Security Scan Report: trezorportal.netlify.app

Redirected to:
https://trezorportal.netlify.app/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 24 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://trezorportal.netlify.app/

Effective URL:
https://trezorportal.netlify.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Trezor site on a Netlify subdomain impersonating the official hardware wallet brand, using 'connect wallet' and 'synchronize your wallet' support lures characteristic of a crypto drainer. Do not connect a wallet.

Risk Factors (5)
Impersonation of the Trezor brand on a non-official domain (trezorportal.netlify.app)
Unknown-age free-hosting subdomain used to host a brand-impersonating page
Wallet-connection / 'synchronize wallet' drainer-style call to action
Fabricated support taxonomy designed to trick users into granting wallet access
Unranked domain with no legitimate business footprint
Domain age information unavailable

Details

Page Title

Trezor | Hardware Wallet

Scan Type

public

Domain Name Analysis

You're looking at domain 'trezorportal.netlify.app' on the application-focused generic top-level domain (.app) with subdomain 'trezorportal'. Count 7 characters in 'netlify' containing 2 vowels alongside 5 consonants. Splitting it apart reveals 3 words: net, li, fy. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

© trezor Features Security Models FAQ Connect Wallet O The original hardware wallet —EE Your keys. Your crypto. 9 Keep your Bitcoin, Ethereum and thousands of other TREZOR coins offline and prote...

Page Load Overview

1.11s
Total Load Time
258 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,487 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain30% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
30%
cryptocurrency
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1263.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
242--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1004396357204AE3E99478BE8F3F27F78606EC385C72F485CE5E84171A782DA859172D8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Bdxku2GLz/ZqQA1MjTcszYocq8OfwbITu+8f87f5zk:sGLNQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55336:gBGYpVB5BEQCB8iChgKhYqiUjIkVAQgCwwAUGYQA2geQdCc1BLzCZY8RbHxYiBCgOMWOJAGAMTAiOMuhs+iIhQuKFA0BUJUA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:066d6d6d6501013d
Perceptual Hash:82b31d3c9c3ee5c1
Difference Hash:b4d9c9c99ddd6971
Wavelet Hash:476d6d6d6d05013d
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data