Security Scan Report: toooo-tooo-trezor.gitbook.io

Redirected to:
https://toooo-tooo-trezor.gitbook.io/us
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 40 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://toooo-tooo-trezor.gitbook.io

Effective URL:
https://toooo-tooo-trezor.gitbook.io/us
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Impersonates Trezor's official start page on an unrelated gitbook.io subdomain. No form or malware was detected, but the brand impersonation and wallet-setup/seed-phrase framing make it unsafe — never enter a recovery seed here.

Risk Factors (4)
Brand impersonation of Trezor on a domain that does not belong to Trezor
Self-presentation as 'Trezor.io/Start' official documentation page on an unrelated gitbook.io subdomain
Crypto seed-phrase / wallet setup context typical of wallet-drainer phishing lures
Subdomain is unranked and not controlled by the brand owner
Domain age information unavailable

Details

Page Title

Trezor.io/Start® | Start Up Your Device | Trezor®

Scan Type

public

Domain Name Analysis

The domain 'toooo-tooo-trezor.gitbook.io' uses the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'toooo-tooo-trezor'. The registrable portion 'gitbook' spans 7 characters holding 3 vowels versus four consonants. Word splitting yields three words: g, it, book. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

a Start Up Your Device [ Trezor® Trezor.io/Start® @ Powered by GitBook Trezor.io/Start® (© cony Visit Trezor.iofstart to secure your cryptocurrency. Follow our setup guide for robust protection. E...

Page Load Overview

2.63s
Total Load Time
880 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,118 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain90% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
90%
technology software
86%
documentation technical
86%
education learning
44%
finance banking
36%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
404--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18D842A14B105E358ADA38D64237D7D39904FE967C5E4C07CF3ECDA6097C24BA9B62B88

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:cmU5IuKLVfxU3GryLYJ7Nviqyq3IBnqA/7YJ7FmU2W57vGPiFH4jh+KzYcht3Mtw:cmU5IuKLVfxXyDqycA/t3MtLc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:403400:4gB0gAIAKwsBkhTJskUQ+WJwQL0LwEAQaS8sIISlmjEi2QIFmQhiFwAnWxNAWtgoAKIIqgYEwBUIaQAFAAYSACQpCj+ZMfLH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fc1c1c7c3e3e3c3
Perceptual Hash:b1198e8e33968f4e
Difference Hash:59131b1e1e16061e
Wavelet Hash:8fc1c1c3c3e3c3c3
Color Hash:N/A

Other Hashes

Crop Resistant:59131b1e1e16061e

Scan History

Scan history not available

Unable to load historical scan data