metamask-docs-dxzwngzo8-consensys-ddffed67[.]vercel[.]app
“MetaMask Developer Documentation - Build Web3 Apps | MetaMask”
metamask-docs-dxzwngzo8-consensys-ddffed67.vercel.app — Terselubung · dapat dijangkau. Peniruan identitas merek: MetaMask; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 15/91 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, ESET); URLQuery 2 alerts; URLScan malicious verdict; Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; cloaking observed; PhishDestroy score 100/100. Registrar: Vercel.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain is flagged for brand impersonation targeting MetaMask with a page title matching MetaMask Developer Documentation - Build Web3 Apps | MetaMask. The domain metamask-docs-dxzwngzo8-consensys-ddffed67.vercel.app was created on April 18 2026 and remains active with an HTTP status of 200. Google Safe Browsing lists SOCIAL_ENGINEERING while VirusTotal reports detections from 17 out of 95 vendors. Three blocklists currently list the domain which also carries a Gridinsoft trust score of 0 out of 100.
Infrastructure analysis reveals resolution to IP address 64.29.17.131 located in the United States and operated by Vercel Inc. The SSL certificate is issued under WR1 and the domain is registered through Vercel Inc. Detected technologies on the host include Docusaurus React Vercel Osano HSTS Google Tag Manager and Webpack. Nameservers are recorded as NS_NOT_FOUND. The site continues to serve content that directly copies the appearance of official MetaMask developer resources.
Blocking sources include PhishDestroy MetaMask and SEAL. The impersonation relies on a subdomain structure that incorporates MetaMask and ConsenSys references to increase visual similarity. Current status on July 12 2026 confirms the domain is still reachable and delivering the cloned documentation layout.
Defenders should block the IP 64.29.17.131 at network boundaries and add the full domain to internal deny lists. Monitoring for new subdomains under vercel.app that reference MetaMask or ConsenSys remains necessary given the active registration. Periodic rechecks of the VirusTotal score and Google Safe Browsing status can track any changes in detection coverage.
Uncertainty persists around the exact operator behind the registration since only registrar and hosting details are available. The precise campaign duration before April 18 2026 cannot be determined from present data. No additional ASN or geolocation attributes beyond the listed IP location are provided in the intelligence.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 7 identified
JavaScript library for building user interfaces with component-based architecture.
Cloud platform for frontend deployment, optimized for Next.js.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comModule bundler for modern JavaScript applications.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of metamask-docs-dxzwngzo8-consensys-ddffed67.vercel.app · checked Apr 18, 2026
Analisis Konfigurasi Situs
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive