movinie[.]jp

The domain movinie.jp has been identified as a credential-theft phishing site targeting Instagram users. Analysis indicates the site operated under the guise of a women-exclusive social media training program, as evidenced by its page title "スマホ完結！女性限定のSNSスクール「ムビニィ」 - ムビニィ." The domain is currently offline, but prior activity confirms its malicious intent to impersonate Instagram for the purpose of stealing user credentials. Infrastructure analysis reveals the domain was registered on August 30, 2024, and resolved to the IP address 162.43.107.16, associated with AS131965 (Xserver Inc.) in Japan. The SSL certificate was issued by Let's Encrypt (R13). Detection metrics show 20 of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on one security blocklist. The registrar details remain undisclosed, but the combination of brand impersonation, recent creation date, and detection counts aligns with known phishing patterns. Current status confirms the domain has been taken offline, though residual risk may persist for users who interacted with the site prior to its removal. Organizations and individuals are advised to block the domain and IP address 162.43.107.16 at the network level. Users who may have entered credentials should immediately reset their Instagram passwords and enable multi-factor authentication. Monitoring for similar domains registered under the same infrastructure or impersonating social media platforms is recommended.