mst-monex[.]lizi0209[.]cn

This domain, mst-monex.lizi0209.cn, presents a fraudulent login page impersonating Monex Securities, as indicated by the page title ログイン／マネックス証券 (Login / Monex Securities). The threat is credential harvesting, where victims are deceived into entering their account credentials on a fake portal controlled by malicious actors.

Technical analysis confirms the site is malicious. VirusTotal reports 17 out of 95 security vendors flagged the domain, including ADMINUSLabs, Criminal IP, BitDefender, CyRadar, and ESET. The domain is listed on 2 blocklists. It was registered on 2023-08-31 through Web Commerce Communications Limited, and resolves to IP address 2606:4700:3032::ac43:a081 (United States), hosted on AS13335 (Cloudflare, Inc.). No SSL certificate is present, and nameservers are buck.ns.cloudflare.com and saanvi.ns.cloudflare.com. GridinSoft assigns a trust score of 0 out of 100.

The site is currently offline, but it poses a high risk to users who may have accessed it while active. The combination of brand impersonation, low trust score, and multiple vendor detections indicates a clear phishing attempt targeting Monex Securities customers.