help-us-public-trezzr-io-com-cdn[.]typedream[.]app

On 2026-08-07 the domain help-us-public-trezzr-io-com-cdn.typedream.app was observed actively hosting a generic phishing campaign. The domain is registered through Typedream, a website‑builder platform, and resolves to the IP address 104.21.37.85, which is part of a Cloudflare network. VirusTotal scans show that 9 of 91 participating antivirus and URL‑reputation engines have flagged the domain as malicious, indicating a modest but non‑trivial detection rate. The domain currently appears on one external blocklist and is listed in the PhishDestroy repository, confirming that at least one dedicated phishing‑blocking service has taken mitigation action.

No public Safe Browsing, OTX, SSL certificate, HTTP status code, trust‑score, or page‑title information has been published for this host, so the content and transport security posture remain unverified. The lack of additional intelligence suggests that threat actors may be leveraging a short‑lived, dynamically generated site hosted on a shared CDN, a pattern consistent with recent turnkey phishing‑kit deployments that use Typedream as an infrastructure provider. Defenders should immediately block or sinkhole the domain at the DNS or proxy level, and add the associated IP address 104.21.37.85 to any network‑level deny lists. Monitoring of outbound traffic for connections to Cloudflare edge nodes that resolve to this IP can help identify compromised internal hosts.

Because the registrar is a legitimate SaaS provider, abuse reports should be filed with Typedream to request domain suspension. Continuous re‑scanning with VirusTotal and other URL‑reputation services is advised to capture any changes in detection status. Until the site is taken down, organizations handling credential data should treat any login prompts originating from this domain as malicious and educate users to verify URLs before entering credentials.