ScanMalware.com

Security Scan Report: metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app

Redirected to:
https://metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app/agent-wa...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4d6bfec4-110d-46c2-a144-260260fd1325Domain and IP registration (RDAP)/api/v1/rdap/4d6bfec4-110d-46c2-a144-260260fd1325How often this domain was scanned/api/v1/domain/stats/metamask-docs-75mpj2s96-consensys-ddffed67.vercel.appScan history for this domain/api/v1/domain/history/metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app?limit=15
This website contacted 36 IPs in 2 countries across 21 domains to perform 598 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app/agent-wallet/guides/trade-perpetuals

Effective URL:
https://metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app/agent-wa...
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unranked vercel.app subdomain presenting itself as MetaMask/ConsenSys developer docs, with four single-source phishing threat-intel reports and IDS alerts for abused cloud hosting; no credential form captured, but treat as brand impersonation.

Risk Factors (5)
Phishing threat-intelligence reports on the primary domain and three of its URLs
Impersonation of the MetaMask/ConsenSys brand on a non-official domain
Unknown-age subdomain on a free shared hosting platform
Network IDS alerts for actor-abused cloud hosting
Circular redirect in the redirect chain
Domain age information unavailable

Details

Page Title

Trade perpetuals | MetaMask developer documentation

Scan Type

public

Domain Name Analysis

Domain 'metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'metamask-docs-75mpj2s96-consensys-ddffed67'. Count 6 characters in 'vercel' containing two vowels alongside four consonants. It segments into two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app/agent-wallet/guides/trade-perpetuals

Page Load Overview

9.55s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,071 chars
Detector Agreement:60%

Website Classification

Primary Category

technology software76% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
76%
documentation technical
74%
cryptocurrency blockchain
61%
finance banking
41%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
38216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
16104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1664.239.123.193Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
16142.251.14.97Google · CDNUnited States
AS15169Google LLC
16146.75.121.55Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
163.174.47.131Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
16104.18.30.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16104.16.138.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16104.17.223.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16104.17.175.201Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
59836--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T111D393389190497F1427BBC3AA9AA3E8E10B728EC531D674F37D4B79AF41E915113CA3

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:3P58C6sE7LPDdPDEPD3PDAPDkPDzPDhPDfPDpVM:/Cs8LPDdPDEPD3PDAPDkPDzPDhPDfPDI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:132997:IME9CIORghFBxY5oTogQWZBZQGDQCEFC0tDwUEYSgAmToaTAocEWEsQqDqAJCXAKAiAACEAoUECCewCGKgUqhw4NEZ0Qs6jA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff8383ffffc383
Perceptual Hash:bcc251c2752d6dc3
Difference Hash:e8a12726a0a03636
Wavelet Hash:249f8103ffdf8382
Color Hash:#b7bf40

Other Hashes

Crop Resistant:e8a12726a0a03636,0010a8a2b0084000,802018c4e4180000,0000402020c00000,0000b06444100000

Scan History

Scan history not available

Unable to load historical scan data