hklogin.uat.mizuhoscfglobal.com
Kategoria: Phishing
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Quttera Web Malware Removal to płatna usługa subskrypcyjna. Ceny, plany i dostępność wersji próbnej ustala Quttera. Quttera jest obsługiwana przez Quttera Ltd, niezależną firmę zewnętrzną niezwiązaną z RCS LT. PCrisk.com może otrzymać prowizję za polecenie, gdy użytkownicy zarejestrują się przez ten link.
Opis hklogin.uat.mizuhoscfglobal.com
This subdomain appears to host a login portal branded as “Mizuho HK SCiSupplier.” Based on the page title, screenshot, and linked resources, it seems intended for supplier or supply-chain finance access associated with Mizuho’s Hong Kong operations. The page presents a single-sign-on style interface asking for an email address and references authentication-related paths and scripts, suggesting an account access gateway rather than a public informational website.
The broader domain structure indicates it may be part of an enterprise environment connected to mizuhoscfglobal.com, with supporting assets and policy links referencing PrimeRevenue. That combination suggests the page may be tied to a business-to-business finance or supplier platform operated for corporate users, potentially involving a banking partner and a third-party platform provider. Based on the available content, this does not appear to be a consumer retail site.
Ocena bezpieczeństwa hklogin.uat.mizuhoscfglobal.com
This website shows multiple risk indicators at the time of this scan. It was flagged by 10 out of 91 security engines, with several detections specifically classifying it as phishing, and it is also listed in a major threat database for social-engineering activity. In addition, the malware scan flagged the main page and several linked resources with generic malicious classifications. Taken together, these signals suggest the page may be attempting to collect credentials or otherwise imitate a legitimate login workflow.
There are also contextual factors that make caution advisable. The page is a credential-entry portal using recognizable financial branding, which is a common pattern in phishing campaigns, and the domain's IP address is listed on one mail-reputation blocklist. While a DNS-based mail-reputation listing alone would be a weak signal, it adds to the overall concern here because it appears alongside multi-engine phishing detections and threat-database listings.
Based on these findings, this website may pose potential risks to visitors.
Opis techniczny
The site presented a valid SSL certificate issued by GoDaddy.com, Inc., with expiry in July 2026. It is hosted on an AWS EC2 IP address in Ashburn, Virginia, and the domain itself is relatively old at about 9 years, which can sometimes indicate an established service but does not by itself reduce phishing risk when active detections are present.
DNSSEC appears to be unsigned, so there is no DNSSEC-based protection visible for this domain. The scan data also shows several internal CSS and JavaScript resources being flagged, along with an authentication callback URL on a related subdomain. Because the page is a login interface and multiple scanners reported phishing-related concerns, any credential submission to this host should be treated with caution pending independent verification through official channels.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?