ScanMalware.com

Security Scan Report: docs-trezorlogin.blogspot.com

Submitted: Oct 23, 2025, 7:13:27 PMCompleted: Oct 23, 2025, 7:15:30 PMpubliccompleted
Loading additional data...

Summary

This website contacted 13 IPs in 3 countries across 4 domains to perform 6 HTTP transactions. The main domain is docs-trezorlogin.blogspot.com.

Submitted URL: https://docs-trezorlogin.blogspot.com/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

High‑risk phishing site impersonating Trezor; do not enter any credentials or download software.

Risk Factors
Brand impersonation of Trezor on a non‑official domain
Misleading page title suggesting a login portal
Use of a free‑hosting subdomain (blogspot.com) to host brand‑related content
Domain is UNRANKED in Cisco Umbrella and likely newly created
Domain age information unavailable

Details

Page Title

Trezor Login - Secure Access to Your Wallet

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

cryptocurrency blockchain

(80%)

Domain Information

Within the commercial generic top-level domain (.com), 'docs-trezorlogin.blogspot.com' is registered with subdomain 'docs-trezorlogin'. Its registrable label 'blogspot' stretches across 8 characters with two vowels and six consonants. Segmentation suggests 1 word: blogspot. Most frequently, 'blog-spot' shows up in Greek. You will also see it in Hungarian contexts.

Screenshot

Security scan screenshot of https://docs-trezorlogin.blogspot.com/

Page Load Overview

75.16s
Total Load Time
6
HTTP Requests
4
Domains
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,716 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain80% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
80%
documentation technical
77%
technology software
75%
finance banking
62%
education learning
55%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6142.250.186.137United States
AS15169GOOGLE
045.43.142.2United Kingdom
AS16276OVH SAS
0142.250.185.225United States
AS15169GOOGLE
0216.58.206.46United States
AS15169GOOGLE
0142.250.186.73United States
AS15169GOOGLE
02a00:1450:4001:82a::2009Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
045.43.142.5United Kingdom
AS16276OVH SAS
045.43.142.7United Kingdom
AS16276OVH SAS
02a00:1450:4001:827::2001Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
045.43.142.6United Kingdom
AS16276OVH SAS
613--

Detected Technologies3

Java
50%
OpenGSE
40%
HTTP/3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12A12B51FF5CD7236416301647AD563E9B927806F53449E6838ED903C6F80AC74AB3BDA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Br8f3oMbiZb7aX0dD9DllVtTQmBm4FgkfXEX1Guc0d7V+W0c63M:BrLZrztg8EXjc0Z0w

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9439:aGbyzAIMFAEAJwwk7BM7kSFYENEI4IjQAwUFGgoACgjwM8gEEAMQzgIhMaaCS/AmEQvBMBCAWsDEY1gBgCwBQE4ISNgk7iJC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00bf07873fffff9f
Perceptual Hash:bf36484343703e1f
Difference Hash:c5323c0c78643131
Wavelet Hash:000e03031fffff0f
Color Hash:#9479d2

Other Hashes

Crop Resistant:c5323c0c78643131,2cd0d2e4e4c2cc20,63669699891a98c9,cee2b5153c240a0e

Scan History

Scan history not available

Unable to load historical scan data