Security Scan Report: huobi202.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 7 domains to perform 53 HTTP transactions. The main domain is huobi202.com and was registered 3 months ago.

Submitted URL: https://huobi202.com/Agreement/index/Lang/en-us

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Counterfeit HTX crypto-exchange page on huobi202.com using the analyst-vetted 'btbuu Fake Crypto Exchange' kit. Brand impersonation plus known malicious kit — do not interact.

Risk Factors (5)
Known malicious kit family 'btbuu Fake Crypto Exchange' (2 byte/AST-identical JS fingerprints)
Impersonation of the HTX cryptocurrency exchange brand on a non-official domain
Fabricated live-market trading interface intended to look like a real exchange
New, unranked domain (94 days) hosting a cloned exchange brand
Sign-in/sign-up funnels on a fake exchange to capture user accounts/funds
Domain age information unavailable

Details

Page Title

HTX

Scan Type

public

Domain Name Analysis

The domain name 'huobi202.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'huobi202' is 8 characters long holding 3 vowels versus two consonants, along with 3 digits. Segmentation suggests 3 words: hu, obi, 202. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://huobi202.com/Agreement/index/Lang/en-us

Page Load Overview

5.24s
Total Load Time
471 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,057 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

cryptocurrency blockchain61% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
61%
finance banking
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
93.174.46.126Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4202.181.25.23Hong Kong
AS55933Cloudie Limited
4151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
43.174.46.37Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
43.174.46.117Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
43.174.46.11Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4172.67.151.113Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5312--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CBB3FAA1E3FB46361023C0DB5BA557A67662D137530BCC083FED53A84F86D95A9233E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:UZCsq8EfArxN/Iv9wXX+sRc4lh7TLZ111j:UZCsq8EfArxN/Iv9wXX+sRcgLZ1L

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:110758:MkGJGCy6FkRAkggwJkmggI2ZAFKJAgYp4ph2iRIgAI9ClRtA0IRxUSBMAGIDSgRlEImMQIlBXOCGQBFYNA2AkAQRIEyScAEb

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01e70fb327378101
Perceptual Hash:aaa56b256969a95a
Difference Hash:474c3d57454711d1
Wavelet Hash:01b78fff253f8101
Color Hash:#ac6253

Other Hashes

Crop Resistant:474c3c57454711d1

Scan History

Scan history not available

Unable to load historical scan data