Phishing detection: trezor--brioge--help.gitbook.io

Trezor
https://trezor--brioge--help.gitbook.io Access site
Screenshot
Screenshot of trezor--brioge--help.gitbook.io
Investigate
Domain trezor--brioge--help.gitbook.io3 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 104.18.40.47
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://trezor--brioge--help.gitbook.io
urlscan Wayback archive.today
Cert WE1
crt.sh Censys Google CT
Phishunt analysis Beta
37 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.4 Cert reuse
  • +3.4 Shared IP cluster
  • +3.0 OpenPhish
  • +2.6 Brand in subdomain
  • +2.2 Country mismatch
  • +1.1 ASN reputation
  • +0.6 Long domain
  • +0.5 Young certificate
  • +0.4 Hyphens
  • +0.3 Free CA
  • +0.3 Suspicious TLD
  • +0.1 External scripts
  • +0.1 Deep subdomain
20 signals fired · detector v3.0.0
AI analysis AIBeta
Crypto scam

Page on a GitBook documentation host impersonates Trezor Bridge help content, with the brand in the subdomain and title. Likely directs wallet users to hand over credentials or recovery phrases. Flagged by OpenPhish.

Brand in subdomainPaaS hostOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-10 · confidence 80%
Domain & Network
Whois
Network
IP 104.18.40.47 Cloudflare CDN
Country United StatesUnited States
Hosting Cloudflare, Inc.
ASN AS13335
TLS Cert WE1
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Cloudflare, Inc.
Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-10-10 13:04 UTC  ·  Last refreshed 2026-10-10 23:30 UTC