hutewin[.]com

Analysis of hutewin.com, flagged as a generic phishing site, shows the domain was registered on June 14, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The authoritative nameservers are buck.ns.cloudflare.com and paislee.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and CDN services. DNS resolution points to IP 172.67.152.236, which belongs to AS13335 Cloudflare, Inc., located in the United States. The SSL certificate presented is issued by Google Trust Services under the WE1 certificate authority, confirming that HTTPS is enabled but does not validate the legitimacy of the content. The page title retrieved from the site reads “Hutewin | Decentralized Web3 Gambling Site with Provable Trust,” suggesting the domain is being used to masquerade as a Web3 gambling platform.

VirusTotal scans report a single positive detection out of 91 security vendors, reinforcing the suspicion of malicious intent. Independent blocklists have added the domain to three separate phishing or fraud lists, and it is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services. Gridinsoft’s trust scoring system assigns a score of 0 out of 100, the lowest possible rating. The current HTTP status is offline, indicating the site has been taken down or is no longer serving content, and the risk level is recorded as elevated. While the offline state limits immediate observation of payloads or credential‑stealing pages, the combination of a flagged page title, a positive VirusTotal detection, inclusion on multiple blocklists, and a zero trust score provides strong evidence of phishing activity.

Uncertainty remains regarding the exact phishing vector—whether the site hosted credential collection forms, malicious smart‑contract interactions, or other deceptive mechanisms—because the content has not been captured before takedown. Defenders should continue to block hutewin.