monex-co-jp[.]scegq[.]cn

This domain, monex-co-jp.scegq.cn, represents a targeted credential harvesting operation impersonating Monex Securities, a legitimate Japanese financial services provider. The phishing infrastructure presents a fraudulent login interface designed to capture sensitive user credentials, including account numbers, passwords, and potentially two-factor authentication codes. Analysis of the page title マネックス証券 confirms the specific brand being exploited, while the domain structure mimics legitimate Monex URLs to increase deception success rates among Japanese-speaking users. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on March 27, 2024, through Web Commerce Communications Limited, with no SSL certificate present - an immediate red flag for financial services impersonation. VirusTotal detection metrics show 18 out of 95 security vendors flagging this domain as malicious, while it appears on at least one security blocklist. The domain resolves to IP address 172.67.152.170, hosted on Cloudflare infrastructure (AS13335) in the United States, which is commonly abused by threat actors to obfuscate their true origin and benefit from Cloudflare's content delivery network features. Users who have visited monex-co-jp.scegq.cn should immediately take protective measures. Any credentials entered on this site must be considered compromised and changed immediately from a secure device. Financial institutions should be notified of potential account compromise, and users should monitor their accounts for unauthorized transactions. The domain's current offline status does not eliminate risk, as collected credentials may still be in active use by threat actors. Organizations should add this domain and its associated IP address to their security controls, while individuals should verify all financial communications through official channels only.