trezor-hardware-web[.]gitbook[.]io

trezor-hardware-web.gitbook.io is a subdomain of gitbook.io. PhishDestroy first observed the hostname on Feb 19, 2026. Stored content metadata identifies Ethereum as the apparent target. The captured page title is “@Trezor Hardware Wallet ## | us”. Page analysis recorded additional brand references to Trezor. Stored page analysis classifies the content as wallet/seed phishing. Current evidence score: 99/100 (critical).

Positive findings are stored from 5 sources: VirusTotal, MetaMask, SEAL, Cloudflare Radar, and URLScan. VirusTotal recorded 13 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Kaspersky, Lionic, MalwareURL, Sophos, Webroot on Jul 27, 2026 at 02:23 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 8, 2026 at 06:20 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories security threats and phishing; its verdict timestamp was not retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Trezor and assigned phishing as its category on Jul 29, 2026 at 02:52 UTC. Non-positive and contextual checks: URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. PhishStats returned no feed match on Mar 1, 2026 at 23:01 UTC.

HTTP 307 was recorded on Aug 7, 2026 at 22:03 UTC. Registration records for the registrable domain gitbook.io list Cloudflare, Inc. as the registrar. At collection time, the hostname resolved to 104.18.40.47 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Apr 23, 2026 at 03:22 UTC returned 80/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Google Trust Services / WE1 as the certificate issuer with validity through Apr 21, 2026; checked Mar 15, 2026 at 05:56 UTC.

The content indicators and 5 positive source findings support the current Ethereum-themed wallet/seed phishing classification.