info-resmi955[.]blogspot[.]com

The domain info-resmi955.blogspot.com has been identified as a generic phishing threat that specifically impersonates the popular e-commerce platform Shopee. This domain is currently offline, indicating that it has been taken down, likely due to security interventions. The page title associated with this domain was 'shopee,' confirming the targeted brand impersonation. Users who encountered this site may have been tricked into entering sensitive credentials on a fraudulent login page.

A detailed analysis reveals that info-resmi955.blogspot.com was registered through Google Blogger and resolved to IP address 142.251.20.132. It was flagged by 3 out of 95 VirusTotal security vendors, placing it in a moderate risk category. Additionally, the domain appears on a single security blocklist. The SSL certificate was issued by Google Trust Services (WE2), which is a legitimate certificate authority, but this does not guarantee the site's safety. The domain's presence on a blocklist and the low but non-zero vendor detection rate indicate that while it was not widely recognized as malicious, it posed a real threat to unsuspecting visitors.

As the domain is now offline, the immediate risk of credential theft has been mitigated. However, users who may have interacted with this page should change their Shopee passwords immediately and enable two-factor authentication if possible. PhishDestroy recommends always verifying the authenticity of login pages by checking the URL carefully, looking for official domain names, and avoiding clicking on links from unsolicited messages. For any suspicious domains, users can check PhishDestroy's database for real-time threat assessments. Stay vigilant against phishing attempts that mimic trusted brands, and report any similar domains to security authorities.