ScanMalware.com

Security Scan Report: metamask-docs-ctqr7yuof-consensys-ddffed67.vercel.app

Redirected to:
https://metamask-docs-ctqr7yuof-consensys-ddffed67.vercel.app/embedded...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7d4b3cbb-22ff-4eac-9415-0dd6964b8636Domain and IP registration (RDAP)/api/v1/rdap/7d4b3cbb-22ff-4eac-9415-0dd6964b8636How often this domain was scanned/api/v1/domain/stats/metamask-docs-ctqr7yuof-consensys-ddffed67.vercel.appScan history for this domain/api/v1/domain/history/metamask-docs-ctqr7yuof-consensys-ddffed67.vercel.app?limit=15
This website contacted 38 IPs in 3 countries across 21 domains to perform 725 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://metamask-docs-ctqr7yuof-consensys-ddffed67.vercel.app/embedded-wallets/sdk/react-native

Effective URL:
https://metamask-docs-ctqr7yuof-consensys-ddffed67.vercel.app/embedded...
Redirected

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Unofficial .vercel.app subdomain styled as MetaMask/Consensys docs; OpenPhish phishing report on the host and a ClearFake flag on its linked docs domain. No credential or payment form was captured, but unverified threat-intel hits warrant caution.

Risk Factors (5)
Single-source phishing report against the primary hostname
Brand-named hosting-platform subdomain (metamask-docs…consensys…) on .vercel.app, not an official brand domain
External link to a domain flagged with a ClearFake malware indicator (single source)
Network IDS alerts for commonly actor-abused cloud hosting domain
Circular redirect between capture steps
Domain age information unavailable

Details

Page Title

Embedded Wallets SDK for React Native | MetaMask developer documentation

Scan Type

public

Domain Name Analysis

You're looking at domain 'metamask-docs-ctqr7yuof-consensys-ddffed67.vercel.app' on the application-focused generic top-level domain (.app), featuring subdomain 'metamask-docs-ctqr7yuof-consensys-ddffed67'. Count 6 characters in 'vercel' with two vowels and four consonants. It segments into two words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

eta a eta Products Embedded Wallets Web Mobile & Gaming React Native - v81x Backend Get started Advanced Overview Custom Authentication Smart accounts Whitelabel Multi-factor authentication Dapp...

Page Load Overview

2.64s
Total Load Time
6.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:14,904 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software86% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
86%
documentation technical
80%
cryptocurrency blockchain
65%
corporate
35%
cryptocurrency
30%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1964.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
19104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1964.239.123.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
19142.251.110.97Google · CDNUnited States
AS15169Google LLC
19104.16.141.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19146.75.121.55Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
193.174.47.131Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
19104.17.175.201Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19104.17.223.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
72538--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11954FE72C2E1147B00F35EC795EA5368A6E3525DD2118B60A3BCC7F96F8CC5A3893897

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Jksp2PDIPD/PDNPDvPD1PDdPDsPDmPDcPDqPDJPDJPDMLPDpPD8PDuPDlPDuC1Pi:msp2PDIPD/PDNPDvPD1PDdPDsPDmPDcE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:291119:RQgR1gO2ZFCKhiEUHgBolMYAEmEBCiEiAAZY0UYAPRInBrAAwC0VR5gz3hoEBAIeC3wA/B1wn4oSpqwDa8EiV7xD6DyBUSCl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:004f078383dfdfde
Perceptual Hash:b823d7ca7568470b
Difference Hash:a4a9ad37b6b1b13c
Wavelet Hash:000703831fdf9fde
Color Hash:07000c00000

Other Hashes

Crop Resistant:a4a9ad37b6b1b13c

Scan History

Scan history not available

Unable to load historical scan data