Security Scan Report: trezrorostartz.gitbook.io

Redirected to:
https://trezrorostartz.gitbook.io/us
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 41 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://trezrorostartz.gitbook.io

Effective URL:
https://trezrorostartz.gitbook.io/us
Redirected

AI Security Verdict

High Risk

Confidence: 74%

7
Risk Score

Unauthorized page impersonating Trezor as "official" Trezor.io/Start on a GitBook subdomain. No credential or payment forms captured, but the brand impersonation and wallet-setup lure warrant avoidance.

Risk Factors (4)
Brand impersonation of Trezor on an unrelated GitBook-hosted subdomain
Explicit 'official' claim in page title and Open Graph metadata
Crypto hardware-wallet onboarding content on an attacker-controllable free hosting subdomain, a common seed-phrase/support-scam lure format
Domain reputation applies to shared gitbook.io only; the subdomain is unranked and user-registered
Domain age information unavailable

Details

Page Title

Trezor.io/Start | official | Getting Started with Trezor

Scan Type

public

Domain Name Analysis

The domain name 'trezrorostartz.gitbook.io' uses the British Indian Ocean Territory country-code top-level domain (.io), featuring subdomain 'trezrorostartz'. Count 7 characters in 'gitbook' containing 3 vowels alongside four consonants. Tokenizing the label suggests three words: g, it, book. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://trezrorostartz.gitbook.io

Page Load Overview

2.43s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,684 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical70% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
70%
technology software
58%
cryptocurrency blockchain
44%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
414--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10A4428089115E218DEA3DE6803797D34D48EA59B86F0D03CF7DDDAE097820FA9756E8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:vmU5IuKLVfxU3GrdUPVD3IEr9Ap7YJ7FmU2W57vGPiFh4jz+KHacht+MoLZ8O:vmU5IuKLVfxXdOV7ALt+MoLv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:269618:hoelgEIUEGQEjefCBCCB4TjAIFhsHCBDmEREAKIQ4Qhh6cIQDgUKMAQDIukDIlPHS0ABEMSWAwyOAwPVCKGICEKLFQlQAsJx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fc7e7e7e7c7c7c3
Perceptual Hash:b3979c1a33998cc6
Difference Hash:1a1e161e0e16161e
Wavelet Hash:8fc3c3c3c3c3c383
Color Hash:#35d22d

Other Hashes

Crop Resistant:1a1e161e0e16161e

Scan History

Scan history not available

Unable to load historical scan data