vpass-jp[.]ozsgo[.]cn

vpass-jp.ozsgo.cn is a domain flagged as a generic_phishing threat. The domain appears to target the VJAグループ Vpass brand, though no specific drainer kit has been identified. The page title suggests a maintenance notice, which is a common tactic to lure unsuspecting users into providing sensitive information.

Analysis indicates that vpass-jp.ozsgo.cn has a VirusTotal score of 17/95, suggesting a moderate level of detection by security vendors. The domain is registered through 商中在线科技股份有限公司 and was created on May 17, 2025. It resolves to the IPv6 address 2606:4700:3035::6815:503c, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain appears on 2 security blocklists, further indicating its malicious nature. No SSL certificate is present, which is another red flag for potential phishing activity.

Currently, the domain is offline, which suggests that it has been taken down or is no longer active. However, the infrastructure used (Cloudflare and the registrar) remains a concern. Users should be cautious if they encounter this domain in the future, as it may be reactivated. The elevated risk level and the presence on blocklists indicate that the domain poses a significant threat and should be avoided. Security teams are advised to monitor for any resurgence of activity and to ensure that users are educated on the signs of phishing attempts.