation is based on multiple indicators and technical data points that suggest the domain has been used for malicious activities.

Analysis indicates that the domain is registered through Google Blogger and resolves to the IP address 142.250.154.132, which is associated with Google Trust Services and the WE2 certificate. The domain has been flagged by 11 out of 95 security vendors on VirusTotal, indicating a level of suspicion among the security community. Additionally, the domain appears on one security blocklist, further corroborating its malicious nature. The page title 'shopee' suggests that the domain may have been designed to mimic the legitimate e-commerce platform Shopee, a common tactic in phishing attacks. The domain has since been taken offline, which could be a result of takedown efforts by security organizations or the domain owner.

To mitigate risks associated with this domain, users are advised to avoid clicking on any links or visiting the site if it becomes active again. Organizations should update their security policies to block the domain and educate employees about the signs of phishing, such as suspicious URLs and page titles that mimic well-known brands. Network administrators should consider adding the domain to their firewall blocklists and monitoring for any attempts to access it. Additionally, users should report any phishing attempts to their respective security teams and the relevant authorities to aid in further investigations and takedown efforts.