huobits[.]com

This domain, huobits.com, is flagged as a brand impersonation threat specifically targeting Ethereum users. Analysis indicates the site mimics a legitimate cryptocurrency exchange, presenting itself as a platform for buying and selling Bitcoin and Ethereum. The page title, 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Huobits,' aligns with tactics used to deceive users into believing they are interacting with a trusted service. No direct evidence of a crypto drainer kit was observed, but the impersonation framework suggests intent to harvest credentials or facilitate fraudulent transactions. Infrastructure analysis reveals the domain was registered on September 18, 2025, through Wild West Domains, LLC, and resolves to the IP address 188.114.97.3. VirusTotal reports 6 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 2 out of 100. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services, and detected technologies include jQuery, Cloudflare, and HTTP/3, which may be leveraged to obfuscate malicious activity or enhance site performance to appear legitimate. As of the latest assessment, huobits.com has been taken offline, reducing immediate exposure risk. However, the domain remains registered, and similar infrastructure could be reactivated or repurposed for future campaigns. Users who interacted with the site should assume potential credential exposure and monitor associated accounts for unauthorized activity. Organizations are advised to maintain blocklist entries for this domain and its resolved IP to prevent re-emergence. No further actionable indicators were identified at this time, but continued monitoring of related infrastructure is recommended.