metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app

MetaMask

http://metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app/metamask-connect Access site

Screenshot

Investigate

Domain metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app0 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 216.198.79.131

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL http://metamask-docs-p13jojaa8-consensys-ddffed67.vercel.ap…

urlscan

Wayback

archive.today

Cert WR1

crt.sh

Censys

Google CT

Phishunt analysis Beta

34 medium suspicion suspiciousheuristic risk score · not a probability

Keyword matchBrand in domain labelLong domain

20 signals fired · detector v2.0.0

AI analysis AIBeta

Credential harvesting

Site impersonates MetaMask, the cryptocurrency wallet extension, on Vercel PaaS infrastructure. The wallet-connection path indicates it is designed to steal seed phrases or drain wallets from victims prompted to connect their accounts. Confirmed malicious by OpenPhish and urlscan.

Brand in domain labelKeyword matchOpenPhish

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 76%

Domain & Network

Whois

Registrar Tucows Domains Inc

Network

IP 216.198.79.131

Country