metis[.]airdropalert[.]us

The domain metis.airdropalert.us is identified as a brand impersonation threat targeting Gmail. It poses a significant risk of misleading users into believing they are interacting with a legitimate Google service, potentially leading to the compromise of personal information or credentials.

Infrastructure analysis reveals that metis.airdropalert.us has a VirusTotal score of 11/95, indicating that 11 out of 95 security vendors have flagged this domain as malicious. The domain is registered through Dynadot LLC and resolves to the IP address 172.253.63.103, which is located in the United States and is part of the AS15169 Google LLC network. The domain was created on October 19, 2025, and it appears on 1 security blocklist. It is currently taken offline and was previously blocked by PhishDestroy. The lack of an SSL certificate further suggests a lack of legitimate security measures.

The current status of the domain is offline, which indicates that it has been taken down or is no longer active. However, the risk remains elevated due to the potential for the domain to be reactivated. Users are advised to be cautious of any future activity involving this domain and to avoid entering personal information or credentials on any page that appears to impersonate Gmail. Security teams should continue to monitor the domain for any signs of reactivation and consider implementing additional protective measures, such as DNS blacklisting or web filtering, to mitigate the risk.