Security Scan Report: wbitx.cfd

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 3 countries across 4 domains to perform 31 HTTP transactions. The main domain is wbitx.cfd and was registered 5 months ago.

Submitted URL: https://wbitx.cfd/Contract/index

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Analyst-vetted btbuu fake crypto-exchange phishing kit confirmed on wbitx.cfd via two byte-identical JS fingerprints, plus a Google Safe Browsing Social Engineering hit — a fake 'BitX' trading UI. Do not interact.

Risk Factors (5)
Known malicious phishing kit family btbuu-fake-crypto-exchange detected (2 HIGH sighting matches)
Google Safe Browsing Social Engineering threat
Brand-styled crypto exchange UI ('BitX') on a non-official, unranked .cfd domain
Domain is unranked in Cisco Umbrella top 1M and only 156 days old
Inline scripts use encoding/decoding functions — typical of kit obfuscation
Domain age information unavailable

Details

Page Title

BitX

Scan Type

public

Domain Name Analysis

The domain name 'wbitx.cfd' uses the .cfd top-level domain and has no subdomain. The registrable portion 'wbitx' spans 5 characters split between one vowel and four consonants. Word splitting yields 3 words: wb, it, x. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wbitx.cfd/Contract/index

Page Load Overview

3.19s
Total Load Time
433 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,250 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

cryptocurrency blockchain39% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
39%
finance banking
33%
phishing/scam
20%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10151.101.130.137United States
AS54113Fastly, Inc.
7151.101.129.229United States
AS54113Fastly, Inc.
7202.181.25.229Hong Kong
AS55933Cloudie Limited
743.160.212.241Singapore, Singapore
AS132203Tencent Building, Kejizhongyi Avenue
314--

Detected Technologies6

JQueryv1.10.2
100%
50%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11CD30965F3F7053520B340D69BD656D27AB4E01B930BCD047EED06646F8AE68A9233EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:aGM+Ewg43cyrZQwhVH+TSyAW8xvh8eBuLfWSpI6G26gwvSUIMF:NM+oWVlhmuh8ka1GkQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:138710:SCAAhAyQFQlAgM6pCxQgAQAZBARAByJwQYKFpAjFlGTDooLQMAXJmpA8UARQEVFqCcBZr+oQQtBAIBkcAAoCpALJVhUowAIB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8081818181c1fd
Perceptual Hash:faabc0a980a3aaeb
Difference Hash:0101010101010105
Wavelet Hash:ffc1c1c1c1c1c1f9
Color Hash:#2d9ed2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data