vpass-jp[.]zhongnengtanhui[.]com

This domain, vpass-jp.zhongnengtanhui.com, poses a targeted credential theft threat by impersonating VJA Group, a recognized payment services provider in Japan. The fraudulent page displays a maintenance notification in Japanese, titled 『重要】メンテナンスのお知らせ｜VJAグループ Vpass, designed to deceive users into entering sensitive authentication details such as login credentials, card numbers, or personal identification information. Analysis indicates the site is structured to harvest credentials for unauthorized access to financial accounts or identity fraud, with no legitimate affiliation to VJA Group or its services. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on September 07, 2022, through Gname.com Pte. Ltd., and currently resolves to IP address 172.67.163.93, hosted on AS13335 (Cloudflare, Inc.) in the United States. No SSL certificate is present, increasing exposure to interception. The domain appears on two security blocklists and is flagged by 17 out of 95 security vendors on VirusTotal, including detections from PhishDestroy and PhishingDB. The combination of brand impersonation, lack of encryption, and blocklist presence confirms an elevated risk profile. Users who visited vpass-jp.zhongnengtanhui.com should immediately revoke any entered credentials, particularly those linked to financial services. Monitor associated accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to the legitimate VJA Group security team for further mitigation. Avoid interacting with any links or prompts from the domain, as it remains accessible in cached or offline forms despite its current offline status.