Security Scan Report: cryptnomrloegieun.gitbook.io

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 37 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://cryptnomrloegieun.gitbook.io/us

AI Security Verdict

Low Risk

Confidence: 82%

3
Risk Score

GitBook page impersonating Crypto.com with a Unicode-obfuscated 'Crypto.com login' title on an unrelated, unranked domain. No credential form on this page, but treat any login link it offers as phishing.

Risk Factors (4)
Impersonation of a different entity's brand (Crypto.com) on a non-official GitBook subdomain
Unicode-obfuscated brand name in title to evade naive string matching
No affiliation disclosed; no legitimate Crypto.com content or ownership evidence
Unranked domain in Cisco Umbrella with unknown registration age
Safety Factors (4)
No credential or payment form present on this page (0 password fields, 0 payment fields)
No Indicators of Compromise, JavaScript YARA matches, network IDS alerts, or known phishing-kit roster hits
No cross-origin credential exfiltration detected
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) β€” elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

C𝓻𝔂𝓹𝓽𝓸.𝓬𝓸𝓢 𝓡𝓸𝓰𝓲𝓷: Wallet extension - Login - GitBook - Crypto

Scan Type

public

Domain Name Analysis

The domain name 'cryptnomrloegieun.gitbook.io' uses the British Indian Ocean Territory country-code top-level domain (.io) with subdomain 'cryptnomrloegieun'. The core label 'gitbook' covers 7 characters holding three vowels versus 4 consonants. Splitting it apart reveals three words: g, it, book. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cryptnomrloegieun.gitbook.io/us

Page Load Overview

1.97s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

πŸ‡ΊπŸ‡ΈEnglish
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,395 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical89% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
89%
cryptocurrency blockchain
89%
technology software
77%
finance banking
62%
blog personal website
62%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.18.40.47Cloudflare Β· WAFUnited States
AS13335Cloudflare, Inc.
9172.64.146.167Cloudflare Β· WAFUnited States
AS13335Cloudflare, Inc.
9172.64.147.209Cloudflare Β· WAFUnited States
AS13335Cloudflare, Inc.
9104.18.41.89Cloudflare Β· WAFUnited States
AS13335Cloudflare, Inc.
374--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3544A049105E2189DA3DE64133E7D38D08EAA9A91E0D03CF7DDDFE4DB820BA5795E9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ISIhmU5IuKLVfxU3Gr38ybQVD3IEr9Ap7YJ7FmU2W57vGPiFh4jz+KHachtSMPkt:imU5IuKLVfxXsVV7ALtSMRLUxT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:300873:hKAABkUAAGMF0e2CtpklQBFIUJRg0MCiSM6UgkTJgTMiiABEgAMGBBOkCfoJTpQYmpiKBIoiAUFBKQygAEBACKIIBU0TYwUq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc3c3c3c3ffff
Perceptual Hash:e1319a9e65cd6564
Difference Hash:1e189696968e1c16
Wavelet Hash:c7c3c3c3c3c3c383
Color Hash:#e0ca6c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data