Security Scan: Use an ERC-20 paymaster with a smart account

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/24ddde63-cd75-4578-9a14-a79195e20848 Domain and IP registration (RDAP)/api/v1/rdap/24ddde63-cd75-4578-9a14-a79195e20848How often this domain was scanned/api/v1/domain/stats/metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app Scan history for this domain/api/v1/domain/history/metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app?limit=15

This website contacted 41 IPs in 4 countries across 25 domains to perform 333 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app/tutorials/use-erc20-paymaster/

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Unauthorized MetaMask-branded documentation mirror on a random Vercel subdomain, reported as phishing by three single-source feeds; no credential form found here, but the impersonation and reports make it unsafe to trust.

Risk Factors (4)

Brand impersonation: MetaMask branding and documentation on a non-MetaMask, unranked vercel.app hostname with an obfuscated-looking subdomain

Multiples phishing threat-intel reports against the domain and two of its URLs (single-source, unverified)

Obfuscated hostname pattern (brand + random hex + corporate name) typical of phishing infrastructure on free hosting

Circular redirect and suspicious clipboard activity on capture

Domain age information unavailable

Details

Page Title

Use an ERC-20 paymaster with a smart account | MetaMask developer documentation

Scan Type

public

Favicon Hash

MMH3: -2049508263

MD5: 3dd78bbbeec1d7a93ca533ce53ee15e8

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app' is registered and includes subdomain 'metamask-docs-keec0mi8n-consensys-ddffed67'. Its registrable label 'vercel' stretches across 6 characters split between two vowels and four consonants. Splitting it apart reveals two words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

16.15s

Total Load Time

3.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:8,285 chars

Detector Agreement:80%

Website Classification

Primary Category

cryptocurrency blockchain71% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

71%

technology software

65%

finance banking

53%

documentation technical

49%

cryptocurrency

45%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	64.239.123.65Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	142.251.20.97Google · CDN	United States	AS15169Google LLC
8	146.75.121.55Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
8	3.174.47.131Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
8	104.18.31.173Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	104.16.139.209Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	216.66.8.43	Toronto, Ontario, Canada	AS394230Civilized Discourse Construction Kit, Inc.
333	41	-	-