trust-vvallet-user-experience[.]blogspot[.]com

PhishDestroy identifies trust-vvallet-user-experience.blogspot.com as an active cryptocurrency drainer domain designed to trick users into approving malicious token transfers under the guise of a "user experience" survey for Google Wallet. The site leverages a fraudulent Blogspot subdomain to appear legitimate while hosting a fake wallet interface that siphons digital assets through deceptive transaction prompts. Visitors who connect their wallets risk irreversible token theft, with drained funds routed through obfuscated blockchain paths to shield the attacker’s identity. This domain has been flagged by two independent security blocklists and remains undetected on VirusTotal with 1/95 security vendor detections as of the latest scan. The site operates under Google Trust Services’ SSL certificate, adding a misleading layer of authenticity, and resolves to IP address 142.251.110.132, a range associated with Google’s infrastructure. While its Blogspot origin suggests recent creation, the domain’s malicious infrastructure has already evaded detection by major security platforms, including MetaMask and SEAL, indicating a well-hidden threat vector. If you visited trust-vvallet-user-experience.blogspot.com, disconnect your wallet immediately using your wallet’s revoke feature or by resetting connected applications. Do not approve any pending transactions, and scan your device with reputable antivirus software. Report the domain to your wallet provider and relevant cybersecurity platforms to help block its spread. Always verify URLs through official channels and avoid clicking unsolicited links purporting to enhance user experience.