sui[.]airdrpsalert[.]cfd

This domain, sui.airdrpsalert.cfd, was set up to trick visitors into thinking they are logging into a legitimate Google account page. It impersonates Gmail, the popular email service, and likely aims to harvest usernames and passwords from unsuspecting users. The site was flagged as a brand impersonation threat, with an elevated risk level, and has since been taken offline to prevent further harm.

The investigation revealed several technical indicators that confirm the malicious nature of this domain. Security scanning on VirusTotal showed that 14 out of 95 vendors flagged the domain as malicious, a significant number that underscores the threat. The domain was registered through Dynadot LLC on October 22, 2025, and resolves to an IP address associated with Google (64.233.180.147), which is a common tactic to appear legitimate. Notably, the page title was set to "Google," further deceiving visitors. No SSL certificate was found, and the domain appears on one security blocklist.

If you visited this site, it is possible that your credentials were compromised. PhishDestroy recommends immediately changing your Gmail password and enabling two-factor authentication if you have not already done so. Monitor your account for suspicious activity and report any unauthorized access to Google. Avoid entering any personal information on unfamiliar sites and always verify the URL before logging in. Stay safe online.