# metamask-docs-git-feat-ew-signer-consensys-ddffed67.vercel.app -- Security Report > MetaMask-Docs Phishing Site: metamask-docs-git-feat-ew-signer-consensys.vercel.a ## Domain Classification - Domain: metamask-docs-git-feat-ew-signer-consensys-ddffed67.vercel.app - Status: dead - Threat: confirmed phishing - Severity: Critical - VirusTotal: 14 detections - Blocklists: 0 - Google Safe Browsing: Not flagged ## Registration - Registrar: Vercel Inc. - IP: 216.198.79.131 - SSL: - Target Brand: MetaMask ## Analysis The domain metamask-docs-git-feat-ew-signer-consensys.vercel.app impersonates MetaMask's official documentation site to deploy a crypto drainer, as confirmed by 14 VirusTotal detections. Hosted on Vercel's infrastructure at IP 216.198.79.131, this phishing page presents itself as a legitimate signer documentation portal to trick users into connecting compromised wallets. The URL structure includes 'git-feat-ew-signer-consensys' to appear technical and authoritative, leveraging MetaMask's real do ## Source Report generated by PhishDestroy (https://phishdestroy.io/domain/metamask-docs-git-feat-ew-signer-consensys-ddffed67.vercel.app/) Data from VirusTotal, Google Safe Browsing, OTX, and proprietary scanners.