nobukojapan[.]com

Analysis of nobukojapan.com shows a high‑risk, active generic phishing infrastructure. The domain was registered on September 17, 2023 through GoDaddy.com, LLC and resolves to IP 65.181.120.54, which is hosted by WHG Hosting Services Ltd in the United States. HTTP requests return a 200 status and the site presents the page title "Nobuko Japan | Your Trusted Japanese Used Cars Supplier," suggesting a fraudulent used‑car offering. Technical fingerprints reveal the use of Cloudflare for CDN protection, LiteSpeed web server, Bootstrap front‑end framework, and client‑side libraries such as jQuery, jQuery UI, OWL Carousel, and cdnjs, alongside a Google Sign‑in integration. The domain’s MX record points to a sub‑domain "_dc-mx.af8fd765303d.nobukojapan.com," an atypical configuration that may be used for covert mail handling. Security intelligence indicates the domain appears on one blocklist and is currently blocked by PhishDestroy; 14 of 91 VirusTotal scanners have flagged it as malicious. Defenders should block any outbound connections to 65.181.120.54, add nobukojapan.com to DNS deny lists, monitor for email traffic using the observed MX pattern, and treat any communications referencing "Nobuko Japan" as fraudulent. Further investigation is needed to confirm the exact phishing payload and any credential‑harvesting mechanisms, but the existing evidence warrants immediate mitigation.