metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app

MetaMask

https://metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app/metamask-connect/multichain Access site

Screenshot

Investigate

Domain metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app0 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 64.29.17.67

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://metamask-docs-git-dependabot-npmandya-95394d-consen…

urlscan

Wayback

archive.today

Cert WR1

crt.sh

Censys

Google CT

Phishunt analysis Beta

39 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.5 Brand in title
+4.1 Brand in screenshot
+3.7 Brand in domain label
+3.4 Shared IP cluster
+3.0 OpenPhish
+1.1 ASN reputation
+1.1 No CSP header
+0.6 Long domain
+0.6 Suspicious TLD
+0.5 Young certificate
+0.4 Hyphens
+0.3 Free CA
+0.1 External scripts
+0.1 Deep subdomain

21 signals fired · detector v3.0.0

AI analysis AIBeta

Crypto scam

Site impersonates MetaMask documentation and multichain wallet connection flows on an extremely long Vercel subdomain. Flagged by OpenPhish and urlscan as malicious. The path targets wallet connection interactions, aiming to expose or drain cryptocurrency wallets.

Brand in domain labelPaaS hostOpenPhish

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 82%

Domain & Network

Whois

Registrar Tucows Domains Inc

Network

IP 64.29.17.67

Country