Security Scan Report: kioxconloign.gitbook.io

Redirected to:
https://kioxconloign.gitbook.io/us
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 39 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://kioxconloign.gitbook.io/

Effective URL:
https://kioxconloign.gitbook.io/us
Redirected

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

KuCoin-branded login page ('KuCōin' with a homoglyph) hosted on an unrelated lookalike GitBook subdomain. Classic brand-impersonation staging; no credential form captured yet, but do not enter credentials.

Risk Factors (4)
Impersonation of KuCoin, a cryptocurrency exchange, on a domain unrelated to KuCoin
Unicode-homoglyph obfuscation in the page title to defeat brand detection
Deceptive lookalike subdomain on a shared hosting platform
Login-themed page with no genuine associated service or site content
Domain age information unavailable

Details

Page Title

Login - KuCōin

Scan Type

public

Domain Name Analysis

Domain 'kioxconloign.gitbook.io' uses the British Indian Ocean Territory country-code top-level domain (.io) with subdomain 'kioxconloign'. Count 7 characters in 'gitbook' containing three vowels alongside 4 consonants. It segments into 3 words: g, it, book. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

& Login - Kucain Q Search Login - KuCoin EMe~s KE KUCOIN m. Find the Next Crypto Gem on KuCoin = = | cee ‘ | « » - | | 8 & Powered by GitBook

Page Load Overview

2.43s
Total Load Time
919 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:210 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical55% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
55%
technology software
51%
cryptocurrency blockchain
40%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
394--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T115443B008115E2289E73DD64137D7D39E08EA54B92E0A139F3DCDBE0DB860FA9695F9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:fqU5IuKLVfxa3nrcPHV3Rz6eAh7YJ7FmU2W57vGPiFX4jW+KVGchtJM5L5:fqU5IuKLVfxQcPHNAmtJM5L5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:264961:CeEVFgkYAg+qgimokRSkzaDugGgJGAouSxUosAaIEMS7RBDCigWEwAZBKEGAGDRAVqgBGAgQSJLAgywGIEgeUKsQWAEpyIAi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fcfc3c3e3ffffff
Perceptual Hash:b3319c9e33278c8e
Difference Hash:591e164e4e000c60
Wavelet Hash:00030303c3ffff9f
Color Hash:N/A

Other Hashes

Crop Resistant:591e164e4e000c60

Scan History

Scan history not available

Unable to load historical scan data