nexusmutual[.]airdrpsalerts[.]info

The domain nexusmutual.airdrpsalerts.info has been identified as a malicious entity engaging in brand impersonation, specifically targeting the Gmail service. The domain is currently offline, reducing immediate risk, but it previously posed an elevated threat level due to its deceptive practices.

Technical analysis indicates that nexusmutual.airdrpsalerts.info was registered through Dynadot LLC and resolved to the IP address 142.250.184.228. It was created on November 04, 2025, and notably lacked an SSL certificate, which is a common sign of suspicious domains. According to VirusTotal, 12 out of 95 security vendors flagged this domain as malicious, and it appears on one security blocklist. The absence of a secure connection, combined with its registration details and VirusTotal scores, underscores the risks associated with this domain.

Currently, nexusmutual.airdrpsalerts.info is offline, mitigating its immediate threat. However, vigilance is recommended for users who may have encountered this domain in the past. Users should be cautious of any communications claiming to be from Gmail and verify the legitimacy of such claims by checking official sources. Organizations should include this domain in their blocklists to prevent any potential future threats and regularly update their security protocols to detect similar impersonation attempts.