Security Scan Report: xn--trzor-7za.live

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 16 HTTP transactions. The main domain is xn--trzor-7za.live and was registered 2 days ago.

Submitted URL: https://xn--trzor-7za.live

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Lookalike punycode domain imitating Trezor hosting cloned Ledger branding and crypto-wallet download/migration lures. No credential form captured, but clear brand impersonation.

Risk Factors (4)
Brand impersonation of Ledger on a domain that does not belong to Ledger
Deceptive punycode hostname mimicking the Trezor brand
Unranked domain claiming to be a top-tier crypto hardware wallet vendor
Cloned marketing copy from the legitimate Ledger site
Domain age information unavailable

Details

Page Title

Ledger Wallet (ex. Ledger Live) - Crypto App | Ledger

Scan Type

public

Domain Name Analysis

The domain 'xn--trzor-7za.live' uses the .live top-level domain. The core label 'xn--trzor-7za' covers 13 characters containing 2 vowels alongside seven consonants, along with 1 digit and 3 hyphens. Word splitting yields 6 words: xn, tr, z, or, 7, za. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--trzor-7za.live

Page Load Overview

42.54s
Total Load Time
596 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,934 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate50% confidence
Type: static
Method: structural

All Detected Categories

corporate
50%
cryptocurrency
45%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8104.21.34.43Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8172.67.197.156Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
162--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10083194063899ABDB00393FCD275B475759BAEF4EA22D049F3F71823A18281C5C768DB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:7XYPrWTKqMQLQFZMXk3vhUH7e2+a/98jO5SguklHfsgIWcRYaTDds78uhSN4:j5KqLiMiUC85Sgukhfsg2RYodwlP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82097:QBEQALIULg4phRooRDQE5IWJIqeiERIIDhFKiQgIA2IQJIYGtKFEuRxHOakSNkyIppMwkToUkAWiIADlIVw+EAo3EDgMCcgJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f3b391d1ffffff
Perceptual Hash:ec649311696b376c
Difference Hash:c3e627272786797b
Wavelet Hash:00201181d1fffffd
Color Hash:07600280000

Scan History

Scan history not available

Unable to load historical scan data