bobcoin[.]airsdropsalerts[.]cfd

The domain bobcoin.airsdropsalerts.cfd, impersonating Gmail, has been flagged by 7 out of 95 vendors on VirusTotal as malicious. PhishDestroy detected this domain on November 14, 2025, and it is now offline. This domain was registered through Dynadot LLC and hosted on an IP associated with Google LLC in the United States.

This scam site attempted to deceive users by mimicking Gmail and Google branding, a common tactic in phishing campaigns. The page's title was simply 'Google', likely to enhance its credibility and lure unsuspecting users. The absence of SSL certification suggests a lack of legitimate security measures, further indicating its malicious intent.

Despite being taken down, this domain highlights the ongoing threat of impersonation scams. The relatively low platform risk score of 25/100 suggests it was a targeted operation, possibly aiming at a specific group of users. The presence of this domain in public blocklists, including PhishDestroy's, underscores the importance of timely detection and response to such threats. As phishing domains often exploit the gap between registration and detection, proactive threat intelligence is crucial in mitigating these risks.