hydration[.]airdrpsalerts[.]lat

This report analyzes the domain hydration.airdrpsalset.lat, which was configured to impersonate the Google brand. The site's page title was set to "Google," indicating an attempt to deceive users into believing they were visiting a legitimate Google service. The threat posed is brand impersonation, likely used to harvest credentials, distribute malware, or conduct phishing attacks by exploiting user trust in the Google name.

Technical evidence confirms the malicious nature of this domain. VirusTotal detected the site as malicious by 9 out of 95 security vendors. The domain was flagged by ChainPatrol, CRDF, CyRadar, Forcepoint ThreatSeeker, and Fortinet, and is listed on 1 blocklist. It was registered through Dynadot LLC on 2025-10-29. The domain resolves to IP address 216.58.206.36, located in Germany and belonging to AS15169 Google LLC. The site has no SSL certificate, and its nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. GridinSoft assigned a trust score of 0 out of 100.

The domain is currently DOWN/OFFLINE. Based on the evidence, the risk level is high due to its recent creation, lack of SSL, high detection rate, and clear intent to impersonate a major brand. Users should avoid any interaction with this domain.