huitianbusiness[.]com

Analysis of huitianbusiness.com shows a newly registered domain (created 27 February 2026) that resolves to the Cloudflare address 188.114.96.3, hosted in the United States under ASN 13335. The domain is delegated to Cloudflare nameservers amanda.ns.cloudflare.com and milan.ns.cloudflare.com, and it does not present an SSL/TLS certificate, indicating that any web service would be delivered over plain HTTP. The site title returned from the host is "汇天交易所", suggesting an attempt to impersonate a Chinese‑language exchange service.

The domain has been taken offline at the time of assessment, but it is listed on three public security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. No detection vendors have flagged the domain, and the absence of detections does not imply safety. The registrar listed is Hello Internet Corp, a legitimate registration service that does not provide immediate mitigation.

Given the short lifespan, lack of encryption, and presence on multiple blocklists, the infrastructure points to a typical phishing deployment rather than a legitimate business. Defenders should continue to block the domain and the associated IP address, monitor for any re‑registration or use of the same IP range, and consider adding the host to internal URL filtering and DNS sinkhole rules. Further investigation of the page content, if restored, would be required to confirm the exact phishing vector and any credential‑stealing mechanisms.