metis[.]airdrpsalerts[.]life

The domain metis.airdrpsalerts.life is a confirmed phishing site engaged in brand impersonation, specifically targeting Google users. It presents itself as a legitimate Google login page to deceive victims into entering credentials, posing an elevated risk of account compromise. No crypto drainer kit was detected. The site is currently taken offline, but prior activity indicates it was actively used for credential theft under the guise of Google services.

Technical analysis shows metis.airdrpsalerts.life was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar, while appearing on 1 security blocklist (PhishDestroy). The domain was registered through Cloudflare, Inc. and resolved to the IP address 142.250.188.4, hosted on Google LLC's infrastructure in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Google'. Detected technologies include Bootstrap, jQuery, Cloudflare Browser Insights, and HTTP/3. Google Safe Browsing did not flag the domain at the time of assessment.

Victims who interacted with metis.airdrpsalerts.life should immediately change their Google account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the phishing domain to Google’s abuse reporting tools and to platforms like PhishTank or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts. If financial or sensitive data was exposed, consider contacting relevant institutions to secure accounts.