metamaskwalletcustomerservice[.]blogspot[.]com[.]mt

Analysis indicates that metamaskwalletcustomerservice.blogspot.com.mt is currently active and classified as a crypto drainer. DNS resolution points to IP address 142.251.13.132, which is shared with legitimate Google services, suggesting possible use of compromised or cloud‑based infrastructure. VirusTotal reports 11 of 95 security vendors flagging the domain, providing moderate detection confidence. The domain’s registration details, hosting provider, and any associated command‑and‑control infrastructure have not been disclosed, leaving the full attack chain uncertain. Defenders should block network traffic to the resolved IP and the full hostname, monitor DNS queries for the domain, and incorporate the indicator into intrusion detection signatures. Given the high risk rating, organizations handling cryptocurrency assets should enforce multi‑factor authentication, educate users about unsolicited wallet support requests, and apply strict outbound filtering to mitigate potential fund exfiltration attempts.