Researcher flags smbc.hocxiu.com fake SMBC (Sumitomo Mitsui Banking) phishing site

What happened

Security researcher @KesaGataMe0 posted on X on 12 November 2026 that hxxps://smbc[.]hocxiu[.]com/ is a phishing site impersonating SMBC (Sumitomo Mitsui Banking Corporation, 三井住友銀行), served through Cloudflare (AS13335). The domain also appears on the Phishing Army extended blocklist, a public phishing domain blocklist. hocxiu.com is not an SMBC domain, and SMBC is impersonated. Do not log in to banking from links in emails or SMS; use the official SMBC app or website typed yourself. Source: https://x.com/KesaGataMe0/status/2120807196569337993

How the scam works

These pages copy a familiar login, payment or delivery form so that a typed password, one-time code, card number or other personal detail goes to the operator rather than to the real company. The address is often a look-alike domain, a newly registered shop, or a free host such as Weebly, Wix, Firebase, Vercel, Workers or Pages. Some kits cloak the real form from scanners and only show it in certain countries or to certain devices. The brand whose name or logo appears is being impersonated and is not involved, unless the report says the page was planted on a compromised official site, in which case only that path is the phishing lure. Open the official app or type the company's real address yourself. If you already entered a password or a card number, change the password on the official site, turn on a new two-factor method, and contact the company and your bank.

If a message, a page or a caller creates urgency about money, a login or a legal threat, pause and check the claim through a contact method you already trust. Keep screenshots, reference numbers and the exact addresses or phone numbers you were given, and tell your bank early if money has already left the account. Official brands and authorised firms named in a lure are not involved unless a primary source says otherwise.

Source

Source: https://x.com/KesaGataMe0/status/2120807196569337993