hklogin.uat.mizuhoscfglobal.com
Catégorie : Phishing
Pour utiliser le produit avec toutes ses fonctionnalités, vous devez acheter une licence pour Combo Cleaner. Essai gratuit limité à sept jours. Combo Cleaner appartient à et est exploité par RCS LT, la société mère de PCRisk.com.
Quttera Web Malware Removal est un service d’abonnement payant. Les tarifs, forfaits et la disponibilité de l’essai sont définis par Quttera. Quttera est exploité par Quttera Ltd, une société tierce indépendante sans lien avec RCS LT. PCrisk.com peut percevoir une commission de recommandation lorsque des utilisateurs s’inscrivent via ce lien.
Description de hklogin.uat.mizuhoscfglobal.com
This subdomain appears to host a login portal branded as “Mizuho HK SCiSupplier.” Based on the page title, screenshot, and linked resources, it seems intended for supplier or supply-chain finance access associated with Mizuho’s Hong Kong operations. The page presents a single-sign-on style interface asking for an email address and references authentication-related paths and scripts, suggesting an account access gateway rather than a public informational website.
The broader domain structure indicates it may be part of an enterprise environment connected to mizuhoscfglobal.com, with supporting assets and policy links referencing PrimeRevenue. That combination suggests the page may be tied to a business-to-business finance or supplier platform operated for corporate users, potentially involving a banking partner and a third-party platform provider. Based on the available content, this does not appear to be a consumer retail site.
Évaluation de sécurité de hklogin.uat.mizuhoscfglobal.com
This website shows multiple risk indicators at the time of this scan. It was flagged by 10 out of 91 security engines, with several detections specifically classifying it as phishing, and it is also listed in a major threat database for social-engineering activity. In addition, the malware scan flagged the main page and several linked resources with generic malicious classifications. Taken together, these signals suggest the page may be attempting to collect credentials or otherwise imitate a legitimate login workflow.
There are also contextual factors that make caution advisable. The page is a credential-entry portal using recognizable financial branding, which is a common pattern in phishing campaigns, and the domain's IP address is listed on one mail-reputation blocklist. While a DNS-based mail-reputation listing alone would be a weak signal, it adds to the overall concern here because it appears alongside multi-engine phishing detections and threat-database listings.
Based on these findings, this website may pose potential risks to visitors.
Description technique
The site presented a valid SSL certificate issued by GoDaddy.com, Inc., with expiry in July 2026. It is hosted on an AWS EC2 IP address in Ashburn, Virginia, and the domain itself is relatively old at about 9 years, which can sometimes indicate an established service but does not by itself reduce phishing risk when active detections are present.
DNSSEC appears to be unsigned, so there is no DNSSEC-based protection visible for this domain. The scan data also shows several internal CSS and JavaScript resources being flagged, along with an authentication callback URL on a related subdomain. Because the page is a login interface and multiple scanners reported phishing-related concerns, any credential submission to this host should be treated with caution pending independent verification through official channels.
Partagez votre expérience avec ce site web. Était-il sûr ? Avez-vous rencontré des problèmes ?