htx[.]com[.]kz

The domain htx.com.kz was a brand impersonation phishing site targeting users of the cryptocurrency exchange HTX. It posed as the legitimate HTX platform to deceive victims into disclosing login credentials or other sensitive information through social media phishing tactics. No crypto drainer kit was identified. The site is currently taken offline.

Technical indicators for htx.com.kz show 0 of 95 VirusTotal vendors flagged the domain, and Google Safe Browsing did not detect it as malicious. The domain appeared on 1 security blocklist (PhishDestroy) and resolved to the IP address 18.179.190.111, hosted on AWS EC2 in Japan. The SSL certificate was issued by WE1, and the observed page title matched the domain name. Nameservers included ns-2021.awsdns-60.co.uk and others. Gridinsoft assigned a trust score of 0/100.

Users who interacted with htx.com.kz should immediately change their HTX account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized transactions or login attempts. Report the phishing domain to HTX support and relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units. If financial data was exposed, consider contacting financial institutions to secure accounts.