bnc[.]airdrpsalert[.]lat

The domain bnc.airdrpsalert.lat impersonates Gmail, with 12 out of 95 VirusTotal vendors marking it as malicious. Despite being taken down, it initially posed a significant threat by mimicking Gmail and Google, aiming to deceive users into divulging sensitive information.

Registered through Dynadot LLC, the domain was hosted on an IP associated with Google LLC in Germany. This strategic choice likely aimed to lend credibility to the scam, exploiting users' trust in Google's infrastructure. The absence of an SSL certificate is a notable oversight, which might have deterred more cautious users.

PhishDestroy identified this threat on November 11, 2025, shortly after its creation on October 26, 2025. The domain's rapid detection reflects PhishDestroy's capability to intercept threats in the early stages, even before widespread antivirus database updates. The site was listed on public blocklists by both PhishDestroy and ScamSniffer, further confirming its malicious intent. The platform risk score of 25/100 indicates a moderate threat level, emphasizing the need for continuous vigilance against such impersonation scams.