open-monex[.]guozhengjun[.]cn
“ログイン/マネックス証券”
open-monex.guozhengjun.cn — Belum terverifikasi. Ringkasan bukti: VirusTotal 14/91 (BitDefender, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker); Spamhaus DBL_SPAM; PhishDestroy score 92/100. Registrar: Web Commerce Communica….
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain open-monex.guozhengjun.cn was registered on August 31, 2023 through Web Commerce Communications Limited and is currently taken offline. Network analysis shows the domain resolves to the IPv6 address 2a06:98c1:3120::3, which belongs to AS13335 Cloudflare, Inc., placing the hosting infrastructure in the United States. No TLS certificate is presented, indicating the site was served without HTTPS encryption. The page title returned by the server is ログイン/マネックス証券, which translates to "Login / Monex Securities," suggesting an attempt to lure victims into credential harvesting for the Monex financial service.
Gridinsoft assigns a trust score of 0 out of 100, reflecting an extremely low confidence in the domain’s legitimacy. Detection services have flagged the domain; fifteen of ninety‑five VirusTotal scanners reported malicious behavior, and the domain is listed on at least one external security blocklist. PhishDestroy has also recorded the site as blocked. Nameservers harley.ns.cloudflare.com and mariah.ns.cloudflare.com confirm reliance on Cloudflare DNS.
While the site is offline, the observed indicators—hosted on a Cloudflare edge, lacking TLS, low trust score, malicious detection count, and a brand‑specific login title—are consistent with a generic phishing operation targeting Monex customers. Defenders should continue to block the domain at perimeter filters, monitor for any re‑activation, and update any URL‑based threat intelligence feeds with the observed IPv6 address and associated hostnames. Further analysis of any future HTTP responses or TLS certificates is required to confirm the presence of credential‑stealing pages if the domain reappears.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive