Security Scan Report: auth-trezor-cdn-io.gitbook.io

Redirected to:
https://auth-trezor-cdn-io.gitbook.io/us
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 40 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://auth-trezor-cdn-io.gitbook.io

Effective URL:
https://auth-trezor-cdn-io.gitbook.io/us
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Third-party GitBook page impersonating Trezor's official wallet setup site on a look-alike 'auth-trezor-cdn-io' subdomain. No harvesting form captured, but brand impersonation plus wallet-setup lure makes it unsafe.

Risk Factors (3)
Impersonation of a different entity's brand (Trezor) on a domain that is not the brand's official domain
Deceptive subdomain crafted to resemble an official Trezor auth/CDN hostname
Crypto wallet setup content used as a lure on attacker-controlled GitBook subdomain
Domain age information unavailable

Details

Page Title

Trezor.io/start | Start Your Trezor Experience

Scan Type

public

Domain Name Analysis

You're looking at domain 'auth-trezor-cdn-io.gitbook.io' on the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'auth-trezor-cdn-io'. Count 7 characters in 'gitbook' with three vowels and four consonants. Word splitting yields 3 words: g, it, book. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

(s] Start Your Trezor Experience Trezor.io/start Trezor.io/start (@ cory |v) Discover how to set up your Trezor wallet. Our simple instructions help you secure your crypto assets quickly. . Intro...

Page Load Overview

3.60s
Total Load Time
912 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,682 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software88% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
88%
cryptocurrency blockchain
82%
documentation technical
75%
education learning
59%
cryptocurrency
30%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
404--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FC542A04A115E228EDB2DE6403797D38D08FA56792F4D03CF7DDDAA497820FA8756E8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:RGO2mU5IuKLVfxU3GrUZYJ7dyyq3IBnqA/7YJ7FmU2W57vGPiFH4jh+KzYchtnMp:amU5IuKLVfxXULycA/tnM2Lw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:288786:FSGRCFAZSHAFJCAgUFMUkBRFAAIAEgD4CorCGBEmbxQCAQTwdQAWi4FgxBGsIRN/IjQkSaQUICZAEBPgMJDQ2EBAACijREIp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc3c3c3c3ffff
Perceptual Hash:e1199a8e649c6d67
Difference Hash:181296968e8e1c1e
Wavelet Hash:8fc3c3c3c3c3c383
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data