Analyse phishing et sécurité de hut8digital.com

Analysis of the domain hut8digital.com, created on 06 August 2025 and registered through Web4Africa Inc., indicates active malicious use. The authoritative nameservers ns21.v-sys.org and ns22.v-sys.org resolve the domain to the IPv4 address 91.235.142.237. Reputation services have flagged the host: PhishDestroy lists the domain as blocked, and a single external blocklist continues to reference it. VirusTotal reports that seven of ninety‑one scanned security vendors have identified the domain as malicious, reinforcing the suspicion of phishing activity despite the limited vendor count.

The domain remains live as of the 27 July 2026 report date, suggesting that the infrastructure is still operational. The available data does not disclose the specific content displayed on the site, the exact phishing kit employed, or any SSL certificate details, leaving those aspects uncertain. No information is provided regarding HTTP response codes, Safe Browsing status, OTX indicators, or additional attribution such as ASN or geographic location beyond the resolved IP. Consequently, analysts cannot confirm the precise target brand or the exact lure used in the campaign.

Defenders should prioritize immediate containment of traffic to 91.235.142.237, including adding the IP to network blocklists and enforcing DNS filtering for hut8digital.com. Monitoring for new resolutions or additional hosting changes is advisable, as the attacker may shift infrastructure. Continuous re‑scanning with VirusTotal or similar multi‑engine services is recommended to capture any evolution in detection rates. Organizations should also educate users about unsolicited communications that reference the domain, given its classification as a high‑risk phishing vector.