Security Scan Report: metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app

Redirected to:
https://metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed6...
Site favicon
Submitted: Sep 6, 2026, 12:45:40 PMCompleted: Sep 6, 2026, 12:50:37 PMpubliccompleted

Summary

This website contacted 9 IPs in 1 country across 11 domains to perform 2 HTTP transactions. The main domain is metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app and was registered 6 years ago.

Submitted URL: http://metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app/metamask-connect/multichain/reference/api/

Effective URL: https://metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app/metamask-connect/multichain/reference/api/Redirected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Page hosts high‑severity malicious JavaScript (C2 backdoor) on an unranked Vercel subdomain; treat as high‑risk malware distribution.

Risk Factors
Unranked / low‑reputation domain
Hosted on shared‑hosting subdomain (vercel.app) with unknown creation date
Content‑malware YARA match indicating command‑and‑control activity
Domain age information unavailable

Details

Page Title

Multichain API Reference | MetaMask developer documentation

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(83%)

Domain Information

Domain 'metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67'. Its registrable label 'vercel' stretches across 6 characters holding 2 vowels versus four consonants. Tokenizing the label suggests two words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app/metamask-connect/multichain/reference/api/

Page Load Overview

11.80s
Total Load Time
18
HTTP Requests
11
Domains
173 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:10,573 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software83% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
83%
documentation technical
70%
cryptocurrency blockchain
66%
cryptocurrency
45%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
264.239.109.1United States
AS16509Amazon.com, Inc.
218.245.31.78Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2216.198.79.3United States
AS16509Amazon.com, Inc.
2216.198.79.67United States
AS16509Amazon.com, Inc.
264.29.17.67United States
AS16509Amazon.com, Inc.
264.239.109.129United States
AS16509Amazon.com, Inc.
218.245.31.112Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
218.245.31.100Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
189--

Page Statistics

18
Requests
4
Unique Domains
1.9 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17C8103B2D7109A39675787B4B552B15883A3F31BDD6E1C01B2FC03586BD9BB064A3923

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:SshlI6GmATWgGib5yCEyCGqe6L6cz6rrNgAyCp6n7Ak9W:J1PgWVaMGqX2c+rj8n00W

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3994:AKIIAAIBSEAEQAlIDCYABQCCEAAMAJMEgDIIYoAQpBABIAAIQQAACAEEAAbBAAwNAgMACAMAAABEAQAEApCQCoAKkAhEAAkB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff9d83830f9fdf
Perceptual Hash:bc42c701757c437e
Difference Hash:90a135373ebe2626
Wavelet Hash:007f9d8183039fbf
Color Hash:#d22da6

Other Hashes

Crop Resistant:90a135373ebe2626

Scan History

Scan history not available

Unable to load historical scan data