logahontezor[.]gitbook[.]io

This domain, logahontezor.gitbook.io, is a confirmed phishing site as of August 02, 2026. Security analysis shows that 5 out of 91 antivirus vendors on VirusTotal flag this domain as malicious, indicating a moderate but credible threat level. The domain is also blocked by the PhishDestroy blocklist and appears on one additional security blocklist, reinforcing its status within the phishing ecosystem. The domain is hosted on GitBook's infrastructure, which is a common platform for creating documentation sites, and threat actors often abuse such services to host phishing pages that appear legitimate to unsuspecting users.

The specific content of the page is not yet analyzed, so the exact brand impersonated or the type of phishing campaign (e.g., credential harvesting, payment fraud) remains unconfirmed. However, the active blocklist presence and vendor detections strongly suggest malicious intent. The threat level is elevated due to the domain's active status and the fact that it leverages a trusted third-party platform, which can bypass some URL filters that rely on reputation. Defenders should treat any link to this domain as suspicious and block access at the network level.

Users who have visited the site should be advised to change any credentials they may have entered and monitor for unauthorized account activity. Additionally, organizations should review their proxy logs for any attempts to access this domain and consider adding it to their internal blocklists to prevent future exposure. While the domain is currently active, its lifespan on GitBook may be short, as the platform typically takes down reported phishing pages, so continuous monitoring is recommended.