Security Scan: MetaMask

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f395324e-e4b3-4e7a-bea9-7f7fc8131cc2 Domain and IP registration (RDAP)/api/v1/rdap/f395324e-e4b3-4e7a-bea9-7f7fc8131cc2 Certificate Transparency/api/v1/ct/moz-extensionkeplrr-pudgbhnp-avds-projects-gnhfnp-avds-projects.vercel.app How often this domain was scanned/api/v1/domain/stats/metamask2-eight.vercel.app Scan history for this domain/api/v1/domain/history/metamask2-eight.vercel.app?limit=15

This website contacted 8 IPs in 1 country across 4 domains to perform 8 HTTP transactions. The main domain is moz-extensionkeplrr-pudgbhnp-avds-projects-gnhfnp-avds-projects.vercel.app and was registered 21 years ago.

Submitted URL: https://www.metamask2-eight.vercel.app/

Effective URL:

https://moz-extensionkeplrr-pudgbhnp-avds-projects-gnhfnp-avds-project...

Redirected

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Fake MetaMask opt-in/privacy screen on an anonymous Vercel subdomain impersonating MetaMask; primary domain reported as phishing and flagged as abused cloud hosting — a wallet-phishing lure, not the real MetaMask.

Risk Factors (5)

Impersonation of a different entity's brand (MetaMask) on a domain that is not MetaMask's official domain

Primary domain flagged as phishing (content-threat Indicators of Compromise)

Anonymous shared-hosting subdomain with unknown creation date — apex age is the platform's, not this page's

Redirect to an obfuscated moz-extension* subdomain

IDS alerts for actor-abused cloud hosting infrastructure

Domain age information unavailable

Details

Page Title

MetaMask

Scan Type

public

Favicon Hash

MMH3: 990338043

MD5: e14fea864e9b6e2e171b268e34effca9

Domain Name Analysis

Domain 'www.metamask2-eight.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'www.metamask2-eight'. The second-level label 'vercel' is 6 characters long containing 2 vowels alongside four consonants. Segmentation suggests two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.13s

Total Load Time

37 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:961 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software74% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

74%

documentation technical

58%

healthcare medical

53%

social media network

50%

blog personal website

48%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	142.250.154.95Google · CDN	United States	AS15169Google LLC
1	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	142.251.20.95Google · CDN	United States	AS15169Google LLC
1	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	8	-	-