www3-vpass-jp[.]wzjnzdm[.]com

This domain, www3-vpass-jp.wzjnzdm.com, is currently flagged as a high-risk phishing site targeting users of the VJA Vpass service. Analysis indicates the page title explicitly references 『【重要】メンテナンスのお知らせ｜VJAグループ Vpass』, suggesting an attempt to deceive visitors by impersonating official VJA Group maintenance notifications. The domain appears on two security blocklists and is actively blocked by PhishDestroy and PhishingDB, reinforcing its classification as malicious infrastructure. Infrastructure analysis reveals the domain resolves to IP address 172.67.191.192, though no additional network details such as ASN or hosting provider are currently available. The domain was registered on October 28, 2016, through Gname.com Pte. Ltd., though its long registration history does not mitigate its current malicious status. VirusTotal detection rates show 16 out of 95 security vendors flagging the domain, while Google Safe Browsing categorizes it under SOCIAL_ENGINEERING, further corroborating its phishing intent. The exact content and functionality of the site remain unanalyzed, as no direct inspection of the page has been conducted. However, the combination of a targeted Japanese-language page title, blocklist presence, and vendor detections strongly indicates a phishing operation designed to harvest credentials or sensitive information from Vpass users. Defenders should treat this domain as active and malicious, prioritizing its inclusion in blocklists and monitoring for connections from internal networks. No evidence currently links this domain to a specific phishing kit or broader campaign. The absence of additional context—such as associated malware samples, redirect chains, or victim reports—limits further attribution. Organizations should correlate any observed connections to this domain with authentication logs for VJA Vpass services to identify potential credential exposure or unauthorized access attempts.