beefy[.]airdropsalert[.]icu

The domain beefy.airdropsalert.icu has been identified as a high-risk brand impersonation site specifically targeting Gmail users. This domain, now taken offline, was designed to deceive visitors into believing they were accessing a legitimate Google login page, as indicated by its page title 'Google'. The threat type is credential theft through brand impersonation, a common tactic used in phishing campaigns to harvest sensitive information. The domain's current status is offline, but its previous activity posed a significant risk to anyone who may have encountered it.

Technical analysis reveals several red flags. VirusTotal flagged the domain as malicious by 14 out of 95 security vendors, confirming its dangerous nature. The domain was registered through Dynadot LLC and resolved to IP address 142.250.65.196, which is suspiciously associated with Google's infrastructure but is actually a phishing host. Created on October 17, 2025, the domain had no SSL certificate, making data transmission insecure. Google Safe Browsing also flagged it for phishing, and it appeared on one security blocklist. These indicators collectively confirm the domain's intent to steal user credentials.

Given that the domain is now offline, immediate risk of interaction is reduced. However, users should remain vigilant and avoid entering any credentials on similar suspicious sites. Always verify URLs before logging into Gmail, and use two-factor authentication for added security. If any credentials were entered on this domain, change passwords immediately and enable security alerts. PhishDestroy recommends reporting such domains to Google Safe Browsing to protect others from similar threats.