Security Scan Report: trzur-io-start.github.io

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 1 country across 8 domains to perform 15 HTTP transactions. The main domain is github.io and was registered 13 years ago.

Submitted URL: https://trzur-io-start.github.io/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Lookalike Trezor setup site on a misspelled GitHub Pages subdomain, using the official brand name; flagged as phishing by threat intel and impersonating Trezor. No forms on this capture, but do not enter seed phrases here.

Risk Factors (4)
Impersonation of the Trezor hardware-wallet brand on a non-official domain
Deceptive hostname (misspelled 'trezor' prefix) on a free shared hosting subdomain
Single-source phishing threat-intelligence match on the primary domain
Setup-guide content steering users toward seed-phrase and device-registration steps — classic crypto wallet phishing funnel
Domain age information unavailable

Details

Page Title

Trezor.io/Start® - Starting Up Your Device | Trezor®

Scan Type

public

Domain Name Analysis

The domain 'trzur-io-start.github.io' uses the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'trzur-io-start'. The registrable portion 'github' spans 6 characters holding 2 vowels versus four consonants. Splitting it apart reveals three words: g, it, hub. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Search this site

Page Load Overview

0.97s
Total Load Time
214 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,257 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain66% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
66%
technology software
49%
blog personal website
28%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4185.199.109.153Fastly · CDNUnited States
AS54113Fastly, Inc.
1185.199.110.153Fastly · CDNUnited States
AS54113Fastly, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1142.251.153.120Google · CDNUnited States
AS15169Google LLC
1142.251.14.102Google · CDNUnited States
AS15169Google LLC
1142.251.14.132Google · CDNUnited States
AS15169Google LLC
1142.250.154.132Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1142.251.150.120Google · CDNUnited States
AS15169Google LLC
1185.199.111.153Fastly · CDNUnited States
AS54113Fastly, Inc.
1512--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D893B422A2022C7B85A745D97413BB0D339B11AFD6031770A6FA66D4AFDECD8F05364E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:581rK+81nohk9gjy9oyfhvi/PcgG/H/OQvpB/MyfqYxlZjUBQWftyFMcL8pyGNB:Imtoyw/PcgE/OQX/MyfqYtjUBQKUMzpd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94814:IMBsBBRggQgpGB1QAAucTIQcwxmkBEKghO9AkhYHYh4iseoHCApWQkAULBcCCILDYAEYJzoiBkXAiRgoQghREhg6ABQCOJkI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7efcf9f81
Perceptual Hash:b9c76c9163946999
Difference Hash:0810084e5a90372b
Wavelet Hash:32322626040c0000
Color Hash:0e000000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data