Security Scan Report: metlmnnsk-loggn.gitbook.io

Redirected to:
https://metlmnnsk-loggn.gitbook.io/us
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 40 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://metlmnnsk-loggn.gitbook.io/

Effective URL:
https://metlmnnsk-loggn.gitbook.io/us
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Typosquatted GitBook page impersonating MetaMask with homoglyph-obfuscated branding and wallet-login lure copy; no forms captured here but the page is a clear brand-phishing front.

Risk Factors (6)
Typosquatted hostname impersonating MetaMask login (metlmnnsk-loggn)
Unicode homoglyph obfuscation of the brand name to defeat detection
Full MetaMask visual/branding imitation on a domain with no relationship to MetaMask
Crypto-wallet themed lure ('key vault', 'digital wallet') aimed at seed-phrase/credential theft
Hosted on a user-controlled GitBook subdomain rather than an official brand domain
Domain unranked in Cisco Umbrella despite claiming to represent a major wallet brand
Domain age information unavailable

Details

Page Title

(Login)$ M𝐞tåMäsk

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'metlmnnsk-loggn.gitbook.io' is registered, featuring subdomain 'metlmnnsk-loggn'. The registrable portion 'gitbook' spans 7 characters with 3 vowels and 4 consonants. Splitting it apart reveals 3 words: g, it, book. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://metlmnnsk-loggn.gitbook.io/

Page Load Overview

4.89s
Total Load Time
866 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:347 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
64%
cryptocurrency blockchain
60%
documentation technical
51%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
404--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T173443A149101E2189EA2DE64137E3C38D08E999B92F0D03CF7DDEBE4DB860BA5795E5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:dmU5IuKLVfxU3GrXamo3IBnqA/7YJ7FmU2W57vGPiFH4jh+KzqchtZM/LD:dmU5IuKLVfxXXamqA9tZM/LD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:278591:SiMOjQoSECYE2AAAItoBAAggOiEiAswgBPRAAIrqvCQIksBjTTZAY4lKxKEKlDj0kyACCM4JlJUGHBhVJGRCTKEJLACyQhAK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fc3fbc7c3cfffff
Perceptual Hash:b1318f3933ce8e4c
Difference Hash:591e261c16140870
Wavelet Hash:00c3c3c3c3c3e79f
Color Hash:#931f3c

Other Hashes

Crop Resistant:591e261c16140870

Scan History

Scan history not available

Unable to load historical scan data