meta-mask-co-wallet[.]blogspot[.]com

The domain meta-mask-co-wallet.blogspot.com is a phishing site engaged in brand impersonation targeting MetaMask users. It poses as a cryptocurrency wallet service to deceive victims into disclosing sensitive information or transferring funds, though no drainer kit was identified. The site is currently taken offline, reducing immediate risk, but prior activity suggests it operated as a cryptocurrency scam.

Meta-mask-co-wallet.blogspot.com was registered through Google Blogger, with no creation date available. It resolved to the IP address 142.251.40.161, hosted by Google LLC in the US, and used an SSL certificate issued by Google Trust Services / WE2. At the time of analysis, 0 of 95 VirusTotal vendors flagged the domain, and Google Safe Browsing did not list it. However, it appeared on 2 security blocklists: PhishDestroy and Enkrypt. Detected technologies included Blogger, Java, Python, OpenGSE, and HTTP/3. The observed page title, 'A Pizza da Mooca,' did not align with the expected MetaMask branding, indicating potential compromise or misdirection.

Users who interacted with meta-mask-co-wallet.blogspot.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency accounts and monitor for unauthorized transactions. Report the phishing domain to MetaMask’s official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.