sym[.]airdrpsalert[.]life

Analysis of the domain sym.airdrpsalert.life, conducted on July 25, 2026, identifies it as an elevated-risk brand impersonation site targeting Google. The domain's page title is explicitly 'Google,' matching the declared brand target. Infrastructure analysis reveals the domain resolves to IP 216.58.206.36, geolocated in Germany under AS15169 (Google LLC), though this IP association does not confirm hosting by the legitimate brand. No SSL certificate is present, increasing the likelihood of interception or manipulation of unencrypted traffic.

The domain is registered through Cloudflare, Inc., a common registrar for both legitimate and malicious sites, and is currently offline. Detection data from July 25, 2026, shows 12 of 95 security vendors on VirusTotal flagged this domain as malicious. Gridinsoft assigns a trust score of 0/100, indicating high confidence in its classification as harmful. The domain appears on one security blocklist and is blocked by PhishDestroy.

No additional details about the phishing kit, exact scam mechanics, or user interaction flow are available, as the site content was not analysed prior to takedown. Defenders should treat this domain as confirmed malicious, update blocklists, and monitor for related infrastructure reuse, particularly domains registered via Cloudflare or resolving to the same IP range. The absence of SSL and low detection coverage at the time of assessment suggest this campaign may have operated with limited visibility before being disrupted.