help-trezoorhlp[.]gitbook[.]io

The domain help-trezoorhlp.gitbook.io is currently classified as a generic phishing site and remains active as of the report date, August 06, 2026. Infrastructure analysis shows the domain is registered through Cloudflare, Inc., with public nameservers dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com. The domain was originally created on March 30, 2014 and resolves to the IP address 104.18.40.47, which belongs to Cloudflare’s CDN network.

VirusTotal scanning has resulted in eight of ninety‑one security vendors flagging the domain as malicious, indicating a moderate level of detection consensus. Additional defensive sources have taken action: PhishDestroy has blocked the domain and it appears on one external security blocklist. No further public intelligence such as Safe Browsing verdicts, Open Threat Exchange entries, SSL certificate details, HTTP response codes, or page title information is available for this domain at the time of analysis.

Consequently, the exact content and lure technique employed by the site cannot be confirmed. Defenders should proactively block the domain at the DNS level, incorporate it into existing phishing blocklists, and monitor for any future changes in detection scores or additional intelligence that could clarify the phishing payload or target brand. Continuous observation of the associated IP range is recommended given its shared Cloudflare infrastructure, which may host other malicious actors.