metamask-docs-evytgj35n-consensys-ddffed67[.]vercel[.]app
“MetaMask Developer Documentation - Build Web3 Apps | MetaMask”
metamask-docs-evytgj35n-consensys-ddffed67.vercel.app — Ammantato · raggiungibile. Simulazione del marchio: MetaMask; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 16/91 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; cloaking observed; PhishDestroy score 100/100. Registrar: Vercel.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain metamask-docs-evytgj35n-consensys-ddffed67.vercel.app was registered on May 29, 2026 through Vercel Inc. and resolves to the Amazon-owned IP 216.198.79.131 (AS16509, United States). TLS is provided by Google Trust Services (WR1), and the site returns HTTP 200 responses. Page metadata reports the title "MetaMask Developer Documentation - Build Web3 Apps | MetaMask," indicating a direct attempt to mimic official MetaMask developer resources. Infrastructure analysis shows the site is built with Docusaurus, React, and Vercel, and includes third‑party services such as Osano, LinkedIn Insight Tag, HubSpot Analytics, Google Tag Manager, and HSTS enforcement. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans flagged the domain by 17 of 91 security vendors, and Gridinsoft assigns a trust score of 0/100, reinforcing the high‑risk classification. The threat is identified as brand impersonation targeting MetaMask, with a risk level marked as high and status listed as active. Current uncertainties include the exact payload delivered to victims, as no login or credential‑capture pages have been publicly verified. Defenders should block the domain at network perimeter, update web filtering rules to include the full hostname, monitor DNS queries for the Vercel‑hosted IP range, and consider adding the domain to internal threat intel feeds. Continuous re‑scanning of the host is advised to detect any evolution of malicious content.
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 10 identified
React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org Confidenza al 100%Vercel is a cloud platform for static frontends and serverless functions.
vercel.com Confidenza al 100%Osano is a data privacy platform that helps your website comply with regulations such as GDPR and CCPA.
www.osano.com Confidenza al 100%LinkedIn Insight Tag is a lightweight JavaScript tag that powers conversion tracking, website audiences, and website demographics.
business.linkedin.com Confidenza al 100%HubSpot is a marketing and sales software that helps companies attract visitors, convert leads, and close customers.
www.hubspot.com Confidenza al 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
www.google.com Confidenza al 100%Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com Confidenza al 100%Analisi di VirusTotal
Prove archiviate
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of metamask-docs-evytgj35n-consensys-ddffed67.vercel.app · checked May 29, 2026
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo