huobi-register[.]com

The domain huobi-register.com is a confirmed phishing site engaged in brand impersonation, specifically targeting users of the cryptocurrency exchange Huobi (now rebranded as HTX). This site posed an elevated risk by mimicking legitimate registration or login pages to harvest user credentials, though no crypto drainer kit was detected. As of the latest verification, huobi-register.com has been taken offline, but prior activity classified it as a scam under the impersonation category.

Technical indicators confirm the malicious nature of huobi-register.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned it a trust score of 0 out of 100. It appeared on 1 security blocklist, PhishDestroy, and was registered through GoDaddy.com, LLC on December 4, 2018. The site resolved to the IP address 104.21.80.1, hosted by Cloudflare in the US (AS13335), and used an SSL certificate issued by Google Trust Services (WE1). Observed technologies included Cloudflare Browser Insights and HTTP/3, while the page title displayed a '403 Forbidden' error at the time of assessment.

Users who interacted with huobi-register.com should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on their Huobi/HTX accounts, and monitor for unauthorized transactions or account activity. If cryptocurrency was involved, revoking token approvals and transferring funds to a new wallet is recommended. Victims should report the phishing domain to their local cybercrime authorities, the impersonated brand (Huobi/HTX), and platforms like Google Safe Browsing or PhishTank to aid in blocking future threats.