sim-sitehtx-logi-secure[.]pages[.]dev

This domain, sim-sitehtx-logi-secure.pages.dev, is flagged as a high-risk brand impersonation threat targeting HTX, a cryptocurrency exchange platform. The site replicates HTX’s official branding, including the page title 'HTX | Buy Bitcoin & Ethereum | Crypto Exchange,' to deceive users into entering login credentials or transferring digital assets. Analysis indicates this infrastructure is designed for credential harvesting or wallet-draining attacks, a common tactic in crypto-related phishing campaigns. Infrastructure analysis reveals the following technical indicators: the domain is hosted on Cloudflare’s content delivery network and resolves to the IP address 172.66.44.105. It was registered on April 30, 2026, though the creation date may reflect a placeholder or falsified record. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which does not mitigate the malicious intent. As of the latest scan, only 1 of 95 security vendors on VirusTotal has flagged the domain, and it appears on a single security blocklist. Google Safe Browsing does not currently list the domain, reducing its visibility to automated detection systems. The domain remains active and unmitigated, posing an ongoing risk to users who may encounter it through phishing emails, malicious advertisements, or compromised social media links. No takedown or sinkholing actions have been observed, and the hosting provider has not intervened. Users are advised to verify domain authenticity by cross-referencing official HTX communication channels and avoiding interaction with this site. Organizations should update blocklists to include this domain and its associated IP address, while monitoring for related infrastructure using the provided indicators.