soph[.]airdrpsalert[.]life

This domain, soph.airdrpsalert.life, is flagged as an offline brand impersonation threat targeting Google, as indicated by its page title 'Google' and confirmed scam classification. Infrastructure analysis reveals the domain resolved to IP 216.58.206.36, geolocated in Germany under AS15169 (Google LLC), though this IP association does not confirm hosting legitimacy. The domain was registered through Cloudflare, Inc., but no SSL certificate was present, increasing susceptibility to interception. Nameserver records were absent (NS_NOT_FOUND), a common indicator of ephemeral or hastily configured phishing infrastructure.

Detection data shows 12 of 95 security vendors on VirusTotal flagged the domain, while PhishDestroy and one additional security blocklist have actively blocked it. Gridinsoft assigned a trust score of 0/100, reinforcing its high-risk status. Defenders should treat this domain as a confirmed phishing asset, particularly given its alignment with Google's branding. The lack of SSL and missing nameservers suggest minimal operational security measures, typical of short-lived impersonation campaigns.

While the domain is currently offline, historical resolution to a Google LLC IP may indicate an attempt to exploit perceived legitimacy. Security teams are advised to review logs for connections to 216.58.206.36 during the domain's active period and monitor for re-registration or DNS reactivation. No evidence of a phishing kit or specific payload is available, limiting further technical attribution.