v-vpass-jp[.]liang-zhong[.]com

The domain v-vpass-jp.liang-zhong.com imitates VJA Group, leveraging a page titled "【重要】メンテナンスのお知らせ｜VJAグループ Vpass" to deceive users. Despite its creation in 2015, it was first detected as malicious by PhishDestroy on November 12, 2025. The domain was flagged by 11 out of 95 VirusTotal vendors, indicating a significant level of threat recognition.

Hosted on an IP address managed by Cloudflare, Inc. in the United States, the domain was registered through NameSilo, LLC. The lack of an SSL certificate suggests a potential oversight in mimicking legitimate security features, which could have raised red flags for more cautious users. The domain's presence on two public blocklists, including PhishDestroy and PhishingDB, further corroborates its malicious intent.

Currently offline, v-vpass-jp.liang-zhong.com's takedown reduces its immediate threat. However, its prior activity highlights the persistent risk of phishing domains exploiting trusted brand names. The domain's use of Japanese language elements in its page title suggests a targeted approach, likely aimed at Japanese-speaking users familiar with VJA Group services. This case underscores the importance of timely detection and response to phishing threats, particularly those that have been active for extended periods before being flagged.