SafeMode - Analysis: metamaskwalletcustomerservice.blogspot.com

Captura Visual

Screenshot of metamaskwalletcustomerservice.blogspot.com

Información de Detección

https://metamaskwalletcustomerservice.blogspot.com/

Detected Brand

MetaMask and Robinhood (likely trying to impersonate both)

Country

International

Confianza

100%

HTTP Status

200

Report ID

580eae63-521…

Analyzed

2026-02-24 07:31

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1C14373529169963B21724BE9F76BAB96FF428086CCD3404FE1E9D35C1BE2CB1FC19214
CONTENT ssdeep	1536:U2j0NgomuZeYxGv2IXr96y9g6+SjDxn6xDVc1qL:Uiqr96fDxGDVjL

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	de5e6961615c7492
VISUAL aHash	80809c9cffffffff
VISUAL dHash	333c3c341c1c203c
VISUAL wHash	80808c9ceeeefee2
VISUAL colorHash	070020001c0
VISUAL cropResistant	333c3c341c1c203c

Análisis de Código

Risk Score 79/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Phishing por impersonación
• Objetivo: Usuarios de MetaMask y Robinhood
• Método: Manipulación de contenido y suplantación de dominio
• Exfil: No aplicable en este contexto, pero posiblemente redirigiendo a formularios en otro dominio malicioso.
• Indicadores: Dominio no coincide, hosting en blogspot, contenido no relacionado con la marca.
• Riesgo: ALTO

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

eval
hex_escape
unicode_escape

🎯 Kit Endpoints

https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=6255056010497901893&target=twitter
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=592752169276727794&target=twitter
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=8884574327202342077&target=twitter
https://metamaskwalletcustomerservice.blogspot.com/2026/01/need-urgent-help-heres-how-to-contact.html#comments
https://metamaskwalletcustomerservice.blogspot.com/2025/12/
https://www.blogger.com/feeds/2067338232174757937/posts/default
https://metamaskwalletcustomerservice.blogspot.com/feeds/posts/default
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=2711052728392341196&target=email
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=2711052728392341196&target=facebook
https://metamaskwalletcustomerservice.blogspot.com/2025/12/how-to-call-live-agent-at-phantom.html#comments
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=5438027944923039744&target=email
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=5438027944923039744&target=twitter
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=8455205155585157140&target=
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=2711052728392341196&target=
https://metamaskwalletcustomerservice.blogspot.com/search
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=2711052728392341196&target=pinterest
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=8884574327202342077&target=facebook
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=592752169276727794&target=
https://metamaskwalletcustomerservice.blogspot.com/2026/01/robinhood-customer-service-how-to-get.html#comments
https://metamaskwalletcustomerservice.blogspot.com/2025/12/contacting-live-agent-at-phantom-wallet.html#comments
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=2711052728392341196&target=twitter
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=592752169276727794&target=pinterest
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=8884574327202342077&target=pinterest
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=1988996946287894195&target=pinterest
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=1988996946287894195&target=facebook
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=6255056010497901893&target=email
https://metamaskwalletcustomerservice.blogspot.com/
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=1988996946287894195&target=twitter
https://www.blogger.com
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=6255056010497901893&target=
https://www.blogger.com/profile/04285425946646248826
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=592752169276727794&target=facebook
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=5438027944923039744&target=pinterest
https://metamaskwalletcustomerservice.blogspot.com/2025/12/how-to-call-live-agent-at-phantom.html
https://metamaskwalletcustomerservice.blogspot.com/2026/01/robinhood-customer-support-how-to.html#comments
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=5438027944923039744&target=facebook
https://metamaskwalletcustomerservice.blogspot.com/2026/01/robinhood-customer-service-how-to-get.html
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=8455205155585157140&target=pinterest
https://metamaskwalletcustomerservice.blogspot.com/2026/01/how-to-resolve-robinhood-unable-to.html
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=1988996946287894195&target=
https://metamaskwalletcustomerservice.blogspot.com/2026/01/
https://metamaskwalletcustomerservice.blogspot.com/2026/01/how-to-resolve-robinhood-unable-to.html#comments
https://metamaskwalletcustomerservice.blogspot.com/2025/12/how-to-contact-binance-wallet-support_18.html
https://metamaskwalletcustomerservice.blogspot.com/search?updated-max=2025-12-18T01:57:00-08:00&max-results=7
https://metamaskwalletcustomerservice.blogspot.com/feeds/posts/default?alt=rss
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=8455205155585157140&target=facebook
https://metamaskwalletcustomerservice.blogspot.com/2026/01/robinhood-customer-support-how-to.html
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=6255056010497901893&target=pinterest
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=6255056010497901893&target=facebook
https://metamaskwalletcustomerservice.blogspot.com/2025/12/contacting-live-agent-at-phantom-wallet.html
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=8884574327202342077&target=email
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=8455205155585157140&target=twitter
https://metamaskwalletcustomerservice.blogspot.com/2026/01/need-urgent-help-heres-how-to-contact.html
https://www.blogger.com/go/report-abuse
https://metamaskwalletcustomerservice.blogspot.com/2025/12/how-to-contact-binance-wallet-support_18.html#comments
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=8884574327202342077&target=
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=5438027944923039744&target=
/responsive/sprite_v1_6.css.svg#ic_post_blogger_black_24dp
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=1988996946287894195&target=email
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=592752169276727794&target=email
https://www.blogger.com/share-post.g?blogID=2067338232174757937&postID=8455205155585157140&target=email

📡 API Calls Detected

post
GET

📤 Form Action Targets

https://metamaskwalletcustomerservice.blogspot.com/search

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Domain mismatch

Domain does not match the brands being impersonated (MetaMask and Robinhood)

Hosting Provider

Blogspot is often used for phishing campaigns and is a low-trust hosting service

Impersonation

Impersonation of MetaMask with Robinhood content.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Banking Credential Harvester

Objetivo

MetaMask and Robinhood (likely trying to impersonate both) users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltración

HTTP POST to backend

Evaluación de Riesgo

HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: Credential Harvester, Banking, Personal Info
12 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

MetaMask and Robinhood

Official Website

metamask.io, robinhood.com

Fake Service

Customer support and login issues related to both platforms

⚔️ Metodología de Ataque

Primary Method: Impersonation and Content Baiting

The attacker is trying to impersonate MetaMask while including content that is related to Robinhood. This approach is designed to catch users from both platforms that are having issues. The attacker then would likely look to gather user data (email, passwords, etc) or use malicious redirect (not visible on the image, the analysis of the URL does not show this yet).