# meteora-ag.help — SUSPICIOUS

> meteora-ag.help mimics Google Support in an active scam. Resolved to IP 104.18.26.246 and missed 0/95 VirusTotal engines as of April 2026.

## Summary
PhishDestroy identifies meteora-ag.help as an active page hosting a fake Google Support scam designed to trick visitors into surrendering login credentials or payment details. The site masquerades as legitimate Google assistance, likely targeting users experiencing login issues, billing confusion, or account warnings. Clicking links in phishing emails or search results that point to meteora-ag.help could land victims on a convincing replica of Google’s login or support portal, where any entered information is immediately harvested by attackers.

This domain was flagged by PhishDestroy on April 01, 2026, just days after its creation. Security scans through VirusTotal show that as of that date, the domain resolved to IP address 104.18.26.246 and received zero detections out of 95 participating engines, suggesting it evades current filters. The domain is registered through NameSilo, LLC using a Google Trust Services SSL certificate, which may increase perceived legitimacy. Despite these appearances, the lack of detection does not indicate safety—it often signals freshly deployed infrastructure favored by threat actors to avoid early blocking.

If you visited meteora-ag.help, assume your credentials or sensitive data may have been compromised. Do not reuse passwords across services and revoke access to any accounts that may have been exposed. Contact Google Support directly via official channels (support.google.com) if you suspect interaction with this scam. Report the domain to your email provider and browser for blocking. Consider enabling two-factor authentication on all critical accounts (e.g., Gmail, banking) as an immediate protective measure. Monitor financial accounts for unauthorized transactions and be alert for follow-up phishing attempts leveraging any information obtained through this fraudulent site.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-01 00:51:47
- Registrar: NameSilo, LLC
- IP: 104.18.26.246

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/479a898b-db7b-44ae-bcde-a7066efea9e4
- PhishDestroy: https://phishdestroy.io/domain/meteora-ag.help/
- LLM endpoint: https://phishdestroy.io/domain/meteora-ag.help/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/meteora-ag.help/
Last updated: 2026-04-01