mypace-kids[.]biz

On July 24, 2026 analysts reviewed the domain www.mypace-kids.biz and found multiple technical indicators consistent with a high‑risk phishing operation. The domain was registered through Japan Registry Services Co., Ltd. on February 21, 2026 and resolves to IP address 133.242.249.34, which belongs to AS7684 SAKURA Internet Inc. in Japan. An active TLS certificate issued by Let’s Encrypt (R12) secures the site, and an HTTP request returns a 200 status code, confirming that the web service is reachable. The page title, "東京で英語講師アルバイトを求人中 - 募集エリア一覧 - 東京の英会話講師求人募集 | MyPace English," indicates a Japanese‑language recruitment page, but no further content analysis is available.

The site runs on a WordPress stack with MySQL, PHP, Yoast SEO, Nginx, and front‑end libraries including Slick, jsDelivr, and jQuery Migrate. VirusTotal recorded a single positive detection out of 93 scanned vendors, and the domain is listed on one public blocklist. PhishDestroy has already added the domain to its blocklist, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment.

While the exact phishing payload or credential‑harvesting form has not been disclosed, the combination of recent registration, Japanese hosting, a legitimate‑looking TLS certificate, and the presence on multiple security blocklists strongly suggests an active phishing campaign targeting Japanese speakers. Defenders should immediately block traffic to www.mypace-kids.biz at perimeter firewalls and DNS filters, monitor for similar WordPress‑based phishing infrastructure, and consider notifying upstream hosting providers to expedite takedown. Continuous scanning for changes to the site’s content and re‑evaluation of detection scores are recommended to maintain situational awareness.