mail[.]metadscredit[.]com

PhishDestroy identifies mail.metadscredit.com as a high-risk Google Trust Services-themed phishing domain actively impersonating legitimate email infrastructure. The domain is currently resolving to IP 188.114.97.3 and was registered on August 19, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Google Safe Browsing has flagged it under SOCIAL_ENGINEERING, and VirusTotal confirms detection by 10 out of 95 security vendors, underscoring its malicious intent and broad threat surface. This domain leverages a valid SSL certificate issued by Google Trust Services to deceive users into believing it is an authentic service endpoint. Despite the SSL certificate, the domain’s recent creation date, combined with its presence on multiple threat intelligence blocklists, indicates a rapidly deployed campaign designed to harvest credentials or deliver malware. The combination of low trust scores, active phishing behavior, and minimal vendor detection delay highlights an elevated risk to enterprise and consumer email users alike. To mitigate exposure, organizations should immediately block mail.metadscredit.com and 188.114.97.3 at the DNS and network perimeter. Users should avoid accessing the domain and report any suspicious emails to IT security teams. Security teams are advised to scan email gateways for indicators associated with this domain and update browser-based blocklists using feeds such as Google Safe Browsing. Proactive monitoring for similar newly registered domains mimicking trusted certificate authorities is strongly recommended to prevent credential theft or malware delivery via spoofed email services.