# order-verify-jp.com — MALICIOUS

> order-verify-jp.com is a credential phishing domain pretending to be Amazon Japan. Avoid entering sensitive info and stay cautious online.

## Summary
PhishDestroy identifies order-verify-jp.com as a high-risk credential phishing domain designed to steal login credentials by mimicking Amazon Japan's sign-in page. This domain poses a significant threat to users who might unknowingly submit their sensitive information.

The domain was registered through GMO Internet, Inc. on September 22, 2025, and resolved to the IP address 118.27.122.158. It appeared on one reputable security blocklist and was featured in 16 AlienVault OTX threat intelligence pulses. Additionally, 15 out of 95 VirusTotal security vendors flagged it as malicious. The phishing page title closely resembles the legitimate Amazon.co.jp login, enhancing its deception.

Currently, order-verify-jp.com is offline, reducing immediate risk, but users are advised to remain vigilant against similar phishing attempts. Avoid clicking suspicious links and never enter personal credentials on unfamiliar websites. Reporting such domains helps strengthen community defense against credential theft attacks.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: amazon.co.jp - サインイン

## Domain Intelligence
- Registered: 2025-09-22 07:23:53
- Expires: 2026-09-22 07:23:53
- Registrar: GMO Internet, Inc.
- Country: JP
- IP: 118.27.122.158
- IP Country: JP
- IP City: Tokyo
- IP Org: AS7506 GMO Internet Group, Inc.
- Nameservers: ns-a1.conoha.io ns-a2.conoha.io ns-a3.conoha.io
- SSL Issuer: none

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["Criminal IP", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Seclookup", "SOCRadar", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a0f07-5578-7002-8819-12e11e2f551d.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/4d0aa7c3-0873-480a-a27c-be8be0de83b4
- Wayback Machine: https://web.archive.org/web/https://order-verify-jp.com
- PhishDestroy: https://phishdestroy.io/domain/order-verify-jp.com/
- LLM endpoint: https://phishdestroy.io/domain/order-verify-jp.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/order-verify-jp.com/
Last updated: 2026-03-19