Security Scan Report: metamask-docs-fbv47wj26-consensys-ddffed67.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 35 IPs in 2 countries across 21 domains to perform 576 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://metamask-docs-fbv47wj26-consensys-ddffed67.vercel.app/agent-wallet/reference/architecture

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Domain and multiple URLs flagged as phishing by threat-intel; IDS alerts for abused cloud hosting. Despite documentation content, site-level Indicators of Compromise indicate phishing infrastructure.

Risk Factors (4)
Six Indicators of Compromise matches (1 domain, 5 URLs) all indicating phishing
IDS alerts for abused cloud hosting service domain
Unranked domain on shared hosting platform with unknown creation date
Circular redirect signal
Domain age information unavailable

Details

Page Title

Architecture | MetaMask developer documentation

Scan Type

public

Domain Name Analysis

You're looking at domain 'metamask-docs-fbv47wj26-consensys-ddffed67.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'metamask-docs-fbv47wj26-consensys-ddffed67'. The second-level label 'vercel' is 6 characters long holding 2 vowels versus 4 consonants. Segmentation suggests two words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://metamask-docs-fbv47wj26-consensys-ddffed67.vercel.app/agent-wallet/reference/architecture

Page Load Overview

13.04s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:6,227 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software77% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
77%
documentation technical
73%
cryptocurrency blockchain
60%
finance banking
42%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3264.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
16216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
16104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1664.239.109.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
16142.251.20.97Google · CDNUnited States
AS15169Google LLC
16146.75.121.55Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
163.174.47.131Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
16104.18.30.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16104.16.141.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16104.18.40.240Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
57635--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E5C396399150497E1426BBC3AA5AA3E8E10B728EC535D2B4F37D4B39EF41F914123CA3

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:5/H58zSsUOUSa90Gr7wUrz72WVPDwzxVd:5P58zSsy7iWVPDwFVd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:123789:AIYD0rIDMAkABBCZwhg3KIQS0Skg4LSQ2AEIDMAqnEVAY6jkAKDEAIgkY4pAiAOpHBQSiEQSsBEcpaRgBnAyBEkiIpUpSFgJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:249f830f071fc796
Perceptual Hash:bc4a5503574b5763
Difference Hash:e8b3b5bdbca82626
Wavelet Hash:008b4d1f079f87de
Color Hash:#3a784b

Other Hashes

Crop Resistant:e8b3b5bdbca82626

Scan History

Scan history not available

Unable to load historical scan data