Security Report: metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a9d5f681-f931-4060-a52c-ac6419a7fed6 Domain and IP registration (RDAP)/api/v1/rdap/a9d5f681-f931-4060-a52c-ac6419a7fed6How often this domain was scanned/api/v1/domain/stats/metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app Scan history for this domain/api/v1/domain/history/metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app?limit=15

This website contacted 41 IPs in 2 countries across 22 domains to perform 200 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app/developer-tools/faucet/

Effective URL:

https://metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app/develope...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 86%

Risk Score

Fake MetaMask developer-docs/faucet hosted on a vercel.app subdomain, impersonating MetaMask and prompting wallet connection; multiple phishing threat-intel hits. Do not connect a wallet.

Risk Factors (5)

Brand impersonation of MetaMask (Consensys) outside its official domain

Primary domain and multiple URL paths flagged as phishing by threat-intel feeds

Wallet-connect prompt on an unverified lookalike faucet page

Page hosted on a freely-created shared platform subdomain with unknown actual creation date

IDS alerts for actor-abused cloud hosting service

Domain age information unavailable

Details

Page Title

Faucet | MetaMask developer documentation

Scan Type

public

Favicon Hash

MMH3: -2049508263

MD5: 3dd78bbbeec1d7a93ca533ce53ee15e8

Domain Name Analysis

The domain name 'metamask-docs-75mpj2s96-consensys-ddffed67.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'metamask-docs-75mpj2s96-consensys-ddffed67'. Count 6 characters in 'vercel' split between two vowels and four consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.64s

Total Load Time

3.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:4,266 chars

Detector Agreement:50%

Website Classification

Primary Category

documentation technical55% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

documentation technical

55%

technology software

54%

cryptocurrency blockchain

53%

education learning

35%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
40	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	64.239.123.129Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	142.251.20.97Google · CDN	United States	AS15169Google LLC
4	104.16.140.209Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	146.75.121.55Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
4	3.174.47.131Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	104.17.128.172Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.16.160.168Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
200	41	-	-