dbr[.]airsdropalert[.]click

The domain dbr.airsdropalert.click is identified as a brand impersonation threat specifically targeting Gmail users. Analysis indicates the domain was designed to mimic legitimate Google login portals, likely to harvest user credentials or distribute malicious payloads. Current status shows the domain as offline, though infrastructure remains a potential risk for future abuse. Infrastructure analysis reveals the domain was registered through Dynadot LLC on November 05, 2025, and resolves to the IP address 192.178.155.105. The SSL certificate, issued by Google Trust Services (WE1), may have been intended to lend false legitimacy to the phishing site. Security vendors flagged the domain in 12 of 95 VirusTotal scans, and it appears on one security blocklist. The page title 'Google' further supports the impersonation of Gmail services. While dbr.airsdropalert.click is currently offline, the domain's registration and hosting infrastructure remain active. Organizations and users are advised to block the domain and its associated IP (192.178.155.105) at the network level. Security teams should monitor for renewed activity under this domain or similar variations. End users should verify the authenticity of any login portal claiming to be Gmail by checking the URL and SSL certificate details before entering credentials.