momentum[.]airdrpsalerts[.]life

The domain momentum.airdrpsalerts.life is a phishing site engaged in brand impersonation targeting Google. It was designed to deceive users into believing they were interacting with a legitimate Google service, posing an elevated risk of credential theft or fraud. No crypto drainer kit was detected. The site is currently taken offline, though its prior activity remains a concern for potential victims.

Technical analysis shows momentum.airdrpsalerts.life was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar. It appears on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through Cloudflare, Inc., and resolved to the IP address 142.250.184.228, hosted on Google LLC's infrastructure in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Google'. Detected technologies include Bootstrap, jQuery, Cloudflare Browser Insights, and HTTP/3. The site returned an HTTP 523 status at the time of assessment.

Users who interacted with momentum.airdrpsalerts.life should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication (2FA) if not already active. Monitor accounts for unauthorized activity and report suspected fraud to Google's support channels. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If financial or sensitive data was exposed, consider contacting local cybercrime authorities for further guidance.