mst-monex[.]baijaanxin[.]com

PhishDestroy identifies the domain mst-monex.baijaanxin.com as a generic phishing threat, targeting users with fraudulent login pages designed to steal credentials. No specific brand or drainer kit was identified in this investigation, but the domain's structure suggests impersonation of a financial service platform. The threat type is generic phishing, and no additional malware or ransomware distribution was observed.

Technical indicators paint a clear picture of malicious intent: VirusTotal shows 13 out of 95 security vendors flagging the domain, confirming widespread detection. The domain was registered through Gname.com Pte. Ltd. on August 30, 2023, and resolves to IPv6 address 2606:4700:3035::ac43:a6d9. Google Safe Browsing explicitly flags the domain for phishing, and it appears on 2 separate security blocklists. Notably, no SSL certificate was issued, a common trait among fraudulent sites that fail to secure connections.

As of the latest check, the domain has been taken offline, indicating a successful takedown action. Despite this, residual risk remains: the domain could be reactivated or similar variants may emerge. Users should remain vigilant and avoid interacting with unsolicited links claiming to be from financial institutions. PhishDestroy recommends monitoring for related domains and advising users to enable multi-factor authentication on all sensitive accounts.