sym[.]airdropsalert[.]live

The domain sym.airdropsalert.live has been identified as a brand impersonation threat specifically targeting Gmail users. Analysis confirms the domain is currently offline, though prior activity involved presenting a fraudulent Google login interface designed to deceive visitors into submitting credentials. The threat type is classified as brand impersonation, with Gmail as the primary target, leveraging familiar branding elements to increase legitimacy. Technical indicators reveal the domain was flagged by 13 of 95 security vendors on VirusTotal, indicating a consensus among detection engines regarding its malicious nature. Infrastructure analysis shows the domain resolved to the IP address 216.58.206.36, geolocated in Germany under AS15169 (Google LLC), though this appears to be a misdirection or hijacked routing, as the domain itself is not affiliated with Google. The domain was registered through Cloudflare, Inc., a common registrar for both legitimate and malicious entities. It appears on one security blocklist, and no SSL certificate was present, further reducing its perceived authenticity. The page title was explicitly set to "Google," reinforcing the intent to impersonate official Google services. Current status confirms the domain has been taken offline, reducing immediate risk to users. However, the infrastructure and tactics observed suggest potential for reemergence under a similar or altered domain. Organizations and users are advised to block the domain and its associated IP at the network level. Security teams should monitor for domains registered through Cloudflare with similar naming patterns (e.g., "airdropsalert" or "sym") and update detection rules to flag page titles mimicking Google or Gmail. End users should be trained to verify URLs before entering credentials, particularly when redirected from third-party sites or unsolicited messages. If credentials were entered on this domain, immediate password resets and multi-factor authentication enforcement are recommended.