metamaskchromeextensionn[.]blogspot[.]rs

Analysis of the domain metamaskchromeextensionn.blogspot.rs indicates it is an active crypto drainer threat, currently resolving to IP 142.251.20.132. The domain was registered on October 3, 2008, through Webglobe d.o.o., an atypical registration path for malicious infrastructure. While the domain's age predates typical phishing campaigns, this may reflect repurposing of an older, dormant domain rather than a newly created one. As of July 19, 2026, the domain remains active, and three of 95 security vendors on VirusTotal have flagged it, suggesting detection of malicious behavior. The specific threat classification—crypto drainer—implies the domain is likely designed to interact with cryptocurrency wallets, potentially tricking users into authorizing transactions that siphon funds. No further details about the exact content or mechanics of the site are available at this time, as the domain has not been fully analyzed for visual or functional indicators. Defenders should treat this domain as high-risk, particularly in environments where cryptocurrency transactions or wallet interactions occur. Blocking resolution to 142.251.20.132 and monitoring for connections to metamaskchromeextensionn.blogspot.rs are recommended mitigations. The domain's continued activity and low detection rate on VirusTotal suggest it may evade some automated defenses, warranting manual review in security tooling.