metamaskwalletcustomerservice[.]blogspot[.]com

The domain metamaskwalletcustomerservice.blogspot.com is currently active and hosts a page titled “Metamask Wallet”. The site leverages the Blogger platform and a stack that includes Java, Python, OpenGSE, Clipboard.js, and HTTP/3. TLS termination is provided by a Google Trust Services certificate issued under the WE2 hierarchy, confirming that the connection is terminated by Google infrastructure. DNS resolution points to 142.250.185.129, an IP address owned by Google LLC (AS15169) located in the United States.

The domain’s authoritative nameservers are ns1.google.com through ns4.google.com, further indicating reliance on Google’s hosting services. Registration records show the domain was created on July 31, 2000 and is managed by MarkMonitor, Inc., a registrar commonly associated with legitimate brand protection. Despite the legitimate hosting, the page title and the declared brand target of MetaMask reveal a brand‑impersonation attempt aimed at crypto users. VirusTotal analysis shows that 16 of 93 security vendors have flagged the domain, and it appears on at least one public blocklist.

PhishDestroy already blocks the domain, and a Gridinsoft trust score of 0 / 100 reflects a high risk assessment. The HTTP response code is 200, indicating that the page is reachable and serving content. Defenders should add the full hostname to URL filtering and network‑level blocklists, monitor DNS queries for the Google IP address, and consider alerting users about the unauthorized use of the MetaMask brand on Blogger sites. Continuous re‑evaluation is advised, as the underlying Blogger account could be reclaimed or the content altered without notice.