ScanMalware.com

Security Scan Report: metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app

Redirected to:
https://metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app/metamask...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/57a763eb-03d1-41ed-8615-03d33b8ad479Domain and IP registration (RDAP)/api/v1/rdap/57a763eb-03d1-41ed-8615-03d33b8ad479How often this domain was scanned/api/v1/domain/stats/metamask-docs-keec0mi8n-consensys-ddffed67.vercel.appScan history for this domain/api/v1/domain/history/metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app?limit=15
This website contacted 36 IPs in 2 countries across 21 domains to perform 830 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app/metamask-connect/evm/guides/manage-user-accounts/

Effective URL:
https://metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app/metamask...
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unofficial vercel.app subdomain presenting itself as MetaMask developer documentation, flagged phishing by a single feed with no legitimate tie to MetaMask/Consensys. Treat as an impersonation clone; verify at docs.metamask.io.

Risk Factors (5)
Brand impersonation: uses MetaMask/Consensys branding and documentation styling on a vercel.app subdomain that is not an official MetaMask domain
Single-source phishing threat-intel report on the scanned primary domain
Obscured, auto-generated-looking hosting subdomain typical of cloned documentation kits
IDS alerts indicating the hosting namespace is commonly abused by threat actors
Unranked domain claiming to be a major cryptocurrency brand's developer docs
Domain age information unavailable

Details

Page Title

Manage User Accounts - MetaMask Connect EVM | MetaMask developer documentation

Scan Type

public

Domain Name Analysis

The domain name 'metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'metamask-docs-keec0mi8n-consensys-ddffed67'. The registrable portion 'vercel' spans 6 characters split between two vowels and 4 consonants. Breaking it apart gives two words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app/metamask-connect/evm/guides/manage-user-accounts/

Page Load Overview

6.94s
Total Load Time
5.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:10,962 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software80% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
80%
cryptocurrency blockchain
76%
documentation technical
58%
finance banking
46%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2564.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2364.239.109.129Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23142.251.110.97Google · CDNUnited States
AS15169Google LLC
23146.75.121.55Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
233.174.47.131Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
23104.18.31.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23104.16.141.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23104.18.40.240Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
83036--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A2342D72C2E114B740F34AC785EA5368A6E3525DD3218B20A3BCC7B96F8CD1A75938D7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:mm7sedpaFmwa2OrPDKPDhPDrPDnUPDsPDpogqPD6PDy/:p7sedpaFmwa2OrPDKPDhPDrPDnUPDsPW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:245187:soLoCEyQCiChIKQDWQ6gASwFKIhC0gqtESIQAYZ/gkAdgIwk8gIgEPQCIAEI7ABhIBPClCCDvASm0BkYIBVIQFFAAwI6QAoI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffdfffffc7c7c7
Perceptual Hash:b2cc7389cd334c5c
Difference Hash:a0b137b9b08d8d8c
Wavelet Hash:001f835f1fc7c746
Color Hash:#ac40bf

Other Hashes

Crop Resistant:a0b137b9b08d8d8c,3133d4e994b4d4d4

Scan History

Scan history not available

Unable to load historical scan data