Security Scan Report: trezorstartiop.gitbook.io

Submitted: Completed: publiccompleted
This website contacted 12 IPs in 0 countries across 5 domains to perform 42 HTTP transactions. The main domain is trezorstartiop.gitbook.io.

Submitted URL: https://trezorstartiop.gitbook.io/us/

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Site impersonates Trezor on an unranked GitBook subdomain, likely phishing.

Risk Factors (3)
Brand impersonation (Trezor) on an unranked GitBook subdomain
UNRANKED domain with brand claims indicates typoesquatting
Domain age unknown (likely new) with no established reputation
Domain age information unavailable

Details

Page Title

Trezor.io/start - The official wallet | Gitbookother network

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'trezorstartiop.gitbook.io' is registered with subdomain 'trezorstartiop'. The registrable portion 'gitbook' spans 7 characters split between 3 vowels and four consonants. Segmentation suggests three words: g, it, book. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

[8] moo Trezor.io/start - The official wallet The official wallet - GitBook. An update for Trezor Suite {version 22.9.3) is now ready to install. To download and apply. Backup Your Recovery ... @ P...

Page Load Overview

44.32s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:316 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software88% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
88%
cryptocurrency blockchain
73%
documentation technical
48%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9104.18.41.89UnknownUnknown
3104.18.40.47UnknownUnknown
3104.18.40.68UnknownUnknown
3172.64.147.209UnknownUnknown
3172.64.146.167UnknownUnknown
32a06:98c1:310d::ac40:92a7UnknownUnknown
32a06:98c1:3101::ac40:93bcUnknownUnknown
32606:4700:4407::6812:282fUnknownUnknown
32606:4700:4408::6812:2844UnknownUnknown
3172.64.147.188UnknownUnknown
4212--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T115B3C51E6101F2055EB2DE14633ABE3980DED667C778D4AEF20ED9A5178813F1BE3990

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Zj3grgjJIG3x4/C3/Ion1dF41YIFqkIfaIF9yFUnoD:cgRo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:110069:VgCtAgqilHFQELEaIRgSAGQOCF4hKshogABQJmTIEPgOAhZKCXgOQikygYCYlSrlCARAoaBBhDygew0URCnItiwiNUCyVDBI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7efc7c7c7ffffff
Perceptual Hash:b332cccc3332cec9
Difference Hash:0d1e8c9d9d001840
Wavelet Hash:00c00000c7ffff3f
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data