vpass-jp[.]yike021[.]com

The domain vpass-jp.yike021.com is currently active and has been classified as a high‑risk generic phishing site. The site returns HTTP 200 and does not present an SSL certificate, indicating a lack of transport‑level encryption. The only publicly observed artifact is the page title 【重要】メンテナンスのお知らせ｜VJAグループ Vpass, which suggests the page is masquerading as a maintenance notice from the VJA Group Vpass service. Infrastructure analysis shows the domain was registered on 28 October 2020 through Gname.com Pte. Ltd. DNS resolution points to the IP address 172.67.205.209, which is hosted within the Cloudflare network (ASN 13335). The IP is geolocated to the United States and the authoritative name servers are gina.ns.cloudflare.com and rex.ns.cloudflare.com, confirming the use of Cloudflare’s CDN and DNS services. Threat intelligence feeds have already added the domain to multiple blocklists; it is listed by PhishDestroy and PhishingDB, and appears on two additional security blocklists. Reputation scoring from Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports 15 out of 95 security vendors flagging the domain as malicious. The combination of a low trust score, multi‑vendor detections, and active hosting justifies the high‑risk rating. Defenders should block any outbound connections to vpass-jp.yike021.com at the DNS or firewall level and monitor for attempts to retrieve the page title or related URLs. Because the site is served through Cloudflare, threat‑hunting rules that inspect HTTP response codes and missing TLS certificates can help surface similar infrastructure. Continuous re‑evaluation is advised, as the content behind the page title has not been publicly analyzed.