Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is network-abuse@google.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
metamasklogink[.]blogspot[.]lu
“How to recover MetaMask Wallet without the private key?”
metamasklogink.blogspot.lu — Não verificado. Representação da marca: MetaMask; Tipo de golpe: Credential Phishing. Resumo das evidências: VirusTotal 12/91 (ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLQuery 4 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. Registrador: Markmonitor.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain presents a page titled How to recover MetaMask Wallet without the private key? and targets the MetaMask brand through direct impersonation. The site returns an HTTP 200 status and remains active at the time of analysis. It resolves to IP address 142.251.110.132 geolocated in the United States. The certificate was issued under Google Trust Services WE2. Multiple indicators confirm the domain continues to serve content that mimics official wallet recovery procedures.
Infrastructure analysis reveals nameservers ns1.google.com through ns4.google.com along with HTTP/3 support. The domain was registered via Markmonitor. Detected technologies include Blogger, Java, Python, OpenGSE, and Clipboard.js. These elements align with a Google-hosted blogging platform configuration that has been repurposed for brand impersonation. The IP location and nameserver delegation both point to the same provider infrastructure.
Detection records show the domain listed on three security blocklists with flags from eleven of ninety-five vendors on VirusTotal. It is already blocked by PhishDestroy, MetaMask, and SEAL. The combination of an active resolution, wallet-themed page title, and existing blocklist presence establishes a clear pattern of misuse without requiring external assumptions.
Defenders should add the domain and its current IP to internal block policies and monitor the 142.251.110.132 range for related resolutions. Continued observation of the nameservers can reveal any infrastructure shifts. Organizations protecting MetaMask users are advised to treat any references to private-key-free recovery flows from this domain as malicious and to update threat feeds accordingly.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 6 identified
Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.
www.blogger.com 100% de confiançaJava is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.
java.com 100% de confiançaOpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.
code.google.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of metamasklogink.blogspot.lu · checked Jul 12, 2026
Análise da configuração do site
Evidências e relatórios externos
PD-20260712-A20CA2 Recipient: network-abuse@google.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo