Security Scan Report: metamaskuxlogen.gitbook.io

Redirected to:
https://metamaskuxlogen.gitbook.io/us
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 40 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://metamaskuxlogen.gitbook.io

Effective URL:
https://metamaskuxlogen.gitbook.io/us
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Fake MetaMask login page on a GitBook subdomain using homoglyphs to impersonate the brand. No forms detected but intent is wallet phishing; avoid and report.

Risk Factors (4)
Impersonation of MetaMask brand on unofficial domain
Unicode homoglyph obfuscation in title/header
Unranked subdomain hosted on free GitBook platform
Download prompt with no legitimate software distribution context
Domain age information unavailable

Details

Page Title

π— π—²π˜Γ₯𝗺Γ₯π˜€π—Έ @ π—Ÿπ—Όπ—΄π—Άπ—»

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'metamaskuxlogen.gitbook.io' is registered and includes subdomain 'metamaskuxlogen'. The core label 'gitbook' covers 7 characters containing three vowels alongside four consonants. Splitting it apart reveals three words: g, it, book. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://metamaskuxlogen.gitbook.io

Page Load Overview

2.36s
Total Load Time
864 KB
Total Size

Language Analysis

Primary Language

πŸ‡ΊπŸ‡ΈEnglish
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:220 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical48% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
48%
technology software
40%
healthcare medical
31%
cryptocurrency blockchain
28%
government public service
25%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.64.147.209Cloudflare Β· WAFUnited States
AS13335Cloudflare, Inc.
10104.18.41.89Cloudflare Β· WAFUnited States
AS13335Cloudflare, Inc.
10104.18.40.47Cloudflare Β· WAFUnited States
AS13335Cloudflare, Inc.
10172.64.146.167Cloudflare Β· WAFUnited States
AS13335Cloudflare, Inc.
404--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159444A049101E2289DB2DE64037E7D38D08E9A5B92F0913CF3DDDBE4DB860BA4795E9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:9mU5IuKLVfxU3GrGvsz43IBnqA/7YJ7FmU2W57vGPiFH4jh+KzachtZM1L5:9mU5IuKLVfxXG0z6AltZM1L5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:274689:hkBAYIEERgiIiCC4OMDoAiAxBWCUhUQEMyoMGAIAHASgcmOgGwBdIBcxCyAWS+APVoRLAy4ToA5DgMACCY4RBhMJdFOSwQVA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fc3c3c3cfffffbf
Perceptual Hash:b1318f9e3933868e
Difference Hash:5916161614000060
Wavelet Hash:00c3c3c3c0fcfc9c
Color Hash:#9f53ac

Other Hashes

Crop Resistant:5916161614000060

Scan History

Scan history not available

Unable to load historical scan data