metamask-docs-8pgyxxibh-consensys-ddffed67[.]vercel[.]app

The domain metamask-docs-8pgyxxibh-consensys-ddffed67.vercel.app was registered on June 01, 2026 through Vercel Inc. and resolves to the IP address 216.198.79.131, which is owned by Amazon.com, Inc. (AS16509) and geolocated in the United States. The site presents a valid SSL certificate issued by Google Trust Services under the WR1 intermediate, indicating that transport encryption is in place. Gridinsoft assigns a trust score of 0 out of 100, reflecting an extremely low reputation. HTTP requests return a 200 status code and the page title reports "Home | MetaMask developer documentation," matching the declared brand target of MetaMask. VirusTotal analysis records 12 detections out of 91 scanned security vendors, and the domain appears on three active blocklists, including PhishDestroy, MetaMask, and SEAL. The threat is classified as brand impersonation with a high risk rating and remains active. Defenders should block the domain at network perimeter and DNS layers, monitor for any connections to the associated IP address, and consider adding the host to endpoint allow‑list exclusions for legitimate Vercel services only. Continued observation is advised because the content of the site beyond the title has not been publicly disclosed.