ScanMalware.com

Security Scan Report: metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app

Redirected to:
https://metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app/metamask...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6c111fcb-0a90-45f0-8006-18062539e059Domain and IP registration (RDAP)/api/v1/rdap/6c111fcb-0a90-45f0-8006-18062539e059How often this domain was scanned/api/v1/domain/stats/metamask-docs-ldkp21iks-consensys-ddffed67.vercel.appScan history for this domain/api/v1/domain/history/metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app?limit=15
This website contacted 35 IPs in 2 countries across 23 domains to perform 820 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app/metamask-connect/evm/guides/sign-data

Effective URL:
https://metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app/metamask...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Read-only MetaMask developer documentation on an unverifiable vercel.app subdomain. No credential/payment forms, no malware or Indicators of Compromise; only concerns are the shared-host brand subdomain and a circular redirect.

Risk Factors (3)
Unverifiable MetaMask-branded documentation served from a shared vercel.app subdomain rather than the official MetaMask domain
Circular redirect between http and https URLs of the same page
Subdomain creation date unknown (shared hosting platform), so the namespaced site could be recent despite the parent domain's age
Safety Factors (5)
Content is genuine technical documentation with no login, password, or payment collection
Verified form facts: 0 password, 0 disguised-password, 0 payment fields
No Indicators of Compromise, no JavaScript malware (YARA), no Safe Browsing threat, no kit-roster hit
No cross-origin credential forms and no credential exfiltration detected
Third-party scripts served from top-1M ranked analytics/HubSpot hosts; no malicious behavioral JS signals
Domain age information unavailable

Details

Page Title

Sign Data with MetaMask Connect EVM | MetaMask developer documentation

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app' is registered; it also runs on subdomain 'metamask-docs-ldkp21iks-consensys-ddffed67'. Its registrable label 'vercel' stretches across 6 characters split between 2 vowels and four consonants. Splitting it apart reveals 2 words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app/metamask-connect/evm/guides/sign-data

Page Load Overview

3.05s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:19,172 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software81% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
81%
documentation technical
73%
cryptocurrency blockchain
48%
cryptocurrency
45%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
38216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23151.101.193.229Fastly · CDNUnited States
AS54113Fastly, Inc.
23142.251.20.97Google · CDNUnited States
AS15169Google LLC
2364.239.123.193Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23104.16.141.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23146.75.121.55Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
233.174.47.131Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
23104.17.92.187Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23104.17.223.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23104.16.160.168Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
82035--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1867457B2C2E214A740F35AC785EA5368AAF3515DD2114B60A3BCC3F96FCCC1A3593997

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:TXsg9wdGeB46p1na2VFMPDdRFAYXhNUm/QwIPDeRFAYXhNUm/QwxPDnwRFAYXhNL:Lsg9wdGeB46p1na2VFMPDdRFAYXhNUmM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:351183:QABYEwBUKAiKRBloyNlSIIMgBCCkQGOYkQo1aWoPqKUYkESAKwB8QIgwUgQCAFJIFPQSkM7SkuIIsCMQKFARBKwywFDxJQCH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1cffcfc38383dfdf
Perceptual Hash:bc4bd2257582713b
Difference Hash:b0a13fbe36aeaeb8
Wavelet Hash:003f83c30383ffde
Color Hash:#d279a7

Other Hashes

Crop Resistant:b0a13fbe36aeaeb8

Scan History

Scan history not available

Unable to load historical scan data