trezor[.]gitbook[.]io

trezor.gitbook.io is a subdomain of gitbook.io. PhishDestroy first observed the hostname on Aug 15, 2026. The hostname explicitly references Trezor; stored content metadata identifies the same apparent target. Current evidence score: 100/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Spamhaus DBL, and Cloudflare Radar. VirusTotal recorded 14 detections among 91 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET, Emsisoft, Fortinet, G-Data, Gridinsoft, Lionic, Netcraft, Sophos, VIPRE, Webroot on Aug 15, 2026 at 05:36 UTC. Spamhaus DBL: DBL_ABUSED_PHISH on Aug 15, 2026 at 06:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 15, 2026 at 06:20 UTC. Google Safe Browsing returned no flag on Aug 15, 2026 at 05:37 UTC.

HTTP 307 was recorded on Aug 15, 2026 at 05:28 UTC. Registration records for the registrable domain gitbook.io list GitBook as the registrar. TLS metadata lists Google Trust Services as the certificate issuer.

Neither a page title nor a landing-page capture is stored. The content indicators and 3 positive source findings support the current Trezor impersonation and phishing classification. The target field identifies Trezor, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.