dealden[.]jp

The domain dealden.jp has been identified as a fake login phishing site, posing a significant risk to users. The site is currently offline, but it was registered on July 29, 2025, and appears to have been taken down due to security concerns. There is no specific brand impersonation noted, but the page title suggests it was designed to mimic a legitimate business community platform, potentially to lure unsuspecting visitors into providing sensitive information.

Infrastructure analysis reveals that dealden.jp resolved to the IP address 183.181.88.36, which is located in Japan and belongs to AS131965 Xserver Inc. The domain was flagged by 18 out of 95 security vendors on VirusTotal, indicating a notable level of suspicion among the cybersecurity community. The SSL certificate was issued by Let's Encrypt, suggesting the site may have appeared legitimate to users. Additionally, the domain appears on one security blocklist, further corroborating its malicious nature. The creation date of July 29, 2025, and the current offline status suggest that the site was operational for a short period, likely to evade detection and maximize the impact of its phishing campaign.

Given the current offline status of dealden.jp, users are advised to remain vigilant and avoid visiting the domain or any similar sites. Security professionals should monitor for any resurgence or related domains and ensure that endpoint protection systems are updated to recognize and block this IP address and domain. Organizations are recommended to educate their employees on the signs of phishing attacks and to verify the legitimacy of any business community platforms they encounter online.