ScanMalware.com

Security Scan Report: metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app

Redirected to:
https://metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app/snaps
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9bfe7d33-ad2c-4ef7-ad88-0f83e7a86278Domain and IP registration (RDAP)/api/v1/rdap/9bfe7d33-ad2c-4ef7-ad88-0f83e7a86278How often this domain was scanned/api/v1/domain/stats/metamask-docs-ldkp21iks-consensys-ddffed67.vercel.appScan history for this domain/api/v1/domain/history/metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app?limit=15
This website contacted 48 IPs in 2 countries across 32 domains to perform 903 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app/snaps

Effective URL:
https://metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app/snaps
Redirected

AI Security Verdict

Moderate Risk

Confidence: 52%

3
Risk Score

MetaMask developer documentation served on an unverified Vercel preview subdomain. No forms harvesting credentials/payment, no IoC, no malware; only a circular redirect and generic cloud-hosting reputation flags. Cannot confirm it is the official MetaMask channel, so treat with mild caution.

Risk Factors (3)
Content appears to be MetaMask/Consensys documentation hosted on a shared Vercel subdomain of unknown creation age
Circular redirect pattern (weak/moderate signal, common with misconfigured preview deployments)
Unranked hostname and platform-hosted tenant allowlist cannot be verified as official MetaMask publishing channel
Safety Factors (5)
No credential or payment forms; the only form is an 'Ask a question' AI/search field
No brand-impersonation credential form pattern; scanner brand check passed
All third-party script hosts are top-1M ranked analytics/CDN services
Content is technical documentation consistent with MetaMask developer docs, with no scam funnel or urgency
No Indicators of Compromise, no YARA, no Safe Browsing, no IDS phishing/malware alerts
Domain age information unavailable

Details

Page Title

Snaps introduction | MetaMask developer documentation

Scan Type

public

Domain Name Analysis

The domain 'metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'metamask-docs-ldkp21iks-consensys-ddffed67'. The second-level label 'vercel' is 6 characters long holding two vowels versus four consonants. Breaking it apart gives 2 words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://metamask-docs-ldkp21iks-consensys-ddffed67.vercel.app/snaps

Page Load Overview

29.77s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,539 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software85% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
85%
documentation technical
73%
cryptocurrency blockchain
62%
education learning
36%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
57216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
18104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1864.239.109.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
18142.251.14.97Google · CDNUnited States
AS15169Google LLC
18142.251.155.4Google · CDNUnited States
AS15169Google LLC
18146.75.121.55Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
183.174.47.131Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
18104.18.31.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18104.16.140.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18104.17.91.187Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
90348--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10CF34F388010487F1436AAE7A95EA3E8E157728DC634D774F2BD4B39EF41F519226CA3

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:J/H58/IsD+kSa90Gr6kUSz7kDe8eeeveme3eReee7eFeLeqeXeSeBeMeqeaeyeb1:JP58/Isl6UXmVa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:171665:gAIHACATmKFBAkhsHuJokYgQlQxHCO0BA4eoscZcIBdWGYcAgFgsDOAxpiCoAFAAqfQQuLNIqAnYjgBAIDJBhwSAWDaEcCKR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffc383838383
Perceptual Hash:bcc2d22c7dc2d338
Difference Hash:b01bb00636363626
Wavelet Hash:1ecfdf8383838383
Color Hash:#783a69

Other Hashes

Crop Resistant:b01bb00636363626,866969c8f0605482

Scan History

Scan history not available

Unable to load historical scan data