morpho[.]hub-airdropalert[.]cfd

PhishDestroy has identified morpho.hub-airdropalert.cfd as a brand impersonation phishing site targeting Google users. This domain was designed to deceive visitors into believing they are accessing a legitimate Google login page, as indicated by the page title 'Google'. The threat type is credential theft, where unsuspecting users may enter sensitive information that could be harvested by attackers.

Technical indicators reveal that the domain resolves to IP address 216.58.206.36, and VirusTotal reports a detection rate of 7 out of 95 security vendors flagging it as malicious. The domain was registered on November 09, 2025, through Dynadot LLC, and it currently lacks an SSL certificate, making any data transmitted unencrypted. It appears on one security blocklist, and Google Safe Browsing has not yet listed it, though the elevated risk level warrants caution.

As of the latest check, the domain is offline, but users should remain vigilant as similar sites may reappear. PhishDestroy recommends that users always verify URLs before entering credentials and report any suspicious domains. To stay safe, enable two-factor authentication and use a password manager that can detect phishing sites. The remaining risk is low due to the domain being taken down, but users should monitor for any related activity under the same brand impersonation campaign.