Security Scan Report: huobi652.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 6 domains to perform 57 HTTP transactions. The main domain is huobi652.com and was registered 3 months ago.

Submitted URL: https://huobi652.com/Trade/index/Lang/en-us

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Page runs the analyst-vetted 'btbuu' fake crypto-exchange phishing kit and presents itself as HTX on the unrelated 94-day-old domain huobi652.com; fake trading UI and login/register capture points. Do not enter credentials or funds.

Risk Factors (5)
Known malicious phishing kit (btbuu fake crypto exchange) detected in served JavaScript
Impersonation of the HTX/Huobi crypto exchange brand on a non-official domain (huobi652.com)
Fake trading dashboard rendering fabricated price data (K-line, websocket feed)
Credential-collection entry points (user login/register) on a brand-impersonating domain
Unranked 94-day-old domain with minimal legitimacy signals
Domain age information unavailable

Details

Page Title

HTX

Scan Type

public

Domain Name Analysis

The domain 'huobi652.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'huobi652' spans 8 characters holding three vowels versus two consonants, plus three digits. Segmentation suggests three words: hu, obi, 652. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://huobi652.com/Trade/index/Lang/en-us

Page Load Overview

5.38s
Total Load Time
454 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,032 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

cryptocurrency blockchain79% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
79%
finance banking
43%
technology software
27%
gambling betting
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19202.181.25.15Hong Kong
AS55933Cloudie Limited
573--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C1C3D8A1D2FB5636007780C79A6B53267AA5D12B930BC9043FBCC7941FCBC55A9237D4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:r2+RLAGAT0VE6xh3VC3AmBmZHQqCtHZWO3zTuiflhVH+g7ynL3+vLZeGLlf7w:r/M0e6xh3VUZmyfEV4lh7TLZ117w

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:128089:CQihwGALERWmkK1QhkGQpckspFCDWzGjESgzCFomBtCAdoBSzCgAFNYTQQkFEAEEEISEBQwGBRIQQIDLQiIqXAEZoAiSAEOB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:217107a51125013d
Perceptual Hash:aa65ab29a929a33d
Difference Hash:4345454965cdd1c1
Wavelet Hash:81f187af133d093d
Color Hash:#783a4a

Other Hashes

Crop Resistant:4345454965cdd1c1

Scan History

Scan history not available

Unable to load historical scan data