helocas[.]com

On July 23, 2026, the domain helocas.com was observed being taken offline after being flagged for brand impersonation of the foundation organization. The site was registered on February 21, 2026 through Web Commerce Communications Limited and is hosted behind Cloudflare’s network (AS13335, United States). DNS resolution points to the IP address 172.67.135.11, which is owned by Cloudflare, Inc. The domain uses a Google Trust Services certificate issued under the WE1 root, indicating a valid TLS handshake. Nameserver records list jason.ns.cloudflare.com and sue.ns.cloudflare.com, both typical of Cloudflare‑managed domains.

The page title returned by HTTP requests reads “HELOCAS | Open the world of luck and rewards!”, which does not contain any direct reference to the targeted brand, yet intelligence classifies the domain as a brand‑impersonation campaign targeting the foundation brand. VirusTotal recorded a single positive detection out of 93 security vendors, confirming at least one vendor flags the site as malicious. The domain appears on one external security blocklist and has been specifically blocked by the PhishDestroy feed. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent.

The evidence shows helocas.com leverages reputable hosting infrastructure while presenting a generic reward‑oriented title, suggesting a low‑profile impersonation attempt. Defenders should block the domain at the network perimeter, add the IP address 172.67.135.11 to deny‑list rules, and monitor for any new sub‑domains or similar Cloudflare‑hosted assets that reference the same brand. Continuous re‑scanning with multi‑vendor engines is recommended to capture any changes in detection status. Although the site is currently offline, remnants may persist in cached content or email campaigns that referenced the domain.