crv[.]airdrpsalert[.]lol

The domain crv.airdrpsalert.lol is a phishing site that impersonates Gmail. It has been flagged by 13 out of 95 vendors on VirusTotal, indicating its malicious nature. The domain is currently offline, reducing its immediate threat. However, its initial detection by PhishDestroy on November 4, 2025, highlights the ongoing risk of such scams.

This domain was registered through Dynadot LLC and hosted on an IP associated with Google LLC in the United States. Despite its legitimate-seeming hosting, the site lacked SSL certification, a common red flag for phishing operations. The page was designed to deceive users into believing it was a legitimate Google service, leveraging the trust associated with the Gmail and Google brands.

PhishDestroy's detection pipeline identified this threat shortly after its creation, demonstrating the effectiveness of early detection systems in catching phishing attempts before they propagate widely. The site's offline status now limits its ability to harm users, but the incident underscores the importance of vigilance in identifying and mitigating phishing threats. The platform risk score of 25/100 further highlights the potential for harm if the site were active.