hklogin[.]uat[.]mizuhoscfglobal[.]com

This domain is an active credential phishing site designed to impersonate the legitimate Mizuho HK SCiSupplier portal. Analysis indicates the site is engineered to harvest corporate login credentials, posing a significant risk to financial institutions and their supply chain partners. The fraudulent page mimics the appearance and functionality of the authentic supplier portal, increasing the likelihood of successful deception for unsuspecting users. Infrastructure analysis reveals multiple high-risk indicators. The domain hklogin.uat.mizuhoscfglobal.com was registered through GoDaddy.com, LLC on August 01, 2016, though its malicious use appears recent. It resolves to the IP address 52.55.20.97, hosted on infrastructure belonging to Amazon.com, Inc. (AS14618) in the United States. Security vendor detection is substantial, with 9 out of 95 engines on VirusTotal flagging the domain as malicious. Additionally, the domain appears on one security blocklist and is actively blocked by enterprise-grade threat intelligence platforms. Users who may have interacted with this domain should take immediate action. First, revoke any credentials entered on the site, as they are now compromised. Monitor associated accounts for unauthorized activity, including financial transactions or data access. Notify internal security teams to investigate potential exposure and implement additional authentication measures, such as multi-factor authentication, for critical systems. Organizations should also consider blocking the domain and its resolving IP at the network perimeter to prevent further access.