soph[.]airdropalert[.]us

This domain, soph.airdropalert.us, is a brand impersonation site designed to trick visitors into thinking they are logging into a legitimate Gmail account. The page title reads "Google," mimicking the real login interface. However, this is a classic phishing lure: if you enter your email and password, the attackers capture your credentials and can compromise your actual Gmail account. The site is now offline, but similar copies may reappear.

PhishDestroy identified this threat using multiple data sources. VirusTotal flagged the domain with 11 out of 95 security vendors marking it as malicious, a strong indicator of its dangerous nature. The domain was created on October 19, 2025, through Dynadot LLC, a relatively recent registration typical of phishing campaigns. It resolved to IP 192.178.155.106, which is associated with Google—a clever choice to appear legitimate, but the lack of an SSL certificate and its appearance on one security blocklist confirm it is a fake. The unique seed 31c351 helps track this specific variant.

If you visited this site and entered your Gmail credentials, immediately change your password and enable two-factor authentication on your account. Also, review your account activity for any unauthorized access. For future safety, always verify the URL before logging in, and use PhishDestroy to check if a site is trusted. Avoid clicking links in unsolicited emails or messages that direct you to login pages; instead, navigate directly to the official website.