# hashkxjtus.com: Hashkxjts crypto exchange landing page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/hashkxjtus.com/ Machine-readable companion: https://phishdestroy.io/domain/hashkxjtus.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-31 22:26:45 UTC - Last availability or vendor check: 2026-11-01 00:11:26 UTC - Stored record updated: 2026-11-01 00:11:26 UTC - VirusTotal detections in the stored snapshot: 11/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): 1inch ## Stored infrastructure - Observed IP address: 206.119.72.93 - Registrar in stored WHOIS data: Realtime Register B.V. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-26 16:21:03 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a19411-1f34-762e-9082-633cf1ccfc41/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/hashkxjtus.com - Certificate Transparency search: https://crt.sh/?q=%25.hashkxjtus.com - Web Archive lookup: https://web.archive.org/web/*/https://hashkxjtus.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy describes hashkxjtus.com, a captured page branded Hashkxjts offering crypto trading, staking and coin deposit options. The captured hashkxjtus.com page presents itself as a Hashkxjts-branded crypto exchange, opening with an "Announcement" banner and a ticker showing BTC/USDT, ETH/USDT and XAU/USDT prices with percentage changes. Below that, the page offers entry points labeled Staking Mining, Second contract, U-standard contract and Spot, alongside a prompt to "Start your digital currency journey" and buttons for Quick coin charging, Quick withdrawal of coins and Online Service. Tabs for Popular coins, Foreign currency and International sit above a bottom navigation bar with Home, Markets, Trade, U-standard contract and Assets. The stored VirusTotal domain result reports 11 detections out of 92 engines. CRDF reported "malicious"; G-Data reported "phishing". Package revision: 41c14ccafde049febaafa1121439cb7ff0ac30e473a64ddfe5e4868c8f42cc00 Text generated (not scan time): 2026-11-01 00:36:55 Reviewed evidence snapshot: {"domain":"hashkxjtus.com","screenshot_available":true,"page_title":"Hashkxjts","original_meta_description":"DESCRIPTION","initial_ai_description":"Insufficient page content for analysis","metadata_observed_on":"2026-10-31","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":11,"engines":92,"malicious":7,"suspicious":4,"retrieved_date":"2026-11-01","analysis_date":"2026-10-31","flagging_vendors":["CRDF","G-Data","CyRadar","Fortinet","Netcraft","Kaspersky","LevelBlue","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"vendor_labels":{"CRDF":"malicious","G-Data":"phishing","CyRadar":"phishing","Fortinet":"spam","Netcraft":"malicious","Kaspersky":"phishing","LevelBlue":"phishing","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"spam","Forcepoint ThreatSeeker":"spam"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-31T23:01:17Z","final_host":"hashkxjtus.com","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 11 detections out of 92 engines. CRDF reported \"malicious\"; G-Data reported \"phishing\".","page_paragraph_target_characters":517} Source facts (timestamps as stored): {"record_id":1724258,"first_recorded_at":"2026-10-31 23:26:45","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":11,"denominator":92,"malicious":7,"suspicious":4,"vendors":{"CRDF":"malicious","G-Data":"phishing","CyRadar":"phishing","Fortinet":"spam","Netcraft":"malicious","Kaspersky":"phishing","LevelBlue":"phishing","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"spam","Forcepoint