Security Scan Report: metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app

Site favicon
Submitted: Sep 7, 2026, 1:45:05 PMCompleted: Sep 7, 2026, 1:46:33 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

Page hosts high‑severity malicious JavaScript (C2) and is flagged by phishing intel; treat as high‑risk malware distribution.

Risk Factors (4)
Malicious JavaScript C2 pattern (YARA HIGH)
Unverified phishing IoC on the primary URL
Brand mismatch (MetaMask brand on unrelated sub‑domain)
Unranked / low‑reputation domain on shared hosting
Domain age information unavailable

Details

Page Title

Embedded Wallets SDK for iOS | MetaMask developer documentation

Scan Type

public

Domain Name Analysis

You're looking at domain 'metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67'. The registrable portion 'vercel' spans 6 characters split between 2 vowels and four consonants. Splitting it apart reveals two words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app/embedded-wallets/sdk/ios

Page Load Overview

17.79s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9,544 chars
Detector Agreement:60%

Website Classification

Primary Category

technology software88% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
88%
documentation technical
70%
cryptocurrency blockchain
54%
corporate
35%
cryptocurrency
30%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
464.29.17.195United States
AS16509Amazon.com, Inc.
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
218.245.31.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
264.239.123.65United States
AS16509Amazon.com, Inc.
264.239.123.1United States
AS16509Amazon.com, Inc.
218.245.31.112Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
218.245.31.78Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2216.198.79.195United States
AS16509Amazon.com, Inc.
188--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12361AB73E211F82CA55687A5BA41F098C3A6E31BD55E6C82B1FC03991BC0B2075B7A13

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:StNxUejXeZEXE+XqLATWgGRAQezeUeguevTCrN89W:sNDj1faLgWViihguevTCqW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3212:CBJAgAGhIAKCAAGQIAAkAAAAABAKhAYCAAIAgAGAAJiIgQEEQgAIEAECAECAEAQAAEAAAABAEgAEkAAHCEEEgIAAIEEAGggA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:005f0f817d1f839f
Perceptual Hash:b84375406e6d1f39
Difference Hash:8cb9b925a1b1b626
Wavelet Hash:007f0f813d1f839f
Color Hash:#bf2dd2

Other Hashes

Crop Resistant:8cb9b925a1b1b626

Scan History

Scan history not available

Unable to load historical scan data