Known malicious kithighphishing
btbuu Fake Crypto Exchange — ws-deedfeeds.js
family: btbuu-fake-crypto-exchange
WebSocket feed client used by the btbuu fake crypto-exchange UI to render fake real-time price ticks.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 14:39
Anchor #2 of 2. ws-deedfeeds.js — WebSocket feed, 1,723 nodes.
Sightings (10)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| wbitx.cfd | 96bbc667… | https://wbitx.cfd/Public/Static/js/ws-deedfeeds.js | byte | 2026-05-24 22:59 |
| wbitx.cfd | 2f746098… | https://wbitx.cfd/Public/Static/js/ws-deedfeeds.js | byte | 2026-05-24 22:51 |
| wbitx.cfd | 9d3c53b7… | https://wbitx.cfd/Public/Static/js/ws-deedfeeds.js | byte | 2026-05-24 22:31 |
| wbitx.cfd | d5a15786… | https://wbitx.cfd/Public/Static/js/ws-deedfeeds.js | byte | 2026-05-24 21:58 |
| trade-maxs.com | fb92d2c9… | https://trade-maxs.com/Public/Static/js/ws-deedfeeds.js | byte | 2026-05-24 16:10 |
| trade-maxs.com | 4799538d… | https://trade-maxs.com/Public/Static/js/ws-deedfeeds.js | byte | 2026-05-24 15:30 |
| evergreen-capital.org | d6791f0f… | https://evergreen-capital.org/Public/Static/js/ws-deedfeeds.js | byte | 2026-05-24 06:54 |
| trade-cex.com | ee525377… | https://trade-cex.com/Public/Static/js/ws-deedfeeds.js | structure | 2026-05-24 01:18 |
| btbuu.com | 801bdf96… | https://btbuu.com/Public/Static/js/ws-deedfeeds.js | byte | 2026-05-23 16:31 |
| btbuu.com | 82af296c… | https://btbuu.com/Public/Static/js/ws-deedfeeds.js | byte | 2026-05-23 08:29 |