Security Scan Report: matamsklogex.gitbook.io

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 39 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://matamsklogex.gitbook.io/is/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Unauthorized GitBook page impersonating MetaMask with typosquatted hostname and homoglyph-obfuscated title; treat any links or login prompts reached from it as phishing.

Risk Factors (5)
Impersonation of the MetaMask brand on a non-official domain
Typosquatted, misspelled hostname targeting the impersonated brand
Unicode homoglyph obfuscation in page title to defeat keyword detection
Single-source phishing threat-intel report on the primary domain
Unranked domain not associated with the legitimate brand owner
Domain age information unavailable

Details

Page Title

๐— ๐—ฒ๐˜รฅ๐—บรฅ๐˜€๐—ธ ๐—Ÿ๐—ผ๐—ด๐—ถ๐—ป - Us

Scan Type

public

Domain Name Analysis

The domain name 'matamsklogex.gitbook.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and includes subdomain 'matamsklogex'. The core label 'gitbook' covers 7 characters with 3 vowels and 4 consonants. Breaking it apart gives three words: g, it, book. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://matamsklogex.gitbook.io/is/

Page Load Overview

4.07s
Total Load Time
881 KB
Total Size

Language Analysis

Primary Language

๐Ÿ‡บ๐Ÿ‡ธEnglish
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:392 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain60% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
60%
technology software
57%
documentation technical
43%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12104.18.40.47Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
9172.64.147.209Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
9104.18.41.89Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
9172.64.146.167Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
394--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1945439089015E218DD62DE64037E7C34908EA95BA6F0903CF3DDEBE1DB8A0BE5795E5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ImU5IuKLVfxU3GrzCmo3IBnqA/7YJ7FmU2W57vGPiFH4jh+Kzqcht7MvLt:ImU5IuKLVfxXzCmqA9t7MvLt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:280054:iAJiBQpEQJDUMhAAgQFQwgQIJn1CCBR1MASAkEKZX0cgRDUICKKlowRxMpUlpDlpk6wAMAAGYAEExRsGioAA7aWAICALINkJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fc3c3c3cff3c3f3
Perceptual Hash:b139869b9b24cecc
Difference Hash:581e161616161664
Wavelet Hash:85c3c3c3c3c3c3b3
Color Hash:#d22d9b

Other Hashes

Crop Resistant:581e161616161664

Scan History

Scan history not available

Unable to load historical scan data