Security Scan Report: metlmnnsk-loggn.gitbook.io

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 38 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://metlmnnsk-loggn.gitbook.io/us

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

GitBook page on a typosquatted 'metamask-login' host uses homoglyph branding to pose as MetaMask's login/wallet. No form captured, but the impersonation and wallet-lure make it unsafe - avoid and report.

Risk Factors (4)
Typosquatted hostname impersonating MetaMask login
Homoglyph/Unicode obfuscation of the MetaMask brand name in title and meta tags
Crypto-wallet login pretext ('key vault', 'encrypted Login', 'digital wallet') typical of seed-phrase phishing
Brand impersonation of a different entity on an unrelated free-documentation host
Domain age information unavailable

Details

Page Title

(Login)$ M𝐞tåMäsk

Scan Type

public

Domain Name Analysis

Domain 'metlmnnsk-loggn.gitbook.io' uses the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'metlmnnsk-loggn'. The second-level label 'gitbook' is 7 characters long split between three vowels and 4 consonants. Splitting it apart reveals three words: g, it, book. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://metlmnnsk-loggn.gitbook.io/us

Page Load Overview

5.82s
Total Load Time
866 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:347 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
64%
cryptocurrency blockchain
60%
documentation technical
51%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
384--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T174543A149101E2189EA2DE64137E3C38D08E999B92F0D03CF7DDEBE4DB860BA5795E5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:4mU5IuKLVfxU3GrXamo3IBnqA/7YJ7FmU2W57vGPiFH4jh+KzqchtZM/LD:4mU5IuKLVfxXXamqA9tZM/LD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:278809:Fi1gArAMoQgRFJIUNxgJQAljgEhCCEAALCAAQAwCDIhQCNEtFgALub7pXgnDnBgPIENKMJVQaI1ahgxAUQARIjgmAUwxAgI0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fc3fbc7c3cfffff
Perceptual Hash:b1318f3933ce8e4c
Difference Hash:591e261c16140870
Wavelet Hash:00c3c3c3c3c3e79f
Color Hash:#d279c1

Other Hashes

Crop Resistant:591e261c16140870

Scan History

Scan history not available

Unable to load historical scan data