Security Scan Report: metamask-docs-4q672pqsp-consensys-ddffed67.vercel.app

Redirected to:
https://metamask-docs-4q672pqsp-consensys-ddffed67.vercel.app/quicksta...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 36 IPs in 2 countries across 25 domains to perform 72 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://metamask-docs-4q672pqsp-consensys-ddffed67.vercel.app/quickstart/

Effective URL:
https://metamask-docs-4q672pqsp-consensys-ddffed67.vercel.app/quicksta...
Redirected

AI Security Verdict

Low Risk

Confidence: 60%

3
Risk Score

Looks like MetaMask developer docs served from a Vercel shared-hosting subdomain (not the official domain) with no credential/payment forms or malware signals; identity of the subdomain is unverifiable, so treat as unconfirmed.

Risk Factors (3)
Brand-named documentation replicated on a free subdomain of a shared hosting platform rather than the operator's own domain
Subdomain creation date unknown on instant-publish hosting (vercel.app), so provenance cannot be verified
Domain unranked in Cisco Umbrella (weak prior only)
Safety Factors (5)
Content is genuine-looking technical integration documentation with no credential, wallet-connect, or payment capture on-page
All 7 third-party script hosts are ranked in the top-1M popularity list (analytics/tag/CDN services)
No cross-origin credential form submissions and no credential exfiltration detected
No impersonation of a brand the page collects data for; supported third-party integrations (HubSpot, GA, jsDelivr) are normal tooling
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

MetaMask Quickstart | MetaMask developer documentation

Scan Type

public

Domain Name Analysis

The domain name 'metamask-docs-4q672pqsp-consensys-ddffed67.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'metamask-docs-4q672pqsp-consensys-ddffed67'. Count 6 characters in 'vercel' holding 2 vowels versus four consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://metamask-docs-4q672pqsp-consensys-ddffed67.vercel.app/quickstart/

Page Load Overview

9.41s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,516 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software70% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
70%
cryptocurrency blockchain
59%
documentation technical
52%
corporate
35%
cryptocurrency
22%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
264.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
264.239.123.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2142.251.14.97Google · CDNUnited States
AS15169Google LLC
2104.16.140.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2146.75.121.55Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
23.174.47.131Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2104.18.31.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.175.201Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7236--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T110933B7292E05539150F0BDAA535A3E872AB628FC5852194F3FC07B4BFC2DD1E82B9C5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:g/H58vtszqqSa90GrinUbEPDNPDahZf/+FUZIenIe+IeUoe+oe8oe2oegoePVN:gP58vts/iaEPDNPDahZf/+F4VN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94927:iAQOQkEwYOPQk8iIDkwlEcMVEAMhsKYEEAhE0EamJ0IBYGGU4rUxFTiSBQIgCsqn0UsgXECmshAJeMTCYYLHgfGAEQ0YQiMG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff9292d2929697
Perceptual Hash:f48ba340747c79a3
Difference Hash:b060363436b62436
Wavelet Hash:ffff8082c082d707
Color Hash:#821f93

Other Hashes

Crop Resistant:b060363436b62436

Scan History

Scan history not available

Unable to load historical scan data