Security Scan Report: io-trezo-secure.square.site

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 2 countries across 13 domains to perform 87 HTTP transactions. The main domain is square.site and was registered 7 years ago.

Submitted URL: https://io-trezo-secure.square.site

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Fake Trezor-branded storefront on a square.site subdomain (not trezor.io), reported as phishing by OpenPhish and using a lookalike 'io-trezo-secure' hostname. Treat as brand impersonation and avoid.

Risk Factors (4)
Brand impersonation of Trezor on a non-official domain (square.site subdomain, not trezor.io)
Phishing threat-intelligence report on the page's primary domain (OpenPhish, single-source)
Deceptive hostname 'io-trezo-secure' imitating the Trezor brand
Unranked domain with no reputation, hosted on a shared instant-publishing platform
Domain age information unavailable

Details

Page Title

Trezor.io/Start | Trezor Suite App (Official) | trezor

Scan Type

public

Domain Name Analysis

Within the .site top-level domain, 'io-trezo-secure.square.site' is registered; it also runs on subdomain 'io-trezo-secure'. Count 6 characters in 'square' split between 3 vowels and three consonants. Breaking it apart gives one word: square. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://io-trezo-secure.square.site

Page Load Overview

2.42s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:219 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software66% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
66%
e-commerce shopping
48%
cryptocurrency blockchain
42%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1274.115.51.5United States
AS27647Weebly, Inc.
5146.75.121.46Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
5146.75.121.49Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
532.186.191.25Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
5142.251.155.119Google · CDNUnited States
AS15169Google LLC
534.111.148.117Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5142.250.154.94Google · CDNUnited States
AS15169Google LLC
5162.159.136.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
53.233.158.26Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
574.115.51.7United States
AS27647Weebly, Inc.
8716--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T117D5D143D0E14ABE3D1742ABE38EEA38F3297CC1CAD17E593D4845844AC8BF9945F991

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:E64rq9zq9WwPORA7g0FVnHSn5lBHZYT0JRJQ7ods4GPlHwo8HxzJphdJBNT/TFJN:WPhbEBNACkiAGhaS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2914842:OAQjQFMbOKMlAJUDIEptAoikpEA0o0CA+TMhwQCN04wAkkYkEoKEYqkCwCQECgtIKQgIbFAgRmAQB4CENjhmC2IqB0AU2wQQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffffff0000
Perceptual Hash:aad52ad52ad5aa54
Difference Hash:0800000000001011
Wavelet Hash:040c3030cfcf0000
Color Hash:#c3d279

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data