Phishing detection: metamask-docs-l8lvh00ol-consensys-ddffed67.vercel.app
MetaMask Screenshot
Investigate
Domain
metamask-docs-l8lvh00ol-consensys-ddffed67.vercel.app0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
64.29.17.3
ipinfo
Greynoise
URL
https://metamask-docs-l8lvh00ol-consensys-ddffed67.vercel.a…
Phishunt analysis Beta
41
high suspicion likely_phishingheuristic risk score · not a probability
Keyword matchBrand in domain labelLong domain
19 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates MetaMask documentation on a convincingly named Vercel subdomain targeting cryptocurrency wallet users. Flagged by both Google Safe Browsing and OpenPhish as malicious; likely harvests wallet seed phrases or private keys.
OpenPhishGoogle Safe BrowsingBrand in domain label
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-12 · confidence 90%
Domain & Network
Whois
Registrar
Tucows Domains Inc
Network
IP
64.29.17.3
Country
United States
United States
Hosting
Amazon.com, Inc.
ASN
AS16509
TLS Cert
-
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN
Amazon.com, Inc.
Submit to blocklists