hklogin.uat.mizuhoscfglobal.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of hklogin.uat.mizuhoscfglobal.com
This subdomain appears to host a login portal branded as “Mizuho HK SCiSupplier.” Based on the page title, screenshot, and linked resources, it seems intended for supplier or supply-chain finance access associated with Mizuho’s Hong Kong operations. The page presents a single-sign-on style interface asking for an email address and references authentication-related paths and scripts, suggesting an account access gateway rather than a public informational website.
The broader domain structure indicates it may be part of an enterprise environment connected to mizuhoscfglobal.com, with supporting assets and policy links referencing PrimeRevenue. That combination suggests the page may be tied to a business-to-business finance or supplier platform operated for corporate users, potentially involving a banking partner and a third-party platform provider. Based on the available content, this does not appear to be a consumer retail site.
Safety Assessment for hklogin.uat.mizuhoscfglobal.com
This website shows multiple risk indicators at the time of this scan. It was flagged by 10 out of 91 security engines, with several detections specifically classifying it as phishing, and it is also listed in a major threat database for social-engineering activity. In addition, the malware scan flagged the main page and several linked resources with generic malicious classifications. Taken together, these signals suggest the page may be attempting to collect credentials or otherwise imitate a legitimate login workflow.
There are also contextual factors that make caution advisable. The page is a credential-entry portal using recognizable financial branding, which is a common pattern in phishing campaigns, and the domain's IP address is listed on one mail-reputation blocklist. While a DNS-based mail-reputation listing alone would be a weak signal, it adds to the overall concern here because it appears alongside multi-engine phishing detections and threat-database listings.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site presented a valid SSL certificate issued by GoDaddy.com, Inc., with expiry in July 2026. It is hosted on an AWS EC2 IP address in Ashburn, Virginia, and the domain itself is relatively old at about 9 years, which can sometimes indicate an established service but does not by itself reduce phishing risk when active detections are present.
DNSSEC appears to be unsigned, so there is no DNSSEC-based protection visible for this domain. The scan data also shows several internal CSS and JavaScript resources being flagged, along with an authentication callback URL on a related subdomain. Because the page is a login interface and multiple scanners reported phishing-related concerns, any credential submission to this host should be treated with caution pending independent verification through official channels.
Share your experience with this website. Was it safe? Did you encounter any issues?