metis[.]airdrpsalerts[.]lat

The domain metis.airdrpsalerts.lat is flagged as a brand impersonation threat targeting Google. The page title was set to 'Google,' indicating an attempt to deceive users into believing they are interacting with a legitimate Google service. No specific crypto drainer kit was identified, but the impersonation suggests credential theft as the primary risk.

Technical indicators reveal a VirusTotal score of 11/95 security vendors flagging this domain. It was registered through Dynadot LLC on October 29, 2025, and resolves to IP address 172.253.62.99. The domain appears on 1 security blocklist and is blocked by PhishDestroy. Google Safe Browsing status was not explicitly provided but the blocklist presence indicates prior detection.

The domain is currently offline, with response actions taken to take it offline. Remaining risk is low due to the domain being offline and blocked by security services, but users should remain cautious of similar domains using the 'airdrpsalerts.lat' naming pattern. It is recommended to avoid interacting with any domains impersonating Google and to report such domains to threat intelligence platforms.