eastjpn[.]com

PhishDestroy identifies eastjpn.com as an active credential theft domain operating under a generic phishing campaign. The domain is currently categorized at risk level under_investigation, pending further behavioral validation. The observed vector aligns with harvesting user credentials, likely targeting Japanese-speaking victims through localized lures. eastjpn.com was registered on February 07, 2022 through GoDaddy.com, LLC and resolves to IP 162.19.175.31. It leverages a Let's Encrypt SSL certificate to appear legitimate. Current VirusTotal analysis shows 0 detections out of 95 scanners. The domain remains unlisted on major blocklists such as PhishTank, OpenPhish, and URLVoid as of the latest scan. Domain trust scores from scanners like Cisco Talos and Webroot reflect neutral to low reputation at this time. Users are advised to block eastjpn.com at the network and endpoint levels. Avoid interacting with login pages or forms on this domain. Organizations should inspect DNS logs for queries to 162.19.175.31 and forward indicators to threat intelligence teams. Monitor password reuse patterns across corporate credentials. Consider deploying browser extensions that flag untrusted domains or deploy allowlists for known-good corporate portals. Always verify the legitimacy of domains via official channels before entering credentials.