hekawin[.]com

This domain is flagged as a high‑risk generic phishing infrastructure. hekawin.com was registered on 2026‑07‑16 through the business Fewmoretaps OU operating under the name Trustname.com. DNS resolution points exclusively to the IPv4 address 188.114.96.3, and the domain remains active as of the 2026‑07‑19 assessment. VirusTotal has recorded detections from nine out of ninety‑five scanned engines, indicating that multiple security products have identified malicious behavior associated with the domain. The limited public metadata does not reveal the specific landing page, credential‑capture technique, or targeted brand, and no additional infrastructure such as C2 servers or mail exchangers has been observed. Consequently, the exact phishing payload and victim profile remain uncertain. Defensive teams should block outbound connections to 188.114.96.3, add hekawin.com to URL filtering and sink‑hole lists, and monitor for related DNS queries or email traffic containing the domain. Organizations should also apply heuristic email scanning for messages that reference the domain and educate users about unsolicited requests for credentials that may originate from newly created domains such as this one.