Security Scan Report: huobi089.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 7 domains to perform 53 HTTP transactions. The main domain is huobi089.com and was registered 3 months ago.

Submitted URL: https://huobi089.com/Agreement/index/Lang/en-us

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

Fake HTX/Huobi-branded crypto exchange on huobi089.com running the analyst-vetted 'btbuu' phishing kit (kline.min.js, ws-deedfeeds.js); brand impersonation plus known malicious kit — do not enter credentials.

Risk Factors (4)
Known malicious phishing kit (btbuu fake crypto exchange family) detected on the page
Brand impersonation of HTX/Huobi on a non-official, unrelated domain
Recently registered domain (94 days) with no domain reputation
Login/registration endpoints hosted under a lookalike crypto-exchange brand domain
Domain age information unavailable

Details

Page Title

HTX

Scan Type

public

Domain Name Analysis

The domain name 'huobi089.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 8 characters in 'huobi089' with 3 vowels and two consonants, notching three digits. Tokenizing the label suggests three words: hu, obi, 089. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://huobi089.com/Agreement/index/Lang/en-us

Page Load Overview

6.05s
Total Load Time
470 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,057 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

cryptocurrency blockchain63% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
63%
finance banking
38%
government public service
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13202.181.25.28Hong Kong
AS55933Cloudie Limited
13104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
534--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T116B309A1E3FB4636102380DB5BA957A67762D037530BCD043FED42A84F86D55A9633E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:UZCsq8EwATJxN/Iv9wXX+sRc4lh7TLZ11Om:UZCsq8EwATJxN/Iv9wXX+sRcgLZ1X

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:110761:CWAiJUUKBwaBCkKamgAEwSawi1CyBPUiTAfARGFFwGAjERACVAICYJgwSUApNBQJ7EGQMBtQSZNAQEiCNYoEAheEBBwACIpd

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:21f7878707078101
Perceptual Hash:ae2549a94b6b2d5a
Difference Hash:47460c0f0d1711d1
Wavelet Hash:01f7c7c7873fc101
Color Hash:#2d8649

Other Hashes

Crop Resistant:47460e0f0d1711d1

Scan History

Scan history not available

Unable to load historical scan data