ScanMalware.com

Security Scan Report: metamask-docs-45ta0ykbu-consensys-ddffed67.vercel.app

Site favicon
Submitted: Jul 28, 2026, 1:45:46 PMCompleted: Jul 28, 2026, 1:50:04 PMpubliccompleted

Summary

This website contacted 4 IPs in 1 country across 13 domains to perform 1 HTTP transaction. The main domain is metamask-docs-45ta0ykbu-consensys-ddffed67.vercel.app and was registered 6 years ago.

Submitted URL: https://metamask-docs-45ta0ykbu-consensys-ddffed67.vercel.app/embedded-wallets/sdk/node/blockchain-connection/

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

The site hosts high‑severity malicious JavaScript (WebSocket C2) on an unranked Vercel subdomain, triggering a HIGH_RISK classification.

Risk Factors
High‑severity YARA malware pattern
Critical JavaScript obfuscation and encoding techniques
Social engineering Safe Browsing alert
Unranked, unknown‑age hosting subdomain
Domain age information unavailable

Details

Page Title

Blockchain connection | MetaMask developer documentation

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(94%)

Domain Information

The domain 'metamask-docs-45ta0ykbu-consensys-ddffed67.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'metamask-docs-45ta0ykbu-consensys-ddffed67'. Its registrable label 'vercel' stretches across 6 characters split between two vowels and 4 consonants. Segmentation suggests 2 words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://metamask-docs-45ta0ykbu-consensys-ddffed67.vercel.app/embedded-wallets/sdk/node/blockchain-connection/

Page Load Overview

8.08s
Total Load Time
20
HTTP Requests
13
Domains
192 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:6,194 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software94% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
94%
documentation technical
86%
cryptocurrency blockchain
69%
corporate
35%
finance banking
29%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
518.245.31.100Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
564.239.109.193United States
AS16509Amazon.com, Inc.
5216.198.79.3United States
AS16509Amazon.com, Inc.
5104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
204--

Page Statistics

20
Requests
4
Unique Domains
1.9 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1390473B1D1E1203B40B346CFC6E65710BAB744EAE6491B91B3ACD3A42BCDD9B744385E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:udNntPosgumqmITsMPjpqsGZra6a4apcP8Vye2+wnsVMJ7x:IEsMra6a4apcP8Vye2+wnsVMJ7x

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:179077:MD1EAAHckFxFEiEgTsVoA4YAnZCQgCpREDNQgYkEolgANojDRANCqDhjQhcEFmCDCi4CUEUhUeRamAAAsCC4ipTCQKiKkQY8

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffff83838383
Perceptual Hash:bcc2c23dc7c3823d
Difference Hash:ccb9bd2626262626
Wavelet Hash:7fdf4f8381818183
Color Hash:#a0d279

Other Hashes

Crop Resistant:ccb9bd2626262626,8080888080808000

Scan History

Scan history not available

Unable to load historical scan data