Security Scan Report: secure-blockfii-app-cdn.gitbook.io

Submitted: Nov 15, 2025, 11:04:13 AMCompleted: Nov 15, 2025, 11:04:58 AMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 0 countries across 4 domains to perform 49 HTTP transactions. The main domain is secure-blockfii-app-cdn.gitbook.io.

Submitted URL: https://secure-blockfii-app-cdn.gitbook.io/en-us/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Phishing page impersonating BlockFi on a suspicious, likely new domain โ€“ high risk.

Risk Factors
Brand impersonation of BlockFi on a nonโ€‘official, unranked domain
Likely newly registered domain used for credential harvesting
Absence of a real login form indicates a phishing lure
Domain age information unavailable

Details

Primary Scan Blocked โ€” Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

BlockFi Login ๐Ÿ” | All-in-One Crypto Dashboard Access

Scan Type

public

Language

๐Ÿ‡บ๐Ÿ‡ธ

English

(80% confidence)

Category

cryptocurrency blockchain

(78%)

Domain Information

Domain 'secure-blockfii-app-cdn.gitbook.io' uses the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'secure-blockfii-app-cdn'. Its registrable label 'gitbook' stretches across 7 characters holding 3 vowels versus 4 consonants. Segmentation suggests 3 words: g, it, book. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://secure-blockfii-app-cdn.gitbook.io/en-us/

Page Load Overview

16.59s
Total Load Time
49
HTTP Requests
4
Domains
482 KB
Total Size

Language Analysis

Primary Language

๐Ÿ‡บ๐Ÿ‡ธEnglish
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:2,231 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain78% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
78%
technology software
64%
finance banking
45%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5172.64.146.167UnknownUnknown
4104.18.40.47UnknownUnknown
4104.18.41.89UnknownUnknown
4104.18.40.68UnknownUnknown
4172.64.147.209UnknownUnknown
4172.64.147.188UnknownUnknown
42606:4700:4408::6812:2844UnknownUnknown
42606:4700:4407::6812:282fUnknownUnknown
42a06:98c1:3101::ac40:93bcUnknownUnknown
42606:4700:4404::6812:2959UnknownUnknown
4912--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18FF3E71A2101F7495DB7CD14623EBE3D808EDA778779C8ADF24EC9651BC853B17A3A80

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Gf3grnRlrsIG3x4/C3/Ion1dF410IFqkIECWJVif0ph4q03UEx2L:3n9f

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:162355:gOABAcrQQsJsAAWg52qNHGBBEl0wYIDIMQYLJSkJAAoMATtEEgoEXIgEMCMFVhm6gAAI1EThOAFRAQKEooSEmSAKRM/VUDFE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffff3c3c3e3efff
Perceptual Hash:e49b9b2c64269b8d
Difference Hash:5319060606061e5e
Wavelet Hash:8fc1c3c3c3c3c387
Color Hash:#3a5c78

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data