send[.]app-airdropalert[.]lat

This domain poses a significant risk of brand impersonation, specifically targeting Gmail users. It is designed to deceive users into believing they are interacting with a legitimate Google service, which can lead to the theft of sensitive information such as login credentials and personal data. The attackers may use this information for further malicious activities, including identity theft and unauthorized access to user accounts.

Analysis indicates that the domain send.app-airdropalert.lat was created on November 10, 2025, and is registered through Dynadot LLC. Currently, 12 out of 95 security vendors on VirusTotal flag this domain as malicious. The domain does not have an SSL certificate, which is a red flag as legitimate websites typically use HTTPS to secure user data. Additionally, the domain resolves to an IP address (142.250.185.132) located in the United States and is associated with AS15169 Google LLC, which is unusual and suggests an attempt to impersonate Google's infrastructure.

If a user has visited this domain, they should immediately change their Gmail password and enable two-factor authentication (2FA) to enhance account security. Users should also monitor their account activity for any unauthorized access or suspicious transactions. Reporting the incident to Google and running a full system scan for malware can help mitigate potential risks. It is advisable to avoid clicking on links or entering any personal information on websites that do not use HTTPS or appear suspicious.