ThreatSeeker":"spam"},"observed_at":"2026-10-31T10:11:19Z","checked_at":"2026-11-01 00:33:21","fetched_at":"2026-10-31T23:33:07Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":11,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","CyRadar","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","LevelBlue","Netcraft"],"observed_at":"2026-10-31 10:11:19","checked_at":"2026-11-01 00:33:21","fetched_at":"2026-10-31 23:33:22","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-01 00:33:30"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_PHISH","checked_at":"2026-11-01 00:30:26"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 01:11:26"}} ## Stored page captures - Primary capture: https://i.ibb.co/wrchzM4s/b613b930f7fe.png Captured: 2026-10-31 22:26:45 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a19411-1f34-762e-9082-633cf1ccfc41.png Captured: 2026-10-31 22:26:45 UTC Source report: https://urlscan.io/result/01a19411-1f34-762e-9082-633cf1ccfc41/ - URLScan · 2026-10-30: https://screenshots.phishdestroy.io/us/01a18a9c-1422-70ea-a02c-b3671df1355a.png Captured: 2026-10-30 02:20:55 UTC Source report: https://urlscan.io/result/01a18a9c-1422-70ea-a02c-b3671df1355a/ SHA-256: f20a15e1e77d3597078da2f6c422cae57e3015d271c5e78ca5cd9a8634b0950f - URLScan · 2026-10-31: https://screenshots.phishdestroy.io/us/01a19431-aab7-70f8-895d-a9d502509c57.png Captured: 2026-10-31 23:00:57 UTC Source report: https://urlscan.io/result/01a19431-aab7-70f8-895d-a9d502509c57/ SHA-256: bf33e80979c14fbd02a9a6802d4b9885fc942517095e04f70173c5cd84816671 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/c9fd0689-b71d-41c8-bbdd-1f5d569112cf.png Captured: 2026-10-31 23:01:17 UTC Source report: https://radar.cloudflare.com/scan/c9fd0689-b71d-41c8-bbdd-1f5d569112cf SHA-256: a5c10d449433bad8a54bb68d8dd9b9951a0d891bd1f340fbc689830394c9fd25 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-31T23:03:55Z", "uuid": "01a19411-1f34-762e-9082-633cf1ccfc41", "scanned_at": "2026-10-31T22:25:30Z", "final_url": "https://hashkxjtus.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://hashkxjtus.com/", "from": "http://hashkxjtus.com/", "status": 307 } ], "ip": "206.119.72.93", "domains": [ "webapi.hashkxjtus.com", "heco.oss-cn-hongkong.aliyuncs.com", "plugin-code.salesmartly.com", "assets.kraken.com", "msg.salesmartly.com", "srz.salesmartly.com", "widget.salesmartly.com", "client.salesmartly.com", "api.salesmartly.com" ], "ips": [ "104.16.14.28", "47.79.64.186", "202.79.175.243", "104.18.23.242", "104.18.22.242", "108.138.7.56", "18.245.31.86", "206.119.72.93" ], "asns": [ "13335", "45102", "152194", "16509", "8796" ], "countries": [ "HK", "SG", "US" ], "doc_hash": "1f4c3ae83b115f8e8ccdebe12bd734ffb6c2f9eb8b955394412646a978a3f40b", "script_hashes": [ "bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb", "839114fed00813565625c0ec895ba190c98950950651eaeefc7502dea64c04eb", "c07b2afecca21cf13570b6db45f8f2bd14d409348bf35bea29cd5bebf394819e", "b2e02af084b0c2166ff77eb7f365eb3d3c76602c5866be4cb772b0d9d46543ba", "a5e71ec69e1e4db4870aa6e7671cde949f17d7ab1788eaeb1d3b532192ed164c", "db47b5fe11b138253b71ce98e66e357cca9cd851c125caab2df70b75739c2bb8", "1fb6b3bd98845f8b4c5c0f94e6f6e2bd68ded61ebf260333af0bcd0cab94cb91", "1438c70b4bf4a191dfd9f6ef5d806c2d23c3ba87b250a6adff05ee16216a9dc3", "d3c44c254991c23261cc7fffb926f645974016509dde1b9160c2bbba2cfd7d88", "bd8cf5641d6e06c096f5e155526cae0483357654ddb4c3b7f40669cf64f6f574" ], "globals": [ "addLink", "addMeta", "__ssc", "ssq", "__read", "__spreadArray", "__SS_CHAT_RUNTIME__", "TradingView", "__SS_CHAT_SCRIPT_MODE__", "SHOPINFO", "ASSETS_HOSTNAME_VARIABLE", "ASSETS_CDN_HOSTNAME_VARIABLE", "STATIC_HOSTNAME_VARIABLE", "__SS_CHAT_SHADOWROOT__", "ssmEvent", "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "saveAs", "__VUE__", "marked", "__SS_MARKED_CONFIGURED__", "lib", "rem", "dpr", "__INTLIFY_PROD_DEVTOOLS__", "__INTLIFY_JIT_COMPILATION__", "__INTLIFY_DROP_MESSAGE_COMPILER__", "__VUE_I18N_FULL_INSTALL__", "__VUE_I18N_LEGACY_API__", "setImmediate", "clearImmediate", "PubSub", "__config", "__theme", "__vite_is_modern_browser" ], "cookies": [ "ss_uid", "_ss_s_uid", "__cf_bm" ], "storage_keys": [ "salesmartly_p_g22qhvs_session_tab_key", "salesmartly_p_g22qhvs_u_i", "salesmartly_p_g22qhvs_custom_fields_local_map", "salesmartly_p_g22qhvs_p_xma_", "salesmartly_p_g22qhvs_g_uid", "salesmartly_p_g22qhvs_token_date", "salesmartly_p_g22qhvs_token", "ss_p_c_l_v_pro", "helixua_THEME", "salesmartly_p_g22qhvs_n_u", "main", "helixua_LANGUAGE" ], "tls": { "san": [ "hashkxjtus.com" ], "cipher": "AES_256_GCM", "issuer": "YR2", "subject": "hashkxjtus.com", "protocol": "TLS 1.3", "valid_to": "2027-01-24T16:31:12Z", "valid_from": "2026-10-26T16:31:13Z" }, "domain_age_days": 4, "apex_age_days": 4, "tls_age_days": 5, "tls_valid_days": 89, "requests": 113, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 100, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-10-31T23:03:56Z", "uuid": "c9fd0689-b71d-41c8-bbdd-1f5d569112cf", "scanned_at": "2026-10-31T23:01:17Z", "final_url": "https://hashkxjtus.com/", "status": 200, "history": [ { "url": "https://hashkxjtus.com/", "status": 200 } ], "dom_hash": "8c7707cc0a2798b609e0da042a9bf1288ca4fe32e32cc4ef30fbd64256f5ac32", "doc_hash": "1f4c3ae83b115f8e8ccdebe12bd734ffb6c2f9eb8b955394412646a978a3f40b", "url_risks": [ "Scam" ], "domain_risks": [ "New Domains", "Security Risks", "Scam", "Security threats", "DGA Domains", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "hashkxjtus.com", "type": "A", "value": "206.119.72.93" }, { "name": "webapi.hashkxjtus.com", "type": "A", "value": "202.79.175.243" } ], "dnssec_valid": false, "ip": "127.0.1.2", "verdict": { "tags": [ "dga domains" ], "malicious": true, "categories": [ "dga domains" ] }, "whois": { "registrar": "Realtime Register B.V.", "created": "2026-10-26T17:21:03Z", "updated": "2026-10-26T17:31:19Z", "expires": "2027-10-26T17:21:03Z", "nameservers": [ "ns1.julydns.com", "ns2.julydns.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-31T23:33:07Z", "analysis_at": "2026-10-31T10:11:19Z", "stats": { "timeout": 0, "harmless": 48, "malicious": 7, "suspicious": 4, "undetected": 33 }, "detections": { "CRDF": "malicious", "G-Data": "phishing", "CyRadar": "phishing", "Fortinet": "spam", "Netcraft": "malicious", "Kaspersky": "phishing", "LevelBlue": "phishing", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "spam", "Forcepoint ThreatSeeker": "spam" }, "reputation": 0, "tags": [ "dga" ], "categories": { "alphaMountain.ai": "Spam (alphaMountain.ai)" }, "registrar": "Realtime Register B.V.", "created": "2026-10-26T17:21:03Z", "expires": "2027-10-26T17:21:03Z", "updated": "2026-10-26T17:31:19Z", "first_seen": "2026-10-26T17:36:32Z", "dns": [ { "ttl": 100, "type": "A", "value": "206.119.72.93" }, { "ttl": 21600, "type": "NS", "value": "ns2.julydns.com" }, { "ttl": 21600, "type": "NS", "value": "ns1.julydns.com" }, { "ttl": 600, "type": "SOA", "rname": "master.jmdns.com", "value": "ns1.julydns.com" } ], "dns_at": "2026-10-31T11:17:15Z", "jarm": "3fd3fd0003fd3fd00042d42d0000002059a3b916699461c5923779b77cf06b", "cert": { "san": [ "hashkxjtus.com" ], "issuer": "Let's Encrypt / YR2", "serial": "690ff895bdb024c500af72ba5f6c1a2e299", "sha256": "c14ef3eb8452ddd5c9f96fdbf09a3845a6c75aca62b2c6e495fbe804d425ebd6", "subject": "hashkxjtus.com", "valid_to": "2027-01-24T16:31:12Z", "valid_from": "2026-10-26T16:31:13Z" }, "whois": { "registrar": "Realtime Register B.V.", "registrar_iana_id": "839", "registrar_url": "http://www.realtimeregister.com", "created": "2026-10-26T17:21:03Z", "updated": "2026-10-26T17:31:19Z", "expires": "2027-10-26T17:21:03Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.julydns.com", "ns2.julydns.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "add period" ], "events": { "expiration": "2027-10-26T17:21:03Z", "last changed": "2026-10-26T17:31:19Z", "registration": "2026-10-26T17:21:03Z", "registrar expiration": "2027-10-26T17:21:03Z", "last update of RDAP database": "2026-10-26T17:36:21Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-31T22:29:03Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "hashkxjtus.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-31T22:27:51Z", "first": "2026-10-31T22:27:51Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 2602 }, "social_tags": { "title": "Hashkxjts", "robots": "all", "ogImage": "/platform/dev/logo_144.png?2.0.1762865831437", "ogTitle": "Hashkxjts", "keywords": "KEYWORDS", "themeColor": "#ffffff", "description": "DESCRIPTION", "ogDescription": "DESCRIPTION" }, "trackers": { "requests": 89 }, "mixed_content": { "no_sri": [ "https://plugin-code.salesmartly.com/js/project_910381_887656_1792798610.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 340, "tls": 155, "wait": 153, "connect": 154, "download": 0 }, "response_ms": 802 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 5358, "co2_grams": 0.0002, "cleaner_than": 85 }, "dns_server": { "ns": [ { "ip": "162.159.27.251", "host": "ns2.julydns.com" }, { "ip": "162.159.48.223", "host": "ns1.julydns.com" } ], "zone": "hashkxjtus.com" }, "cookies": { "cookies": [ { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" } ] }, "location": { "ip": "206.119.72.93", "asn": "8796", "org": "Starcloud Global Pte. LTD", "city": "Los Angeles", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "hashkxjtus.com" }, "dns": { "A": [ "206.119.72.93" ], "NS": [ "ns2.julydns.com", "ns1.julydns.com" ], "SOA": "{\"nsname\": \"ns1.julydns.com\", \"hostmaster\": \"master.jmdns.com\", \"serial\": 1793035589, \"refresh\": 3600, \"retry\": 1200, \"expire\": 86400, \"minttl\": 600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "206.119.72.93", "family": 4 }, "redirects": { "chain": [ "https://hashkxjtus.com" ] }, "whois": { "registrar": "Realtime Register B.V.", "created": "2026-10-26T17:21:03Z", "updated": "2026-10-26T17:31:19Z", "expires": "2027-10-26T17:21:03Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.julydns.com", "ns2.julydns.com" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } } } } ```