Security Scan Report: metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 39 IPs in 2 countries across 23 domains to perform 66 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app/quickstart/

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

MetaMask-branded developer documentation hosted on an unknown-age vercel.app subdomain, with three single-source phishing reports against the domain and two of its URLs; it shows no credential or payment forms and no malware, but the impersonation-plus-threat-intel combination outweighs the clean content.

Risk Factors (5)
Three unverified single-source phishing reports against the exact domain and two of its documentation URLs
MetaMask branding on a non-MetaMask domain (phishing kits routinely clone MetaMask docs on Vercel preview hosts)
Unknown-age subdomain on a free/shared hosting platform with no reputation ranking
Circular redirect detected between initial and final URL
IDS alerts flagging the vercel.app hosting namespace as actor-abused
Domain age information unavailable

Details

Page Title

MetaMask Quickstart | MetaMask developer documentation

Scan Type

public

Domain Name Analysis

You're looking at domain 'metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app' on the application-focused generic top-level domain (.app) with subdomain 'metamask-docs-keec0mi8n-consensys-ddffed67'. The core label 'vercel' covers 6 characters holding two vowels versus 4 consonants. Splitting it apart reveals two words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app/quickstart/

Page Load Overview

19.36s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,509 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software70% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
70%
cryptocurrency blockchain
59%
documentation technical
52%
corporate
35%
cryptocurrency
22%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2864.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
164.239.109.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.110.97Google · CDNUnited States
AS15169Google LLC
1104.16.141.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1146.75.121.55Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
13.174.47.131Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.18.31.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.223.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6639--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13D933B7292A05539150F0BCAA575A3E872AB528FC5852198F3FC07B4BFC2DD1E82B9C5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:J/H58aFslqqSa90GrinUbSPDdPDahZft+FUZIenIe+IeUoe+oe8oe2oegoetV/:JP58aFsliaSPDdPDahZft+FmV/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94568:BagkQ1GGh3wYgQAFIzJAltJ4SBpBNmIKSDBCByUhCSkswFSAskR1NBEiFwKCCOorMDgo7BaEWAtQSYagDA34MALBCgY04K2h

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff9292d2929697
Perceptual Hash:f48ba340747c79a3
Difference Hash:b060363436b62436
Wavelet Hash:ffff8082c082d707
Color Hash:#c3c587

Other Hashes

Crop Resistant:b060363436b62436

Scan History

Scan history not available

Unable to load historical scan data