mole[.]airdrpsalerts[.]cfd

The domain mole.airdrpsalerts.cfd is a phishing site that impersonates Google, posing a significant risk of brand impersonation. This domain has been flagged as unsafe by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar, and is currently listed on the PhishDestroy blocklist. The site has been taken offline, but users should remain cautious as it has been used to conduct Google phishing scams.

mole.airdrpsalerts.cfd was registered through Dynadot LLC on October 29, 2025. The domain resolves to the IP address 172.217.18.4, which is located in the US and belongs to AS15169 Google LLC. Despite its association with Google, the domain does not have a valid SSL certificate. It has been flagged by 2 of 95 VirusTotal vendors and appears on 1 security blocklist, indicating its involvement in malicious activities.

If users have interacted with mole.airdrpsalerts.cfd, they should immediately change their Google account passwords and enable two-factor authentication (2FA) to secure their accounts. They should also monitor their accounts for any unauthorized activity or fraud. To prevent further spread, users can report this domain to their security software providers and to Google's security team. Additionally, it is advisable to avoid clicking on suspicious links and to verify the authenticity of any communication claiming to be from Google.