Security Scan Report: welcome-trezr-suite.square.site

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 8 domains to perform 73 HTTP transactions. The main domain is square.site and was registered 7 years ago.

Submitted URL: https://welcome-trezr-suite.square.site

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Page falsely claims to be 'Trézór Suite (Official)' for the Trezor wallet on a typosquatted free Square subdomain (trezr, not trezor.io) with crypto-wallet lure content — clear brand impersonation.

Risk Factors (5)
Impersonation of the Trezor/Trezor Suite brand on a non-official, typosquatted ('trezr') subdomain
Self-declared 'Official' status for a brand the operator does not own
Hosted on a free Square site subdomain whose platform age does not describe this page
Crypto wallet/BTC content consistent with a wallet-drainer phishing lure
Unranked domain with no established reputation
Domain age information unavailable

Details

Page Title

Trézór Suite (Official) | Desktop & Web Crypto® Management

Scan Type

public

Domain Name Analysis

Within the .site top-level domain, 'welcome-trezr-suite.square.site' is registered; it also runs on subdomain 'welcome-trezr-suite'. Its registrable label 'square' stretches across 6 characters with three vowels and three consonants. Word splitting yields 1 word: square. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://welcome-trezr-suite.square.site

Page Load Overview

1.89s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:209 chars
Detector Agreement:67%

Website Classification

Primary Category

e-commerce shopping57% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
57%
cryptocurrency blockchain
46%
technology software
40%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1074.115.51.4United States
AS27647Weebly, Inc.
9146.75.121.46Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
952.27.136.25Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
934.8.226.60Google · CDNKansas City, Missouri, United States
AS396982Google LLC
974.115.51.6United States
AS27647Weebly, Inc.
93.233.158.25Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
974.115.51.5United States
AS27647Weebly, Inc.
934.111.148.117Google · CDNKansas City, Missouri, United States
AS396982Google LLC
738--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T114F3B4D65618029C9147CA6CEF2FFE05131FB16ABA448984BA8EC26C97CF4D2F72751C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:wLTkTcd/9R+xMLx9Jblq9zq98bUUUr9Z/Gh+HhP0RQ7HlPZQ4cD4tlFsR8MLqULo:wtdSxgq9zq9zZBP0RQ7HpYD4+oP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:171276:BI6cNQoDBaiAoB/BZKGDwAJSM4Ok6EVbgByRAykiCpiBhYAJnCAiogIEkCAApJQAUyloIGYAKwgMSQsUpgtAIRE+guhCB8Gd

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:007e787e7e7e0000
Perceptual Hash:c1c13e163c6bc56d
Difference Hash:ccd0d2d2d0d4c813
Wavelet Hash:107e7e7e7e7e0001
Color Hash:#6fac53

Scan History

Scan history not available

Unable to load historical scan data