auth-iotrzor-cdn.gitbook.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of auth-iotrzor-cdn.gitbook.io
This domain appears to host a GitBook page presenting itself as a setup and guidance resource for Trezor cryptocurrency wallet users. The page title and visible content reference “Trezor.io/start®” and describe wallet setup, backup, recovery seed generation, and crypto asset protection. The site is delivered as a subdomain of gitbook.io, which suggests it is published through a documentation-hosting platform rather than through Trezor’s primary web domain.
Based on the page layout and text, the content appears to imitate official onboarding or support documentation for a hardware-wallet brand in the cryptocurrency sector. The domain string itself includes terms such as “auth” and a misspelled brand-like element (“iotrzor”), which may indicate an attempt to resemble a legitimate authentication or content-delivery page associated with Trezor. No clear evidence in the provided scan data identifies the actual operator of this page.
Safety Assessment for auth-iotrzor-cdn.gitbook.io
This website shows several risk indicators at the time of this scan. It was flagged by 9 out of 91 security engines, with multiple detections describing the page as phishing or malicious. In addition, the page content appears to present itself as a Trezor-related setup resource while being hosted on a gitbook.io subdomain rather than an official brand domain. That resemblance may indicate a look-alike page intended to gain user trust, which is especially concerning in the cryptocurrency space where fake wallet setup and recovery-seed pages are a common abuse pattern.
Other signals are mixed. A malware scan did not identify flagged files, and major content-focused threat databases in the provided data did not report active malware or phishing listings at the time of this scan. However, the domain’s IP address is listed on one mail-reputation blocklist, which is a weaker signal than direct phishing detections but still worth noting. The combination of multi-engine phishing detections, brand-like presentation, and cryptocurrency-themed wallet guidance materially raises the risk profile.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL certificate issued by a mainstream certificate authority and is served through Cloudflare infrastructure at IP address 104.18.40.47, with hosting geolocated to Canada in the scan data. The domain uses Cloudflare nameservers and appears to be fronted by Cloudflare’s web server and CDN services. DNSSEC is not enabled, as the domain is reported as unsigned.
From a technical standpoint, the page is hosted on a gitbook.io subdomain and loads supporting assets from GitBook and related content-delivery domains. No malicious files or flagged external links were identified by the provided malware scan, but technical cleanliness alone does not offset the phishing-related detections and the apparent brand-mimicking presentation.
Share your experience with this website. Was it safe? Did you encounter any issues?