flx[.]airdrpsalert[.]life

The domain flx.airdrpsalert.life is a malicious site identified as an impersonation scam targeting the Gmail brand. The site presented a page title of "Google," indicating an attempt to mimic the legitimate Google login interface to deceive users into entering credentials. This poses a threat of credential theft, as the site was designed to harvest login information from unsuspecting visitors.

Technical analysis shows that the site was flagged by 7 out of 95 vendors on VirusTotal, with detections from CRDF, CyRadar, ESET, G-Data, and Seclookup. It is listed on 1 blocklist. The site was hosted on IP address 216.58.206.36, located in Germany (DE) and belonging to AS15169 Google LLC. The domain was registered through Cloudflare, Inc. No SSL certificate was present, and the nameservers were recorded as NS_NOT_FOUND. The GridinSoft trust score is 0 out of 100.

The domain is currently offline (status: DOWN/OFFLINE). The DOM risk score is 25, indicating a moderate risk level. Given the lack of SSL, the low trust score, and the impersonation of a major brand, this site should be treated as a confirmed phishing threat, though its operational status reduces immediate danger.