mst-monex[.]qlyxlx[.]cn

This domain, mst-monex.qlyxlx.cn, is a phishing site impersonating Monex Securities, as indicated by its page title "ログイン／マネックス証券" (Login / Monex Securities). The site poses a credential theft threat by attempting to harvest login credentials from Japanese users of Monex Securities.

Technical evidence shows the site was flagged by 15 out of 95 VirusTotal vendors, including Criminal IP, BitDefender, CyRadar, ESET, and Forcepoint ThreatSeeker. It appears on 2 blocklists. The domain was created on 2023-08-23 and registered through Web Commerce Communications Limited. The IP address is 104.21.23.151, located in the United States, hosted by AS13335 Cloudflare, Inc. The site uses nameservers abdullah.ns.cloudflare.com and mona.ns.cloudflare.com. No SSL certificate was detected. GridinSoft trust rating is 0 out of 100.

The site is currently offline and inaccessible. Based on the high detection rate, presence on blocklists, zero trust rating, and lack of SSL, the risk level is high for users who may have accessed it while it was active. Any credentials entered should be considered compromised.