htx-account[.]com

This domain, htx-account.com, is confirmed as a brand impersonation phishing site specifically targeting HTX, a cryptocurrency exchange platform. The site presents itself as a legitimate login portal for HTX users, using the page title 'HTX Login for Secure Exchange Account Access' to deceive victims into entering credentials. As of the latest verification, the domain has been taken offline, though prior activity remains a documented threat. Analysis of technical indicators reveals the domain was registered on June 22, 2026, through Gransy, s.r.o., a registrar with historical associations to high-risk domains. Infrastructure analysis shows the domain resolved to the IP address 186.2.175.79, a host previously linked to other phishing and fraudulent operations. The SSL certificate was issued by Let's Encrypt, a common choice among threat actors due to its free and automated issuance process. Detection metrics from VirusTotal indicate that 2 of 95 security vendors flagged the domain as malicious, a low but notable detection rate that suggests early-stage or evasive phishing infrastructure. The current offline status of htx-account.com does not eliminate the risk posed by this campaign. Organizations and users are advised to treat this domain as a confirmed threat vector. Immediate actions should include blocking the domain and its associated IP (186.2.175.79) at the network perimeter, updating endpoint protection rules to detect and prevent access to the domain, and monitoring for credential theft or unauthorized transactions linked to HTX accounts. Users who may have interacted with this site should rotate their credentials immediately and enable multi-factor authentication on all financial and exchange platforms. Security teams are encouraged to review logs for connections to the domain or IP and investigate any anomalous activity tied to HTX-related services.