Security Report: metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d1115095-53e8-4576-9c6f-becade350c3f Domain and IP registration (RDAP)/api/v1/rdap/d1115095-53e8-4576-9c6f-becade350c3fHow often this domain was scanned/api/v1/domain/stats/metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app Scan history for this domain/api/v1/domain/history/metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app?limit=15

This website contacted 32 IPs in 3 countries across 24 domains to perform 378 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app/tutorials/erc20-paymaster/

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Likely phishing site impersonating MetaMask developer documentation on an unofficial Vercel subdomain. Threat intel flags it as phishing, though single-source. No credential forms, but brand impersonation and platform abuse warrant high risk.

Risk Factors (4)

Brand impersonation of MetaMask on a non-MetaMask domain

Threat intelligence reports domain and URLs as phishing (single-source)

Hosted on a shared platform (vercel.app) with unknown subdomain age

IDS alerts indicate the hosting platform is abused by actors

Domain age information unavailable

Details

Page Title

Use an ERC-20 paymaster with Web3Auth | MetaMask developer documentation

Scan Type

public

Favicon Hash

MMH3: -2049508263

MD5: 3dd78bbbeec1d7a93ca533ce53ee15e8

Domain Name Analysis

The domain name 'metamask-docs-keec0mi8n-consensys-ddffed67.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'metamask-docs-keec0mi8n-consensys-ddffed67'. Its registrable label 'vercel' stretches across 6 characters holding 2 vowels versus 4 consonants. It segments into two words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.10s

Total Load Time

3.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:11,381 chars

Detector Agreement:80%

Website Classification

Primary Category

cryptocurrency blockchain89% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

89%

technology software

78%

documentation technical

73%

finance banking

50%

cryptocurrency

45%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
37	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
11	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	64.239.109.129Aws · CLOUD	United States	AS16509Amazon.com, Inc.
11	142.251.14.97Google · CDN	United States	AS15169Google LLC
11	104.16.137.209Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	146.75.121.55Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
11	3.174.47.131Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
11	104.17.175.201Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	104.18.40.240Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	104.17.128.172Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
378	32	-	-