metamask-docs-evytgj35n-consensys-ddffed67[.]vercel[.]app
“MetaMask Developer Documentation - Build Web3 Apps | MetaMask”
metamask-docs-evytgj35n-consensys-ddffed67.vercel.app — 隐形 · 可达. 品牌冒充:MetaMask; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 16/91 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; cloaking observed; PhishDestroy score 100/100. 注册商: Vercel.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain metamask-docs-evytgj35n-consensys-ddffed67.vercel.app was registered on May 29, 2026 through Vercel Inc. and resolves to the Amazon-owned IP 216.198.79.131 (AS16509, United States). TLS is provided by Google Trust Services (WR1), and the site returns HTTP 200 responses. Page metadata reports the title "MetaMask Developer Documentation - Build Web3 Apps | MetaMask," indicating a direct attempt to mimic official MetaMask developer resources. Infrastructure analysis shows the site is built with Docusaurus, React, and Vercel, and includes third‑party services such as Osano, LinkedIn Insight Tag, HubSpot Analytics, Google Tag Manager, and HSTS enforcement. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans flagged the domain by 17 of 91 security vendors, and Gridinsoft assigns a trust score of 0/100, reinforcing the high‑risk classification. The threat is identified as brand impersonation targeting MetaMask, with a risk level marked as high and status listed as active. Current uncertainties include the exact payload delivered to victims, as no login or credential‑capture pages have been publicly verified. Defenders should block the domain at network perimeter, update web filtering rules to include the full hostname, monitor DNS queries for the Vercel‑hosted IP range, and consider adding the domain to internal threat intel feeds. Continuous re‑scanning of the host is advised to detect any evolution of malicious content.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 10 identified
React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 置信度 100%Osano is a data privacy platform that helps your website comply with regulations such as GDPR and CCPA.
www.osano.com 置信度 100%LinkedIn Insight Tag is a lightweight JavaScript tag that powers conversion tracking, website audiences, and website demographics.
business.linkedin.com 置信度 100%HubSpot is a marketing and sales software that helps companies attract visitors, convert leads, and close customers.
www.hubspot.com 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
www.google.com 置信度 100%Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com 置信度 100%VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of metamask-docs-evytgj35n-consensys-ddffed67.vercel.app · checked May 29, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。