Security Scan Report: mestkmsloggin.gitbook.io

Redirected to:
https://mestkmsloggin.gitbook.io/ru
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 41 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://mestkmsloggin.gitbook.io/

Effective URL:
https://mestkmsloggin.gitbook.io/ru
Redirected

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Unofficial GitBook subdomain using the MetaMask brand for a 'MetaMask Login' page; no forms, malware or threat-intel hits, but brand misuse on a deceptive hostname warrants caution.

Risk Factors (3)
Uses another entity's brand (MetaMask) in the title and body on a domain that is not the brand's official domain
Deceptive hostname 'mestkmsloggin' resembling 'metamask login'
Free platform hosting (gitbook.io subdomain) with no verifiable operator identity or disclosure
Safety Factors (4)
No credential, login or payment form on the page (0 forms, 0 password fields, 0 payment fields)
No Indicators of Compromise, no hunting rule/JavaScript malware patterns, no IDS alerts
No cross-origin credential exfiltration or obfuscated scripts detected
Underlying hosting domain (gitbook.io) is well established (registered 2014)
Domain age information unavailable

Details

Page Title

Metamask Login | 1. Создание кошелька...

Scan Type

public

Domain Name Analysis

The domain 'mestkmsloggin.gitbook.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and includes subdomain 'mestkmsloggin'. The registrable portion 'gitbook' spans 7 characters containing 3 vowels alongside 4 consonants. Splitting it apart reveals 3 words: g, it, book. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

м 1. Создание кошелька... Ф Powered by GitBook Metamask Login © copy |v №9 НЕТАМАЗК Feotuesv Suppor about suid y QED Acrypto wallet & gateway to fear blockchain apps > MetaMask® Extension: Легкое...

Page Load Overview

2.07s
Total Load Time
969 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,140 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as ru

Website Classification

Primary Category

cryptocurrency blockchain100% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
100%
finance banking
98%
technology software
96%
blog personal website
93%
documentation technical
93%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
414--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F5544A049116E2189D62DE68037D3D34E08EA5AB96F0D13DF7DCDAE0DB830BA8795E5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:1mU5IuKLVfxU3Gre2YJ7h9mVmo3IBnqA/7YJ7FmU2W57vGPiFH4jh+Kzqcht3Mcu:1mU5IuKLVfxXeJ9mVmqA9t3McLf+Afg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:296753:AyYiE44A8EgBkaCrg4SVEidAAEQkZCLCDGICoicwjZhsAXFwNuBBChIhAAD0eF6ohAAIAqALAiZEArYcUeARAiIJVgRJ+0VH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fcfe7e7c7c3c3c3
Perceptual Hash:b19b0c2c9b9366ce
Difference Hash:1a160c5c1e061e1e
Wavelet Hash:89c6e6c6c3c3c383
Color Hash:N/A

Other Hashes

Crop Resistant:1a160c5c1e061e1e

Scan History

Scan history not available

Unable to load historical scan data