www3-vpass[.]kqccn[.]cn

The domain www3-vpass.kqccn.cn is a phishing site impersonating VJAグループ Vpass, a legitimate organization. This domain poses a specific threat by attempting to deceive users into providing sensitive information, such as login credentials and personal data, under the guise of a maintenance notification. The page title, '【重要】メンテナンスのお知らせ｜VJAグループ Vpass', suggests that users are being lured with a message about important maintenance updates, which is a common tactic used by phishing actors to create a sense of urgency and trust.

Analysis indicates that this domain was registered through 商中在线科技股份有限公司 on May 17, 2025. It does not have an SSL certificate, which is a red flag as legitimate sites typically use SSL to secure data transmission. The domain resolves to the IP address 104.21.15.57, located in the US and associated with AS13335 Cloudflare, Inc. VirusTotal reports that 16 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. These numbers suggest a significant level of suspicion and potential risk.

If users have visited this domain, they should immediately change their passwords for any VJAグループ Vpass accounts and monitor their accounts for any unauthorized activity. Additionally, users should report the incident to their IT department or a cybersecurity professional for further investigation. It is also recommended to run a comprehensive security scan on any devices that accessed the site to ensure no malware was installed.