5-days[.]jp

The domain 5-days.jp is currently classified as a high‑risk generic phishing site and remains active as of 12 July 2026. The public page title reads “TOP/学習塾・個別指導なら毎日学べる個別塾5‑Days”, indicating that the site presents itself as an educational tutoring service. DNS resolution points to 157.7.107.83, an IP owned by GMO Internet Group in Japan. The host presents a valid GlobalSign nv‑sa / GlobalSign GCC R3 DV TLS CA 2020 certificate and returns HTTP 200 responses. Underlying technologies identified include WordPress, MySQL, PHP, Apache HTTP Server, Cloudflare CDN, Google Maps, Swiper, and ShareThis. The domain uses the authoritative nameservers dns01.muumuu‑domain.com and dns02.muumuu‑domain.com and was registered on 17 December 2010. Threat intelligence shows the domain is listed on two public phishing blocklists—PhishDestroy and OpenPhish—and appears in two AlienVault OTX pulses. VirusTotal analysis reports four of ninety‑five scanners flagging the domain. While the page title suggests a tutoring front‑end, no additional content has been examined, leaving the exact phishing lures and credential‑capture mechanisms uncertain. Defenders should treat 5‑days.jp as malicious, enforce network‑level blocking, monitor DNS queries for the associated IP and nameservers, and consider sinkholing the domain to disrupt any ongoing campaigns.