Security Scan Report: trezor-brige.square.site

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 14 domains to perform 92 HTTP transactions. The main domain is square.site and was registered 7 years ago.

Submitted URL: https://trezor-brige.square.site

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Square-hosted subdomain posing as official Trezor Bridge/Suite guidance; typosquat hostname plus a phishing report on the primary domain indicate crypto-brand impersonation, despite no captured credential form.

Risk Factors (5)
Brand impersonation of Trezor on a non-Trezor domain (square.site tenant subdomain)
Typosquat subdomain 'trezor-brige' impersonating 'Trezor Bridge'
Primary domain flagged as phishing by OpenPhish (single-source, unverified)
Unranked host with no attributable registration age (shared publishing platform tenant)
Page addresses an audience of hardware-wallet users — a high-value target class for crypto phishing
Domain age information unavailable

Details

Page Title

Trezor Bridge™ | Official Guide for Smooth Wallet Integration

Scan Type

public

Domain Name Analysis

The domain name 'trezor-brige.square.site' uses the .site top-level domain; it also runs on subdomain 'trezor-brige'. The second-level label 'square' is 6 characters long with three vowels and three consonants. Tokenizing the label suggests 1 word: square. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://trezor-brige.square.site

Page Load Overview

6.55s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en_GB
Text Length:218 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking72% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
72%
technology software
38%
cryptocurrency blockchain
34%
e-commerce shopping
33%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
874.115.51.5United States
AS27647Weebly, Inc.
7146.75.121.46Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
7146.75.121.49Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
752.27.136.25Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
7142.251.150.119Google · CDNUnited States
AS15169Google LLC
734.8.226.60Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7162.159.137.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
774.115.51.7United States
AS27647Weebly, Inc.
774.115.51.4United States
AS27647Weebly, Inc.
9213--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11CD5D043D0E14ABE3D1742ABE38EEA34F3297CC2CAD17E593D4845844AC8BF9945F991

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:I3Xeq9zq9zwMVnHSn5lBHZYT0JRJQ7ods4GPlHwo8HxzJphdJBNT/TFJ5J9Zp/ar:ILBNACkiAGYau

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2893321:UTPwJrAHWIkRw8CME8SIwEEzpWAhRYAAcBAycFEBSNAIAoVbwhAkCWMAJGlHCSsqBekwoVQ7Na9G4EliDTAaI4aEGiWAAcGD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbcbcfcfdff3ff00
Perceptual Hash:b9b947c7469432b2
Difference Hash:22121a321a220418
Wavelet Hash:ff83818383b3ff00
Color Hash:#ab53ac

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data