monex-co-jp[.]bjcxzh[.]cn

This domain is flagged as an elevated-risk phishing site specifically designed to impersonate Monex Securities, a legitimate financial services provider. The page title, ログイン／マネックス証券, directly mimics the login interface of the authentic platform, indicating a credential harvesting operation targeting Japanese-speaking users. Analysis indicates the domain monex-co-jp.bjcxzh.cn was registered on August 18, 2023, through Web Commerce Communications Limited. It resolves to IP address 172.67.211.147, hosted on AS13335 (Cloudflare, Inc.) in the United States, despite lacking an SSL certificate. The domain is detected by 18 out of 95 security vendors on VirusTotal and appears on two security blocklists, including PhishDestroy and PhishingDB. No legitimate financial institution would operate without encryption or use a recently registered domain under a third-party registrar for critical authentication pages. Users who encounter this domain should avoid entering any credentials or personal information. If interaction occurred, immediately revoke access to any linked financial accounts, enable multi-factor authentication, and monitor for unauthorized transactions. Financial institutions should be notified directly through verified contact methods to report the impersonation attempt. Network administrators are advised to block the domain and associated IP address (172.67.211.147) at the perimeter to prevent further exposure.