akt[.]airdrpsalerts[.]lat

The domain akt.airdrpsalerts.lat is a confirmed phishing site engaged in brand impersonation targeting Google. It presents a fraudulent login page designed to harvest user credentials under the guise of a legitimate Google service. No crypto drainer kit was identified, but the site poses an elevated risk due to its deceptive appearance and active credential-theft intent. As of the latest verification, akt.airdrpsalerts.lat has been taken offline.

Technical indicators reveal limited but notable detection: 2 of 95 VirusTotal security vendors flagged akt.airdrpsalerts.lat, including ChainPatrol and SOCRadar. The domain was registered through Dynadot LLC on October 29, 2025, and resolves to the IP address 172.217.18.4, hosted on Google LLC's infrastructure (AS15169). It appears on one security blocklist (PhishDestroy) and lacks an SSL certificate. The observed page title was 'Google', reinforcing the impersonation attempt. Nameservers are hosted on Cloudflare (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com). Google Safe Browsing did not flag the domain at the time of analysis.

Victims of akt.airdrpsalerts.lat should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor linked accounts for suspicious activity, such as unauthorized logins or transactions. Report the phishing domain to Google's Safe Browsing team via their reporting tool and to the registrar, Dynadot LLC, to aid in further takedown efforts. If financial or personal data was exposed, consider contacting relevant institutions to secure compromised accounts.