metamasklogink[.]blogspot[.]com[.]eg

metamasklogink.blogspot.com.eg is a tenant hostname on Google Blogger, not a separately registered domain. PhishDestroy first observed the hostname on Aug 18, 2026. The hostname explicitly references MetaMask; stored content metadata identifies the same apparent target. The captured page title is “How to recover MetaMask Wallet without the private key?”. Stored page analysis classifies the content as credential phishing. Current evidence score: 85/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 9 detections among 91 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, ESET, Emsisoft, Lionic, Netcraft, Sophos, Webroot on Aug 21, 2026 at 02:29 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 23, 2026 at 14:20 UTC. Non-positive and contextual checks: ScamAdviser assigned a trust score of 15/100 (Very Likely Unsafe); no observation timestamp was retained. Google Safe Browsing returned no flag on Aug 21, 2026 at 21:03 UTC. URLScan completed without a malicious verdict (score 0) on Aug 19, 2026 at 05:08 UTC.

The collector marked the hostname reachable on Aug 22, 2026 at 22:15 UTC, but did not retain the HTTP response code. Google Blogger is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 142.250.154.132 on AS15169 (Google LLC). The recorded endpoint location is Mountain View, US. The IP and ASN identify shared Google Blogger infrastructure, not the tenant operator. The stored server header is GSE. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. The platform TLS certificate was issued by Google Trust Services with validity through Oct 28, 2026; checked Aug 18, 2026 at 13:02 UTC.

The content indicators and 3 positive source findings support the current MetaMask-themed credential phishing classification.