vpass-jp[.]grgym[.]cn
“【重要】メンテナンスのお知らせ|VJAグループ Vpass”
vpass-jp.grgym.cn — 内容不可用 (HTTP 502). 证据摘要: VirusTotal 19/95 (ADMINUSLabs, Criminal IP, BitDefender, CyRadar, ESET); PhishDestroy score 95/100. 注册商: 商中在线科技股份有限公司.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain vpass-jp.grgym.cn presents a fraudulent maintenance notification page impersonating the Japanese VJA Group Vpass brand. The page title reads "【重要】メンテナンスのお知らせ|VJAグループ Vpass," indicating a fake system maintenance alert designed to deceive users into providing sensitive account credentials or personal information. This constitutes a credential phishing threat targeting Japanese Vpass cardholders.
Technical analysis reveals 19 out of 95 VirusTotal vendors flagged the domain as malicious, with detections from ADMINUSLabs, Criminal IP, BitDefender, CyRadar, and ESET. The domain is listed on two blocklists. It was registered on 2025-05-17 through the Chinese registrar 商中在线科技股份有限公司. The domain resolves to IP address 172.67.179.124, located in the United States and hosted by AS13335 Cloudflare, Inc. No SSL certificate is present. Nameservers are nena.ns.cloudflare.com and rob.ns.cloudflare.com.
The domain is currently offline or down. Its GridinSoft trust score is 0 out of 100, indicating a high-risk threat. Given the recent registration date, lack of encryption, and widespread antivirus detection, this site poses a significant risk to users who may encounter it.
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。