threshold[.]app-airdropalert[.]sbs

The domain threshold.app-airdropalert.sbs is a brand impersonation phishing site that specifically targets Google. This malicious domain poses a significant risk by attempting to trick users into divulging sensitive information, such as login credentials, under the guise of a legitimate Google service.

Analysis indicates that the domain threshold.app-airdropalert.sbs was created on November 10, 2025, and is registered through Dynadot LLC. It appears on one security blocklist and has been flagged by 14 out of 95 security vendors on VirusTotal. The domain currently resolves to the IP address 172.253.62.105, which is located in the United States and belongs to AS15169 Google LLC. Notably, the domain lacks an SSL certificate, which is a red flag for security-conscious users. The site's page title is set to 'Google', further enhancing the deception.

If a user has visited threshold.app-airdropalert.sbs, it is crucial to take immediate action to protect personal and sensitive information. First, the user should change their Google account passwords and enable two-factor authentication (2FA) to add an extra layer of security. Next, the user should monitor their account activity for any unauthorized access or suspicious transactions. It is also advisable to report the incident to Google through their official support channels and to run a comprehensive security scan on the device used to access the site to ensure it has not been compromised. Users should remain vigilant and avoid clicking on links from unknown sources, especially those that request login credentials or personal information.