Security Scan Report: io-en-trezo.square.site

Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 2 countries across 13 domains to perform 86 HTTP transactions. The main domain is square.site and was registered 7 years ago.

Submitted URL: https://io-en-trezo.square.site

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Page impersonates the Trezor crypto-wallet brand on a free square.site subdomain and has a single-source OpenPhish phishing report; brand impersonation plus phishing intel makes this a high-risk phishing lure despite no credential form parsed.

Risk Factors (5)
Impersonation of the Trezor hardware-wallet brand on a non-official domain
OpenPhish phishing report on the primary domain
Crypto wallet 'io/start' setup lure hosted on a free shared platform subdomain
Domain unranked / no established reputation; hosting-platform age does not apply to this tenant
Content mismatched with the surrounding Square e-commerce storefront
Domain age information unavailable

Details

Page Title

Trezor.io/Start | Starting® Up® Your® Device® | trezor

Scan Type

public

Domain Name Analysis

Within the .site top-level domain, 'io-en-trezo.square.site' is registered, featuring subdomain 'io-en-trezo'. The second-level label 'square' is 6 characters long with three vowels and 3 consonants. It segments into 1 word: square. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://io-en-trezo.square.site

Page Load Overview

5.75s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:219 chars
Detector Agreement:75%

Website Classification

Primary Category

e-commerce shopping54% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
54%
technology software
48%
finance banking
40%
cryptocurrency blockchain
39%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
674.115.51.4United States
AS27647Weebly, Inc.
5146.75.121.46Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
5146.75.121.49Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
552.27.136.25Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
5142.251.157.119Google · CDNUnited States
AS15169Google LLC
534.8.226.60Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
5162.159.137.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
53.233.158.25Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
574.115.51.7United States
AS27647Weebly, Inc.
8617--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T187D5D143D0E14ABE3D1742ABE38EEA38F3297CC1CAD17E593D4845844AC8BF9945F991

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Lcskq9zq9F7LExVnHSn5lBHZYT0JRJQ7ods4GPlHwo8HxzJphdJBNT/TFJ5J9Zpv:Qo4BNACkiAGFaq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2913351:6UNqQSh0KJwYBtQwsAQUMUQIAXJhswaZACkpSMFSEJmcuSCx8CgpAJACBABIE4AhwLoAnQAbMJCHhAJwjHEyIQyqIQAJaGKI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffffff0000
Perceptual Hash:aad52ad52ad5aa54
Difference Hash:0800000000001011
Wavelet Hash:040c3030cfcf0000
Color Hash:#bbe06c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data