autorent[.]co[.]jp

Autorent.co.jp is currently listed as an active phishing infrastructure. The domain was flagged by the PhishDestroy blocklist and appears on one additional security blocklist, indicating that at least two independent sources have identified it as malicious. A VirusTotal scan involving 91 antivirus and URL‑reputation engines returned no detections at the time of analysis; however, the absence of detections does not constitute a safety assurance, especially given the corroborating blocklist entries.

HTTP probing shows the server responds with a 301 redirect, a common technique used to conceal the final malicious landing page or to route traffic through intermediary hosts. No public information about the registrar, hosting ASN, geographic location, SSL certificate details, or page title has been disclosed, leaving those aspects of the infrastructure unverified. The lack of visible brand references or a documented phishing kit prevents attribution to a specific campaign, but the classification as generic phishing remains consistent with the observed indicators.

Defenders should continue to block autorent.co.jp at perimeter and DNS layers, monitor for any new sub‑domains or IP addresses associated with the same registrar, and update detection rules to flag HTTP 301 responses from this domain. Ongoing observation is recommended to capture any evolution of the payload or hosting changes, and analysts should treat the domain as malicious until a formal takedown confirmation is received.