Security Report: metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/890a9ab5-1927-4197-932f-3a2fd6ad8c20 Domain and IP registration (RDAP)/api/v1/rdap/890a9ab5-1927-4197-932f-3a2fd6ad8c20 Certificate Transparency/api/v1/ct/metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app How often this domain was scanned/api/v1/domain/stats/metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app Scan history for this domain/api/v1/domain/history/metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app?limit=15

This website contacted 7 IPs in 1 country across 11 domains to perform 19 HTTP transactions. The main domain is metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app and was registered 6 years ago.

Submitted URL: https://metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app/embedded-wallets/sdk/node

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Page hosts high‑severity malicious JavaScript and multiple phishing IoCs; classified as confirmed malware distribution scam.

Risk Factors

JavaScript malware (YARA HIGH severity)

Multiple phishing URL Indicators of Compromise

Content‑malware IoC on primary domain

Domain age information unavailable

Details

Page Title

Embedded Wallets SDK for Node.js | MetaMask developer documentation

Scan Type

public

Favicon Hash

MMH3: -2049508263

MD5: 3dd78bbbeec1d7a93ca533ce53ee15e8

Domain Name Analysis

Domain 'metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'metamask-docs-p13jojaa8-consensys-ddffed67'. The second-level label 'vercel' is 6 characters long split between two vowels and 4 consonants. It segments into two words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.75s

Total Load Time

401 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:9,047 chars

Detector Agreement:60%

Website Classification

Primary Category

technology software87% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

87%

documentation technical

65%

cryptocurrency blockchain

50%

corporate

35%

cryptocurrency

30%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	216.198.79.195	United States	AS16509Amazon.com, Inc.
2	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	18.245.31.100Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
2	64.239.109.193	United States	AS16509Amazon.com, Inc.
2	18.245.31.112Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
2	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	64.29.17.195	United States	AS16509Amazon.com, Inc.
19	7	-	-